ffbaje Privacy Policy — Your Data, Our Responsibility
This Privacy Policy explains what personal data ffbaje collects from Bangladeshi players, how that data is used and protected, who it may be shared with, how long it is retained, and what rights you hold over your own information. We are committed to handling your data transparently, securely, and strictly within the scope necessary to operate a safe online gaming platform.
Section 1
Data We Collect
ffbaje collects personal data from you through several channels: directly from you when you register an account or complete KYC verification, automatically as you use the platform, and in limited circumstances from trusted third-party service providers. We collect only the categories of data that are necessary for the specific purposes described in this Policy. We do not collect data speculatively or for undefined future uses.
Registration and identity data: When you create an ffbaje account, we collect your full legal name, date of birth, Bangladeshi mobile phone number, and a username and password chosen by you. During the Know Your Customer (KYC) verification process, you will be required to submit a copy of a valid government-issued identity document — typically your National Identity Card (NID) or passport. We collect the information visible on that document, including your photograph, NID or passport number, and address where present.
Financial and transaction data: We collect records of every deposit and withdrawal made through your ffbaje account, including the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket), the mobile money account number from which or to which the transfer was made, transaction timestamps, and transaction reference numbers. We do not store your mobile money PIN or any authentication credential belonging to your bKash, Nagad, or Rocket account — those credentials are processed solely by the relevant payment provider.
Gaming activity data: We maintain logs of your betting and gaming activity on the platform, including the games played, bet amounts, win and loss amounts, session start and end times, and any bonus offers claimed or wagering milestones reached. This data is used for fair-play monitoring, dispute resolution, and responsible gaming oversight.
Technical and device data: When you access ffbaje through a web browser on any device, we automatically collect your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, and referring URL. We also collect session activity data such as pages visited, features used, and time spent on the platform.
Communications data: If you contact our customer support team via any channel, we retain records of those communications, including the content of messages, timestamps, and the outcome of any support request. This data is used to resolve disputes and to improve our support quality.
ffbaje applies a data minimisation approach. We collect only what is necessary to provide the service, comply with anti-money laundering obligations, and protect player safety. We do not sell your personal data to third-party marketers.
Identity Data
Full name, date of birth, mobile number, and NID/passport information collected at registration and during KYC verification. Required for account security and age verification.
Transaction Data
Records of BDT deposits and withdrawals via bKash, Nagad, and Rocket. Your mobile money PIN is never stored by ffbaje — payment credentials stay with your provider.
Device & Session Data
IP address, browser type, device type, and session activity logs. Used for security monitoring, fraud prevention, and platform performance optimisation.
Summary of Data Categories
| Data Category | Examples | Collection Method | Required? |
|---|---|---|---|
| Identity | Full name, date of birth, NID/passport number, photo | Provided directly by you | Mandatory (KYC) |
| Contact | Bangladeshi mobile number, email address (if provided) | Provided directly by you | Mandatory |
| Financial | BDT transaction amounts, bKash/Nagad/Rocket account numbers, timestamps | Generated automatically on transaction | Mandatory |
| Gaming Activity | Games played, bet history, win/loss records, session duration | Generated automatically during play | Mandatory |
| Technical | IP address, browser, device type, OS, referring URL | Collected automatically via server logs | Mandatory |
| Communications | Support chat transcripts, email correspondence | Provided directly by you | When you contact us |
Section 2
How We Use Your Data
ffbaje processes your personal data only for lawful, specified purposes. The following describes each purpose for which we use your data and the legal basis that justifies that processing.
- Account creation and management: We use your registration data to create and maintain your ffbaje account, authenticate your identity at each login, and communicate essential account notifications such as deposit confirmations, withdrawal status updates, and security alerts. This processing is necessary to perform the contract between you and ffbaje.
- Identity verification and KYC compliance: We use identity document data and date-of-birth information to verify that you are at least 18 years of age and that you are the genuine holder of the payment methods you use on the platform. This processing is required to comply with our anti-money laundering and player protection obligations.
- Payment processing: Transaction data is used to credit deposits to your account wallet, process withdrawal requests to your registered mobile money account, and maintain accurate financial records. This processing is necessary to perform the contract.
