Data & Privacy
Privacy Policy for ff5
At ff5, protecting the personal data of our players is a responsibility we take seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and store it, and what rights you have over your data as a player based in Bangladesh. We believe transparency is the foundation of trust.
Our Commitment
Privacy Principles at ff5
Before you read the full policy below, here are six core principles that guide how ff5 handles your personal data. These are not aspirational statements — they are binding commitments reflected in every clause of this document.
Data Minimisation
ff5 collects only the personal data that is strictly necessary for the purposes described in this policy. We do not gather data speculatively or hold information beyond the period needed to fulfil its purpose. If we do not need it, we do not collect it.
Security by Design
The ff5 platform uses industry-standard SSL/TLS encryption for all data in transit and applies encryption at rest for sensitive stored records, including identity documents submitted during KYC verification. Access to personal data is restricted to authorised personnel only.
No Sale of Personal Data
ff5 does not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial profiling purposes. Your data is used solely to operate your ff5 account, process payments, comply with our obligations, and improve the platform experience.
Full Transparency
This policy clearly identifies every category of data we collect, every purpose for which it is used, and every class of third party with whom it may be shared. There are no hidden data practices at ff5. If our practices change, we will notify registered players and update this policy before the change takes effect.
Your Right to Access
Registered players have the right to request a copy of the personal data held about them by ff5 at any time. ff5 will respond to verified data access requests within 30 days. You also have the right to correct inaccurate data, request deletion where applicable, and object to certain processing activities.
Lawful Basis for Processing
Every data processing activity at ff5 is conducted on a defined lawful basis: contract performance, legal obligation, legitimate interest, or explicit consent. We do not process personal data without a lawful basis. Where consent is the basis, you retain the right to withdraw it at any time without penalty.
Section 1
Information We Collect
ff5 collects personal data from players through several channels: directly from you when you register an account or submit KYC documents; automatically through your use of the platform (such as device and browser data); and from trusted third-party service providers such as payment processors and identity verification partners. The categories of data we collect are described below.
Registration Data
When you create an ff5 account, you are required to provide the following information:
- Full legal name (as it appears on your government-issued identity document)
- Date of birth (used to verify that you are aged 18 or older)
- Residential address in Bangladesh (city, district, and postal code)
- Mobile phone number registered to your bKash, Nagad, Rocket, or Upay account
- Email address (used for account communications and password recovery)
- Username and password of your choosing (password is stored in hashed, encrypted form — ff5 staff cannot view your password in plain text)
KYC Verification Data
As part of our mandatory Know Your Customer (KYC) programme, ff5 requires players to submit one or more of the following documents before withdrawals are approved:
- National Identity Card (NID) — front and back scan or photograph
- Valid passport (photo page and personal data page)
- Birth certificate issued by a recognised Bangladeshi authority
- Proof of residential address: utility bill, bank statement, or mobile banking statement dated within the last 90 days
- Proof of payment method ownership: a screenshot or confirmation document showing that the bKash, Nagad, Rocket, or Upay account used for deposits is registered in your name
KYC documents are stored securely and used exclusively for identity verification and anti-fraud purposes. They are not shared with third parties for marketing or profiling purposes under any circumstances.
Transaction & Gaming Data
ff5 automatically records the following data in connection with your account activity:
- Deposit and withdrawal records: amounts (in BDT), timestamps, payment method used, and transaction status
- Wagering history: games played, bet amounts, outcomes, and session duration
- Bonus and promotional activity: bonuses claimed, wagering progress, and expiry events
- Account balance history and any adjustments made by ff5 staff following a formal review
Technical & Device Data
When you access the ff5 platform — whether via a web browser on desktop or mobile — our servers and analytics tools automatically collect the following technical data:
- IP address (used for geolocation, fraud detection, and compliance checks)
- Device type, operating system, and browser version
- Session timestamps: login time, logout time, and session duration
- Pages visited, games launched, and navigation paths within the platform
- Referring URL (the page or source from which you arrived at ff5)
- Device identifiers and browser fingerprint data (used for fraud prevention and multi-account detection)
Communications Data
If you contact the ff5 support team via live chat or email ([email protected]), we retain a record of the communication including the content of your message, the date and time it was sent, and the resolution outcome. These records are used for quality assurance, staff training, and to maintain a consistent service record for your account. Support communications are stored for a minimum of two years from the date of the interaction.
Player Note: You are never required to share your ff5 account password with our support team. ff5 staff will never ask for your password via live chat, email, or any other channel. If you receive a communication claiming to be from ff5 and requesting your password, please treat it as fraudulent and contact us immediately at [email protected].
