ff66 Privacy Policy

Data We Collect

ff66 collects personal data from players at various stages of their relationship with the Platform. The categories of data we collect, and the context in which each is gathered, are set out in the table below.

ff66 does not collect sensitive special-category personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data for the purpose of unique identification) except where a player voluntarily discloses such information in the course of a support interaction, in which case it is treated with the highest level of confidentiality and deleted as soon as it is no longer required for the purpose of that interaction.

How We Use Your Data

ff66 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected without obtaining your prior consent.

• Account Management: To create, maintain, and administer your registered ff66 player account, including processing your login credentials, managing your BDT wallet balance, and giving you access to all platform services.
• Identity Verification (KYC): To verify that you are aged 18 or above and that your identity matches the registration details provided, in compliance with our responsible gaming obligations and anti-money laundering requirements applicable to the Bangladesh market.
• Payment Processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other accepted payment methods, and to maintain an accurate record of all financial transactions on your account.
• Customer Support: To respond to your enquiries, resolve complaints, process self-exclusion and responsible gaming tool requests, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming Monitoring: To monitor account activity for patterns that may indicate problem gambling behaviour, and to proactively contact players where such patterns are identified, in accordance with our responsible gaming commitments described in the ff66 Responsible Gaming page.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-account abuse, bot activity, and other conduct that violates the ff66 Terms & Conditions or applicable law.
• Legal Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations, data retention requirements, and any lawful requests from regulatory or law enforcement authorities with jurisdiction over our operations.
• Service Improvement: To analyse aggregate, anonymised usage data to understand how players use the Platform, identify technical issues, and improve the overall quality and performance of the ff66 gaming experience for players in Bangladesh.
• Promotional Communications: To send you information about ff66 promotions, bonuses, and seasonal offers — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time by emailing [email protected] or using the unsubscribe link in any promotional email we send you.

Legal Basis for Processing

ff66 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

Cookies & Tracking Technologies

The ff66 Platform uses cookies and similar technologies to operate effectively and provide you with a personalised, secure gaming experience. The following categories of cookies are in use on the ff66 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your logged-in session, preserve your language and currency preferences, and enable secure navigation between pages. Without these cookies, the Platform cannot operate correctly. No consent is required for strictly necessary cookies, and they cannot be disabled without affecting core functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred game view, responsible gaming reminder intervals, and notification settings — so that you do not need to reconfigure them on every visit. They are set by ff66 directly and do not track your activity across other websites.
• Analytics Cookies: ff66 uses privacy-preserving analytics tools to collect aggregate, anonymised data about how players navigate the Platform — which pages are most visited, how long sessions last, and where technical errors occur. This data is used exclusively to improve the Platform. Individual players are not identifiable in this data.

ff66 does not use third-party advertising cookies, retargeting pixels, cross-site tracking scripts, or social media tracking technologies on the Platform. You will not be tracked across other websites by any technology deployed by ff66.

You can manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform and may prevent you from logging in or completing transactions.

Data Sharing & Third Parties

ff66 does not sell, rent, or trade your personal data. We share your data only with the categories of third parties listed below, and only to the extent necessary to deliver the services you have requested or to fulfil our legal obligations:

• Payment Service Providers: Transaction data (including your bKash or Nagad wallet number, transaction amount in BDT, and transaction timestamp) is shared with the relevant payment service provider solely for the purpose of processing your deposit or withdrawal instruction. Each provider is subject to their own data protection obligations.
• Identity Verification Partners: In certain cases, KYC documentation may be processed by a third-party identity verification service provider engaged by ff66. Such providers are contractually restricted to processing your documents exclusively for the purpose of verifying your identity and may not retain, share, or use your documents for any other purpose.
• Game Software Providers: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, technical game-session data (including bet amounts, game outcomes, and session identifiers) is shared with the relevant provider to operate the game. These providers do not receive your identity or financial data beyond what is technically required for game delivery.
• Regulatory & Law Enforcement Authorities: ff66 will disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a lawful court order, or a regulatory directive. In all such cases, disclosure will be limited to the data specifically requested and will be documented internally.
• Professional Advisers: In connection with legal proceedings, compliance reviews, or business transactions, personal data may be shared with legal counsel, auditors, or financial advisers who are subject to strict professional confidentiality obligations.

