Privacy Policy

This Privacy Policy ("Policy") is issued by fd888 ("we", "us", "our", "the Platform"), accessible at https://fd888.cam. This Policy describes how fd888 collects, processes, stores, protects and discloses personal data relating to individuals ("Users", "you", "your") who register accounts on, access, or otherwise interact with the fd888 Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions, this Policy governs with respect to data protection matters.

fd888 processes personal data in accordance with applicable data protection legislation in the jurisdiction governing our operations. Pakistani users are advised that Pakistan's data protection legislative landscape is evolving — including the Personal Data Protection Bill — and we encourage users to remain informed about their data rights under applicable local law. This Policy does not constitute legal advice.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, fd888.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed — in this context, registered Users and Platform visitors.
• "Personal Data" means any information relating to an identified or identifiable natural person. This includes name, email address, IP address, payment details and any other data that can, alone or in combination, identify an individual.
• "Processing" means any operation performed on personal data — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Processor" means any third party that processes personal data on behalf of the Controller under a data processing agreement.
• "Special Category Data" means sensitive personal data as defined by applicable data protection law, including but not limited to health data, biometric data and data relating to criminal convictions.
• "Platform" means the fd888 website, mobile interface, games, sportsbook, casino and all associated services at https://fd888.cam.

fd888, operating the Platform at https://fd888.cam, acts as the Data Controller for personal data collected through this Platform. As Controller, fd888 determines the purposes for which personal data is processed and the means by which that processing is carried out.

Where fd888 engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification services, analytics providers or customer support platforms — those providers act as Data Processors under contractual data processing agreements that bind them to process data only in accordance with fd888's instructions and applicable data protection law.

For all data protection enquiries, correction requests, deletion requests or complaints, please contact us using the details set out in Section 16 of this Policy.

fd888 collects and processes the following categories of personal data:

fd888 does not intentionally collect Special Category Data (such as health data or biometric data). If such data is provided incidentally — for example, through a responsible gambling self-declaration — it will be processed only to the extent necessary for the stated purpose and stored securely.

fd888 collects personal data through the following channels:

• Direct provision by the User: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or submit any form on the Platform.
• Automated technical collection: As you interact with the Platform, technical data including IP address, device identifiers, browser information and session logs are collected automatically via server logs and analytics tools.
• Cookies and tracking technologies: As described in Section 9 of this Policy.
• Third-party sources: Where required for compliance purposes, fd888 may receive verification data from identity verification providers, sanctions screening databases, or fraud-prevention services. This data is used strictly for compliance and security purposes.
• Payment processors: Limited financial data is received from payment processors to confirm transaction status and support dispute resolution. This includes references to payment methods used — such as digital wallet identifiers or bank transfer references — without storing full financial credentials.

fd888 processes personal data only where a valid legal basis exists under applicable data protection law. The primary legal bases on which fd888 relies are:

• Contractual necessity: Processing required to perform the contract between fd888 and the User — including account creation, transaction processing, KYC verification and the provision of gaming services.
• Legal obligation: Processing required to comply with applicable regulatory obligations — including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, tax reporting and compliance with lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of fd888's legitimate business interests — including fraud prevention, security monitoring, platform improvement and responsible gambling monitoring — provided those interests are not overridden by the User's fundamental rights and freedoms.
• Consent: Where fd888 relies on consent as a legal basis — for example, for optional marketing communications — that consent will be sought explicitly and may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Personal data collected by fd888 is used for the following purposes:

• Account management: Creating, maintaining and securing your Account; processing login and authentication; issuing security alerts.
• Transaction processing: Processing deposits and withdrawals in PKR; reconciling payment records; responding to deposit or withdrawal enquiries.
• Identity and age verification (KYC): Verifying that Users meet the minimum age requirement (18+ or higher where required) and confirming the identity of Users before releasing withdrawals.
• Compliance and fraud prevention: Screening against sanctions and politically exposed persons (PEP) lists; monitoring for unusual activity; meeting AML and counter-terrorist financing obligations.
• Responsible gambling monitoring: Identifying patterns of play that may indicate problem gambling; enforcing deposit limits, self-exclusion requests and cooling-off periods set by the User.
• Customer support: Responding to enquiries, resolving complaints and maintaining correspondence records for quality assurance.
• Platform improvement: Analysing anonymised usage data to identify performance issues, improve game selection and enhance the User experience.
• Communications: Sending transactional communications (account confirmations, security alerts, KYC status updates). Where you have opted in, sending promotional communications — with a clear unsubscribe mechanism in every marketing message.

fd888 does not sell personal data to third parties. Personal data may be shared with third parties only in the following circumstances:

