Privacy Policy

This Privacy Policy applies to the ffd77 platform, accessible at https://ffd77.app, and governs the collection, use, storage and disclosure of personal data by ffd77 in connection with your use of the platform. References to "ffd77", "we", "us" or "our" refer to the operating entity responsible for the ffd77.app platform.

This policy applies to all users of the ffd77 platform, including players registering from Bangladesh and any other jurisdiction in which ffd77 operates. This policy does not apply to third-party websites or services linked from ffd77. ffd77 is not responsible for the privacy practices of any third-party site. Players are encouraged to review the privacy policies of any third-party services they use in connection with ffd77.

ffd77 collects personal data through two routes: data you provide directly when registering and using the platform, and data collected automatically when you interact with the platform. The categories and specific items of data collected are described below.

Data You Provide Directly

• Registration data: full name, date of birth, email address, mobile phone number (used for account login and OTP verification in Bangladesh), and a self-selected password.
• KYC verification documents: national identity card (NID), passport or other government-issued identity document, and optionally a selfie or proof-of-address document when required by our KYC review process.
• Payment references: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), and transaction reference numbers. Full card numbers for Visa or Mastercard are never stored directly by ffd77 — card transactions are processed by PCI DSS-compliant payment gateways.
• Communications: messages, support tickets and any correspondence you send to ffd77 through our support channels, including emails sent to [email protected].

Data Collected Automatically

• Device and technical data: device type and model, operating system, browser type and version, screen resolution, and unique device identifiers.
• Network data: IP address, mobile network operator (e.g., Grameenphone, Robi, Banglalink, Teletalk), approximate geographic location derived from IP address (city-level, not GPS-precise), and connection type.
• Session and usage data: pages visited, game sessions started, bets placed and their outcomes, session start and end times (recorded in Bangladesh Standard Time, BST UTC+6), deposit and withdrawal event timestamps, and any errors encountered during your session.

ffd77 processes your personal data only for the purposes listed below. Each purpose is supported by a lawful basis. We do not use your data for any purpose beyond what is described in this policy without first obtaining your explicit consent.

• Account creation and management: to register your ffd77 account, verify your identity, maintain your account balance and transaction history, and provide customer support when you request it.
• Payment processing: to process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa and Mastercard, to maintain auditable transaction records, and to investigate disputed transactions.
• Legal and regulatory compliance: to fulfil know-your-customer (KYC) obligations, anti-money-laundering (AML) checks, age verification (players must be 21+), and any other legal obligations applicable to ffd77's operating jurisdiction.
• Security and fraud prevention: to detect, investigate and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, money laundering and any other prohibited conduct described in our Terms and Conditions.
• Service improvement and platform analytics: to analyse aggregated, anonymised usage patterns to improve platform performance, game offerings, payment flows, and the overall user experience for Bangladesh players. ffd77 does not use individual player profiles for behavioural advertising.

ffd77 does not sell, rent or trade your personal data to third parties for marketing or commercial purposes. Data is shared only with the categories of third party described below, and only to the extent necessary for the stated purpose:

Service Providers

• Payment processors (including bKash, Nagad, Rocket, Upay gateway partners, and international card payment providers): to execute deposit and withdrawal transactions on your behalf.
• KYC and identity verification partners: to verify the identity documents and age of players, as required by our compliance obligations.
• Fraud detection and security services: to monitor for suspicious activity, identify multi-accounting, and protect the integrity of the ffd77 platform.

Legal and Regulatory Disclosure

• ffd77 may disclose your personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, court order or lawful government request.
• ffd77 will, where legally permitted, notify you before disclosing your personal data in response to a legal demand and will only disclose the minimum data necessary to comply.

All third-party service providers that receive personal data from ffd77 are bound by written data processing agreements that require them to: process data only on ffd77's documented instructions; implement appropriate technical and organisational security measures; not sub-process the data without ffd77's prior written authorisation; and delete or return all personal data upon termination of the service relationship.

ffd77 retains your personal data for as long as your account remains active and for a further period after account closure as required by our legal and compliance obligations. As a general guideline: account registration and KYC data is retained for the lifetime of the account plus 5 years post-closure; payment transaction records are retained for 7 years from the date of the transaction to meet financial record-keeping requirements; communications with support are retained for 3 years from the date of the communication; session and usage logs are retained for 24 months in identifiable form, after which they are anonymised for aggregate analytics purposes.

