f8999 Privacy Policy

About This Privacy Policy

This Privacy Policy ("Policy") is published by f8999 ("f8999", "we", "our", "us") and governs the collection, use, storage, and disclosure of personal data relating to individuals ("you", "Player", "User") who access or use the f8999 platform, including the website at f8999.io and all associated services.

f8999 is the data controller in respect of the personal data described in this Policy. This means f8999 determines the purposes and means by which your personal data is processed. All data processing by f8999 is conducted in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into the overall legal framework governing your use of the f8999 platform.

Data We Collect

f8999 collects the following categories of personal data from players and visitors. All data collected is limited to what is necessary for the stated purpose.

f8999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than responsible gaming self-declarations), or biometric data beyond what is required for identity document verification during KYC.

How We Collect Your Data

f8999 collects personal data through the following means:

• Direct collection: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically when you access the f8999 platform, including via cookies, server logs, and analytics tools. See Section 7 for full details on cookies.
• Third-party sources: Identity verification data from KYC service providers used to confirm your identity and age. Transaction data from payment providers including bKash, Nagad, Rocket, and Upay to confirm the status of deposits and withdrawals. Fraud and risk signals from third-party fraud prevention partners.
• Publicly available sources: In limited circumstances, f8999 may verify information against publicly available records for fraud detection or AML compliance purposes.

How We Use Your Data

f8999 uses your personal data strictly for the following purposes:

• Account creation and management: To register your player account, verify your identity (including age verification to confirm you are 21 or older), and maintain accurate account records.
• Service delivery: To operate the f8999 platform, process bets, settle game outcomes, deliver bonuses, and provide the full range of casino and sports betting services.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, and other approved BDT payment methods, and to execute withdrawal requests to verified payment destinations.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, bonus abuse, and other prohibited conduct described in the f8999 Terms & Conditions.
• Legal compliance: To comply with applicable anti-money-laundering (AML) obligations, including maintaining transaction records and reporting suspicious activity to relevant authorities where required by law.
• Responsible gaming: To monitor betting patterns for signs of problem gambling behaviour, enforce deposit limits and self-exclusion orders, and reach out to players who may be experiencing gambling-related difficulties.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyse usage data and improve the design, performance, and functionality of the f8999 platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, subject to your communication preferences and the opt-out rights described in Section 11.

f8999 will not use your personal data for any purpose incompatible with the purposes listed above without first obtaining your explicit consent.

Legal Basis for Processing

f8999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and f8999 — including account management, payment processing, bet settlement, and customer support — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable legal obligations — including KYC identity verification, AML transaction monitoring, and record-keeping requirements — is carried out on the basis of legal compliance.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of f8999's legitimate business interests, provided those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications is carried out on the basis of your consent. You may withdraw this consent at any time as described in Section 11 of this Policy.

Data Sharing and Disclosure

f8999 does not sell, rent, or trade your personal data to any third party. Personal data may be disclosed to the following categories of recipients only where necessary and only to the extent required for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other approved payment partners receive the minimum financial data required to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers receive identity document data and facial verification data for the purpose of confirming your identity and age in compliance with our verification obligations.
• Fraud prevention and AML partners: Risk scoring and AML compliance vendors may receive technical and transaction data to support fraud detection, risk assessment, and suspicious activity monitoring.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers necessary for game delivery and dispute resolution. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: f8999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or where f8999 reasonably believes disclosure is necessary to prevent serious harm or illegal activity.
• Professional advisers: f8999's legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom f8999 shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the one for which it was disclosed.

Cookies and Tracking Technologies

The f8999 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are required for the f8999 platform to function. They maintain your login session, remember your account preferences, and ensure platform security. These cookies cannot be disabled without impairing core platform functionality.
• Analytics cookies: These cookies collect anonymised data about how users navigate the f8999 platform, including pages visited, session duration, and navigation paths. This data is used solely to improve platform performance and user experience.
• Functional cookies: These cookies remember your stated preferences — such as your preferred language, display settings, and responsible gaming limits — so that your experience is consistent across sessions.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including bot traffic, credential stuffing, and unusual login behaviour.

f8999 does not use advertising or cross-site tracking cookies. No cookie data collected by f8999 is shared with third-party advertising networks. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may result in reduced platform functionality or the inability to access certain features of the f8999 platform.

