ffbd Privacy Policy

1Introduction

This Privacy Policy ("Policy") sets out the basis on which ffbd ("we", "us", "our", "the Platform") collects, uses, stores, and discloses personal data about players and visitors ("you", "your") who access or use the ffbd website at ffbd.bio. We are committed to ensuring that your personal information is handled responsibly, securely, and in accordance with all applicable data protection standards. Please read this Policy carefully before using the Platform. By accessing or registering on ffbd, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and ffbd. If you do not agree with any part of this Policy, you must not use the Platform. We encourage you to check this page periodically as we may update it from time to time to reflect changes in our practices or applicable law.

2Information We Collect

We collect personal data that you provide directly to us, data generated automatically through your use of the Platform, and in some cases data received from third parties for identity verification and fraud prevention purposes. The categories of personal data we collect include:

• Registration data: your full name, date of birth, gender, and the mobile phone number used to create your account. This information is mandatory to establish a verified player account on ffbd.
• Identity verification documents: national identity card (NID), passport, or other government-issued identification submitted during KYC verification. These documents are stored securely and accessed only by authorised compliance personnel.
• Financial data: your mobile financial service account identifiers (bKash, Nagad, Rocket, or Upay mobile numbers), transaction amounts, transaction timestamps, and deposit and withdrawal history. We do not store full payment credentials or PINs.
• Technical and device data: IP address, device type, operating system, browser type and version, screen resolution, device language settings, and session duration. This data is collected automatically via server logs and browser storage when you visit the Platform.
• Behavioural and gaming data: game session records, bet amounts, win/loss history, game types played, time spent per session, and responsible gaming tool usage (deposit limits, self-exclusion requests, session time limits). This data is used to personalise your experience and to monitor for problem gambling indicators.
• Communications data: records of any messages, emails, live chat transcripts, or support tickets exchanged between you and the ffbd customer support team. This data is retained to ensure service quality and to resolve future disputes or queries efficiently.

We collect only the minimum amount of personal data reasonably necessary to deliver the services you have requested and to fulfil our legal obligations. We do not collect sensitive personal data such as racial origin, religious beliefs, or health records unless required by law or explicitly volunteered by you in the context of a responsible gaming self-assessment.

3How We Use Your Information

The personal data we collect from you is used for the following specific purposes. We will not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your explicit consent:

• Account management: to create, verify, maintain, and close your player account; to authenticate your identity on each login; and to communicate essential account-related notifications to your registered mobile number.
• Transaction processing: to process your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, or other approved payment channels; to verify that payment accounts are registered in your name; and to maintain accurate financial records as required by law.
• Legal and regulatory compliance: to verify your age and identity as required under applicable rules; to conduct AML (anti-money laundering) and fraud screening on account activity; to respond to lawful requests from law enforcement or regulatory authorities; and to retain records as mandated by applicable law.
• Service improvement and personalisation: to analyse aggregate gameplay patterns in order to improve game selection, platform performance, and user experience; to personalise promotional offers to your demonstrated preferences; and to conduct internal research and analytics.
• Responsible gaming monitoring: to review your gaming behaviour against recognised problem gambling indicators; to administer deposit limits, loss limits, session reminders, and self-exclusion arrangements; and to contact you proactively if our systems detect patterns consistent with harmful gambling behaviour.
• Customer support: to respond to your support enquiries, complaints, and dispute submissions; to maintain records of interactions for quality assurance and staff training purposes; and to proactively notify you of service changes or technical issues affecting your account.

4Legal Basis for Processing

Where data protection law requires us to identify a lawful basis for processing your personal data, we rely on the following legal grounds depending on the nature of the processing activity:

• Contractual necessity: processing your registration data, financial transaction data, and account management data is necessary to perform the contract between you and ffbd — that is, to provide the gaming and betting services you have agreed to receive.
• Legal obligation: processing your identity verification data, AML screening data, and financial records is required to comply with our obligations under applicable law, including obligations in relation to fraud prevention and financial crime.
• Legitimate interests: processing your technical data, behavioural data, and communications data for platform security, fraud prevention, service improvement, and responsible gaming monitoring reflects our legitimate interest in operating a safe and reliable gaming platform.
• Consent: where we send you optional promotional communications or use non-essential cookies, we rely on your consent. You may withdraw consent at any time by contacting our support team or adjusting your cookie preferences in your browser settings. Withdrawal of consent does not affect any processing that took place before withdrawal.

5Sharing Your Information

ffbd does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. We may share your personal data with third parties only in the limited circumstances described below:

• Payment processors and mobile financial service providers: we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, and any other approved payment partner solely to facilitate the processing of your deposits and withdrawals. These providers are subject to their own privacy policies and regulatory obligations.
• Identity verification and KYC service providers: we may share your identity documents and registration details with trusted third-party KYC verification providers solely for the purpose of confirming your identity and age. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Law enforcement and regulatory authorities: we may disclose your personal data to the police, anti-money laundering authorities, or other law enforcement agencies in Bangladesh where we are required or permitted to do so by law, including in response to a court order, search warrant, or lawful investigative demand.
• Business successors: in the event of a merger, acquisition, restructuring, or sale of all or part of ffbd's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer via your registered mobile number before it takes effect, to the extent practicable.

