f98 Privacy Policy

1 Information We Collect

f98 collects personal data from players across several touchpoints on the platform. The categories of information we collect, and the context in which each category arises, are described below.

1.1 Registration Data

When you create an f98 account, we collect the following information: your full legal name, date of birth, residential address, email address, and mobile phone number. This data is required to verify your identity, confirm that you meet the minimum age requirement of 18 years, and allow us to communicate with you about your account.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address (such as a utility bill or bank statement) and proof of ownership of the payment method you use for deposits and withdrawals. KYC documents are processed securely and retained only for the period required by our legal obligations.

1.3 Financial Transaction Data

We record details of all deposits, withdrawals, bonus credits, wagers, and winnings associated with your f98 account. For mobile financial service transactions (bKash, Nagad, Rocket, Upay), we log the transaction reference number, amount, currency, timestamp, and the registered mobile number associated with the payment method. For bank transfers and card payments, we log equivalent transaction metadata. We do not store full card numbers or full mobile banking PINs.

1.4 Platform Usage Data

We automatically collect technical and behavioural data each time you interact with the f98 platform. This includes: your IP address, device type and operating system, browser type and version, screen resolution, session start and end times, pages visited, games played, bet amounts, game session duration, and in-platform navigation patterns. This data helps us detect fraud, personalise your experience, and improve platform performance.

1.5 Communications Data

When you contact f98 via live chat, email ([email protected]), or any other support channel, we retain records of those communications — including the content of messages, timestamps, and any attachments. These records are used to resolve your query, improve our support quality, and comply with dispute resolution requirements.

1.6 Data Collected from Third Parties

In some cases, f98 may receive data about you from third-party sources. This includes identity verification data from KYC service providers, fraud-risk signals from payment processors, and publicly available information used to satisfy our anti-money laundering (AML) screening obligations. Any third-party data we receive is handled under the same standards as data collected directly from you.

The table below summarises the main data categories, the purpose for collecting each, and the lawful basis under which f98 processes them:

2 How We Use Your Data

f98 uses the personal data it collects strictly for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary ways in which we use your information are as follows:

• Account management: Creating, maintaining, and securing your f98 player account, including processing password resets, two-factor authentication, and account verification requests.
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard. Transaction data is shared only with the payment service providers directly involved in completing a specific transaction.
• Fraud and AML screening: Monitoring account activity for signs of fraudulent behaviour, money laundering, identity fraud, and match-fixing. Automated and manual review processes may be applied to transactions or betting patterns that fall outside normal parameters.
• Responsible gaming enforcement: Using gameplay data to identify players who may be exhibiting signs of problem gambling, and to enforce deposit limits, loss limits, and self-exclusion arrangements that a player has voluntarily activated.
• Customer support: Reviewing your account history and communications when you contact our support team, in order to resolve queries efficiently and accurately.
• Platform improvement: Analysing aggregated usage data to identify performance bottlenecks, improve game load times, refine navigation design, and introduce features that better serve Bangladesh-based players.
• Marketing communications (opt-in only): If you have opted in to marketing communications, we may send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw consent at any time through your account settings or by contacting support.
• Legal compliance: Retaining and disclosing data as required to comply with applicable laws, respond to lawful requests from regulatory authorities, and defend f98's legal rights in the event of a dispute.

3 Data Sharing & Third Parties

f98 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, f98 shares relevant transaction data (such as your registered mobile number for bKash/Nagad/Rocket transactions, or card metadata for Visa/Mastercard transactions) with the payment service provider handling that specific transaction. These providers operate under their own privacy policies and data protection obligations, and f98 selects payment partners who maintain appropriate security standards.

3.2 Identity Verification & KYC Partners

f98 uses specialist third-party KYC and identity verification service providers to assist with document authentication and AML screening. When you submit KYC documents, they may be processed by these providers' systems. All KYC partners used by f98 are contractually bound to process your data only for the purpose of identity verification and to maintain appropriate data security standards.

3.3 Game Software Providers

When you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Spribe, or Ezugi), certain session data (such as a pseudonymous player ID, bet amounts, and game session events) is shared with that provider to facilitate the game round and calculate outcomes. Game providers do not receive your full name, NID, or banking details.

3.4 Legal & Regulatory Disclosure

f98 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. In cases of suspected serious financial crime or fraud, f98 may proactively share relevant information with appropriate authorities without prior notice to the affected player.

3.5 Business Transfers

In the event that f98 undergoes a merger, acquisition, or sale of assets, player data may be transferred to the successor entity as part of the transaction. In such cases, f98 will notify affected players via email prior to any data transfer, and the receiving entity will be required to honour the terms of this Privacy Policy.

