Privacy & Management of Personal Data

Scope and accountability

This privacy notice explains how Ffbet collects, uses, stores and discloses personal data in connection with its online gambling services. It applies to current and prospective players and any individual whose data we process in relation to the Ffbet platform.

Data controller and contact details

Ffbet is the data controller responsible for personal data processed in connection with the platform. For questions or requests concerning this privacy policy, contact the Data Privacy Team at privacy@ffbet.

What personal data we collect

We collect data to operate and provide services on the platform. Categories include:

• Identity data: name, date of birth, government-issued identification documents used for age and identity verification.
• Contact data: email address, postal address, telephone number.
• Account data: username, password, security questions, account status, user preferences.
• Financial data: payment methods, bank or e-wallet details, transaction history, payout records.
• Device and usage data: IP address, device identifiers, operating system, browser type, language, activity timestamps, pages visited.
• Communications data: messages with customer support, feedback, and survey responses.
• Marketing preferences: consent status for promotional communications and channel preferences.

How we collect data

Data is collected directly from you through account creation, deposits, withdrawals, and correspondence; automatically through your use of the platform (cookies and similar technologies); and from third parties such as payment processors, identity verification providers, and fraud/risk screening services, in each case where permitted by law and with your consent or as necessary for contract performance.

Purposes and legal bases for processing

We process personal data for the following purposes and on the corresponding legal bases:

• Operate the platform, verify identity and eligibility, and fulfill user requests — contract performance and compliance with legal obligations.
• Process payments, settle bets, and manage withdrawals — contract performance and legitimate interests (fraud prevention, payment integrity).
• Prevent fraud, money laundering and other unlawful activity — compliance with legal obligations and legitimate interests.
• Maintain security, protect accounts, and monitor for suspicious activity — legitimate interests and security requirements.
• Communicate account updates, changes to terms, and support responses — contract performance and legitimate interests.
• Provide personalized features and offers with your consent or based on legitimate interests where permitted by law.

Cookies and tracking technologies

We use cookies and similar technologies to operate the platform, analyze usage, tailor experiences, and support security. You may adjust cookie settings in your browser or within the platform, but disabling certain cookies may limit functionality or access to services.

Recipients and data sharing

We may share personal data with service providers that perform services on our behalf (such as payment processing, identity verification, hosting, fraud prevention, customer support). We may also share data with affiliated entities for operational purposes and as required by law or regulation. We do not sell personal data to third parties for marketing purposes without your consent.

International transfers and safeguards

Personal data may be transferred to countries outside your jurisdiction, including cloud hosting and payment partners. We implement safeguards such as data protection agreements, standard contractual clauses, and other legally recognized transfer mechanisms. We will inform you when a transfer involves a lack of adequate data protection and obtain your consent where required by law.

Data retention

We retain personal data for as long as necessary to operate the platform, comply with legal obligations (including anti-money laundering and taxation requirements), resolve disputes, and enforce our terms. Typical retention periods include: account and identity data for the duration of the relationship plus several years thereafter as required by law; transaction history and financial records for a minimum of seven years; security and log data for up to one year, unless longer retention is required for regulatory purposes.

Data security

We implement technical and organizational measures to protect personal data, including encryption in transit (TLS), encryption at rest where feasible, access controls, secure development practices, regular security testing, and monitored incident response. Access to data is limited to personnel with a legitimate need to know, and we maintain separate environments for production and backup data.

Data accuracy and corrections

We rely on you to provide accurate information. You may review and update your data in your account settings. We will correct inaccuracies within a reasonable timeframe after notification.

Automated processing and profiling

We may use automated systems for identity verification, risk assessment, fraud detection and other operational safeguards. You have the right to request human review of any decision that produces a legally or similarly significant effect, and we will provide meaningful information about the logic involved upon request.

Your rights as a data subject

• Access: obtain a copy of your personal data we hold and related information.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of data under applicable grounds.
• Restriction: request restriction of processing under certain conditions.
• Portability: obtain your data in a structured, commonly used format and transmit to another controller where feasible.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Consent withdrawal: withdraw consent where processing is based on consent.
• Complaint: lodge a complaint with a supervisory authority if you believe your rights are violated.

To exercise any of these rights, contact privacy@ffbet. We may require information to verify your identity before processing your request and will respond within applicable statutory timeframes.

Marketing and preferences

You may opt out of marketing communications at any time by using the settings within your account or by selecting unsubscribe options in messages. You may also contact privacy@ffbet to update your marketing preferences or to withdraw consent where required by law.

Age verification and minor protection

Ffbet operates in compliance with age verification requirements. We do not knowingly process personal data of individuals under the age of 18. If we become aware of such data, we will take steps to delete it or secure it as required by law and regulatory guidance. We employ age checks as part of our KYC procedures to ensure suitability for participation in services offered.

Breach notification and accountability

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you and any applicable supervisory authority in accordance with applicable law, including description of the breach, data affected, and measures taken to mitigate harm.

Updates to this policy

We may update this privacy notice to reflect changes in our processing activities or legal obligations. We will provide notice through the platform and publish the updated notice with the effective date. Continued use of the platform constitutes acceptance of the updated terms.

Exercise of rights and inquiries

For any privacy-related inquiries or to exercise your data subject rights, contact privacy@ffbet. We may request information necessary to verify identity and ensure data security before processing such requests.