ffb7 Privacy Policy — Your Data, Our Responsibility

This Privacy Policy ("Policy") describes how ffb7 ("the Platform", "we", "us", "our") collects, uses, stores, discloses and otherwise processes personal data about individuals ("you", "your") who access or use the ffb7 platform, including the website at ffb7.app, any associated mobile interface, and all related services. This Policy forms part of our Terms and Conditions and should be read together with them. By accessing or using the ffb7 platform you confirm that you have read and understood this Policy and consent to the data practices it describes.

ffb7 is committed to handling personal data with care, transparency and respect for the privacy of all platform users. We apply data minimisation principles — collecting only what is necessary — and we do not use personal data for purposes beyond those stated in this Policy without first obtaining your explicit consent. This Policy may be updated from time to time. When material changes are made, we will notify you by posting a prominent notice on the platform. Your continued use of the platform following any such notice constitutes your acceptance of the revised Policy.

ffb7 collects personal data through several channels during the normal operation of the platform. The categories of data we may collect include the following:

• Registration data: your full legal name, date of birth, residential address in Bangladesh, and the mobile number you register with. This information is required to create and verify your account and to comply with our know-your-customer (KYC) obligations.
• Identity verification documents: when completing KYC verification, you may be asked to submit a copy of a government-issued identity document (such as your National ID card) and proof of your residential address. These documents are stored securely and used solely for identity verification purposes.
• Transaction data: records of deposits and withdrawals processed through your account, including the payment method used (bKash, Nagad, Rocket or Upay), the transaction reference number, the amount in ৳ BDT, and the date and time of each transaction. We do not store your mobile financial service PIN or full account credentials.
• Usage and gameplay data: information about how you use the platform, including games played, bet amounts, session durations, device type, operating system, browser type and approximate geographic location (derived from IP address). This data is used for platform improvement, security monitoring, responsible gaming analysis, and personalisation of your experience.
• Communications data: records of your interactions with ffb7 support via live chat, including the content of support conversations, the date and time of each interaction, and any supporting documentation you provide. These records are retained for quality assurance and dispute resolution purposes.
• Cookies and technical data: when you access the ffb7 platform via a browser, we may use session cookies and similar tracking technologies to maintain your logged-in state, remember your preferences, and analyse aggregate platform usage patterns. We do not use advertising-network cookies or cross-site tracking technologies.

You are not required to provide personal data beyond what is necessary for account registration and KYC verification. However, failure to provide mandatory information may prevent us from creating or maintaining your account or processing your transactions.

We use the personal data we collect for the following purposes, each of which has a clear and legitimate basis:

• Account management and service delivery: to create and maintain your account, process your deposits and withdrawals, credit winnings, apply bonuses, handle your support enquiries, and otherwise deliver the services described in our Terms and Conditions.
• Identity verification and compliance: to verify your identity, confirm your eligibility to use the platform (including age verification), conduct KYC checks, detect and prevent fraud, money laundering and other financial crime, and maintain records required by our internal compliance framework.
• Responsible gaming monitoring: to identify patterns of gameplay that may indicate problematic gambling behaviour, to deliver responsible gaming alerts and cooling-off reminders, and to support any self-exclusion or limit-setting request you make.
• Platform security and fraud prevention: to monitor for unauthorised access, account takeover attempts, bonus abuse, collusion, and other security threats. Security monitoring includes analysis of login patterns, device fingerprints, and transaction behaviour.

ffb7 does not sell, rent or trade your personal data. We may share your data with third parties only in the following strictly limited circumstances:

• Payment processing partners: we share the minimum necessary transaction information with our payment processing partners (bKash, Nagad, Rocket, Upay) to facilitate deposits and withdrawals. These partners operate under their own privacy policies and are independently responsible for the data they process.
• Technology and infrastructure providers: we use third-party cloud hosting, database management and platform infrastructure services to operate ffb7. These providers access personal data only to the extent necessary to provide their technical services and are contractually required to maintain the confidentiality and security of any data they process on our behalf.
• Game content providers: game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi) may receive anonymised or pseudonymised gameplay data for the purposes of game performance monitoring and RNG certification audits. Individual player identities are not disclosed to game studios.
• Legal and compliance requirements: we may disclose personal data to law enforcement agencies, regulatory bodies or other competent authorities when required to do so by applicable law or a lawful order. In such cases we will disclose only the minimum data required to satisfy the legal obligation.

