ff99 Privacy Policy — Your Data, Handled With Care

1 Introduction

ff99 is Bangladesh's premier online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and the rest of Bangladesh. We are fully committed to protecting the privacy and personal data of every individual who interacts with the ff99 platform, whether as a registered player, a visitor browsing the site, or a person who contacts our support team.

This Privacy Policy sets out in clear, plain English how ff99 collects personal information, the purposes for which that information is used, the parties with whom it may be shared, the duration for which it is retained, and the rights available to you as a data subject. We have written this document to be as transparent and comprehensive as possible, so that you can make informed decisions about your data at every stage of your interaction with ff99.

This policy applies to all personal data processed by ff99 in connection with the ff99 website at ff99.bar, the associated mobile-optimised web application, and all communications sent to or received from ff99's customer support and marketing channels. It does not apply to third-party websites or services that may be linked from the ff99 platform — those third parties maintain their own privacy policies for which ff99 accepts no responsibility.

2 Data Controller

For the purposes of this Privacy Policy, ff99 acts as the data controller in respect of all personal data collected from players and visitors who use the ff99.bar website and associated services. As data controller, ff99 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing complies with applicable data protection principles.

All data-related enquiries, requests, and complaints should be directed to the ff99 data support team using the contact details provided in Section 15 of this policy. We aim to acknowledge all data-related correspondence within 5 working days and to provide a substantive response within 30 calendar days of receipt.

3 Data We Collect

ff99 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarises the main categories of personal data we collect and the context in which each category is typically gathered.

4 How We Collect Data

ff99 collects personal data through the following primary channels:

• Direct interactions: Information you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, subscribe to marketing communications, or participate in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the ff99 website via cookies, web server logs, pixel tags, and similar tracking technologies. See Section 10 for detailed cookie information.
• Third-party sources: Identity and age verification data from third-party KYC service providers; fraud and risk data from specialist financial crime prevention agencies; payment confirmation data from mobile money operators (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard).
• Game providers: Session and outcome data from integrated game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which feed into your account history and are used for responsible gaming monitoring.

5 How We Use Your Data

ff99 uses the personal data it collects for the following purposes, each of which is tied to a lawful basis described in Section 6:

• Account creation and management: To register your player account, verify your identity and age (21+ requirement), maintain your account settings, and administer your gaming preferences and responsible gaming tools.
• Processing transactions: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), verify payment instrument ownership, and maintain accurate financial records.
• Providing gaming and betting services: To deliver sports betting markets (including BPL, IPL, T20, and Bangladesh Tigers cricket), casino games, live dealer tables, and slots via the ff99 platform.
• Customer support: To respond to your queries, complaints, and requests through email and live chat support channels, and to maintain records of those interactions for quality and training purposes.
• Responsible gaming compliance: To monitor gaming patterns for signs of problem gambling, apply deposit limits and self-exclusion measures you have requested, and proactively reach out where our monitoring systems flag concerning behaviour.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent account activity, money laundering, match-fixing, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: To analyse usage patterns, identify technical issues, optimise page performance, and improve the overall user experience on the ff99 platform.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and event updates by email or mobile notification — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.
• Legal and regulatory obligations: To comply with applicable legal obligations, including record-keeping requirements, cooperation with law enforcement requests, and anti-money-laundering reporting duties.

6 Legal Basis for Processing

ff99 processes personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing that is necessary to perform our contract with you as a registered player — for example, processing transactions, maintaining your account, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money-laundering regulations, age verification requirements, and law enforcement cooperation duties.
• Legitimate interests: Processing carried out for ff99's legitimate business interests, where those interests are not overridden by your fundamental rights — for example, fraud detection, platform security, and service analytics.
• Consent: Processing based on your freely given, specific, and informed consent — most notably, the sending of marketing and promotional communications. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

7 Sharing Your Data

ff99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — for the purpose of processing deposits and withdrawals on your behalf.
• Identity and KYC verification providers: Third-party specialist services used to verify your identity, age, and proof of address as required during account registration and the withdrawal process.
• Fraud prevention and AML agencies: Specialist financial crime prevention organisations with which ff99 shares transactional and identity data to detect and prevent money laundering, fraud, and other prohibited financial conduct.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — who receive session-level data necessary to deliver game content and settle outcomes correctly.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on ff99's behalf under strict data processing agreements and who may not use that data for their own purposes.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, and other competent regulatory bodies where disclosure is required by applicable law, court order, or regulatory direction — with or without prior notice to you, as permitted by law.

8 Data Retention

ff99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The general retention principles applied by ff99 are as follows:

• Active player accounts: All personal, financial, and gaming data associated with your account is retained for the duration of your active membership on the ff99 platform.
• Closed accounts: Following voluntary or enforced account closure, ff99 retains account records — including identity verification documents, transaction histories, and gaming logs — for a minimum period of 5 years from the date of closure. This retention is necessary to comply with anti-money-laundering record-keeping obligations and to defend against potential legal claims.
• Marketing consent records: Records of consent to receive marketing communications are retained for the duration of active consent plus 3 years after consent is withdrawn, for compliance audit purposes.
• Support communications: Customer support correspondence is retained for 3 years from the date of the last communication in each support thread.
• Technical and usage data: Server log data, IP address records, and analytics data are retained for a maximum of 24 months from the date of collection.

