ffg66 Privacy Policy
At ffg66, your privacy is treated with the same seriousness as your account security. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a registered player on our platform.
- Who We Are and How to Contact Us
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing
- Data Sharing and Third Parties
- Payment Data and Financial Security
- Cookies and Tracking Technologies
- Data Retention
- Your Rights as a Data Subject
- Children and Age Verification
- International Data Transfers
- Security Measures
- Changes to This Policy
- Contact and Data Enquiries
Who We Are and How to Contact Us
ffg66 ("we", "us", "our", "the Company") operates the online sports betting and casino platform accessible at ffg66.io, targeting adult players in Bangladesh and other eligible jurisdictions. ffg66 is responsible for the collection, storage, and processing of personal data submitted by users who register and interact with the platform.
For all privacy-related enquiries, data access requests, or concerns about how your personal information is handled, please contact our support team using the details below. Note that all contact details are provided as plain text and are not clickable links.
- Email: [email protected]
- Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
- WhatsApp: +880 1700-000000 (plain text — not a clickable link)
Information We Collect
2.1 Information You Provide Directly
When you register an account, make a deposit, request a withdrawal, contact support, or interact with any feature of the ffg66 platform, you may provide us with the following categories of personal data:
- Full legal name as it appears on your national identification document
- Date of birth (used for age verification — all users must be 21 or older)
- Registered mobile phone number (used for account verification, OTP delivery, and support contact)
- Email address (where provided during registration or support contact)
- Residential address in Bangladesh or other jurisdiction
- National Identity Card (NID) number or passport details (submitted during KYC verification)
- Payment method identifiers, including bKash account number, Nagad account number, Rocket number, bank account details, or card details (see Section 6 for payment data specifics)
- Username and password (stored in hashed form — see Section 12)
- Any correspondence submitted to our support team via email, live chat, or WhatsApp
2.2 Information Collected Automatically
When you access and use the ffg66 platform, certain technical and behavioural data is collected automatically through our servers and analytics systems:
- IP address and approximate geographic location derived from IP lookup
- Device type, operating system, browser type, and screen resolution
- Pages visited, time spent on each page, and navigation path through the platform
- Betting history, game session duration, stake amounts, and win/loss records
- Login timestamps, session durations, and logout events
- Referral source (the URL or campaign that directed you to ffg66)
- Cookie identifiers and similar tracking data (see Section 7)
2.3 Information Received from Third Parties
In certain circumstances, ffg66 may receive information about you from third-party sources, including:
- Payment processors such as bKash, Nagad, Rocket, and Upay — who may share transaction confirmation data and account name details to verify payment ownership
- Identity verification and KYC service providers used to authenticate documents submitted during account verification
- Fraud prevention and risk assessment partners who provide signals about potentially fraudulent behaviour patterns
- Game studios such as Evolution Gaming, Pragmatic Play, and Spribe, who may share game session data for dispute resolution purposes
How We Use Your Information
ffg66 uses the personal data we collect for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and identity verification | Name, date of birth, NID/passport, mobile number |
| Processing deposits and withdrawals | Payment method details, account balance records, transaction history |
| Delivering customer support | Name, account details, support correspondence history |
| Fraud detection and prevention | IP address, device fingerprint, betting patterns, login history |
| Anti-money laundering (AML) compliance | Transaction data, identity documents, source of funds information |
| Responsible gaming monitoring | Betting history, session data, deposit frequency, self-exclusion flags |
| Platform analytics and improvement | Anonymised usage data, navigation paths, device data |
| Sending transactional notifications | Mobile number, email address, account activity records |
| Promotional communications (with consent) | Mobile number, email address, betting preferences |
| Legal and regulatory compliance | Identity documents, transaction records, correspondence |
ffg66 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where profiling is used (for example, to identify responsible gaming risk signals), a qualified member of our team reviews flagged cases before any account restriction is applied.
Legal Basis for Processing
ffg66 processes your personal data only where a valid legal basis exists to do so. The applicable legal basis depends on the specific processing activity:
- Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including account creation, payment processing, game delivery, and customer support.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and requests from lawful authorities.
- Legitimate interests: Processing carried out for purposes that are in our legitimate business interests and do not override your fundamental rights — including fraud prevention, platform security, and internal analytics.
- Consent: Processing activities for which we have obtained your explicit prior consent — primarily the sending of promotional and marketing communications. You may withdraw this consent at any time by contacting our support team.
Data Sharing and Third Parties
5.1 Service Providers
ffg66 engages carefully selected third-party service providers to help operate the platform. These providers process data only on our behalf and under strict contractual data processing agreements that prohibit them from using your data for their own purposes. Categories of service providers include:
- Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners)
- Identity verification and KYC service providers
- Game content studios (Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, NetEnt)
- Cloud hosting and infrastructure providers
- Fraud detection and cybersecurity specialists
- Customer support platform providers
5.2 Legal and Regulatory Disclosure
ffg66 may disclose your personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful request. We will notify you of any such disclosure where we are legally permitted to do so.
5.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of ffg66's business, your personal data may be transferred as part of that transaction. We will notify affected users via the contact details on file before any such transfer takes effect, and the acquiring entity will be bound to honour this Privacy Policy or provide equivalent protections.
Payment Data and Financial Security
All financial transactions on ffg66 — including deposits via bKash, Nagad, Rocket, Upay, and bank transfers — are processed through encrypted, tokenised payment channels. ffg66 does not store full payment card numbers, CVV codes, or complete mobile banking PINs on our servers.
Payment identifiers (such as the last four digits of a card or a partial mobile wallet number) are retained solely to enable withdrawal processing, transaction reconciliation, and fraud prevention. These identifiers are stored in encrypted form and access is restricted to authorised personnel only.
All financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of the transaction to satisfy AML record-keeping obligations. This retention period applies regardless of whether your account remains active.
Cookies and Tracking Technologies
7.1 What Cookies We Use
ffg66 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively and provide a personalised experience. The categories of cookies we use are as follows:
- Essential cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
- Functional cookies: Used to remember your preferences, such as language settings, odds format, and last-visited game category.
- Analytics cookies: Used to collect anonymised data about how users navigate the platform, which pages are most visited, and where users experience difficulty — allowing us to improve the platform over time.
- Security cookies: Used to detect and prevent fraudulent logins, unusual activity, and session hijacking attempts.
7.2 Managing Cookies
You may control non-essential cookies through your browser's privacy settings. Please note that disabling cookies may impair certain features of the ffg66 platform, including automatic login, game preference saving, and some responsible gaming tools. Detailed instructions for managing cookies are available in your browser's help documentation.
ffg66 does not use third-party advertising cookies or place tracking pixels that report your behaviour to external advertising platforms.
Data Retention
ffg66 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or accounting obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data (name, DOB, mobile number) | Duration of account plus 5 years after closure |
| Identity verification documents (NID, passport) | Duration of account plus 5 years after closure |
| Financial transaction records | Minimum 5 years from transaction date |
| Betting and gaming history | Duration of account plus 2 years after closure |
| Support correspondence | 3 years from date of last correspondence |
| Analytics and usage data (anonymised) | Up to 24 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 12 months |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data subject to an active legal hold, regulatory investigation, or dispute resolution process will be retained until that matter is fully resolved, regardless of the standard retention schedule above.
Your Rights as a Data Subject
ffg66 respects your rights over your personal data. Depending on the applicable legal framework in your jurisdiction, you may be entitled to exercise the following rights:
- Right of access: Request a copy of the personal data ffg66 holds about you, along with information about how it is used.
- Right to rectification: Request correction of inaccurate or incomplete personal data held in your account.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to our legal retention obligations.
- Right to restriction of processing: Request that we restrict the processing of your data in certain circumstances, such as where you contest its accuracy or object to our use of it.
- Right to data portability: Request a copy of your data in a structured, machine-readable format where processing is based on consent or contractual necessity.
- Right to object: Object to processing carried out on the basis of legitimate interests, including any profiling activities related to responsible gaming monitoring.
- Right to withdraw consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 48 hours and respond substantively within 30 days. In complex cases, this period may be extended by a further 30 days, and you will be notified if an extension is required.
Children and Age Verification
ffg66 is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. Age verification is performed during the account registration process and at the point of first withdrawal through our KYC procedures.
If ffg66 becomes aware that an account has been created by a person under 21, or that personal data belonging to a minor has been submitted to the platform, we will immediately suspend the account, delete all associated personal data to the extent permitted by law, and return any deposited funds to the payment source. We encourage parents and guardians to make use of parental control software to prevent minors from accessing online gambling platforms.
International Data Transfers
ffg66 operates as an offshore platform and may process or store personal data on servers located outside Bangladesh. Where data is transferred internationally, we take appropriate steps to ensure that an adequate level of protection is applied to that data, consistent with the principles set out in this Privacy Policy.
Transfers to third-party service providers — such as cloud infrastructure providers and game studios operating internationally — are governed by data processing agreements that impose binding data protection obligations on the recipient. By using the ffg66 platform, you acknowledge that your data may be processed outside your country of residence.
Security Measures
ffg66 implements a layered technical and organisational security framework designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:
- 256-bit TLS encryption for all data transmitted between your device and the ffg66 platform
- Bcrypt password hashing with per-user salts — your password is never stored in readable form
- SMS-based two-factor authentication (2FA) for account login, protecting against credential theft
- Real-time fraud monitoring that analyses login patterns, transaction behaviour, and device fingerprints to detect anomalies
- Role-based access controls ensuring that only authorised staff with a legitimate need can access specific categories of personal data
- Regular security assessments of platform infrastructure, third-party integrations, and data handling practices
- Data minimisation — we collect only the data we genuinely need for each stated purpose and do not retain data beyond the periods specified in Section 8
Despite these measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ffg66 will notify affected users as promptly as practicable and take all reasonable steps to contain and remediate the breach.
Changes to This Policy
ffg66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes, we will notify registered users via SMS to the mobile number on file and/or by displaying a prominent notice on the platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this document will be revised each time the policy is amended. We encourage you to review this Privacy Policy periodically to stay informed about how ffg66 handles your personal data. Continued use of the platform after the effective date of a revised policy constitutes your acceptance of the updated terms.
If you do not agree with any material change to this Privacy Policy, you should stop using the ffg66 platform and contact our support team to request account closure and data deletion in accordance with Section 9.
Contact and Data Enquiries
For all privacy-related questions, data access requests, consent withdrawal requests, or concerns about our data practices, please contact the ffg66 data team using the details below. All contact details are provided as plain text and are not clickable links.
- Email: [email protected] — Subject line: "Privacy Enquiry — [Your Username]"
- WhatsApp: +880 1700-000000 (plain text — not a clickable link)
- Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
- Live Chat: Available directly on the ffg66 platform when logged in
We are committed to resolving all privacy concerns fairly and transparently. If you are dissatisfied with our response to a data rights request, you retain the right to escalate the matter through appropriate legal channels available in your jurisdiction.
Six Privacy Principles We Stand By
A plain-English summary of how ffg66 approaches data protection — giving you confidence that your personal information is in safe hands.
Have Questions About Your Privacy?
Our support team is available around the clock to address any privacy concern. You can also explore our FAQ for quick answers, review our full Terms & Conditions, or visit our Responsible Gaming page for player protection resources.