When the applicable retention period expires, ffd77 will either securely delete the personal data or anonymise it so that it can no longer be attributed to you as an individual. ffd77 will not retain personal data for longer than is necessary for the stated purposes.

ffd77 implements and maintains technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. The security measures in place at ffd77 include:

• SSL/TLS encryption for all data in transit between your device and ffd77 servers, ensuring that your login credentials, payment references and personal information cannot be intercepted on the network.
• Encrypted storage of passwords using industry-standard hashing algorithms. ffd77 does not store plaintext passwords under any circumstances. Customer support staff cannot retrieve your password — only a password reset flow is available.
• Login anomaly detection: ffd77 monitors for unusual login patterns (such as logins from new devices or IP addresses not previously associated with your account) and may trigger additional verification steps to protect your account.
• Role-based access controls for ffd77 staff: only authorised personnel with a documented business need may access personal data, and all staff access is logged and audited. ffd77 does not permit general staff access to KYC documents or payment data beyond what is required for their specific role.

ffd77 uses cookies and similar tracking technologies (such as local storage tokens) to operate the platform, maintain your logged-in session, remember your language and display preferences, and detect security anomalies. ffd77 does not use third-party advertising cookies or tracking pixels that share your data with external advertisers.

The cookies ffd77 places are strictly necessary for platform operation (session authentication tokens), functional (language preference storage), and security-related (CSRF protection tokens, login anomaly detection identifiers). You may disable cookies in your browser settings, but doing so will prevent you from logging in to your ffd77 account because session authentication relies on cookies.

As a ffd77 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond to all valid requests within 30 days. In complex cases we may extend this period by a further 30 days — we will notify you if an extension is required.

• Right of access: you may request a copy of the personal data ffd77 holds about you (a Subject Access Request). We will provide a structured summary of your data categories and a readable export of your account data.
• Right to rectification: if any personal data ffd77 holds about you is inaccurate or incomplete, you may request that we correct or complete it. Name and date of birth corrections require re-submission of KYC documents.
• Right to erasure (right to be forgotten): you may request deletion of your personal data. ffd77 will comply where the data is no longer necessary for the purpose it was collected, unless retention is required by law (for example, transaction records retained for financial compliance cannot be deleted on request within the mandatory retention period).
• Right to restriction: you may request that ffd77 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the lawfulness of processing.
• Right to data portability: you may request that ffd77 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

The ffd77 platform is strictly intended for adults aged 21 years and above. ffd77 does not knowingly collect or process personal data from any person under the age of 21. If ffd77 discovers or is notified that a person under 21 has registered an account, ffd77 will immediately suspend the account, delete all associated personal data to the extent permitted by law, and retain only the minimum data required to prevent re-registration by that individual.

If you are a parent or guardian and believe that a minor in your care has accessed the ffd77 platform, please contact us immediately at [email protected]. ffd77 will cooperate fully with parental or guardian requests to investigate and, where confirmed, to close the minor's account and return any deposited funds to the appropriate payment method.

ffd77 may update this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or the features of the ffd77 platform. When we make material changes to this policy, we will notify registered users by displaying a prominent notice on the platform before the changes take effect. We encourage you to review this Privacy Policy periodically. Continued use of the ffd77 platform after any update constitutes acceptance of the revised Privacy Policy. The effective date at the top of this page will always reflect the date of the most recent revision.

• Right to withdraw consent: where ffd77 processes your data on the basis of consent (for example, optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: you may object to ffd77 processing your personal data where that processing is based on legitimate interests. ffd77 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right of access: you may request a copy of the personal data ffd77 holds about you (a Subject Access Request). We will provide a structured summary of your data categories and a readable export of your account data.
• How to exercise your rights: send a written request to [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request to protect against unauthorised data access requests.

If you have any questions, concerns or complaints about how ffd77 handles your personal data, or if you wish to exercise any of your data rights, please contact the ffd77 privacy team at [email protected]. Please include "Privacy" in your subject line so we can route your message to the appropriate team member promptly.

ffd77 is committed to handling all privacy-related requests fairly, promptly and in compliance with applicable data protection principles. We treat your personal data with the respect and confidentiality it deserves. Our support team is available 24/7 to assist Bangladesh players with any privacy concerns.

This Privacy Policy is governed by the laws applicable to ffd77's operating jurisdiction. Any disputes arising under or in connection with this Privacy Policy shall be subject to the dispute resolution process described in ffd77's Terms and Conditions. If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.