Privacy Policy — Your Data at i8fb

1. Information We Collect

i8fb collects personal data through several channels: directly from you when you register an account or interact with our platform, automatically through your use of the platform, and in limited cases from third-party verification services. The categories of personal data we collect are set out below.

1.1 Registration and Account Data

When you create an i8fb account, we collect the following information to establish and manage your account:

• Full legal name as it appears on your government-issued identification document.
• Date of birth, used to verify that you meet the minimum age requirement of 18 years.
• Email address, used for account communications, security alerts, and where you have opted in, promotional messages.
• Bangladeshi mobile phone number, used for account verification and, where applicable, transaction authentication via bKash, Nagad, or Rocket.
• Username and hashed password credentials. Passwords are stored in irreversibly hashed form and are never accessible in plain text by i8fb staff.
• Preferred language and communication settings.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance process, we may request and retain copies of the following documents:

• Government-issued photo identification: national identity card (NID), passport, or driving licence.
• Proof of residential address: utility bill, bank statement, or official correspondence dated within three months.
• Proof of payment method ownership: confirmation that the bKash, Nagad, Rocket, Upay, or bank account used for transactions is registered in your name.
• Selfie or liveness verification image where required to confirm identity document authenticity.

KYC documents are stored securely and are accessible only to authorised compliance personnel. They are not shared with any third party except where legally required or where a third-party identity verification service is used under a strict data processing agreement.

1.3 Transaction Data

We record all financial transactions associated with your i8fb account, including:

• Deposit amounts, timestamps, and the payment method used (bKash, Nagad, Rocket, Upay, bank transfer).
• Withdrawal amounts, timestamps, processing status, and destination payment account identifiers.
• Bonus credits, wagering progress, and any adjustments made by the platform in connection with promotional offers.
• Transaction reference numbers issued by third-party payment providers for reconciliation purposes.

1.4 Gaming and Betting Activity Data

We maintain a complete record of your gaming and betting activity on the i8fb platform, including game sessions, bet amounts, outcomes, stakes placed on cricket, BPL matches, T20 fixtures, IPL events, slot spins, live casino sessions, and crash game rounds. This data is retained for the purposes of dispute resolution, fairness auditing, and responsible gaming monitoring.

1.5 Technical and Device Data

When you access i8fb, our servers automatically collect the following technical information:

Data Type	Purpose	Retention
IP address	Fraud detection, geolocation restriction enforcement	90 days (logs); account lifetime (fraud flags)
Device type & OS	Platform optimisation, security monitoring	Duration of account
Browser type & version	Session management, compatibility	Session duration
Session timestamps	Responsible gaming time-tracking, security	Duration of account
Referral source / UTM data	Marketing attribution (aggregate, anonymised)	90 days

1.6 Communications Data

When you contact i8fb via live chat, email, or any other support channel, we retain records of those communications, including the content of your messages and the date and time of contact. This data is used to resolve your query, improve our support quality, and maintain a record of dispute communications where applicable.

2. How We Use Your Data

i8fb processes your personal data only for clearly defined and lawful purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was collected. The primary purposes for which we process personal data are as follows:

2.1 Account Management and Service Delivery

The core purpose for processing your registration and account data is to create and maintain your i8fb account, authenticate your identity at login, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, credit bonuses and apply wagering requirements, and provide access to all games and betting markets available on the platform.

2.2 Legal and Regulatory Compliance

i8fb processes identity verification and transaction data to comply with anti-money laundering (AML) obligations, age verification requirements, and other applicable legal and regulatory standards. This includes verifying that all Players are at least 18 years of age and that funds deposited on the platform are not derived from unlawful activity. We may be required to share data with law enforcement or financial intelligence authorities where legally compelled to do so.

2.3 Fraud Prevention and Platform Security

Technical and device data, IP addresses, and transaction patterns are analysed to detect and prevent fraud, collusion, money laundering, bonus abuse, and any other activity that compromises the integrity of the i8fb platform or the safety of its Players. This processing is carried out in our legitimate interest and in the interest of the broader Player community.

