Privacy Policy — 888phl

888phl ("we", "us", "our") operates the online casino and sports betting platform accessible at https://888phl.bio (the "Platform"). This Privacy Policy describes how 888phl collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or otherwise interact with the Platform ("you", "Player", "User").

This Privacy Policy should be read together with the 888phl Terms & Conditions and the Responsible Gaming Policy, both of which are accessible via the footer links on every page of the Platform. By creating an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy in full.

This document is written and maintained in English. In the event of any inconsistency arising from a translation into any other language, the English version shall prevail. All time references in this document use Bangladesh Standard Time (BST, UTC+6).

888phl collects personal data through several channels: directly from you when you register an Account or contact support; automatically as you interact with the Platform; and, in limited cases, from third-party service providers engaged to support Platform operations. The categories of data we collect are as follows:

888phl processes personal data only for clearly defined, legitimate purposes. We do not use personal data for any purpose incompatible with those described below. The primary purposes for which we process your data are:

• Account Creation and Management: To register your Account, maintain your profile, and provide you with access to all Platform features, including the casino lobby, sports betting markets (BPL, IPL, T20, Bangladesh Tigers fixtures), and live dealer tables.
• Identity Verification (KYC): To verify your age (18+ requirement), confirm your identity, and satisfy anti-money laundering obligations through our KYC process.
• Financial Transactions: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, and to maintain accurate financial records for each Account.
• Platform Personalisation: To tailor your experience on 888phl, including game recommendations, promotional offers relevant to your activity profile, and interface preferences.
• Customer Support: To respond to enquiries, resolve disputes, and administer complaints submitted via support@888phl.bio or the live chat interface.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, and any other conduct that breaches the Terms & Conditions or applicable law.
• Responsible Gaming: To monitor behavioural indicators of problem gambling and administer self-exclusion, deposit limit, and session reminder tools in accordance with your requests and our responsible gaming obligations.
• Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money laundering regulations, to respond to lawful requests from competent authorities, and to maintain records as required by applicable law.
• Platform Improvement: To analyse aggregated, anonymised usage patterns and technical performance data in order to improve the Platform's stability, speed, and content offering.

888phl processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including Account management, financial transactions, and customer support — is carried out on the basis that it is necessary for the performance of the contract between us.
• Legal Obligation: Processing required to comply with applicable laws — including KYC identity verification, anti-money laundering record-keeping, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for security, fraud prevention, Platform analytics, and responsible gaming monitoring is carried out on the basis of 888phl's legitimate interest in operating a safe, fair, and sustainable platform, provided that such interests do not override your fundamental rights and freedoms.
• Consent: Where we send you direct marketing communications or deploy non-essential cookies and tracking technologies, we do so on the basis of your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

888phl uses cookies and similar tracking technologies to operate the Platform effectively and to understand how it is used. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programmes or transmit viruses. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as your last-visited game category, preferred language setting, and interface personalisation choices.
• Analytical Cookies: Used to collect anonymised data on how players navigate the Platform — including page visit sequences, session durations, and feature usage frequency — to help us improve the user experience.
• Security Cookies: Used to detect unusual login behaviour, flag potentially compromised sessions, and assist in fraud prevention monitoring.

You may configure your browser to refuse all cookies, to alert you when cookies are being set, or to delete cookies after each session. Please note that disabling strictly necessary cookies will significantly impair Platform functionality. Guidance on managing cookies is available in the help section of your browser (Chrome, Firefox, Safari, Edge, or the browser embedded in your Android or iOS device).

888phl does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Game Providers: Software studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive session data (Player ID, stake amounts, game outcomes) through secure API integrations solely for the purpose of delivering game content and resolving disputes.
• Payment Processors: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) receive the minimum financial data necessary to execute deposit and withdrawal transactions.
• Identity Verification Services: KYC and age verification partners receive your identity documents and personal details to confirm your eligibility to use the Platform in compliance with our 18+ policy.
• Analytics Providers: Aggregated, anonymised technical and behavioural data may be shared with analytics service providers to support Platform performance monitoring and improvement.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of 888phl, its players, or the public.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of 888phl's business, personal data held by the Platform may be transferred to the successor entity, subject to the same or equivalent privacy protections.

