ff999 Privacy Policy

Who We Are

ff999 operates the online casino and sports betting platform accessible at ff999.ws (the "Platform"). In the context of this Privacy Policy, "ff999", "we", "us", and "our" refer to the operators responsible for the collection and processing of personal data submitted through or in connection with use of the Platform.

ff999 is the data controller in respect of all personal data collected directly from players and visitors to ff999.ws. For any questions, concerns, or rights requests related to the handling of your personal data, you may contact us at any time using the details provided in Section 14 of this policy.

ff999 operates primarily for the Bangladeshi market, offering services denominated in Bangladeshi Taka (BDT) and accessible across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

Data We Collect

ff999 collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically when you browse or use the Platform; and from third parties such as payment processors and identity verification services. The categories of data we collect are set out below.

2.1 Registration and Account Data

When you create an ff999 account, we collect:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address, including city and postal code
• Email address
• Mobile phone number
• Username and encrypted password
• Account currency preference (BDT)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawals, we may collect:

• Government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Selfie or live facial image for document matching purposes
• Source of funds documentation where required by our compliance team

2.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect:

• Payment method details (bKash account number, Nagad number, Rocket number, Upay number, Visa/Mastercard last four digits, or bank account reference)
• Transaction amount, date, time, and reference number
• Transaction status and any processing error codes

Full payment credentials (e.g., complete card numbers or mobile banking PINs) are never stored by ff999. Payment data is processed directly by our certified payment service providers.

2.4 Usage and Technical Data

When you visit or use the Platform, our servers and analytics tools automatically record:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent, and navigation path within the Platform
• Game sessions played, including game type, duration, stakes, and outcomes
• Login timestamps and session durations
• Referral source (how you arrived at ff999.ws)

2.5 Communications Data

If you contact our support team or respond to our communications, we retain:

• The content of emails, live chat transcripts, and support tickets
• The date, time, and channel of each communication
• Records of any complaints, disputes, or escalations

How We Use Your Data

ff999 uses the personal data collected for the following purposes:

Purpose	Data Used
Creating and managing your player account	Registration data, username, password
Verifying your identity and age (KYC)	KYC documents, date of birth, facial image
Processing deposits and withdrawals	Financial transaction data, payment method details
Detecting and preventing fraud, money laundering, and abuse	Transaction data, usage data, IP address, device fingerprint
Providing customer support and resolving disputes	Communications data, account data, transaction history
Personalising your experience and game recommendations	Usage data, game session data, preferences
Sending service notifications (e.g., deposit confirmations, security alerts)	Email address, mobile number
Sending promotional communications (where consent is given)	Email address, mobile number, betting preferences
Monitoring responsible gaming indicators	Usage data, game session data, deposit/loss patterns
Complying with legal and regulatory obligations	All categories as required by applicable law

ff999 will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or where permitted by applicable law.

Legal Basis for Processing

ff999 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform our contract with you — specifically, to operate your account, process payments, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and fraud prevention obligations.
• Legitimate Interests: Processing that serves ff999's legitimate business interests — such as fraud detection, platform security, responsible gaming monitoring, and improving the quality of our services — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given and explicit consent, such as receiving promotional emails or SMS notifications about offers and bonuses. You may withdraw consent at any time by contacting [email protected] or updating your account notification preferences.

Sharing Your Data

ff999 does not sell, rent, or commercially exploit your personal data. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary:

5.1 Payment Service Providers

To process deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These providers process your payment data under their own privacy policies and are independently responsible for compliance with applicable financial data protection standards.

5.2 Identity Verification Partners

To fulfil our KYC obligations, we share identity document images and personal details with certified third-party identity verification services. These partners are contractually bound to process your data solely for the purpose of document authentication and are prohibited from using it for any other purpose.

5.3 Game Content Providers

Certain game session data (such as player ID, bet amounts, and game outcomes) is shared with our licensed game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of game delivery, result verification, and dispute resolution. These providers do not receive your name, contact details, or financial information.

5.4 Fraud Prevention and Security Services

We share IP addresses, device fingerprints, and behavioural data with anti-fraud and cybersecurity partners to detect and prevent fraudulent activity, unauthorised account access, and other security threats.