4 Cookies & Tracking Technologies

f98 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, and analyse aggregate usage patterns. Below is a breakdown of the cookie categories we use.

f98 does not use advertising cookies or allow any third-party ad network to place cookies on the f98 platform. Our analytics implementation uses anonymised, aggregated data only — individual user journeys are not tracked across external websites.

You can manage cookie preferences for non-essential cookies through your f98 account privacy settings. Please note that disabling essential or security cookies will impair core platform functionality and may prevent you from logging in or completing transactions.

5 Data Retention & Storage

5.1 Retention Periods

f98 retains your personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with our legal obligations. The general retention schedule we apply is as follows:

• Active account data (registration information, KYC documents, transaction history): Retained for the lifetime of your account plus 5 years after account closure, to satisfy financial record-keeping and AML compliance obligations.
• Support communications: Retained for 3 years from the date of the relevant interaction, then securely deleted.
• Platform usage logs: Retained in identifiable form for 12 months, then anonymised for aggregate analytics purposes.
• Marketing consent records: Retained until you withdraw consent, plus 1 year as proof of consent, then deleted.

Where a specific legal obligation (such as an active investigation or litigation hold) requires us to retain data beyond our standard retention period, we will do so only for as long as that obligation exists.

5.2 Storage Location

f98's primary data storage infrastructure uses encrypted servers protected by multi-layer access controls. Access to databases containing personally identifiable information is restricted to a small number of authorised technical and compliance personnel who require that access to perform their roles. All access is logged and audited.

5.3 Data Deletion

When data reaches the end of its retention period, it is either permanently deleted using secure deletion methods or irreversibly anonymised so that it can no longer be linked to any individual player. Players may also request early deletion of certain categories of their personal data by submitting a request to [email protected], subject to any overriding legal retention obligations.

6 Your Privacy Rights

As an f98 player, you have a set of meaningful rights over your personal data. These rights are described below. To exercise any of these rights, contact our support team via live chat or email at [email protected] with the subject line "Privacy Rights Request". We aim to respond to all such requests within 5 business days.

• Right of Access: You may request a copy of all personal data f98 holds about you. We will provide this in a structured, readable format within the response timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Account profile information (such as email address or phone number) can also be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where f98 no longer has a lawful basis to retain it. Please note that erasure requests cannot override mandatory legal retention obligations such as AML record-keeping requirements.
• Right to Restriction of Processing: In certain circumstances (for example, while a data accuracy dispute is being resolved), you may request that f98 restrict its processing of your data to storage only.
• Right to Data Portability: You may request that f98 provide your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to Withdraw Marketing Consent: If you have opted in to marketing communications, you may withdraw that consent at any time through your account notification settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: If you believe f98 has handled your personal data in a manner inconsistent with this Privacy Policy, you may raise the matter directly with our support team. If you are not satisfied with our response, you may escalate to f98 management by emailing [email protected] with the subject line "Privacy Complaint — Escalation".

7 Data Security Measures

f98 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. The key security controls we maintain include:

• TLS/SSL encryption: All data transmitted between your device and f98 servers is encrypted in transit using TLS 1.2 or higher.
• Encryption at rest: Sensitive data fields (including identity document images and payment method metadata) are encrypted in the database using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted on a need-to-know basis. Staff authentication requires multi-factor authentication (MFA) for all privileged access.
• Intrusion detection: f98's infrastructure is monitored continuously for anomalous access patterns, unauthorised login attempts, and potential data exfiltration activity.
• Penetration testing: f98 engages independent security assessors to conduct regular penetration tests of its platform infrastructure and web application layer.
• Staff training: All f98 staff with access to personal data receive regular data protection and information security training as part of their onboarding and ongoing professional development.
• Incident response: f98 maintains a documented data breach response procedure. In the event of a security incident affecting player data, affected players will be notified promptly with details of what happened, what data was affected, and what remedial steps f98 has taken.

Notwithstanding the security measures described above, no digital platform can guarantee absolute security against all conceivable attack vectors. Players should also take personal steps to protect their accounts — including using a strong, unique password and enabling two-factor authentication (2FA) from their f98 account settings.

8 Policy Updates & Contact

8.1 Changes to This Privacy Policy

f98 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via email to their registered address and display a prominent notice on the f98 platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this page is always kept current.

We encourage players to review this Privacy Policy periodically. Your continued use of f98 after a notified change takes effect constitutes acceptance of the revised policy. If you do not agree with a material change, you have the right to close your f98 account before the change becomes effective.

8.2 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data f98 holds about you, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly on the f98 platform. This is the fastest way to reach us, with an average first response time of under 5 minutes.
• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line for fastest routing. Average email response time is under 4 hours.

f98 is committed to addressing all privacy-related enquiries fairly, transparently, and within a reasonable timeframe. Player trust is the foundation of everything we do at f98, and we take every privacy concern seriously.