ff77 Privacy Policy — Your Data, Handled with Care

Who We Are

ff77 is an online casino and sports betting platform operating at ff77.io, serving players across Bangladesh. References in this Privacy Policy to "ff77", "we", "us", or "our" refer to the operator of the ff77 platform. References to "you", "your", or "the player" refer to any individual who accesses, registers on, or otherwise interacts with the ff77 platform.

This Privacy Policy applies to all personal data collected through the ff77 website, mobile-optimised site, any associated applications, and all communications between you and ff77 support staff. It should be read in conjunction with our Terms & Conditions, which govern your use of the platform more broadly.

Data We Collect

ff77 collects the following categories of personal data from players and site visitors. In each case, collection is limited to what is necessary for the stated purpose.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (except where voluntarily disclosed in the context of a self-exclusion or responsible gaming request), or biometric data.

How We Collect Your Data

ff77 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting support, or participating in any promotional activity.
• Automated technical collection: Data collected automatically when you visit the ff77 website, including IP address, browser fingerprint, device identifiers, and session activity logs. This is collected via server logs, cookies, and similar tracking technologies.
• Payment processors: Transaction confirmation data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) when you initiate a deposit or withdrawal.
• Identity verification providers: Results and confidence scores from third-party KYC verification services used to confirm the authenticity of documents submitted during account verification.
• Responsible gaming tools: Information you voluntarily provide when setting deposit limits, loss limits, session reminders, cool-off periods, or when requesting self-exclusion.

How We Use Your Data

ff77 uses collected personal data for the following clearly defined purposes:

• Account management: Creating, maintaining, and securing your ff77 player account, including processing password resets and managing account preferences.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that your identity matches the details provided during registration, in compliance with our KYC obligations.
• Transaction processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Verifying that payment methods belong to the registered account holder.
• Fraud prevention and platform security: Detecting and preventing fraudulent activity, multi-accounting, money laundering, bonus abuse, and unauthorised access to player accounts.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Responsible gaming: Monitoring usage patterns to identify signs of problem gambling and proactively offering responsible gaming tools where appropriate. Administering self-exclusion requests and limit settings.
• Legal and regulatory compliance: Fulfilling obligations under applicable anti-money laundering (AML) regulations, data protection law, and any lawful requests from competent authorities.
• Platform improvement: Analysing aggregated usage data to improve game offerings, page performance, payment flows, and user experience — always using anonymised or pseudonymised data where possible.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about bonuses and offers relevant to your activity on ff77.

ff77 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review stage. Responsible gaming alerts and fraud risk flags are always reviewed by a member of our team before action is taken on an account.

Legal Basis for Processing

ff77 processes personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the player agreement — including account creation, payment processing, and support delivery — is carried out on the basis that it is necessary to perform the contract between you and ff77.
• Legal obligation: Processing carried out to comply with applicable law — such as identity verification, age checks, anti-money laundering reporting, and data retention requirements — is performed on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics is conducted on the basis of ff77's legitimate interest in maintaining a secure, fair, and operationally sound platform. Such processing is balanced against your privacy interests and does not override your fundamental rights.
• Consent: Where ff77 sends you optional promotional communications (e.g., bonus offer emails), this processing is based on your explicit consent. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe option in any marketing email you receive.

Data Sharing & Disclosure

ff77 does not sell or commercially transfer your personal data to third parties. Your data is shared only in the following limited and controlled circumstances:

• Payment processors: Your financial transaction data is shared with the relevant payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to facilitate your deposit or withdrawal. Each provider is bound by their own data protection obligations and industry security standards.
• Identity verification services: Document data submitted for KYC purposes is shared with our third-party identity verification partner to confirm authenticity. This provider operates under strict confidentiality obligations and does not retain your documents beyond the verification period.
• Game providers: When you access a game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a session token and your account identifier are shared with that provider to launch and log the game session. No broader personal data is transmitted to game studios.
• Legal and regulatory authorities: ff77 will disclose personal data to competent legal authorities — including law enforcement agencies and financial intelligence units — where required to do so by applicable law, court order, or in connection with the investigation of suspected financial crime.
• Professional advisers: Legal counsel, auditors, and financial advisers engaged by ff77 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

Cookies & Tracking Technologies

ff77 uses cookies and similar tracking technologies to ensure the platform functions correctly, maintain session security, and improve the overall user experience. The following types of cookies are used:

• Essential cookies: Required for the platform to operate. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing core functionality such as login and game access.
• Functional cookies: Store your preferences such as language settings and display options to provide a consistent experience across sessions.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the platform — including which pages are visited most frequently and which game categories attract the most engagement. This data is used internally to improve platform design and content.
• Security cookies: Used to detect and prevent fraudulent or suspicious activity, including bot detection and IP-based rate limiting.

ff77 does not use third-party advertising cookies or behavioural tracking cookies that profile your activity across other websites for advertising purposes.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impact your ability to use the ff77 platform. Disabling analytics or functional cookies will not affect access to core features.