In all cases where data is shared with third parties, we require those parties to maintain appropriate technical and organisational measures to protect your data and to use it only for the purposes for which it was shared.

ffb7 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our key security measures include the following:

• SSL (Secure Socket Layer) encryption on all data transmitted between your device and the ffb7 platform. This ensures that data in transit cannot be intercepted and read by unauthorised parties.
• Password hashing: account passwords are stored using a one-way cryptographic hashing algorithm. Passwords are never stored in plain text and are never visible to any member of the ffb7 team in their original form.
• Access controls: access to personal data within the ffb7 organisation is restricted to personnel who require it to perform their job functions. All internal access is logged and subject to periodic review.

ffb7 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable compliance obligations. In general: account registration data and KYC documents are retained for the duration of the account relationship and for a minimum period thereafter as required by our internal compliance procedures; transaction records are retained for a minimum of five years from the date of each transaction; support communications are retained for a minimum of two years; cookies and session data are deleted within 30 days of the relevant session.

When personal data is no longer required and its retention period has expired, it is securely deleted or anonymised in a manner that prevents reconstruction. If you request deletion of your account, ffb7 will action that request promptly, subject to any retention obligations that prevent immediate deletion of specific data categories.

As a user of the ffb7 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat, available 24/7:

• Right of access: you have the right to request a copy of the personal data ffb7 holds about you. We will respond to access requests within a reasonable timeframe and at no charge for the first request in any 12-month period.
• Right of rectification: if you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most of your account information directly from within your account settings.
• Right of erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal or compliance obligations that require us to retain specific data for a defined period.
• Right to restrict processing: in certain circumstances you have the right to request that we restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

ffb7 uses session cookies — small text files placed on your device by the platform — to maintain your logged-in state, remember your language and display preferences, and support the security of your account session. Session cookies are deleted automatically when you close your browser. We do not use persistent advertising cookies, third-party tracking pixels, or cross-site behaviour tracking technologies of any kind.

You can configure your browser to refuse cookies or to alert you when cookies are being sent. However, please note that disabling cookies may affect the functionality of certain features of the ffb7 platform, including the ability to remain logged in across pages. ffb7 does not currently respond to "Do Not Track" browser signals, as there is no universally accepted standard for how such signals should be interpreted.

The ffb7 platform is strictly for adults aged 21 and over. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will delete that data immediately and close the associated account without prior notice.

• If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered on the ffb7 platform or provided us with their personal data without your knowledge, please contact our support team immediately via live chat so that we can take prompt action.
• Age verification is a mandatory part of the ffb7 KYC process. We use the date of birth provided at registration, cross-referenced against the identity documents submitted during verification, to confirm that all platform users are aged 21 or over before their account becomes fully active.
• Any account found to belong to a person under the age of 21 will be immediately suspended. Any deposits, winnings or bonuses associated with that account will be forfeited and returned to the payment source where technically possible, less any applicable processing fees.

These protections reflect ffb7's strong commitment to preventing access to gambling services by minors and to maintaining a safe platform for all adult users in Bangladesh.

ffb7 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will post a notice on the platform and update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your data. Where changes are significant, we may also notify you directly via your registered mobile number.

Your continued use of the ffb7 platform following the posting of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should stop using the platform and may request closure of your account by contacting support via live chat.

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data ffb7 holds about you, please contact our support team via live chat, available 24 hours a day, 7 days a week. You may also reach us by email at the address listed in the footer of this page. We aim to acknowledge all data-related enquiries within 2 business days and to resolve them within 14 business days. For complex requests — such as a full subject access request — the resolution period may be extended to 30 days, in which case we will notify you of the extension and the reason for it.

This Privacy Policy and any disputes arising in connection with it shall be governed by and interpreted in accordance with applicable law. By using the ffb7 platform you acknowledge that you are accessing the service voluntarily and that any data you provide is subject to the terms of this Policy.

This Privacy Policy was last reviewed and updated in January 2026. ffb7 recommends that all users review this Policy periodically to remain informed of how their personal data is handled. Your continued use of the platform following any update to this Policy constitutes your acceptance of the revised version.