fb888 Privacy Policy — Your Data, Handled with Care

For the purposes of this Privacy Policy, the data controller responsible for processing the personal data of fb888 players is fb888, operating the online casino and sportsbook platform accessible at fb888.one ("the Platform").

As data controller, fb888 determines the purposes and means by which your personal data is collected and processed in connection with your use of the Platform. All data processing activities described in this Privacy Policy are carried out by or under the authority of fb888.

fb888 collects personal data from Pakistan players through several channels: directly from you during account registration and ongoing account use, automatically through your use of the Platform, and from third-party sources where necessary for identity verification and payment processing purposes.

fb888 does not knowingly collect sensitive personal data beyond what is described above. fb888 does not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request.

fb888 uses the personal data described in Section 2 for the following specific purposes:

• Account creation and management: To register your fb888 account, verify your identity, maintain your account settings, and process your login credentials securely.
• Payment processing: To process PKR deposits via JazzCash, Easypaisa, Meezan Bank, HBL, SadaPay, and Raast, and to process PKR withdrawal requests back to your verified payment accounts.
• KYC and identity verification: To verify that you meet the minimum age requirement of 18 years and to comply with anti-money laundering (AML) obligations applicable to online gaming platforms.
• Platform security and fraud prevention: To detect and investigate suspicious account activity, unauthorised access attempts, bonus abuse, and potential fraudulent transactions.
• Customer support: To respond to your queries, process complaints, and provide assistance via live chat and email in English.
• Responsible gaming: To implement and manage deposit limits, cooling-off periods, session reminders, and self-exclusion requests made through your account dashboard.
• Legal and regulatory compliance: To fulfil fb888's obligations under applicable laws and regulations, including record-keeping requirements, and to respond to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage patterns to improve the performance, design, and content of the fb888 platform for Pakistan players.

fb888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract performance: Processing that is necessary to create and maintain your fb888 account, process your PKR transactions, and provide the gaming services you have requested. Without this processing, fb888 could not operate your account.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including KYC and AML obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing for platform security, fraud detection, and service improvement where fb888's legitimate business interests do not override your privacy rights. fb888 assesses its legitimate interests on a case-by-case basis and documents these assessments.
• Consent: Processing for marketing communications and the setting of non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

fb888 does not sell, rent, or trade personal data to third parties for their own commercial purposes. fb888 may share your personal data with the following categories of third parties, strictly as necessary for the purposes described in this Policy:

• Payment service providers: JazzCash, Easypaisa, Meezan Bank, HBL, SadaPay, and Raast, to process PKR deposits and withdrawals. Each provider processes your payment data under their own privacy policies and security standards.
• Identity verification and KYC providers: Third-party KYC service providers engaged by fb888 to assist with age and identity verification. These providers process identity data only for the purpose of verification and are bound by confidentiality obligations.
• Game content providers: Software studios that supply game content to the fb888 platform may receive technical usage data (such as session identifiers) to support game operation. They do not receive personally identifiable information.
• IT and platform infrastructure providers: Cloud hosting, security, and analytics services engaged to operate and maintain the fb888 platform. These providers process data strictly as data processors under fb888's instructions.
• Regulatory and law enforcement authorities: fb888 will disclose personal data to relevant authorities when required by law, court order, or regulatory direction, or where fb888 has reasonable grounds to believe that disclosure is necessary to prevent criminal activity or protect the rights and safety of individuals.

fb888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to comply with applicable legal and regulatory obligations. Specific retention periods include:

• Active account data: Retained for the duration of your active account on the fb888 platform, plus a post-closure retention period as required for legal and regulatory compliance purposes.
• Transaction records: PKR deposit and withdrawal transaction records are retained for a minimum of five years following the transaction date, in line with standard AML record-keeping requirements.
• KYC documentation: Identity verification documents are retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for up to three years from the date of the communication, to support dispute resolution and quality assurance.
• Technical and usage data: Log data and session data are retained for a maximum of 13 months and thereafter aggregated and anonymised for platform analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the individual. Data subject to ongoing legal disputes or regulatory investigations may be retained beyond standard retention periods until those matters are resolved.