2.4 Responsible Gaming Monitoring

i8fb uses gaming activity data and session data to monitor for patterns that may indicate problem gambling behaviour. Where such patterns are identified, we may proactively contact the Player, apply account restrictions, or suggest responsible gaming tools such as deposit limits and self-exclusion. This processing is carried out in the interest of Player welfare and in accordance with our Responsible Gaming commitments.

2.5 Customer Support

Communications data and account data are used to respond to your support queries, investigate disputes, process refund or reversal requests, and maintain a record of interactions for quality assurance purposes.

2.6 Marketing Communications

Where you have expressly opted in to receive promotional communications, we may use your email address or mobile number to send information about bonus offers, seasonal promotions (including BPL cricket season campaigns, Pohela Boishakh specials, and Eid promotions), and new features on the platform. You may opt out of marketing communications at any time by contacting support at [email protected]. Opting out of marketing communications does not affect service-critical account notifications such as deposit confirmations, withdrawal updates, and security alerts.

3. Data Sharing & Disclosure

i8fb does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose stated.

3.1 Payment Processing Partners

To process your financial transactions, we share the minimum necessary information with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other Bangladeshi banking partners. The data shared typically includes your registered mobile number or bank account identifier and the transaction amount. These providers process your data under their own privacy policies and security standards; i8fb is not responsible for their data handling practices beyond the point of handoff.

3.2 Identity Verification Services

i8fb may engage third-party KYC verification providers to assist with the validation of identity documents. Such providers are bound by strict contractual data processing agreements requiring them to use your data solely for the verification task and to delete it upon completion of the process.

3.3 Game Content Providers

Games on the i8fb platform are delivered in partnership with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers to facilitate game delivery and record round outcomes for audit purposes. They do not receive your full name, contact details, or payment information.

3.4 Legal and Regulatory Disclosures

i8fb may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities when required to do so by a lawful order, subpoena, or applicable regulation. In such cases, we will disclose only the minimum information required to satisfy the legal obligation and will, where permitted by law, notify the affected Player of the disclosure.

3.5 Business Transfers

In the event that i8fb undergoes a corporate restructuring, merger, acquisition, or sale of assets, personal data held by i8fb may form part of the transferred assets. In such an event, Players will be notified of any change in the data controller responsible for their information and of the options available to them regarding their data.

4. Cookies & Tracking Technologies

i8fb uses cookies and similar local storage technologies to operate the platform efficiently, maintain the security of your session, and understand how Players interact with our services in aggregate. The following table summarises the categories of cookies used on the i8fb platform.

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintains your login session, enables the cashier, and prevents cross-site request forgery (CSRF) attacks. These are essential for the platform to function.	No — platform will not function without these.
Functional / Preference	Remembers your language preference, display settings, and last-visited game category for a more personalised experience.	Yes — disabling may affect personalisation.
Analytics	Collects anonymised, aggregated data about page views, session durations, and navigation paths to help us improve the platform. No personally identifiable information is included in analytics data.	Yes — no impact on platform functionality.
Security	Stores device fingerprint tokens used to detect and flag unusual login activity or account takeover attempts.	No — required for account security.

4.1 Third-Party Cookies

i8fb does not permit third-party advertising networks to place tracking cookies on your device through our platform. Any third-party scripts present on the i8fb platform (such as those used to deliver live game content from Pragmatic Play or Evolution Gaming) may set session-scoped cookies necessary for game delivery; these expire at the end of your browser session and are not used for cross-site profiling.

4.2 Managing Your Cookie Preferences

Most web browsers allow you to control cookies through their settings, including the ability to block or delete cookies already stored on your device. Please be aware that disabling strictly necessary or security cookies will prevent you from logging in to or using the i8fb platform. Detailed instructions on managing cookie settings can be found in the help documentation of your browser.

5. Data Retention

i8fb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The following general retention periods apply:

• Active account data (registration details, contact information, preferences): retained for the lifetime of your account plus a minimum of five (5) years following account closure, in accordance with standard AML record-keeping practice.
• KYC and identity documents: retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of five (5) years in compliance with financial record-keeping requirements.
• Support communications: retained for two (2) years from the date of the interaction, unless the communication forms part of an ongoing dispute, in which case it is retained until final resolution plus one (1) additional year.
• Technical logs (IP addresses, session logs): retained for ninety (90) days unless flagged for security investigation, in which case retention may extend to the duration of the investigation.
• Marketing consent records: retained for as long as your account remains open and for two (2) years following any withdrawal of consent, to demonstrate compliance.