All third-party service providers who receive personal data from 888phl are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and not to share it further without authorisation.

888phl retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your Account and for a period of five (5) years following Account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, in accordance with applicable financial compliance regulations.
• Transaction Records: Deposit and withdrawal records are retained for a minimum of five (5) years to support audit, dispute resolution, and regulatory obligations.
• Support Communications: Correspondence with our support team is retained for up to three (3) years from the date of the last interaction, to support ongoing dispute resolution and service quality review.
• Technical and Analytical Data: Server log data and session analytics are retained for up to twelve (12) months in identifiable form, after which they are anonymised or deleted.
• Self-Exclusion Records: Where a Player has self-excluded, records of the exclusion are retained for a minimum of five (5) years beyond the end of the exclusion period to prevent inadvertent re-registration.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

888phl implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and the 888phl Platform is encrypted in transit using Transport Layer Security (TLS) with a minimum of 256-bit encryption.
• Password Security: Account passwords are stored using industry-standard salted cryptographic hashing algorithms. Under no circumstances does 888phl staff have access to your plaintext password.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and regular security training.
• Infrastructure Security: Our servers are hosted in access-controlled data centre facilities with physical and network-level security. Firewalls, intrusion detection systems, and regular vulnerability assessments are in place.
• Fraud Monitoring: Automated systems monitor transaction patterns and login behaviour in real time to detect and respond to suspicious activity.

As a Player on the 888phl Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to support@888phl.bio with "Data Rights Request" in the subject line. We will respond within five (5) business days (BST).

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to mandatory regulatory retention periods cannot be deleted early.
• Right to Restriction of Processing: You may request that we restrict our use of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

The 888phl Platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation of age, and KYC verification is used to enforce this requirement.

If we become aware, at any point, that personal data has been submitted by or on behalf of a person under the age of 18, we will immediately suspend the associated Account, delete the personal data in question, and — where appropriate — notify the relevant authorities. If you believe a minor has registered on the Platform, please contact us without delay at support@888phl.bio.

888phl primarily processes and stores personal data within the geographic regions in which its data centre partners and cloud infrastructure providers operate. As a Platform serving players primarily based in Bangladesh, we endeavour to ensure that personal data is processed as close to the originating region as operationally feasible.

Certain third-party service providers — including game content studios such as Pragmatic Play, Evolution Gaming, and Microgaming — may process data in jurisdictions outside Bangladesh as part of their standard operational infrastructure. In all such cases, 888phl ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

By using the Platform and agreeing to these terms, you acknowledge and consent to your personal data being transferred to and processed in the jurisdictions described above, subject to the safeguards outlined here.

The 888phl Platform may contain references to third-party content providers, software studios, or payment partners. While 888phl takes care to engage with reputable third parties, we have no control over the privacy practices of external entities and accept no responsibility for the data handling policies of any third party whose services you access independently of the Platform.

This Privacy Policy applies solely to data collected and processed by 888phl in connection with the Platform. We encourage you to review the privacy policies of any third-party services you use in connection with your activity on 888phl, including the mobile wallet terms of bKash, Nagad, or Rocket, and the privacy disclosures of your banking institution.

888phl reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered Players by email to the address on file and by posting a prominent notice on the Platform, prior to the changes taking effect.

The "Last Updated" date at the top of this document will be revised to reflect the date the most recent version became effective. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or formal complaints relating to this Privacy Policy or to the way in which 888phl processes your personal data, please contact our support team using the details below. All correspondence should be submitted in English to ensure prompt and accurate handling.

• Privacy Enquiries Email: support@888phl.bio — please include "Privacy Policy Enquiry" in the subject line
• Data Rights Requests: Submit with "Data Rights Request" in the subject line to the same email address above
• Support Hours: 24 hours a day, 7 days a week including public holidays in Bangladesh
• Response Time: General privacy enquiries within 24 hours (BST); formal data rights requests within 5 business days (BST)