ffbagar Privacy Policy

We collect only the minimum personal data necessary to provide you with a safe, compliant, and fully functional gaming experience on the ffbagar platform. The categories of personal data we collect are as follows:

ffbagar does not knowingly collect personal data from individuals under the age of 18. If the Operator discovers that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. If you believe a minor has submitted personal data to ffbagar, please notify us immediately at [email protected].

Where you choose not to provide certain categories of personal data — for example, where you decline to submit identity verification documents — ffbagar may be unable to provide you with the full range of services available on the platform, including processing withdrawal requests.

Your personal data may be shared with the following categories of third parties under the circumstances described below:

• Payment Service Providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, and any other payment processors integrated into the ffbagar platform, solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Game Content Providers: Third-party game studios and software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical and account data necessary to deliver their game content within the ffbagar platform environment. These providers are contractually prohibited from using this data for any purpose beyond game delivery.
• Identity Verification Services: Where automated KYC verification tools are used to validate identity documents, your verification data may be processed by a third-party verification service provider operating under a data processing agreement with ffbagar.
• Fraud Prevention and AML Partners: We may share transaction data and account activity data with specialist fraud prevention and anti-money laundering analytics providers to fulfil our compliance obligations.
• Legal and Regulatory Authorities: ffbagar may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required by law, or where disclosure is necessary to protect the rights, property, or safety of the Operator, its players, or the public.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of the ffbagar business, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any change in data controller prior to the transfer taking effect.

All third-party service providers with whom ffbagar shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with ffbagar's written instructions. ffbagar does not permit its service providers to use your personal data for their own independent commercial purposes.

International data transfers — where your data is processed by a service provider located outside Bangladesh — are conducted only where adequate data protection safeguards are in place, including contractual clauses that impose equivalent data protection standards to those observed by ffbagar.

The following retention periods apply to the main categories of personal data held by ffbagar:

• Account and Identity Data: Retained for the duration of your active account relationship with ffbagar and for a minimum of five (5) years following the closure or termination of your account. This period reflects standard record-keeping obligations applicable to online gaming operators.
• Transaction and Financial Data: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of each transaction. This retention period supports our anti-money laundering obligations and enables accurate dispute resolution.
• KYC and Verification Documents: Retained for a minimum of five (5) years following account closure. In some cases, where a regulatory obligation requires a longer retention period, documents may be retained for up to seven (7) years.
• Customer Support Communications: Support chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, unless the communication relates to an open dispute or regulatory investigation, in which case it is retained until the matter is fully resolved.
• Marketing Preferences: Records of your marketing consent and opt-out history are retained for five (5) years to demonstrate compliance with consent obligations.
• Technical and Analytics Data: Anonymised or aggregated analytics data (from which you cannot be individually identified) may be retained indefinitely for platform improvement purposes. Non-anonymised technical logs (such as IP address logs associated with your account) are retained for twelve (12) months.

When personal data is no longer required for its original purpose and no legal obligation requires its continued retention, ffbagar will securely delete or anonymise that data. Deletion is performed using industry-standard secure erasure methods to prevent recovery.

If you request deletion of your personal data before the applicable retention period has expired, ffbagar will assess the request against its ongoing legal and regulatory obligations. Where a legal obligation requires continued retention, we will inform you of this and retain only the minimum data necessary to fulfil that obligation.

ffbagar is committed to upholding your data rights in a transparent and timely manner. The following rights are available to all registered players:

• Right of Access: You have the right to request a copy of the personal data that ffbagar holds about you. Upon a verified request, we will provide you with a summary of the data categories held, the purposes for which they are processed, and any third parties with whom that data has been shared.
• Right to Rectification: If any personal data held by ffbagar is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your email address, mobile number, and residential address can be updated directly through your account dashboard. Changes to identity data (name, date of birth) require submission of a valid supporting document.
• Right to Erasure: You may request that ffbagar delete your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the data has been unlawfully processed. Note that ffbagar may be required to retain certain categories of data for legal, regulatory, or audit purposes even following a deletion request.
• Right to Restrict Processing: You may request that ffbagar temporarily restrict the processing of your personal data in circumstances where you contest its accuracy, where processing is unlawful but you prefer restriction over deletion, or where ffbagar no longer needs the data but you require it for a legal claim.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that ffbagar provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, in which case ffbagar will assess whether its legitimate interests are overridden by your individual rights and circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. Please include your registered account email address and a brief description of the right you wish to exercise. ffbagar will respond to all verified data rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, and you will be notified accordingly.

ffbagar will not charge a fee for processing data rights requests made in good faith. However, where requests are manifestly unfounded or excessive — for example, due to their repetitive nature — the Operator reserves the right to charge a reasonable administrative fee or to refuse to act on the request, with written justification provided to you.