Section 2
How We Use Your Data
ff5 uses the personal data it collects for the following clearly defined purposes. Each purpose is supported by a defined lawful basis for processing.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation & management | Registration data, contact details | Contract performance |
| Identity & age verification (KYC) | KYC documents, date of birth, NID | Legal obligation |
| Processing deposits & withdrawals | Transaction data, payment method details | Contract performance |
| Fraud prevention & security | IP address, device data, behavioural patterns | Legitimate interest |
| Responsible gaming compliance | Gaming history, session data, deposit patterns | Legal obligation / legitimate interest |
| Customer support | Communications data, account history | Contract performance |
| Platform analytics & improvement | Technical data, navigation data | Legitimate interest |
| Promotional communications | Email address, gaming preferences | Consent (opt-in only) |
Responsible Gaming Monitoring
ff5 uses your gaming activity data — including session durations, deposit frequency, wager sizes, and loss patterns — to identify potential signs of problem gambling. This processing is conducted in the interest of player welfare and in compliance with responsible gaming obligations. Where our monitoring systems detect patterns that may indicate a player is experiencing difficulty, our responsible gaming team may proactively reach out to offer support tools such as deposit limits, cooling-off periods, or self-exclusion options. This monitoring is a non-negotiable component of operating a safe platform; it cannot be opted out of.
Marketing Communications
ff5 will only send promotional emails, bonus notifications, and campaign communications to players who have explicitly opted in to receive them during account registration or via account settings. Each marketing communication will include a clear and functional unsubscribe link. Players who opt out of marketing communications will continue to receive essential transactional messages (such as deposit confirmations, withdrawal notifications, and security alerts) as these are necessary for the operation of the account and cannot be disabled.
Your Choice on Marketing: To update your marketing communication preferences at any time, log in to your ff5 account and visit the notification settings section, or contact support via live chat. Opt-out requests are processed within 48 hours. Opting out of marketing does not affect your ability to access any feature of the ff5 platform or claim any bonuses for which you are otherwise eligible.
Section 3
Data Sharing & Third Parties
ff5 does not sell your personal data. However, in the course of operating the platform and fulfilling our legal and contractual obligations, we may share specific categories of data with the following classes of third-party service providers. All third-party providers engaged by ff5 are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared.
Payment Processors
To process your deposits and withdrawals, ff5 shares the minimum necessary transaction data with the relevant payment provider: bKash, Nagad, Rocket (Dutch-Bangla Bank Mobile Banking), Upay, Visa, or Mastercard. The data shared typically includes the transaction amount in BDT, the registered mobile number or card identifier, and a transaction reference. Payment processors operate under their own privacy policies and are responsible for the security of data within their own systems. ff5 does not store full card numbers on its servers — card data is tokenised by the payment processor.
Identity Verification Partners
ff5 may use a third-party KYC verification service to assist in validating the identity documents you submit. In such cases, your KYC documents (NID, passport, proof of address) are transmitted to the verification partner via an encrypted connection. The verification partner is contractually prohibited from retaining, copying, or using your identity documents for any purpose other than completing the verification check requested by ff5.
Game Studios & Software Providers
The games available on the ff5 platform are supplied by licensed third-party game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. These providers may collect limited technical data (such as game session identifiers, round results, and RTP audit data) through their game software for the purpose of game integrity auditing and regulatory compliance. This data is pseudonymised and does not include your full name or payment details.
Analytics Providers
ff5 uses analytics tools to understand how players navigate and use the platform. Analytics data is aggregated and pseudonymised where possible. Analytics providers are prohibited from using ff5 player data for their own commercial purposes or cross-referencing it with data from other clients.
Legal & Regulatory Disclosure
ff5 may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by a valid legal order, court direction, or applicable law. In the event of such a disclosure, ff5 will notify the affected player to the extent permitted by law, unless the legal order prohibits such notification. ff5 also cooperates with anti-money laundering (AML) and counter-terrorism financing (CTF) reporting obligations and may file reports with relevant financial intelligence authorities without prior notice to the player where required by law.
No Cross-Border Data Transfers Without Safeguards: If any third-party service provider engaged by ff5 processes your personal data outside of Bangladesh, ff5 will ensure that appropriate data transfer safeguards are in place, including contractual standard clauses requiring the overseas recipient to maintain data protection standards equivalent to those applied within Bangladesh. ff5 will not transfer personal data to jurisdictions that do not offer an adequate level of data protection.
Section 5
Data Retention
ff5 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data held by ff5:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation, AML compliance |
| KYC documents (NID, passport) | Duration of account + 5 years post-closure | Legal obligation, regulatory requirement |
| Transaction records | 7 years from transaction date | Financial record-keeping, AML compliance |
| Gaming history | Duration of account + 3 years post-closure | Responsible gaming monitoring, dispute resolution |
| Support communications | 2 years from date of interaction | Quality assurance, complaint records |
| Analytics & technical logs | 13 months from collection date | Platform improvement, fraud detection |
| Marketing consent records | Duration of consent + 3 years | Evidence of lawful basis for processing |
Upon expiry of the applicable retention period, ff5 will securely delete or irreversibly anonymise the relevant data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes. Where a player submits a deletion request before the end of the applicable retention period, ff5 will assess whether deletion is possible given our legal obligations. In cases where legal retention requirements prevent immediate deletion, ff5 will restrict further processing of the data to the minimum necessary and notify the player of the reason for the delay.
Section 6
Security Measures
ff5 applies a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. The following technical and organisational measures are in place across the ff5 platform:
- SSL/TLS Encryption in Transit: All data transmitted between your device and the ff5 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when accessing ff5 — this confirms your connection is encrypted.
