Fb88 Privacy Policy: How Data Is Collected, Stored, and Protected
Fb88's privacy policy clearly defines what data is collected, its purposes, and protection mechanisms. From 128-bit TLS/SSL encryption and multi-layer firewalls to two-factor authentication on unfamiliar devices โ each protection layer addresses specific user scenarios. This guide also clarifies data retention periods, deletion conditions, and player rights.
When filling out a registration form, many users don't know where their data goes, what it's used for, or how long it's kept. Fb88 publishes its privacy policy to answer these three questions directly โ no fluff, no runaround.

What Data Is Collected and What It's Used For
Three main data categories and their specific roles
Fb88 collects data in three clear groups, each tied to a specific operational purpose:
- Registration information โ full name, phone number, email. This group is used to verify identity when players request withdrawals or when disputes require account ownership confirmation. If declared information is inaccurate, the account may be locked and funds held until verification is complete.
- Transaction data โ deposit history, withdrawal records, account reconciliation. This is the basis for resolving complaints when a transfer is questioned or balance doesn't match. This data also helps detect fraud early before it affects other users.
- Cookie and device data โ username, IP address, device type. This group powers device recognition, the foundation for two-factor authentication to work correctly (explained in detail below).
Communications via phone, email, or chat with support are also logged. The purpose is to ensure service quality and provide grounds for handling if users report receiving incorrect advice.

How Technical Protection Mechanisms Work
From encryption to internal access controls
Fb88 deploys 128-bit TLS/SSL encryption across all data flows between user devices and the system. Combined with multi-layer Firewall protection capable of DDoS prevention, this is the outermost defense layer blocking unauthorized external access.
Inside the system, not all staff can read user data. Only authorized personnel can access it, and every action is logged โ meaning there's always an audit trail if something goes wrong.
Two common scenarios relate to this technical protection layer:
| Scenario | Mechanism Triggered | Actual Result |
|---|---|---|
| Login from trusted device (used before) | System recognizes familiar cookie/IP | Normal access, no additional steps needed |
| Login from unfamiliar device or new IP | Two-factor authentication automatically activates | Must enter verification code sent to registered phone/email |
Beyond these two scenarios, the system continuously monitors login behavior and alerts when anomalies are detected โ for example, account login from two different geographic regions in a short timeframe.
Data Retention Period and Deletion Conditions
How long data is kept after account closure
After an account is officially closed, Fb88 retains data for a maximum of 6 years. This timeframe isn't arbitrary โ data during this period is the basis for resolving late-emerging complaints, such as when a player discovers transaction irregularities months after stopping use.
After the 6-year period expires, data is either permanently deleted or anonymized โ meaning there's no way to link that data to a specific individual. This is how the brand handles the final stage of data lifecycle according to storage minimization principles.
One important point: data is not shared with third parties without user consent. This applies throughout the account's active period and during the retention window after closure.

Player Rights Over Personal Data
Available rights and how to exercise them
Players have specific rights over data that Fb88 holds:
- Access: Request to view stored personal data, including login history and transaction records.
- Correction: Update incorrect or outdated information (phone number, email, name). Inaccurate information can affect identity verification during withdrawal โ better to correct early than wait until needed.
- Deletion: Request data deletion within permitted scope. Note: some transaction data may need to be retained per operational and legal requirements.
- Object to processing: Players can object to data being used for a specific purpose not previously agreed to.
- Request unusual transaction review: If you discover transactions you didn't make, you can submit a review request based on stored log data.
Data and transaction complaints are resolved based on existing stored records. If data is inaccurate on the user's side โ for example, declared email differs from actual email โ verification will take longer.
Scope of Application and User Responsibilities
Who is bound and by what
This policy applies to all users registering an account on the platform, whether accessing via web or app. Users under 18 are not permitted to register โ this is a hard rule with no exceptions.
On the user's side, the policy clearly outlines two main responsibilities:
- Keep passwords secure and never share login information with anyone, including family. If an account is accessed without authorization because the user disclosed information, the brand bears no responsibility for that loss.
- Declare accurate information from the start. Inaccurate information can lead to account lockdown and fund suspension until verification is complete.
Fb88 operates under a license issued by Pagcor (philippines) and Isle of Man regulatory authority โ these two legal jurisdictions set data storage and processing requirements that the privacy policy must follow. The brand has been operating since 2016, long enough to build an operational system refined through real-world adjustments.
Users who prefer smooth app or web experience often overlook the policy until their first withdrawal or login alert. Reading the player rights and retention period sections beforehand will help you handle both scenarios much faster than searching from scratch when the situation arises.