Privacy Policy — How 78fb Protects Your Personal Data

This Privacy Policy explains how 78fb ("the Platform", "We", "Us", "Our") collects, uses, stores, and protects the personal data of individuals ("You", "Your", "Player", "User") who access or use the 78fb online casino and sports betting platform at 78fb.io. This Policy applies to all registered account holders, visitors, and any other individuals whose personal data is processed in connection with the 78fb platform.

78fb is committed to protecting the privacy of every player across Bangladesh — including those accessing the platform from Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh. We handle all personal data with strict confidentiality, and we do not sell, trade, or rent your personal information to any third party for their own commercial purposes.

By registering an account, making a deposit, or using any feature of the 78fb platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. This Privacy Policy should be read alongside our Terms & Conditions, which together form the complete agreement governing your use of the 78fb platform.

If you have any questions about how your personal data is handled at any time, you may contact our Privacy team directly at [email protected]. All support is available 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

78fb collects personal data across several categories. The table below summarises the categories of personal data we may collect from you as a Bangladesh player:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming monitoring purposes (for example, data about self-imposed deposit limits or self-exclusion elections).

78fb collects your personal data through the following channels:

• Direct registration: When you create a 78fb account, you provide identity data, contact data, and your chosen payment method details. This data is submitted voluntarily by you at the point of account creation.
• KYC verification: When you submit identity documents (National ID card, passport, proof of address) in response to a KYC request, we collect the identity and contact data contained in those documents.
• Deposits and withdrawals: When you initiate a BDT transaction via bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard, financial data associated with that transaction is collected and recorded.
• Platform usage: Technical data and usage data are collected automatically when you browse the 78fb platform, play games, or place sports bets. This collection uses server logs, cookies, and similar tracking technologies described in Section 7.
• Customer support interactions: When you contact the 78fb support team via email at [email protected] or via live chat, the content of those communications is recorded for quality assurance, compliance, and dispute resolution purposes.
• Third-party payment processors: When you transact via bKash, Nagad, Rocket, Upay, or card networks, limited transaction confirmation data is returned to 78fb by those processors to verify payment status. We do not receive your full card number or full bKash PIN.
• Game providers: Our game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi — may pass session and outcome data back to 78fb for the purpose of crediting winnings, calculating RTPs, and detecting fraud.

78fb processes your personal data for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your consent or establishing an alternative lawful basis for processing:

• Account creation and management: To register your account, authenticate your identity at login, manage your account settings, and provide you with access to the 78fb platform's full suite of casino and sports betting products.
• Age and identity verification (KYC): To verify that you are aged 21 or above and that your identity matches the details provided at registration. This is a mandatory compliance step that cannot be waived for any player.
• Processing deposits and withdrawals: To initiate, verify, and record BDT transactions via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard. Financial data is required to ensure that funds are sent to and received from the correct, verified payment method.
• Fraud prevention and anti-money laundering (AML): To monitor transactions and account behaviour for patterns consistent with fraudulent activity, money laundering, or other financial crime. This monitoring is a legal obligation and a core security function.
• Responsible gaming monitoring: To track gambling activity in order to identify signs of problem gambling behaviour, to honour self-imposed limits and self-exclusion elections, and to provide targeted responsible gaming interventions where appropriate.
• Customer support: To respond to queries, resolve disputes, process complaints, and maintain accurate records of all support interactions for quality assurance purposes.
• Personalisation: To customise your platform experience — for example, remembering your preferred deposit method, your favourite game categories, or your language and notification preferences.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, BPL and IPL season betting promotions, Eid and Pohela Boishakh seasonal offers, and other marketing communications. You may withdraw your consent to marketing at any time by contacting [email protected].
• Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from lawfully authorised authorities in Bangladesh and other relevant jurisdictions.
• Platform improvement: To analyse usage data in aggregate and anonymised form for the purpose of improving platform performance, identifying technical issues, and developing new features.

78fb processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract performance: Processing that is necessary to deliver the services set out in the 78fb Terms & Conditions — including account management, payment processing, game delivery, and withdrawal handling — is carried out on the basis that it is necessary for the performance of the contract between you and 78fb.
• Legal obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, customer support quality assurance, and aggregate platform analytics is carried out on the basis of 78fb's legitimate interest in operating a safe, compliant, and commercially viable platform. We balance this interest against your privacy rights and apply proportionate data minimisation in all such processing.
• Consent: Processing for marketing communications — including promotional emails, SMS offers, and personalised bonus notifications — is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

78fb does not sell, trade, or rent your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following limited circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to process your BDT deposit or withdrawal transaction — typically your registered wallet number or tokenised card reference and the transaction amount.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive your account session identifier and bet data in order to deliver game content, process game outcomes, and return results to your 78fb account. Game providers do not receive your financial data or full identity documents.
• KYC verification partners: Where 78fb uses a third-party identity verification service to assist with document checks, your submitted identity documents and identity data will be shared with that partner solely for verification purposes. All KYC partners are contractually bound to handle your data with the same standard of care as 78fb.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawfully authorised request from a regulatory or law enforcement body, 78fb may disclose your personal data to the relevant authority. We will notify you of any such disclosure to the extent permitted by law.
• Fraud prevention agencies: Where 78fb has reasonable grounds to suspect fraudulent activity, we may share relevant transaction and account data with fraud prevention agencies or financial intelligence units for investigation purposes.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of 78fb's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance and your rights under this Privacy Policy will be preserved.