- Responsible gaming monitoring: Gaming activity logs are analysed to identify patterns that may indicate problem gambling behaviour, such as sudden increases in bet size, unusually long sessions, or a sequence of large losses. Where such patterns are detected, our responsible gaming team may reach out with supportive information or apply temporary protective measures. This processing is carried out in the legitimate interest of player welfare.
- Fraud prevention and platform security: Technical data — including IP addresses, device fingerprints, and login timestamps — is used to detect and prevent multi-accounting, bot usage, payment fraud, and unauthorised account access. This processing is carried out in the legitimate interest of maintaining a fair and secure platform.
- Customer support: Communications data is used to investigate and resolve support requests, disputes, and complaints. Records are retained to ensure consistency in how similar issues are handled and to provide a reference in the event of escalated complaints.
- Platform analytics and improvement: Aggregated, anonymised session and usage data is used to analyse how players interact with the ffbaje platform so that we can identify areas for improvement, optimise page performance, and develop new features. This data is processed in aggregate and does not identify individual players.
- Promotional communications: If you have opted in to receive marketing communications from ffbaje, we may use your mobile number or email address to send you information about promotions, seasonal offers (such as those tied to BPL, Eid, or Pohela Boishakh), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support.
ffbaje does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies under any circumstances. Your data is used exclusively for the purposes stated in this Privacy Policy.
Section 3
Data Sharing & Third Parties
ffbaje does not share your personal data with third parties except in the specific, limited circumstances described below. In every case where data is shared, we require the recipient to handle it in a manner consistent with this Privacy Policy and applicable data protection standards.
Payment service providers: To process deposits and withdrawals, ffbaje shares transaction-level data — including your mobile number and transaction amount — with the relevant mobile money operator (bKash, Nagad, or Rocket). This sharing is the minimum necessary to execute the financial transfer you have requested. Payment providers operate under their own privacy policies and terms of service, which govern their handling of data on their side of the transaction.
Game technology providers: Slot and table game outcomes and certain session data are processed by third-party game engines supplied by providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the technical session data required to render and record game outcomes. They do not receive your name, NID details, or payment information.
Identity verification services: During KYC processing, identity document images may be transmitted to a third-party identity verification service for document authenticity checking and facial matching. Such providers are bound by strict confidentiality agreements and process your data solely for the purpose of verification.
Legal and regulatory obligations: ffbaje may be required by law, court order, or the direction of a competent authority to disclose personal data. In such cases, we will disclose the minimum data required to comply with the legal obligation. Where legally permissible, we will notify you of such a request before disclosing your data.
Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ffbaje's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data post-transfer.
ffbaje does not transfer your personal data to third countries for speculative processing or commercial purposes. Any international data transfers that occur as part of game technology delivery are covered by contractual data protection clauses with the relevant providers.
Payment Partners
bKash, Nagad, and Rocket receive only the transaction data needed to process your BDT transfer. ffbaje does not share identity documents or gaming history with payment providers.
Game Providers
Providers like Pragmatic Play and Evolution Gaming receive technical session data to power their games. They do not receive your name, NID, or financial account details.
Legal Obligations
We may disclose data in response to a valid legal order. We share only the minimum required and notify you where law permits before any such disclosure is made.
Section 5
Data Retention
ffbaje retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML compliance, dispute resolution |
| KYC documents | Duration of account + 5 years after closure | Regulatory obligation, fraud prevention |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gaming activity logs | 3 years from session date | Dispute resolution, responsible gaming review |
| Support communications | 3 years from last communication | Complaint handling, quality assurance |
| Analytics data | 24 months (anonymised) | Platform improvement — no individual identification |
When the applicable retention period expires, data is deleted securely or irreversibly anonymised. Data that is anonymised beyond any reasonable possibility of re-identification may be retained indefinitely for statistical and research purposes. Upon receiving a verified account closure request, ffbaje will initiate the deletion process for data that is not subject to a mandatory retention period within 30 days.
Closing your ffbaje account does not result in the immediate deletion of all personal data. Certain categories — particularly KYC documents and transaction records — must be retained for the periods listed above to meet our legal obligations. You will be informed of this at the time you request account closure.
Section 6
Data Security
ffbaje applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. While no internet-based platform can guarantee absolute security, we have implemented the following controls to minimise risk:
- Transport encryption: All data transmitted between your device and the ffbaje platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages, including login, account management, and payment flows.