5.5 Legal and Regulatory Authorities

ff999 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious illegal activity.

Cookies & Tracking Technologies

ff999 uses cookies and similar tracking technologies on the Platform to ensure functionality, improve performance, and understand how players interact with our services. A cookie is a small text file placed on your device when you visit a website.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve the user experience.
• Functional Cookies: Allow the Platform to remember your preferences, such as your language setting, preferred game category, and display options, so you do not have to re-configure them on each visit.
• Marketing and Retargeting Cookies: Used only with your consent to deliver relevant promotional content based on your activity on the Platform. You may opt out of these cookies at any time via your browser settings.

6.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only certain types, or delete cookies after each session. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Instructions for managing cookies are available in the help documentation of your browser.

Data Security

ff999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for sensitive personal data, KYC documents, and financial records at rest.
• Access controls that restrict staff access to personal data on a strict need-to-know basis, enforced through role-based permissions and multi-factor authentication for internal systems.
• Regular security audits and penetration testing conducted by independent security professionals.
• Intrusion detection systems that monitor for suspicious activity and automatically alert our security team.
• Data minimisation practices that ensure personal data is not held in systems beyond its intended operational scope.

While ff999 takes all reasonable precautions to safeguard your data, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable notification obligations.

Data Retention

ff999 retains personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

• Active account data (registration details, preferences, game history): Retained for the duration of your account and for five (5) years following account closure.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years following the transaction date.
• Customer support communications: Retained for three (3) years following the resolution of the relevant enquiry or dispute.
• Usage and technical data (logs): Retained for twelve (12) months from the date of collection, unless longer retention is required for security investigations.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for audit purposes.

When personal data reaches the end of its retention period, it is securely deleted or permanently anonymised. You may request early deletion of certain categories of data subject to the conditions described in Section 9.

Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that ff999 holds about you. To exercise any of these rights, please submit a written request to [email protected]. We will respond within thirty (30) days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data ff999 holds about you, together with information about how it is used and shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you have the right to request that your personal data be deleted. This right does not apply where we are required to retain data by law (e.g., for AML record-keeping) or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: Where processing is based on legitimate interests, you have the right to object. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children & Minors

The ff999 Platform is strictly for adults aged 21 and above. ff999 does not knowingly collect, process, or store personal data from any person under the age of 21. If we discover that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor under your care has created an account on ff999, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Third-Party Links

The ff999 Platform may contain references to or integrations with third-party services, including payment gateways and game providers. When you interact with a third-party service — for example, by initiating a bKash or Nagad transaction — you will be subject to that third party's own privacy policy and data practices.

ff999 is not responsible for the privacy practices, data security measures, or content of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with the Platform before submitting personal data to them.

International Data Transfers

In order to operate the Platform and deliver our services, some personal data may be processed by or transferred to service providers located outside Bangladesh. Such transfers may occur when we use internationally hosted infrastructure, cloud storage services, or global identity verification providers.

Where personal data is transferred internationally, ff999 takes appropriate steps to ensure that an adequate level of protection is maintained. These steps may include relying on contractual data processing agreements that impose equivalent data protection obligations on the recipient, or ensuring that the recipient is located in a jurisdiction that provides an adequate standard of data protection.

For further information about the safeguards applied to international transfers of your data, please contact us at [email protected].

Policy Updates

ff999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via email to the address on file and will update the effective date displayed at the top of this page.

We encourage you to review this Privacy Policy periodically. The most current version will always be available at ff999.ws/privacy-policy. Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acknowledgement of the changes.

If you object to any changes to this Privacy Policy, you should cease using the Platform and may request account closure by contacting [email protected]. We will process your request in accordance with our account closure procedures and the applicable data retention obligations described in Section 8.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ff999 handles your personal data, please reach out to our dedicated privacy support team using the following details:

• Email: [email protected]
• Subject Line for Privacy Requests: Privacy Request – [Your Username]
• Live Chat: Available 24/7 on the ff999 Platform
• Response Time: We aim to acknowledge all privacy requests within 48 hours and provide a full response within 30 days (Bangladesh Standard Time, UTC+6)

When submitting a rights request by email, please include your registered username, the email address associated with your account, and a clear description of your request. We may ask you to provide identity verification before processing your request.