f877 Privacy Policy

1 Introduction

f877 ("we", "us", "the Company") operates the online betting and casino platform accessible at https://f877.io. This Privacy Policy sets out how f877 collects, processes, stores, shares, and protects the personal data of all registered players, visitors, and users of the f877 platform, including those based in Bangladesh.

f877 is committed to handling your personal information with care, transparency, and respect. We recognise that privacy is a fundamental right, and we take all reasonable and proportionate steps to ensure that your data is used only for the purposes described in this document and for no other purpose without your explicit consent.

By accessing or using the f877 platform — whether as a registered player or as an unregistered visitor — you acknowledge that you have read this Privacy Policy and that you consent to the collection and processing of your data as described herein. If you do not agree with any aspect of this Policy, you must discontinue your use of the f877 platform immediately.

This Policy should be read alongside the f877 Terms and Conditions, which are available at /terms-conditions and which govern your overall use of the platform. In the event of any conflict between the two documents, the Terms and Conditions shall take precedence unless the matter is solely one of data protection, in which case this Privacy Policy governs.

2 Data We Collect

f877 collects personal data through various touchpoints on the platform. The categories of data we collect, and the contexts in which we collect them, are set out below.

2.1 Registration Data

When you create an f877 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address in Bangladesh (including district, division, and postcode)
• Valid email address
• Mobile phone number registered in your name (required for OTP verification)
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to protect the integrity of the platform, we collect:

• Copies or photographs of your National Identity Card (NID), passport, or Bangladesh driving licence
• Proof of address documents (utility bills, bank statements, or official correspondence issued within the last three months)
• Proof of payment method ownership (e.g., screenshot or statement confirming that your bKash, Nagad, or Rocket account is registered in your name)
• Selfie or live photograph for facial verification purposes, where required

2.3 Financial Data

When you make deposits or withdrawals, we collect transaction-related data including:

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) used for transactions — stored in tokenised form only
• Bank account details or card details used for deposits or withdrawals — stored via secure tokenisation; full card numbers are never stored on f877 servers
• Transaction amounts, timestamps, reference numbers, and statuses
• Deposit and withdrawal history for your account

2.4 Gameplay & Betting Data

We collect a detailed record of your activity on the platform, including:

• Bets placed, markets selected, stake amounts, odds accepted, and settlement outcomes
• Casino games played, session duration, spin history, and win/loss records
• Bonus claims, wagering progress, and promotional participation history
• Session start and end times and overall account activity patterns

2.5 Technical & Device Data

f877 automatically collects certain technical information when you access the platform, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Screen resolution and language settings
• Pages visited, time spent on each page, click-through paths, and referral source
• Cookies and similar tracking data (see Section 6 for full details)

2.6 Communications Data

When you contact our support team or interact with f877 through any communication channel, we retain:

• The content of live chat conversations, emails, and any written complaints or escalations
• The date, time, and channel of each support interaction
• Any attachments or documents submitted as part of a support request

3 How We Use Your Data

f877 uses the personal data it collects only for legitimate, documented purposes. The table below maps each category of data to its primary use case and the legal basis that justifies the processing.

Where f877 relies on legitimate interest as a legal basis for processing, we have conducted a balancing test to confirm that our interests do not override your fundamental rights or freedoms. You may request the outcome of any such balancing test by contacting our support team.

4 Legal Basis for Processing

f877 processes your personal data under the following recognised legal bases, consistent with internationally accepted data protection standards:

• Contractual Necessity: Processing is required in order to fulfil our obligations to you under the f877 Terms and Conditions — for example, creating your account, processing your bets, and paying out your winnings.
• Legal Obligation: Processing is required to comply with applicable laws — for example, collecting and retaining identity documents under anti-money laundering regulations or age verification obligations.
• Legitimate Interest: Processing is necessary for f877's legitimate business interests, provided those interests are not overridden by your rights — for example, detecting fraudulent activity, maintaining platform security, and improving service quality through analytics.
• Consent: For specific processing activities — particularly the sending of promotional marketing communications — we will only process your data if you have given clear, informed, and freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

f877 does not sell, rent, or transfer your personal data to third parties for their own commercial or marketing purposes. However, we do share your data in limited, controlled circumstances as described below.