All third-party service providers engaged by ff66 who handle player personal data are required to enter into a data processing agreement with ff66 that restricts the use of your data to the specified purpose, requires appropriate security measures, and prohibits onward sharing without ff66's explicit written authorisation.

Data Retention

ff66 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Once the applicable retention period expires, ff66 will securely delete or irreversibly anonymise your personal data. Data that has been fully anonymised (such that no individual can be re-identified from it) may be retained indefinitely for aggregate statistical analysis.

Data Security

ff66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data in transit between your device and the ff66 Platform is encrypted using industry-standard TLS encryption. The ff66 website operates exclusively over HTTPS.
• Encryption at Rest: Sensitive data categories — including KYC documents, financial data, and account credentials — are encrypted at rest using AES-256 encryption or equivalent standard.
• Access Controls: Access to player personal data within ff66's internal systems is restricted on a strict need-to-know basis. Staff who handle player data receive mandatory data protection training and operate under confidentiality obligations.
• Secure Password Storage: Account passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. ff66 staff cannot retrieve your password — only a password reset process is available.
• Fraud Detection Systems: ff66 uses automated fraud detection and anomaly monitoring tools to identify suspicious account activity, unauthorised login attempts, and unusual transaction patterns in real time.
• Regular Security Reviews: ff66's Platform and infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities proactively.

Despite these measures, no data transmission over the internet or storage system is entirely immune from risk. If ff66 becomes aware of a data security breach that materially affects registered players, we will notify affected players promptly and take all reasonable steps to mitigate the impact of the breach.

Your Data Rights

As a registered ff66 player, you hold the following rights with respect to your personal data. These rights may be subject to certain conditions and limitations, particularly where processing is required for legal compliance purposes:

• Right of Access: You have the right to request a copy of the personal data that ff66 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by ff66 be corrected. Minor updates (such as email address changes) can be made directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. This right is subject to our legal retention obligations — where we are required by law to retain certain data (such as AML records), deletion may be deferred until the mandatory retention period expires. We will inform you of any such limitations at the time of your request.
• Right to Restriction of Processing: You may request that ff66 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while we investigate your correction request.
• Right to Object: You have the right to object to processing carried out on a legitimate interests basis. Upon receiving an objection, ff66 will assess whether compelling legitimate grounds for the processing override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to Data Portability: You may request a copy of the personal data you provided to ff66 in a structured, commonly used, machine-readable format, to the extent that the data was provided by you and processed on the basis of consent or contract.

To exercise any of these rights, please contact the ff66 data team at [email protected] with the subject line "Data Rights Request", your registered account username, and a description of the right you wish to exercise. All requests will be acknowledged within 5 business days and actioned within 30 days of receipt.

Minors & Age Verification

ff66 services are strictly for adults aged 18 years and above. The ff66 Platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 18.

Age is collected at registration (date of birth field) and is a mandatory field that gates the account creation process. Where ff66 has reasonable grounds to suspect that a registered account belongs to a person under the age of 18 — whether identified through inconsistencies in provided data, KYC document review, or other means — the account will be immediately suspended pending verification. If the account holder is confirmed to be under 18, the account will be permanently closed, all deposits will be returned net of any winnings that were paid out, and the incident will be escalated in accordance with applicable legal and regulatory obligations.

If you believe that a minor has registered an account on the ff66 Platform using false information about their age, please contact us immediately at [email protected] with all relevant information so that we can act promptly.

Updates to This Policy

ff66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer on the Platform. All updates will be published at ff66.today/privacy-policy with a revised effective date at the top of the document.

Where an update materially changes how we process your personal data or affects your data rights, ff66 will provide advance notice of the change via email to your registered address, or via a prominent notice on the Platform, no fewer than 7 days before the revised policy takes effect.

Your continued use of the ff66 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change to this policy, you may close your account before the effective date and request deletion of your personal data subject to applicable retention obligations.

We recommend reviewing this Privacy Policy periodically so that you remain informed about how ff66 handles your personal information. Archived versions of previous Privacy Policy documents are available upon request from [email protected].

Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ff66 handles your personal data, please contact our player support and data team using the details below. All privacy enquiries are handled in English and responded to within 5 business days of receipt, operating on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Concerns: "Privacy Enquiry"
• Subject Line for Minor Account Reports: "Minor Account Report — Urgent"
• Response Language: English
• Operating Hours: 24 hours a day, 7 days a week, 365 days a year
• Time Zone: Bangladesh Standard Time (BST, UTC+6)