78fb uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The cookies used by 78fb fall into the following categories:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the 78fb platform. You may control functional and analytics cookies through your browser settings. Please note that disabling certain cookies may limit the functionality of parts of the platform, including the cashier and game-loading features.

78fb does not use third-party advertising cookies or cross-site tracking technologies that share your browsing data with external advertising networks.

78fb retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with 78fb, plus a minimum of five (5) years following account closure. This extended period is required by AML compliance obligations and to support the resolution of any disputes or legal claims that may arise after account closure.
• Financial transaction records: BDT deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC verification documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years following the end of the customer relationship, as required by AML regulations.
• Customer support records: Support interaction records (emails, chat transcripts) are retained for three (3) years from the date of the interaction, to support ongoing dispute resolution and quality assurance.
• Technical and usage data: Server logs and usage analytics data are retained in identifiable form for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing preference data: Records of your marketing consent or opt-out are retained for the lifetime of your account and for three (3) years following account closure, to demonstrate compliance with consent requirements.

When personal data is no longer required and its retention period has expired, it is securely deleted or anonymised in accordance with 78fb's data destruction procedures.

As a 78fb player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two (2) business days and respond in full within thirty (30) days.

Please note that some rights are subject to limitations where processing is required by law (for example, AML-mandated data retention). We will explain any applicable limitations clearly when responding to your request.

As part of our mandatory age verification process, every registered account is subject to date-of-birth confirmation and, where necessary, documentary age verification before any withdrawal is permitted. Where 78fb discovers or has reasonable cause to believe that an account has been registered by an individual under the age of 21, the account will be suspended immediately, all balances will be frozen pending investigation, and any deposits made will be returned to the source payment method after the investigation is complete.

If you are aware of a minor who has accessed or is attempting to access the 78fb platform, please notify us immediately at [email protected] so that we can take prompt action. We take the protection of minors from gambling harm with the utmost seriousness.

78fb applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 78fb platform — including login credentials, BDT transaction data, and personal information — is protected by 256-bit SSL/TLS encryption. The padlock icon in your browser's address bar confirms this encryption is active.
• Password hashing: Account passwords are never stored in plain text. They are processed using industry-standard cryptographic hashing algorithms before storage, ensuring that even internal 78fb systems cannot view your original password.
• Access controls: Access to personal data within 78fb's internal systems is restricted to authorised personnel who require it to perform their specific job functions. All access is logged and monitored.
• Fraud detection systems: Automated monitoring systems continuously analyse login attempts, transaction patterns, and account activity for indicators of fraud, account takeover, or unusual behaviour. Suspicious activity triggers immediate alerts for manual review.
• Two-factor authentication (2FA): 78fb supports and encourages the use of two-factor authentication for all player accounts. Enabling 2FA provides an additional layer of security beyond your password.
• Regular security assessments: 78fb conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential risks before they can be exploited.

While 78fb takes all reasonable and proportionate steps to protect your data, no online platform can guarantee absolute security against all possible threats. If you suspect that your 78fb account has been accessed without your authorisation, you must contact [email protected] immediately so that your account can be secured without delay.

The 78fb platform may from time to time reference third-party services, game providers, or payment processors by name. This Privacy Policy applies exclusively to the 78fb platform and does not extend to any third-party websites, applications, or services that you may access independently of 78fb.

When you interact with a third-party payment processor — for example, the bKash or Nagad mobile app — to complete a deposit or withdrawal, you are subject to that provider's own privacy policy and terms of service. 78fb has no control over and accepts no responsibility for the data practices of third-party platforms. We encourage you to review the privacy policies of any third-party services you use in connection with your 78fb activity.

78fb reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When a material change is made, we will notify you by posting the updated Policy on this page with a revised "Last updated" date, and where the change is significant, by sending a notification to your registered email address.

Your continued use of the 78fb platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes to this Policy, you should stop using the platform and may request account closure by contacting [email protected]. We recommend that you review this Privacy Policy periodically to stay informed about how 78fb protects your personal data.

The version of this Privacy Policy dated January 2026 supersedes all previous versions. In the event of any conflict between this version and a prior version, this version shall prevail.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 78fb processes your personal data, please contact our Privacy and Data team using the details below. All support is provided in English and is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).

Formal complaints regarding the handling of your personal data will receive a written acknowledgement within two (2) business days and a substantive written response within thirty (30) calendar days of receipt. Where a complaint cannot be resolved within thirty days, we will notify you of the expected extended timeline and the reason for the delay.