Where personal data is no longer required, i8fb will delete or anonymise it in a secure manner. Anonymised, aggregated data (from which individual identities cannot be derived) may be retained indefinitely for statistical and platform improvement purposes.

6. Data Security

i8fb implements a layered approach to data security, combining technical controls, organisational procedures, and staff training to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your browser or mobile device and i8fb servers is encrypted using current-standard TLS protocols, preventing interception during transit.
• Password hashing: Account passwords are stored exclusively in irreversibly hashed form using industry-accepted hashing algorithms. i8fb staff cannot view your password in plain text under any circumstances.
• Access controls: Personal data is accessible only to i8fb staff members who require it to perform their specific job functions. Access is logged, reviewed regularly, and revoked immediately upon role change or employment termination.
• Two-factor authentication (2FA): i8fb supports two-factor authentication on Player accounts as an additional layer of login security. We strongly recommend enabling 2FA in your account security settings.
• Fraud monitoring systems: Automated systems monitor transaction patterns and login behaviour in real time to detect anomalies that may indicate account compromise or fraudulent activity.
• Regular security assessments: The i8fb platform undergoes periodic security reviews to identify and address potential vulnerabilities in the infrastructure, application layer, and data handling processes.

While i8fb takes all reasonable technical and organisational precautions to protect your data, no system is entirely immune to risk. In the event of a data security incident that is likely to result in significant risk to affected individuals, i8fb will take prompt remediation steps and notify affected Players as soon as practicable.

7. Your Privacy Rights

As a registered Player on the i8fb platform, you hold a number of rights in relation to the personal data we process about you. i8fb is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights below, please submit a request in English to [email protected] with the subject line "Privacy Rights Request" and include sufficient information to verify your identity.

7.1 Right of Access

You have the right to request a copy of the personal data i8fb holds about you. Upon receipt of a verified request, we will provide a summary of the data categories held, the purposes for which they are processed, and any third parties with whom they have been shared. We aim to respond to access requests within thirty (30) days.

7.2 Right to Rectification

If any of the personal data i8fb holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (such as updating a contact email address), you may be able to make the change directly within your account settings. For changes to identity-critical data such as your registered name or date of birth, supporting documentation will be required.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Please note that i8fb is subject to minimum data retention obligations under AML and financial record-keeping requirements; accordingly, full erasure may not be possible for accounts that have processed financial transactions, and data required to meet those obligations will be retained for the applicable minimum period.

7.4 Right to Restrict Processing

You have the right to request that i8fb restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and a determination is pending. During a restriction, i8fb may store your data but will not actively process it for non-essential purposes.

7.5 Right to Withdraw Consent

Where i8fb's processing of your data is based on your consent (for example, the use of your contact details for marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of any processing that took place prior to the withdrawal.

7.6 Right to Lodge a Complaint

If you believe that i8fb has not handled your personal data in accordance with this Privacy Policy or applicable data protection principles, you are entitled to raise a formal complaint. Please contact our support team in the first instance; we aim to resolve all privacy complaints within thirty (30) days of receipt.

8. Policy Updates & Contact

i8fb reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, and the services we offer. Material changes to this policy will be notified to registered Players via the email address held on their account, or through a prominent notice on the i8fb platform, at least fourteen (14) days before the changes take effect. Non-material changes (such as typographical corrections or clarifications) may be made without advance notice, with the "Last updated" date at the top of this page revised accordingly.

We recommend that you review this Privacy Policy each time you return to the platform after an extended absence, and particularly at the start of major sporting seasons such as the BPL cricket season or the ICC T20 World Cup, when platform features and associated data practices may be updated.

8.1 Contact the i8fb Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or the way in which i8fb handles your personal data, please reach out to our dedicated support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Privacy Policy Enquiry" or "Privacy Rights Request"
• Response time target: Within five (5) business days for general enquiries; within thirty (30) days for formal rights requests.
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)