Data Retention

ff77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the full duration of your registered account plus a minimum of five (5) years following permanent account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Full financial transaction logs are retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, unless the matter is subject to ongoing dispute resolution.
• Technical and usage logs: Server logs and session data are retained for up to twelve (12) months for security and performance purposes, then deleted or anonymised.
• Marketing consent records: Records of consent to receive promotional communications are retained for the duration of active consent plus one (1) year following withdrawal of consent.

Upon the expiry of applicable retention periods, data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

Your Rights Over Your Data

As a registered player on ff77, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered account email address and a description of your request:

• Right of access: You may request a copy of all personal data ff77 holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data held by ff77 is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected — you may request the deletion of your personal data. This right is subject to overriding legal obligations such as the AML record-keeping requirements described in Section 8.
• Right to restrict processing: You may request that ff77 temporarily restrict the processing of your personal data while a correction or objection is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to the processing of your data on the basis of legitimate interests. ff77 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Children & Minors

ff77 is strictly an adult platform. Access to and use of ff77 is prohibited for any individual under the age of 21. ff77 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 — whether through a registration, a support interaction, or any other means — we will take immediate steps to close the associated account, void any transactions, and securely delete all data associated with that individual.

If you have reason to believe that a minor has registered an account on ff77, please contact our support team immediately at [email protected] so that we can investigate and act promptly.

Third-Party Links

The ff77 platform may contain references to or integrations with third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). While ff77 takes reasonable steps to work only with reputable providers, this Privacy Policy does not extend to any third-party services, websites, or platforms that may be accessible in connection with your use of ff77.

ff77 accepts no responsibility for the privacy practices of any third-party operator, game studio, or payment provider. We encourage you to review the privacy policies of any third-party services you interact with independently of the ff77 platform.

International Data Transfers

ff77 primarily serves players based in Bangladesh. In the course of providing our services, certain personal data may be processed by third-party service providers — such as our KYC verification partner or game data infrastructure — whose systems may be located outside Bangladesh.

Where such transfers occur, ff77 takes reasonable contractual and technical measures to ensure that the recipient handles your personal data with a standard of protection equivalent to that described in this Privacy Policy. This may include entering into data processing agreements with contractual clauses that require recipients to protect your data appropriately.

ff77 does not transfer personal data to jurisdictions known to provide inadequate data protection without applying appropriate safeguards.

Security Measures

ff77 employs a multi-layered technical and organisational approach to data security, which includes the following measures:

• SSL/TLS encryption: All data in transit between your browser and the ff77 platform is encrypted using SSL/TLS protocols, preventing interception by third parties.
• Access controls: Access to personal data systems is restricted to authorised personnel only, enforced through role-based access control and multi-factor authentication for internal systems.
• Data pseudonymisation: Where possible, personal data used for analytics and performance monitoring is pseudonymised or anonymised to reduce exposure in the event of unauthorised access.
• Regular security reviews: ff77 conducts periodic internal reviews of data storage, access logs, and security configurations to identify and address potential vulnerabilities.
• Incident response plan: A documented data breach response process is in place to ensure that any confirmed or suspected breach is contained quickly, assessed thoroughly, and communicated to affected players without undue delay.

While ff77 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their ff77 account and to report any suspicious account activity to our support team immediately.

Updates to This Privacy Policy

ff77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, we will notify registered players via their registered email address and will post the updated policy on this page with a revised effective date.

Your continued use of the ff77 platform following the publication of any amendment to this Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any change, you should cease using the platform and contact our support team to request account closure.

We recommend reviewing this page periodically — particularly if you have not visited for some time — to ensure you remain informed about how ff77 handles your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ff77, please reach out to our support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, in English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

ff77 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days of receipt. For urgent matters — such as suspected unauthorised access to your account or a request for immediate self-exclusion — please mark your message as urgent and our team will prioritise it accordingly.