Data Protection & Privacy Policy

1Security Framework & Protection

Our security infrastructure employs industry-leading protection measures to safeguard your sensitive information against unauthorized access, data breaches, and cyber threats:

Advanced Security Technologies

• Multi-Layer Encryption: End-to-end SSL/TLS encryption for all data transmissions
• Secure Infrastructure: Encrypted database storage with advanced access controls
• Identity Protection: Multi-factor authentication and biometric verification
• Network Security: Next-generation firewall protection and intrusion detection
• Continuous Monitoring: Real-time security monitoring and threat analysis

Operational Security Protocols

• Restricted Access: Role-based permissions for authorized personnel only
• Security Training: Comprehensive data protection education for all staff
• Personnel Screening: Thorough background verification for data-handling employees
• Breach Response: Rapid incident response and recovery procedures
• Security Auditing: Regular vulnerability assessments and penetration testing

2Privacy Statement Overview

Fun88, operated through E Gambling Montenegro d.o.o. in partnership with OG GLOBAL ACCESS LIMITED, maintains unwavering commitment to protecting user privacy and personal data security. We recognize the critical importance of data protection, particularly for our valued Indian player community who trust us with their personal and financial details.

This privacy framework details our comprehensive approach to information collection, processing, storage, sharing, and protection across our website, mobile applications, and associated gaming services. We maintain transparency regarding our data practices while respecting your fundamental privacy rights.

Our practices align with applicable privacy legislation and data protection standards, including specific requirements for Indian users, with continuous updates to maintain leading privacy protection standards.

3Your Data Rights & Controls

We recognize and respect your fundamental rights regarding personal information. Our commitment extends beyond legal compliance to ensure you maintain complete control over your data:

Rights Exercise Process

To exercise these rights, contact our dedicated Privacy Team through the channels specified below. We provide responses within 30 days and may require identity verification to protect your information security.

4Data Collection Practices

Personal Data Categories

We collect diverse personal information types essential for service delivery and legal compliance:

Automated Data Collection

Data Category	Collection Examples	Primary Purpose
Technical Information	IP addresses, browser specifications, device characteristics, system details	Security enhancement, fraud detection, platform optimization
Behavioral Data	Navigation patterns, session duration, interaction preferences, feature utilization	User experience improvement, personalization services
Geographic Data	Regional location data, IP-based geographic identification	Regulatory compliance, geographic restrictions, fraud prevention
Support Communications	Chat transcripts, email exchanges, support ticket details	Customer assistance, service quality improvement

5Digital Tracking & Cookies

We utilize cookies and similar tracking technologies to enhance user experience and deliver personalized services across our platform:

Cookie Classification System

Cookie Category	Functional Purpose	Retention Period
Essential Cookies	Core website functionality, security protocols, session management	Session duration/Persistent storage
Analytics Cookies	Performance monitoring, usage analytics, error detection and reporting	Maximum 2 years
Preference Cookies	User customization, language preferences, interface personalization	Maximum 1 year
Advertising Cookies	Targeted marketing, promotional content delivery	Maximum 1 year

Cookie Management Options

You maintain full control over cookie preferences through browser settings and our consent management platform. Note that disabling essential cookies may impact website functionality. We provide granular consent options for non-essential tracking technologies.

6Data Processing & Usage

We process personal information for legitimate business purposes and regulatory compliance requirements. Our processing activities include:

Service Delivery & Account Operations

• Account creation and ongoing maintenance services
• Financial transaction processing including deposits and withdrawals
• Sports betting and casino gaming service delivery
• Promotional program and loyalty reward management
• Customer support services and issue resolution

Regulatory & Legal Compliance

• Age and identity verification procedures (18+ requirement enforcement)
• Anti-money laundering and counter-terrorism financing compliance
• Know Your Customer (KYC) regulatory requirement fulfillment
• Regulatory authority reporting and documentation
• Legal enforcement and judicial cooperation

Security & Risk Management

• Fraudulent activity detection and prevention systems
• Suspicious gaming pattern monitoring and analysis
• Unauthorized access protection and breach prevention
• Platform security and data integrity maintenance

Communication & Marketing Activities

• Promotional offer and bonus distribution (consent-based)
• Service notification and update communications
• Personalized gaming experience development
• Market research and customer feedback analysis

7Third-Party Data Sharing

We maintain strict policies against selling personal information to external parties. However, specific circumstances require information sharing:

Authorized Service Partners

We collaborate with vetted third-party providers essential for platform operations:

• Financial Service Providers: Payment processing and transaction management
• Identity Verification Specialists: Document verification and authentication services
• Technology Infrastructure Partners: Hosting, security, and technical maintenance
• Marketing Service Providers: Promotional campaign management (consent-based)
• Customer Experience Partners: Support services and user assistance

Regulatory & Legal Authorities

Information disclosure may occur when legally mandated or necessary for rights protection:

• Gaming and financial regulatory oversight bodies
• Law enforcement agencies and judicial systems
• Financial intelligence and anti-money laundering units
• Taxation authorities and government compliance agencies

Corporate Transactions

During potential mergers, acquisitions, or asset transfers, information may transfer to successor entities under equivalent privacy protection standards.

8Information Storage & Retention

We retain personal information only for periods necessary to fulfill stated purposes and meet applicable legal obligations:

Retention Schedule Framework

Data Category	Retention Duration	Regulatory Basis
User Account Data	Active account period + 7 years	Financial and gaming regulations
Financial Transaction Records	7 years from transaction completion	Financial legislation, taxation requirements
Identity Verification Documents	5 years following account closure	KYC/AML regulatory compliance
Marketing Consent Data	Until consent withdrawal	Consent-based processing requirements
Customer Support Records	3 years from final interaction	Service improvement, dispute resolution

Secure Data Disposal

Upon retention period expiration, we implement secure deletion or anonymization procedures using industry-standard methods to ensure information cannot be recovered or reconstructed.

9Cross-Border Data Transfers

As a global gaming platform, we may transfer personal information across international borders for processing and storage, maintaining appropriate protection safeguards:

Transfer Protection Mechanisms

• Adequacy Determinations: Transfers to jurisdictions with recognized adequate data protection
• Standard Contractual Provisions: EU-approved contractual safeguards for data protection
• Corporate Binding Rules: Internal governance ensuring consistent global protection standards
• Security Certification Programs: Third-party verified security and privacy standards

Global Processing Locations

Data processing may occur in secure facilities across India, European Union, and other jurisdictions maintaining adequate data protection standards. All processing locations adhere to equivalent security protocols.

10Minor Protection Policies

Fun88 services are exclusively designed for adults aged 18 and above. We maintain strict policies prohibiting personal information collection from individuals under legal gambling age.

Parental Notification

Parents discovering their child has provided information to Fun88 should contact us immediately. We will investigate thoroughly and take appropriate action to remove any collected information from our systems.

11Policy Modifications

We may periodically update this Privacy Policy to reflect practice changes, legal requirements, or service enhancements. Significant changes will be communicated through:

• Direct email notifications to registered email addresses
• Prominent website and mobile application announcements
• In-account notification systems upon login
• SMS alerts for substantial policy modifications (where applicable)

Continued service usage following policy updates indicates acceptance of revised terms. We encourage regular policy review to maintain awareness of information protection practices.

12Privacy Support Contact

Data Protection Officer

For specific privacy matters or to exercise your data protection rights, contact our dedicated Data Protection Officer at dpo@fun88india.org.

Regulatory Authority Contact

If you believe we have not adequately addressed your privacy concerns, you may escalate matters to the appropriate data protection authority in your jurisdiction.