All third parties with whom we share personal data are required, by contract, to process that data only for the purposes for which it was shared, to implement appropriate technical and organisational security measures, and to delete or return the data once their services are no longer required. We do not permit third parties to use your personal data for their own marketing or commercial purposes.

6Payment Data and Mobile Financial Services

All financial transactions on ffbd are conducted exclusively through licensed mobile financial service providers and approved banking channels operating in Bangladesh. When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the transaction is processed directly through that provider's own secure infrastructure. ffbd receives only a transaction confirmation reference, the associated mobile number, and the transaction amount — we do not receive, store, or have any access to your mobile banking PIN, bKash/Nagad/Rocket/Upay account password, or any other authentication credential.

We implement dedicated transaction monitoring to detect anomalous payment patterns that may indicate fraud, money laundering, or unauthorised account access. Any transaction flagged by our monitoring systems will be reviewed by our compliance team before being processed or released. Players who believe a transaction has been incorrectly flagged should contact our support team immediately via live chat or email.

7Cookies and Tracking Technologies

ffbd uses cookies and similar browser storage technologies to ensure the Platform functions correctly and to improve your experience. We use two categories of cookies only — we do not place advertising-network cookies or sell cookie data to third parties:

• Essential cookies: these are strictly necessary for the Platform to function. They maintain your login session, remember your language preference, store your responsible gaming settings, and enable secure payment flow navigation. Without these cookies, the Platform cannot operate correctly. These cookies cannot be disabled without breaking core functionality.
• Analytics cookies: these help us understand how players navigate the Platform in aggregate — for example, which pages are visited most frequently, which games load slowest, and where players typically exit the site. We use this data only to improve the Platform's performance and layout. Analytics data is aggregated and does not identify you individually.
• Session storage: in addition to cookies, we use browser session storage to temporarily hold game state data during an active session. This data is automatically cleared when you close your browser tab and is never transmitted to our servers or retained beyond the active session.

You can control cookie settings through your browser preferences. Please note that disabling essential cookies will impair or prevent your ability to use the Platform. Disabling analytics cookies will not affect Platform functionality. For detailed guidance on managing cookies in popular mobile browsers used in Bangladesh (Chrome for Android, Samsung Internet, Opera Mini), please consult your browser's help documentation.

8Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The retention periods we apply to different categories of personal data are as follows: account and identity data is retained for the duration of your active account plus a minimum of five years after account closure to satisfy financial record-keeping requirements; transaction and financial data is retained for a minimum of five years from the date of the transaction; responsible gaming data, including self-exclusion records, is retained for a minimum of five years to prevent circumvention; and communications data is retained for two years from the date of the last interaction.

When personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, we securely delete or anonymise it. Anonymised data — where all identifying fields have been irreversibly removed — may be retained indefinitely for statistical and research purposes, as it no longer constitutes personal data under applicable law.

9Data Security

ffbd implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes 256-bit SSL/TLS encryption for all data transmitted between your device and our servers; encrypted storage of sensitive data at rest using AES-256 encryption; strict role-based access controls that limit data access to authorised personnel with a documented need; regular independent security audits and vulnerability assessments of our Platform infrastructure; and multi-factor authentication requirements for all administrative access to player data systems.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event that a security incident occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay via your registered mobile number and will take all reasonably practicable steps to contain, investigate, and remediate the incident. We strongly encourage you to use a strong, unique password for your ffbd account and to contact support immediately if you suspect unauthorised access.

10Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by ffbd. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 days. We may ask you to verify your identity before processing your request to prevent unauthorised access to another person's data:

• Right of access: you may request a copy of the personal data we hold about you. We will provide this in a commonly used electronic format within 30 days of receiving a verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Where we are unable to correct data due to legal or compliance constraints, we will explain the reason.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, we cannot delete financial records we are required by law to retain.
• Right to restriction: you may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to object: where we process your personal data on the basis of legitimate interests, you may object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

We aim to respond to all data rights requests within 30 days of receiving a verified request. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason within the initial 30-day period. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable fee or to refuse the request.

11Children's Privacy

The ffbd platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately delete that data and close the associated account. Parents and guardians who believe that a minor may have accessed or registered on the ffbd platform are strongly encouraged to contact our support team at [email protected] immediately so that we can investigate and take appropriate remedial action without delay. We take the protection of minors extremely seriously and cooperate fully with any lawful parental or guardian enquiry concerning underage access.

12Changes to This Policy

ffbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the Last Updated date displayed at the top of this page and, where practicable, notify registered players via SMS to their registered mobile number. We encourage you to review this Policy periodically to stay informed of how we protect your data. Your continued use of the Platform following the posting of an updated Policy constitutes acceptance of the changes. If you have concerns about any changes to this Policy, please contact our support team before continuing to use the Platform.

13Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights, please contact the ffbd data protection team. We are available 24 hours a day, 7 days a week via live chat on the ffbd website. Our team is committed to responding to all privacy-related enquiries promptly and in a manner that fully respects your rights under applicable data protection law.

Email: [email protected]