Data Retention

f8999 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with f8999 and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial record-keeping obligations.
• Customer support records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality improvement.
• Technical and usage data: Retained for up to twenty-four (24) months from the date of collection, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it cannot be reconstructed or linked back to any individual.

Data Security

f8999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and f8999 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial account numbers.
• Cryptographic hashing (bcrypt) for all stored passwords — passwords are never stored in recoverable plain-text format.
• Multi-factor authentication (MFA) requirements for all f8999 administrative system access.
• Role-based access control (RBAC) — access to personal data within f8999's systems is granted only to personnel who require it for their specific job function.
• Regular penetration testing and security audits conducted by independent third-party security professionals.
• Automated anomaly detection systems that monitor for unusual data access patterns and potential security incidents in real time.

In the event of a personal data breach that poses a risk to your rights and interests, f8999 will notify affected players without undue delay and will take all necessary steps to contain the breach, assess its impact, and remediate the cause.

Your Data Rights

As a player or visitor, you have the following rights in respect of your personal data held by f8999. To exercise any of these rights, contact f8999 at support@f8999.io with the subject line "Data Rights Request".

f8999 will respond to all data rights requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.

Marketing Communications

f8999 may send you promotional emails and SMS messages relating to bonuses, new games, seasonal promotions — such as those tied to Eid, BPL cricket season, or T20 tournament periods — and other platform updates, subject to the following conditions:

• Marketing communications will only be sent where you have provided explicit consent during account registration or at a subsequent point through your account communication preferences.
• You may opt out of all marketing communications at any time by clicking the unsubscribe link in any marketing email, by replying STOP to any marketing SMS, or by updating your communication preferences in your f8999 account settings.
• Opting out of marketing communications does not affect the delivery of transactional communications — f8999 will continue to send you account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts, as these are necessary for the operation of your account.
• f8999 does not send unsolicited marketing communications (spam). If you believe you have received a marketing communication from f8999 that you did not consent to, please report it immediately to support@f8999.io.

Children and Minors

The f8999 platform is strictly intended for individuals aged 21 years and above. f8999 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Account registration by persons under 21 is prohibited under the f8999 Terms & Conditions.

Age verification is conducted as a mandatory step during the KYC process for all player accounts. Where f8999 identifies or reasonably suspects that a player is under 21 years of age, the account will be immediately suspended, all pending bets and game sessions will be voided, and any deposits will be returned to the verified payment method on the account. Winnings accumulated during a period of underage access will be forfeited.

If you have reason to believe that a minor has registered on the f8999 platform, please contact f8999 immediately at support@f8999.io so that appropriate action can be taken without delay.

Third-Party Links and Services

The f8999 platform may contain references to game software provided by third parties such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these game providers deliver content within the f8999 platform environment, their own privacy practices govern any data they independently process in connection with game delivery.

f8999 is not responsible for the privacy practices of third-party game providers, payment partners, or any external websites that may be referenced in informational content on the platform. f8999 recommends that you review the privacy policies of any third party whose services you access in connection with your use of the f8999 platform.

Amendments to This Privacy Policy

f8999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform services. When material changes are made, f8999 will notify active players via a platform notification or by email to the address registered on the player's account. The updated Policy will take effect on the date specified in the notification.

The version of the f8999 Privacy Policy currently published at f8999.io/privacy-policy is the governing version. f8999 recommends that you review this Policy periodically. Continued use of the f8999 platform following the effective date of any amendment constitutes acceptance of the revised Policy.

Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or f8999's data processing practices, please contact the f8999 Data team using the following details. All correspondence must be submitted in English.

• Email: support@f8999.io (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: f8999 aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, BST UTC+6) and to provide a substantive response within 30 calendar days.

If you are not satisfied with f8999's response to a privacy-related complaint, you have the right to escalate the matter through applicable consumer protection or data protection channels available under the laws of Bangladesh.