Privacy & Management of Personal Data

Scope and Controller

This Privacy and Data Management Policy governs Ffbet's processing of personal data of individuals who access or use the Ffbet platforms, including website visitors, account holders, and registered players. It covers data collected in the course of providing gaming and related services, and any communications connected to those services.

Data Controller and Contact Details

Ffbet is the brand name of the operator responsible for your personal data. The operator is incorporated under applicable law and may be contacted through the channels listed in this policy for privacy inquiries, data requests, and notifications related to data processing.

Data Protection Officer contact: [email protected]

Categories of Personal Data We Collect

• Identifiers and contact information: name, username, date of birth, email address, postal address, phone number
• Account and authentication data: login credentials, security questions and responses, and activity logs
• Identification and verification data: government issued documents, proof of address used for age and identity verification
• Financial information: payment method details, billing address, transaction history, and payout records
• Usage data: device type, IP address, browser information, pages viewed, search queries, timestamps, and interaction data
• Communications data: inquiries, complaints, and correspondence with customer support
• Marketing preferences and consent records

How We Collect Personal Data

We collect data directly from you when you register, place bets, participate in promotions, or contact support. We also collect data automatically through cookies, analytics, and server logs. We may receive data from third parties for identity verification, payment processing, and compliance with regulatory requirements, where permitted by law.

Purposes of Processing and Legal Bases

1. Provision and operation of services: to create and manage your account, provide games and related features, and respond to support requests. Basis: performance of a contract with you.
2. Regulatory and legal compliance: to meet KYC, age verification, AML, anti-fraud, and other regulatory obligations. Basis: legal obligation.
3. Fraud prevention and security: to detect and prevent fraudulent activity, unauthorized access, and financial crime. Basis: legitimate interest and contract necessity.
4. Platform integrity and operations: to monitor service quality, prevent downtime, and improve performance. Basis: legitimate interest.
5. Communication and customer care: to provide notices about account activity, updates, and support responses. Basis: contract necessity and legitimate interest.
6. Analytics and product development: to understand usage patterns, test new features, and enhance services. Basis: legitimate interest.
7. Marketing with consent or legitimate interest: to offer promotions in line with consent given or where permitted by law, with options to opt out. Basis: consent or legitimate interest.
8. Data transfers and corporate transactions: in connection with mergers, acquisitions, or divestitures and to fulfill contractual obligations with service providers. Basis: legitimate interest and contract necessity.

Sharing of Personal Information

We may disclose personal data to the following categories of recipients: service providers and processors performing services on our behalf (identity verification, payment processing, hosting, analytics, customer support); regulators and statutory bodies as required by law; other entities within our corporate group where necessary for the purposes described in this policy; and in connection with corporate transactions. We may also disclose information when there is a suspected breach of our Terms or applicable law, with your consent, or to protect the rights, property or safety of Ffbet, its users, or others.

International Data Transfers

Your data may be transferred to countries outside the European Economic Area or other jurisdictions with different data protection laws. We implement safeguards such as standard contractual clauses or other legally recognized transfer mechanisms and ensure that the level of protection afforded to your data remains adequate.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy and to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include: identifying and verification data retained for seven years after account closure; transaction history retained for seven years; marketing data retained until consent is withdrawn or objections are implemented; anonymized aggregated data may be retained for analytical purposes indefinitely. When data is no longer required, we securely delete or destroy it.

Data Security

We implement proportionate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS 1.2 or higher with strong cipher suites), encryption at rest where appropriate, access controls, regular security assessments, vulnerability management, and formal data handling policies. Our third party processors are contractually bound to equivalent security standards and privacy obligations.

Your Rights

You have rights under applicable data protection law. Subject to applicable exemptions, you may:

• Access and obtain a copy of your personal data we process
• Rectify incomplete or inaccurate data
• Request erasure of your data where there is no compelling reason to continue processing
• Request restriction of processing in certain circumstances
• Request data portability in a structured, commonly used, machine readable format
• Object to processing based on legitimate interests or direct marketing
• Withdraw consent at any time for processing based on consent
• lodge a complaint with a supervisory authority

To exercise these rights, submit a request to the privacy channel or DPO at [email protected]. We will respond within one month, with a possible extension in complex cases. We may require verification of identity before processing requests and may charge a reasonable fee for repeated or excessive requests where permitted by law.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate, secure, and improve our platforms. Details are provided in our Cookie Policy. You may manage cookies via platform settings or your browser, subject to technical feasibility and legal requirements.

Marketing Communications

We may deliver marketing communications based on your consent or legitimate interest where permitted. You may opt out at any time by using the unsubscribe option in communications or by contacting support. We do not sell personal data to third parties for marketing purposes without your explicit consent.

Children and Young Persons

Ffbet services are not available to individuals under the age of 18. We implement age verification measures and take steps to detect and deter underage use. If we become aware of an underage account, we will suspend and remove access in accordance with our procedures.

Policy Updates

We may update this Policy from time to time. When a change is material, we will provide notice through the platforms or other lawful means. Continued use after such notice constitutes your assent to the updated terms. The date of the latest update is stated at the top of this policy.

How to Contact Us

For privacy inquiries, data access requests, or to exercise your rights, you may contact our privacy team at [email protected] or [email protected]. Where applicable, you may request information about the operator's registered office and applicable data handling modalities. We strive to respond promptly and in compliance with applicable law.