5.1 Service Providers

f877 engages a number of trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card networks (Visa, Mastercard) — to facilitate deposits and withdrawals
• KYC and identity verification providers: Authorised third-party verification services used to validate identity documents
• Game content providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi — receive anonymised or pseudonymised session data necessary to deliver their games within the f877 platform
• Cloud infrastructure and hosting providers: Used to store and process platform data securely
• Analytics providers: Used to analyse aggregate, anonymised platform usage patterns for performance improvement purposes
• Customer support platform providers: Used to manage live chat and email support interactions

All service providers are required to process your data only for the specific purpose for which it was shared, to implement appropriate technical and organisational security measures, and to delete or return the data upon termination of the service agreement.

5.2 Legal & Regulatory Disclosure

f877 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of f877, our players, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of f877's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered on your account prior to your data being subject to a different privacy policy.

6 Cookies & Tracking Technologies

f877 uses cookies, web beacons, pixel tags, and similar tracking technologies on the f877 platform. This section explains what these technologies are, how we use them, and how you can manage your preferences.

6.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to the website operator about how the site is being used.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Instructions for the most common browsers are available through their respective help documentation. Please note that disabling strictly necessary cookies will prevent you from logging into your f877 account and using core platform features.

7 Data Retention

f877 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of 5 years following account closure, to satisfy anti-money laundering and fraud prevention obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Communications and support records: Retained for 3 years from the date of the interaction.
• Technical and analytics data: Anonymised after 13 months and retained in anonymised form indefinitely for aggregate trend analysis.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn, to demonstrate compliance.

8 Data Security

f877 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the f877 platform
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial identifiers
• Tokenisation of payment method details — full card numbers and mobile wallet account numbers are never stored in plain text on f877 servers
• Role-based access controls ensuring that employees can only access personal data necessary for their specific job function
• Multi-factor authentication (MFA) required for all staff access to systems containing personal data
• Regular penetration testing and vulnerability assessments conducted by independent security professionals
• 24/7 security monitoring of all platform systems with automated alerts for anomalous activity
• Secure data destruction protocols for all physical and digital media on which personal data is stored when that media reaches end of life

Notwithstanding these measures, no system is entirely immune to security threats. In the unlikely event of a data breach that is likely to result in a risk to your rights or freedoms, f877 will notify affected players without undue delay and will take all appropriate remedial action.

9 Your Rights

As a data subject, you hold a number of important rights in relation to your personal data held by f877. These rights are described below. To exercise any of these rights, please contact our support team using the details provided in Section 13. f877 will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data f877 holds about you, along with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If you believe that any personal data f877 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request that f877 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent, or where you object to the processing. This right is subject to overriding legal retention obligations.
• Right to Restriction: You may request that f877 temporarily restrict the processing of your personal data while a dispute regarding its accuracy or the lawfulness of its processing is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to processing that is based on f877's legitimate interests. f877 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty, and without affecting the lawfulness of processing carried out before the withdrawal.

10 Third-Party Links

The f877 platform may contain references to game providers, payment partners, and other services. While f877 takes care in selecting its partners, we do not control the privacy practices of third-party organisations and cannot accept responsibility for them.

When you access services delivered by third-party providers — such as a game interface operated by Pragmatic Play, Evolution Gaming, or another studio — that provider's own privacy policy will govern the handling of any data collected within their service environment. We encourage you to review the privacy policies of all third-party services you interact with.

f877 does not include advertising from third-party ad networks on its platform, and we do not permit third-party advertisers to collect personal data from f877 users for their own targeting purposes.

11 Children's Privacy

The f877 platform is strictly intended for individuals who are 21 years of age or older. f877 does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not use the f877 platform, create an account, or submit any personal information to us.

If f877 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child may have submitted personal data to f877, please contact our support team immediately using the details in Section 13.

12 Policy Updates

f877 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services we offer. When changes are made, the revised Policy will be published at https://f877.io/privacy-policy with an updated effective date shown at the top of the document.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — f877 will notify registered players via the email address on file at least 14 days before the changes take effect. For minor changes such as clarifications or typographical corrections, the updated Policy will take effect immediately upon publication without prior notice.

Your continued use of the f877 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and contact our support team to request account closure in accordance with the f877 Terms and Conditions.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by f877, please contact our Data Protection team using the details below. All privacy-related enquiries are handled with the highest priority and in strict confidence.

When submitting a data rights request, please include your registered email address and a brief description of your request. If your request requires identity verification, our team will ask you to provide appropriate confirmation before we proceed. We will never charge a fee for processing a legitimate data rights request.