gf888 Privacy Policy

What Information We Collect

At gf888, we collect information necessary to provide our betting and gaming services, process payments, verify your identity, and comply with legal obligations. Your trust is our priority, so we're transparent about every data point we gather.

Account Registration Data

When you register at gf888, we collect your full name, date of birth, email address, phone number, and residential address. We also record your username and password (securely hashed). This information allows us to create your account, verify your age, and maintain your gaming profile.

Financial & Payment Data

To process deposits and withdrawals, we collect bank account details, mobile money information (bKash, Nagad, Rocket), and transaction history. Payment data is encrypted and handled by PCI-DSS compliant processors. We never store your full banking credentials on our servers; only tokenized references are retained for faster future transactions.

Gaming Activity & Behavioral Data

We automatically log your gameplay: games played, bet amounts, win/loss records, session duration, and device information. This helps us detect fraud, personalize your experience, and ensure fair play. We also collect IP addresses and browser details for security purposes.

Identity Verification Documents

For Know Your Customer (KYC) compliance, we request scans of your National ID Card, Passport, or Driving License. These documents are stored securely and used only for verification. We delete them after 24 months unless required by law to retain them longer.

How We Use Your Data

gf888 uses your information only for legitimate business purposes and player protection. We never sell your data to marketers or advertisers. Here's exactly what we do with it:

Service Delivery

Your data powers core gf888 services: account management, game hosting, payment processing, and customer support. Without this data, we cannot provide betting, live casino games, sports wagering, or bonuses.

Regulatory Compliance

Bangladesh gaming regulations, anti-money laundering (AML) laws, and responsible gambling rules require us to verify identities, monitor large transactions, and track problem gambling indicators. We report to regulatory bodies as mandated.

Fraud & Security

We analyze your login patterns, device fingerprints, and transaction behaviors to detect account takeovers, collusion, money laundering, and self-exclusion breaches. Suspicious activity triggers alerts and may result in account freezing pending review.

Marketing & Communication

If you opted in, we send promotional emails about new games, bonuses, and special events. You can unsubscribe anytime via email or account settings. We respect opt-out requests within 48 hours. SMS notifications are sent only with explicit consent.

Product Improvement

Your gameplay data helps us enhance gf888: fixing bugs, improving mobile app performance, optimizing game selection, and personalizing recommendations. Analytics are aggregated (never individual) to protect your privacy.

Data Sharing & Third Parties

gf888 shares your data sparingly and only with essential partners bound by strict confidentiality agreements. We do not sell, rent, or trade your information.

Payment Processors

Payment gateways for bKash, Nagad, Rocket, and bank transfers receive only the minimum data needed to process your transaction: amount, account reference, and confirmation. They are PCI-DSS compliant and bound by similar privacy terms.

KYC & Identity Verification

Third-party KYC providers verify your National ID and detect sanctions/fraud lists. They process your document scan and return a pass/fail result. Your document is deleted from their system after 30 days.

Game Providers

Live casino studios (Evolution, Ezugi), slot providers (Pragmatic Play, JILI, JDB), and sports data suppliers receive your user ID, session token, and bet data to host games and settle wagers. They cannot see your name, address, or payment details.

Legal & Regulatory Bodies

If required by law enforcement or gaming regulators, we disclose account data, transaction records, and KYC documents. We limit such disclosures to what's legally compelled and inform you unless prohibited.

Data Protection: No Third-Party Marketing

We explicitly prohibit game providers and payment partners from using your data for their own marketing. Your email, phone, and name are for gf888 use only.

Data Security & Protection

gf888 employs industry-leading security to protect your personal and financial data from unauthorized access, loss, or misuse. Our technical safeguards include:

Encryption

All data in transit uses TLS 1.3 encryption (HTTPS). Sensitive fields—passwords, banking details, ID numbers—are encrypted at rest using AES-256. This ensures that even if our servers were physically breached, encrypted data remains unreadable without cryptographic keys stored separately.

Access Controls

Only authorized gf888 staff with a legitimate business need access your personal data. Employees sign confidentiality agreements and undergo security training. Admin access requires multi-factor authentication (MFA) and is logged for audit trails.

Regular Security Audits

We conduct annual penetration testing and vulnerability assessments by independent cybersecurity firms. Security patches are deployed within 48 hours of discovery. Infrastructure is monitored 24/7 for intrusion attempts.

Backup & Redundancy

Player data is backed up daily to geographically separated secure servers. In case of disaster, we can restore your account within 4 hours. Backups are encrypted and accessible only by our database administrators.

Incident Response

If a data breach occurs, we notify affected users within 72 hours, describe what was compromised, and explain remedial steps. We report to relevant authorities as required by law.

Your Rights & Choices

You have the right to know what data we hold, correct inaccuracies, request deletion, and control how we use your information. These rights apply whether you're in Bangladesh or elsewhere:

How to Exercise Your Rights

Email [email protected] with "Privacy Request" in the subject line. Specify which right you're exercising (access, correction, deletion, opt-out). Include your account username and registered email for verification. We respond within 10 business days.

How Long We Keep Your Data

We retain data only as long as necessary to provide services, comply with law, and resolve disputes. Here's our retention schedule:

• Active Account Data: Retained as long as your account is open plus 3 years after closure for dispute resolution.
• KYC Documents (ID, Passport, DL): Deleted 24 months after successful verification; retained longer if flagged by compliance review.
• AML/Transaction Records: Retained 7 years per Bangladesh financial regulations.
• Marketing Consent: Retained until you unsubscribe; revocation honored immediately.
• Gaming Activity Logs: Retained 5 years for fraud investigation and regulatory audit purposes.
• Security Logs (IP, device): Retained 90 days; longer if flagged for investigation.
• Deleted Account Data: Permanently removed after 90 days, except where law mandates longer retention.

Even after deletion, data may persist in encrypted backups for up to 6 months as a disaster recovery measure. Such backups are not accessible for regular business operations.

International Data Transfers

gf888 operates globally, so your data may be transferred outside Bangladesh to data centers in Singapore, the UK, or EU for hosting, backup, and customer support. Such transfers comply with international data protection standards, and we ensure recipient countries provide equivalent data protection or contractual safeguards (Standard Contractual Clauses).

By using gf888, you consent to such transfers. If you're in the EU or have GDPR rights, we ensure transfers are lawful under GDPR Chapter V mechanisms. Non-EU users are protected via binding agreements with all data processors.

Contact Us

Questions about this Privacy Policy, your data, or how to exercise your rights? Our Privacy team is ready to help.

Last Updated: November 2026. gf888 reserves the right to update this Privacy Policy. Material changes are announced via email and on this page. Your continued use of gf888 after updates constitutes acceptance of the revised policy.