When personal data is no longer required and its retention period has expired, ff99 securely deletes or anonymises that data in accordance with industry-standard data destruction procedures.

9 Data Security

ff99 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the ff99 platform, ensuring that data in transit is protected from interception.
• Encrypted storage of sensitive data fields (including passwords, which are stored as salted cryptographic hashes and never in plain text, and payment instrument identifiers, which are tokenised).
• Access controls that restrict access to personal data to only those ff99 staff and authorised third-party processors who require it to perform their specific roles.
• Regular security audits and penetration testing of the ff99 platform infrastructure, carried out by independent cybersecurity specialists.
• Intrusion detection systems and 24/7 monitoring of platform infrastructure for anomalous access patterns, potential data breaches, and unauthorised activity.
• Two-factor authentication (2FA) options available to players for additional account-level security, strongly recommended for all registered users.

While ff99 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You also play a role in keeping your account secure — please ensure your password is strong and unique, and never share your login credentials with any third party.

10 Cookies & Tracking Technologies

ff99 uses cookies and similar tracking technologies to improve platform functionality, measure site performance, and — where you have given consent — to deliver relevant promotional content. A cookie is a small text file placed on your device by a website server; it allows the website to recognise your device on subsequent visits and to remember your preferences and session state.

10.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the ff99 platform to function. These cookies enable core features such as session management, account authentication, and security token validation. They cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences (such as language and display settings) to provide a more personalised experience across sessions. These are enabled by default but can be disabled without materially impairing core functionality.
• Analytics cookies: Allow ff99 to measure how visitors interact with the platform — which pages are visited most, how long sessions last, where users drop off. This data is used in aggregated, anonymised form to guide platform improvements. Analytics cookies require your consent.
• Marketing cookies: Used to track your browsing activity for the purpose of delivering targeted promotional content relevant to your interests. These cookies require your explicit consent and will only be set if you opt in.

10.2 Managing Your Cookie Preferences

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies already stored on your device. Please note that disabling strictly necessary cookies will impair your ability to use the ff99 platform. For detailed guidance on managing cookies in your specific browser, refer to the browser manufacturer's help documentation.

11 Your Rights

As a data subject, you hold a set of rights in relation to the personal data that ff99 holds about you. These rights are outlined below. To exercise any of these rights, please contact ff99 at [email protected]. We will verify your identity before processing any data rights request and will respond within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data ff99 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. Where the data is held within your account profile, you may also update certain fields directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations that may require ff99 to retain certain records for a minimum period.
• Right to restrict processing: You may request that ff99 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to ff99, for transfer to another service provider.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interests, subject to ff99 demonstrating compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

12 Minors

The ff99 platform is strictly for individuals aged 21 years and above. ff99 does not knowingly collect personal data from any person under the age of 21. Age verification checks are applied during the registration process and at the point of first withdrawal to identify and prevent underage access.

If ff99 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration at registration or any other means — the associated account will be immediately closed, all personal data collected in relation to that account will be deleted (subject to any legal obligations to retain records of underage access attempts), and any balance held in that account will be forfeited.

13 Third-Party Links

The ff99 platform may contain references to third-party game providers, payment operators, or sports data services whose own websites or privacy practices are independent of ff99. This Privacy Policy applies solely to personal data processed by ff99 in connection with the ff99.bar platform. When you interact directly with a third-party service — for example, by initiating a bKash transaction through the bKash application — the data practices of that third party are governed by their own privacy policy, for which ff99 accepts no responsibility.

ff99 recommends that you review the privacy policies of any third-party services you use in connection with your ff99 account, particularly your mobile money operator and card issuer.

14 Policy Changes

ff99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, data processing practices, or platform functionality. The most current version of this Privacy Policy will always be published on this page at ff99.bar/privacy-policy, with the effective date clearly stated at the top of the document.

Where changes are material — meaning they substantially affect your rights or the ways in which your personal data is processed — ff99 will notify registered players by email to the address held on their account at least 7 days before the new policy takes effect, where practicable. Your continued use of the ff99 platform after the updated policy takes effect constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this page periodically to stay informed of how ff99 is protecting and using your personal data. If you have any concerns about a change to this policy, please contact us at the details provided in Section 15 before the change takes effect.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ff99 holds about you, please contact our data support team using the details below. All correspondence must be submitted in English.

Email: [email protected]

Support Hours: Available 24 hours a day, 7 days a week. Response target: within 2 hours for urgent data concerns during Bangladesh Standard Time (BST, UTC+6) business hours; within 30 calendar days for formal data rights requests.