- Password hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm before being stored, meaning that even internal staff cannot retrieve your original password.
- Access controls: Access to personal data within ffbaje's systems is restricted to staff members who have a legitimate operational need for that data. Access is governed by role-based permissions and is subject to audit logging.
- KYC document handling: Identity documents submitted for KYC verification are stored in an encrypted document vault with access restricted to the compliance team. Documents are not accessible by general platform operations staff.
- Breach response: In the event of a personal data breach that presents a risk to affected players, ffbaje will take immediate steps to contain the breach, assess the impact, and notify affected players as promptly as reasonably practicable with guidance on protective steps they should take.
You also play an important role in protecting your own account. Choose a strong, unique password for your ffbaje account and do not share it with anyone. If you suspect your account has been accessed without your authorisation, contact ffbaje support immediately.
256-bit SSL Encryption
Every connection to ffbaje is protected by TLS encryption. Data in transit is unreadable to any party intercepting network traffic between your device and our servers.
Role-Based Access
Only authorised staff with a defined operational need can access personal data. All access events are logged and subject to periodic internal audit.
Breach Response Protocol
In the event of a confirmed data breach, ffbaje will notify affected players promptly and provide clear guidance on recommended protective actions, including password resets.
Section 7
Your Privacy Rights
As a player on the ffbaje platform, you hold a number of rights with respect to your personal data. ffbaje is committed to honouring these rights promptly and without creating unnecessary barriers. To exercise any of the rights described below, contact our support team at [email protected] with your account username and a description of your request. We will respond within 30 days of receiving a valid, verifiable request.
Right of Access
Request a copy of the personal data ffbaje holds about you, including which categories are processed and for what purposes.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your ffbaje account. Some corrections require re-verification for security purposes.
Right to Erasure
Request deletion of your personal data where it is no longer needed for its original purpose and no legal retention obligation applies.
Right to Restrict Processing
Request that we limit processing of your data to storage only, for example while a dispute about accuracy is being resolved.
Right to Portability
Request a structured, machine-readable export of personal data you have provided directly to ffbaje, such as your account registration data.
Right to Object
Object to processing of your data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes.
Withdraw Marketing Consent
Withdraw consent to receive promotional communications at any time by contacting support. Withdrawal does not affect the lawfulness of prior communications sent with your consent.
Self-Exclusion
Request account self-exclusion as a responsible gaming measure. Visit our Responsible Gaming page for full details on cooling-off periods and permanent exclusion options.
To protect your data against unauthorised requests, ffbaje verifies the identity of any person submitting a data rights request before acting on it. You will be asked to confirm ownership of the account associated with the request. We will not act on rights requests that cannot be verified to our reasonable satisfaction.
Section 8
Policy Updates & Contact
ffbaje reviews and updates this Privacy Policy periodically to reflect changes in how we operate the platform, changes in applicable data protection standards, or feedback from players. When material changes are made to this Policy, a notice will be displayed on the ffbaje platform and the "Last updated" date at the top of this page will be revised. For significant changes that affect your rights or how your data is used in a substantively new way, we will send a direct notification to your registered mobile number or email address if one is on file.
Continued use of the ffbaje platform after the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any changes, you should stop using the platform and contact us to close your account. Your data will continue to be handled in accordance with the version of the Policy that was in effect at the time of collection for any mandatory retention purposes.
This Policy is effective as of January 2026 and supersedes all previous versions of the ffbaje Privacy Policy.
Contact for privacy matters: All data rights requests, privacy concerns, and questions regarding this Policy should be directed to our support team. Email: [email protected] (plain text — not a clickable link). Our support team operates 24/7 on Bangladesh Standard Time (BST, UTC+6) and will acknowledge your request within one business day.
ffbaje is built for Bangladeshi players who trust us with sensitive personal and financial information. We treat that trust as a core responsibility, not a compliance checkbox. If you ever have a concern about how your data is being handled, reach out — we will respond promptly and transparently.
Understand Your Rights on ffbaje
Your data belongs to you. If you have questions about this Privacy Policy, want to review the data we hold, or need to update your account details, our 24/7 support team is here to help. You can also explore our full Terms & Conditions or visit our FAQ for quick answers. 18+ only.