fb888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the fb888 platform.
• Encryption of stored sensitive data, including identity and financial information, using industry-standard encryption protocols.
• Two-factor authentication (2FA) availability for all player accounts to protect against unauthorised login.
• Access controls that restrict internal access to personal data on a need-to-know basis, with access logs maintained and reviewed regularly.
• Regular security assessments and penetration testing of the fb888 platform infrastructure.
• Incident response procedures to detect, report, and address personal data breaches promptly in accordance with applicable obligations.

fb888 uses cookies and similar tracking technologies on the Platform to support essential platform functionality, improve platform performance, and — where you have provided consent — to deliver relevant marketing communications. The following categories of cookies are used:

• Essential cookies: Necessary for the Platform to function correctly. These cookies maintain your login session, remember your language and display preferences, and support platform security features. Essential cookies cannot be disabled without impairing platform functionality.
• Performance cookies: Collect anonymised data about how players use the fb888 platform — such as which pages are visited most frequently and where errors occur — to allow fb888 to improve the platform. These cookies do not identify individual players.
• Functional cookies: Remember your preferences and personalisation settings — such as game lobby view preferences — so you do not need to reset them on each visit.
• Marketing cookies: Used, with your prior consent, to track your interactions with fb888 promotional content and to deliver relevant promotional communications. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Blocking essential cookies may prevent certain features of the fb888 Platform from working correctly. For questions about our use of cookies, please contact fb888 support using the contact details in Section 12.

As a player whose personal data is processed by fb888, you have the following rights in relation to your personal information. fb888 will respond to all rights requests within a reasonable timeframe and will not charge a fee for processing straightforward requests.

• Right of access: You have the right to request a copy of the personal data that fb888 holds about you, together with information about how that data is being processed.
• Right to rectification: You have the right to request correction of any personal data held by fb888 that is inaccurate or incomplete. Account details such as email address and mobile number can often be updated directly through your account dashboard.
• Right to erasure: You have the right to request deletion of your personal data held by fb888, subject to fb888's legal obligations to retain certain data for AML, KYC, and regulatory compliance purposes. Erasure requests relating to data subject to mandatory retention periods will be processed to the maximum extent possible given those constraints.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to fb888 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of fb888's legitimate interests, and to object at any time to processing for direct marketing purposes.
• Right to restrict processing: You have the right to request that fb888 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the fb888 support team via live chat or at the email address displayed in the footer of this page. fb888 may need to verify your identity before processing a rights request in order to protect your account security.

The fb888 platform is strictly for use by adults aged 18 years and above. fb888 does not knowingly collect personal data from individuals under the age of 18 and does not permit individuals under 18 to register accounts or use the Platform in any capacity.

As part of its KYC obligations, fb888 verifies the age of players prior to processing withdrawal requests. Where fb888 has reasonable grounds to suspect that an account has been registered by or used by an individual under the age of 18, the account will be immediately suspended and an age verification review initiated. If the review confirms underage use, the account will be permanently closed and any balance forfeited.

If fb888 discovers that it has inadvertently collected personal data from an individual under 18 years of age, that data will be deleted as promptly as technically possible following the discovery.

fb888 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, feedback from players, and improvements to the Platform. The effective date of the current version of this Policy is stated at the top of this document and in the hero section of this page.

Where changes to this Privacy Policy are material — meaning they may significantly affect your privacy rights or how your personal data is processed — fb888 will notify registered Pakistan players by email to the address held on their account prior to the changes taking effect, where technically and practically feasible.

For non-material updates, such as clarifications or formatting improvements that do not change the substance of the Policy, the updated version will simply be published on this page with a revised effective date. Players are encouraged to review this page periodically to stay informed of any changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to fb888's processing of your personal data, please get in touch with the fb888 support team using the following contact options. All privacy-related communications are handled in English.

• Live Chat: Available 24 hours a day, seven days a week, directly through the fb888 Platform after login. Average response time is under three minutes during peak periods.
• Email: The fb888 support email address is displayed as plain text in the footer of this page. Please include "Privacy Request" in your subject line so your message is directed to the appropriate team member promptly.

fb888 commits to acknowledging all privacy-related inquiries within two business days and to providing a substantive response within 15 business days of receiving all information necessary to process the request. If your request is complex or requires additional verification, fb888 will notify you of this and provide an updated expected response timeframe.