ffb7 Privacy Policy

ffb7 ("we", "us", "our") operates an online sports betting and gaming platform accessible at https://ffb7.io (the "Platform"). We are committed to protecting the personal data of all individuals who interact with the Platform, including registered players, visitors, and prospective users based in Bangladesh and elsewhere.

This Privacy Policy ("Policy") sets out in clear and accessible terms: the categories of personal data we collect; the purposes for which we process that data; the legal bases on which we rely to do so; the circumstances in which we share data with third parties; how long we retain data; and the rights that individuals hold in respect of their personal data.

This Policy applies to all personal data collected through the Platform, including data submitted during registration, data generated by your use of our sports betting and casino products, data collected automatically through cookies and similar tracking technologies, and data you provide when contacting our customer support team.

This Policy should be read alongside ffb7's Terms & Conditions and Responsible Gaming policy. Together, these documents constitute the full framework governing your relationship with ffb7.

ffb7 collects personal data in the following categories. We only collect data that is necessary for the specific purpose for which it is gathered, consistent with the principle of data minimisation.

2.1 Identity Data. This includes your full legal name, date of birth, gender, and national identification number (NID) or passport number. Identity data is collected at registration and during Know Your Customer (KYC) verification processes.

2.2 Contact Data. This includes your email address, mobile phone number, and residential address (including city, district, and postcode). Contact data is used to communicate with you about your account, verify your identity, and send transactional notifications.

2.3 Financial Data. This includes details of payment methods registered to your account, such as bKash wallet numbers, Nagad account identifiers, Rocket or Upay references, bank account details (for Dutch-Bangla Bank, BRAC Bank, or other supported institutions), and Visa or Mastercard card numbers (partial — we do not store full card numbers). Transaction records including deposit amounts, withdrawal requests, and transaction timestamps are also retained.

2.4 Account and Gaming Data. This includes your username, account balance, betting history (sports markets wagered on, stake amounts, settlement outcomes), casino game session history (games played, session duration, wager amounts, wins and losses), bonus and promotion usage records, and responsible gaming tool settings such as deposit limits and self-exclusion status.

2.5 Technical Data. This includes your IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, time zone, and device identifiers. Technical data is collected automatically when you access the Platform.

2.6 Usage Data. This includes information about how you navigate and interact with the Platform — pages visited, features used, links clicked, time spent on each section, and session timestamps in Bangladesh Standard Time (BST, UTC+6).

2.7 Communications Data. This includes the content of any messages you send to our customer support team via email, live chat, or any other channel, together with any attachments you provide (such as identity documents submitted for KYC).

2.8 Verification Documents. This includes scanned or photographed copies of government-issued identity documents (NID, passport, driving licence) and proof-of-address documents (utility bills, bank statements) submitted as part of the KYC or AML verification process.

ffb7 collects personal data through the following channels and mechanisms:

• Direct submission: Data you actively provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically by our platform systems when you access or use the Platform, including through cookies and similar tracking technologies (see Section 7).
• Third-party payment providers: Confirmation data received from payment processors (bKash, Nagad, Rocket, Upay, and banking partners) when you initiate a transaction, including transaction identifiers, amounts, and timestamps.
• Third-party identity verification services: Where ffb7 uses an automated KYC or document verification partner to validate identity documents, that partner may return data regarding the authenticity and validity of submitted documents.
• Analytics and fraud prevention tools: Aggregated and anonymised behavioural data collected through analytics tools to help us understand platform usage patterns and identify potentially fraudulent or abusive account activity.

ffb7 does not purchase personal data lists from third-party data brokers or marketing aggregators.

ffb7 processes your personal data for the following specific purposes:

ffb7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by law, obtaining your consent.

ffb7 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to perform the contract between you and ffb7 — for example, processing your account registration, verifying your identity, and executing payment transactions.
• Legal obligation: Processing required to comply with applicable legal or regulatory requirements — for example, anti-money-laundering (AML) checks, age verification, and the retention of financial records for the legally mandated period.
• Legitimate interests: Processing carried out in pursuit of ffb7's legitimate business interests, where those interests are not overridden by your rights and freedoms — for example, fraud detection, platform security, responsible gaming monitoring, and analytics used to improve the platform experience.
• Consent: Processing based on your freely given, specific, and informed consent — specifically, the sending of marketing and promotional communications. You may withdraw consent at any time by contacting [email protected].