• Service providers acting as Data Processors: Third-party vendors engaged by fd888 to provide services on its behalf — including payment processing, identity verification, fraud screening, customer support tooling and platform analytics. These providers are bound by data processing agreements and may not use personal data for their own independent purposes.
• Regulatory and legal obligations: Where required by law, court order or request from a competent regulatory or law enforcement authority. fd888 will notify Users of such requests where legally permitted to do so.
• Anti-money laundering and fraud prevention: Personal data may be shared with licensed credit reference agencies, fraud prevention services or sanctions screening providers as required by applicable AML and compliance obligations.
• Corporate transactions: In the event of a merger, acquisition, restructure or sale of assets, personal data may be transferred to the acquiring entity subject to equivalent data protection safeguards.
• With your consent: Where you have explicitly consented to a specific sharing arrangement not described above.

fd888 does not share personal data with payment providers — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — beyond what is strictly necessary to initiate and settle payment transactions. The mention of these providers on this Platform is for User familiarity only and does not constitute a data-sharing arrangement, endorsement or affiliation.

fd888 uses cookies and similar tracking technologies (such as pixel tags, local storage and session identifiers) to operate the Platform, maintain session state and understand how Users interact with the site.

The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication tokens, load-balancing identifiers and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember User preferences and settings — such as language or display preferences — to improve the Platform experience.
• Analytics cookies: Used to collect anonymised data about how Users navigate the Platform — including pages visited, session duration and error events. This information is used to improve Platform performance.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts and abnormal session behaviour.

fd888 does not deploy third-party advertising or behavioural targeting cookies. You may manage or delete cookies through your browser settings. Disabling strictly necessary cookies may prevent the Platform from functioning correctly.

fd888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention principles apply:

• Account and transaction data: Retained for the duration of the account relationship and for a period of at least five (5) years following account closure, in compliance with applicable AML and record-keeping obligations. The specific retention period may be longer where required by the laws of the governing jurisdiction.
• KYC documentation: Retained for the period required by applicable AML and licensing regulations — typically five (5) years from the end of the business relationship, though this may be extended where required by a competent authority.
• Communications records: Support correspondence and complaint records are typically retained for three (3) years following resolution, unless a longer period is required for regulatory or legal purposes.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised or deleted, unless retained for security investigation purposes.
• Marketing consent records: Retained for the period necessary to demonstrate compliance with consent obligations, including records of withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

fd888 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of data in transit using industry-standard TLS/SSL protocols.
• Encryption of sensitive data at rest using appropriate cryptographic standards.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Incident response procedures to detect, contain and notify stakeholders of data security incidents within applicable regulatory timeframes.
• Staff training on data protection obligations and security practices.

No method of electronic transmission or storage is completely secure. While fd888 takes reasonable steps to protect personal data, we cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their Account credentials. If you believe your Account has been compromised, contact support immediately.

fd888 and certain of its third-party service providers may operate in jurisdictions outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection, fd888 will implement appropriate safeguards — such as standard contractual clauses or equivalent transfer mechanisms — to ensure that your personal data receives a level of protection consistent with the applicable data protection framework governing our operations.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. fd888 does not represent that such transfers are regulated by Pakistani law or that Pakistani data protection legislation applies to all processing activities.

Subject to applicable data protection law and any overriding legal obligations (such as AML record-keeping requirements), you may be entitled to exercise the following rights in respect of your personal data:

To exercise any of the above rights, please contact fd888 using the details in Section 16. We will respond within the timeframe required by applicable law — typically within one (1) calendar month of receipt of a valid request. We may require identity verification before processing a rights request.

Please note that certain rights may be limited where processing is required to comply with a legal obligation — for example, we cannot delete KYC records that we are legally required to retain for AML compliance purposes.

Age verification is a mandatory component of the KYC process. Where fd888 becomes aware that personal data has been collected from a minor, that data will be deleted as promptly as technically possible and the associated Account will be immediately closed.

If you have reason to believe that a minor has registered on fd888, please contact our support team immediately using the contact details in Section 16 so that appropriate action can be taken without delay.

fd888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. Where changes are material, we will provide reasonable advance notice by email to the registered address or through a prominent notice on the Platform.

The effective date at the top of this document reflects the date of the most recent version. Continued use of the Platform following notification of a revised Policy constitutes acceptance of the updated terms. We encourage Users to review this Policy periodically.

For all data protection enquiries, rights requests, complaints or questions about this Privacy Policy, please contact the fd888 data protection team:

Email: [email protected]
Subject line: Privacy Request — [Your Account Username]
Platform: https://fd888.cam

We aim to acknowledge all privacy-related requests within five (5) business days and to resolve them within one (1) calendar month of receipt. Complex requests may require up to two (2) additional months, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with our response to a data protection complaint, you may have the right to lodge a complaint with the supervisory authority in the jurisdiction governing fd888's operations. Details of the applicable authority will be provided upon request.