ffb7 does not sell your personal data to any third party. We may share your data with the following categories of recipients only where necessary and under appropriate data protection arrangements:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment partners receive the minimum data required to process your deposit or withdrawal transactions.
• Identity verification providers: Third-party KYC service providers that assist with the verification of identity documents and age confirmation. These providers process data strictly under our instruction and are contractually prohibited from using your data for their own purposes.
• Game content providers: Game studios and software providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe may receive anonymised session identifiers to facilitate game delivery. They do not receive your personal identity or contact data.
• IT and hosting infrastructure providers: Cloud hosting and database service providers that store platform data on ffb7's behalf, operating under strict data processing agreements.
• Analytics and fraud prevention providers: Third-party tools used to analyse platform usage and detect fraudulent or abusive activity, operating on anonymised or pseudonymised data where possible.
• Law enforcement and regulatory authorities: Where ffb7 is legally compelled to disclose personal data — for example, in response to a valid court order, a law enforcement request, or a regulatory investigation — we will comply with our legal obligations. Where permissible, we will notify the affected player before disclosing their data.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ffb7's business, player personal data may be transferred to the acquiring entity. We will notify affected players before their data is transferred and before it becomes subject to a materially different privacy policy.

ffb7 uses cookies and similar tracking technologies on the Platform to enhance user experience, maintain session continuity, and gather analytics data. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot be used to access other data on your device.

7.1 Essential Cookies. These cookies are strictly necessary for the Platform to function correctly. They maintain your login session, remember your language and currency preferences, and protect the security of your account. Essential cookies cannot be disabled without impairing your ability to use the Platform.

7.2 Analytics Cookies. These cookies collect aggregated, anonymised information about how visitors use the Platform — for example, which pages are visited most frequently, how long users spend on each section, and where users exit the site. This data helps us improve the Platform's design and content.

7.3 Functional Cookies. These cookies remember choices you make on the Platform, such as your preferred bet stake size, your favourite sports markets, or your responsible gaming limit settings, so that you do not have to re-enter them each time you visit.

7.4 Marketing Cookies. Where you have consented to receive personalised communications, marketing cookies may be used to record which promotions you have viewed and to help us deliver relevant offers. Marketing cookies are only placed with your consent.

Most web browsers allow you to manage or disable cookies through their settings. Please note that disabling essential cookies will affect the functionality of the Platform. Disabling analytics or marketing cookies will not prevent you from using core Platform features.

ffb7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

Once the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for analytical purposes.

ffb7 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• SSL/TLS encryption for all data in transit between your device and the ffb7 Platform.
• Encryption at rest for sensitive personal and financial data stored on our servers.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Multi-factor authentication (MFA) requirements for staff accessing production systems containing personal data.
• Regular security audits and penetration testing conducted by independent specialists to identify and remediate vulnerabilities.
• Intrusion detection and monitoring systems that alert our security team to suspicious access patterns in real time.
• Incident response procedures to contain, investigate, and report data breaches in a timely manner.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ffb7 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

As a player on the ffb7 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 10 business days of receiving your request.

• Right of access: You have the right to request a copy of the personal data ffb7 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations.
• Right to restriction of processing: You have the right to request that ffb7 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to data portability: You have the right to receive personal data you have provided to ffb7 in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to object: You have the right to object to processing based on legitimate interests or carried out for marketing purposes. Where you object to marketing processing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The ffb7 platform is strictly intended for use by adults aged 21 years and above. ffb7 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately suspend the account, void any associated transactions, and delete the personal data of the underage individual from our systems.

Parents and guardians who believe that a minor may have registered on the ffb7 platform should contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action. ffb7 takes its obligations regarding the protection of minors extremely seriously and maintains robust age-verification procedures to prevent underage access. 21+ only.

The ffb7 platform does not contain links to external third-party websites for general browsing purposes. Where references to third-party payment providers (such as bKash or Nagad) or game software providers (such as Pragmatic Play or Evolution Gaming) appear on the Platform, these are references to services integrated directly within the ffb7 experience.

If you independently navigate to a third-party website — for example, by searching for a payment provider's support information — your use of that external website is governed by its own privacy policy, over which ffb7 has no control and for which ffb7 accepts no responsibility.

ffb7 reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy will always be available on this page, identified by the effective date shown at the top of the document. We recommend that you review this Policy periodically to remain informed of how we protect your data.

Where a change to this Policy is material — meaning it significantly affects your rights or the way we process your personal data — we will notify you by email to the address registered on your account, or by displaying a prominent notice on the Platform, before the change takes effect. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you do not agree with any change to this Policy, you should stop using the Platform and contact [email protected] to request account closure and erasure of your personal data in accordance with our retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ffb7 processes your personal data, please contact our Data Support team using the details below. All communications must be in English.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request"
• Response time: Within 10 business days for data rights requests; within 2 business hours for general support queries
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Platform: https://ffb7.io