- Encryption at Rest: Sensitive data stored on ff5 servers — including KYC documents, password hashes, and payment identifiers — is encrypted at rest using AES-256 or equivalent standards.
- Access Controls: Access to personal data within ff5 systems is restricted on a need-to-know basis. Staff members are granted only the minimum level of access required to perform their job function. All internal access is logged and audited.
- Password Hashing: Player passwords are never stored in plain text. They are processed through a one-way cryptographic hashing function with a unique salt, meaning even ff5 staff cannot retrieve your original password.
- Fraud Detection Systems: ff5 operates automated systems that continuously monitor account activity, login patterns, device fingerprints, and transaction behaviour for signs of fraud, account takeover, or multi-accounting. Suspicious activity triggers an immediate review by our security team.
- Penetration Testing: The ff5 platform undergoes regular security assessments including vulnerability scanning and penetration testing by qualified security professionals to identify and address potential weaknesses before they can be exploited.
- Staff Training: All ff5 staff who handle personal data receive mandatory data protection training covering their obligations under this policy, secure data handling procedures, and how to recognise and respond to a data breach.
Data Breach Response
In the event of a data security breach that affects the personal data of ff5 players, ff5 will take immediate steps to contain the breach, assess its scope, and mitigate any harm to affected individuals. Players whose data has been compromised in a manner that creates a high risk to their rights will be notified directly as soon as reasonably practicable, and no later than 72 hours after ff5 becomes aware of the breach. The notification will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the steps ff5 has taken or proposes to take in response.
What You Can Do to Stay Secure: Use a strong, unique password for your ff5 account — one that you do not use on any other site. Do not share your login credentials with anyone. Always log out of your ff5 account after each session, especially on shared or public devices. If you notice any unusual activity in your account — such as deposits or withdrawals you did not initiate — contact ff5 support immediately via live chat or at [email protected].
Section 7
Your Privacy Rights
As an ff5 player, you have a number of rights in relation to the personal data we hold about you. ff5 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, contact the ff5 data support team via live chat or by emailing [email protected] with the subject line "Privacy Rights Request". All requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.
- Right of Access: You have the right to request a copy of the personal data ff5 holds about you, along with information about how it is being used. ff5 will provide this in a structured, commonly used, machine-readable format where technically feasible.
- Right to Rectification: If any of the personal data ff5 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Players can update basic account details (such as contact information) directly through account settings. Corrections to KYC-verified data (such as legal name or date of birth) must be submitted with supporting documentation.
- Right to Erasure: You may request that ff5 delete your personal data. ff5 will honour deletion requests where there is no overriding legal obligation to retain the data. As described in the Data Retention section, certain categories of data (particularly financial and KYC records) must be retained for defined periods to comply with anti-money laundering regulations. Where deletion is not immediately possible, ff5 will restrict processing and notify you of the applicable retention period.
- Right to Restriction of Processing: In certain circumstances — such as while the accuracy of your data is being contested, or while you are objecting to processing — you may request that ff5 restrict how it uses your data. Restricted data will not be processed for any purpose other than storage until the restriction is lifted.
- Right to Data Portability: Where ff5 processes your data on the basis of your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to receive your data in a portable, structured format and to have it transferred to another service provider where technically feasible.
- Right to Object: You have the right to object to ff5 processing your data on the basis of legitimate interests, including profiling carried out for direct marketing purposes. Where you object to marketing processing, ff5 will cease that processing immediately. Where you object to processing based on legitimate interests, ff5 will assess whether its interests override your rights and notify you of the outcome.
- Right to Withdraw Consent: Where ff5 relies on your consent as the lawful basis for processing (for example, marketing communications), you have the right to withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
Verification Requirement: To protect your privacy, ff5 will verify your identity before processing any privacy rights request. You will be asked to confirm your registered email address and, for sensitive requests such as data access or erasure, to provide a copy of your identity document. This verification step is a security measure designed to prevent third parties from accessing or deleting your data without your authorisation.
Section 8
Policy Updates & Contact
ff5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable laws, or regulatory requirements. When a material change is made to this policy, ff5 will notify registered players by email to their registered address and will display a prominent notice on the platform prior to the change taking effect. The updated policy will include a revised "Last Updated" date at the top of this page.
Your continued use of the ff5 platform following the notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should stop using the platform and may request account closure in accordance with the ff5 Terms & Conditions. Historical versions of this Privacy Policy are available upon request by contacting [email protected].
Children's Privacy
ff5 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. If ff5 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately, the account will be permanently closed, and any deposits will be returned in accordance with our underage gambling policy as described in the ff5 Terms & Conditions. If you are a parent or guardian and believe that a minor has created an ff5 account using your details or their own, please contact us immediately at [email protected] so we can take prompt action. 18+ only.
Contact the ff5 Privacy Team
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data ff5 holds about you, please contact us through the following channels:
- Email: [email protected] (Subject: Privacy Policy Enquiry)
- Live Chat: Available 24 hours a day, 7 days a week, via the ff5 platform
- Response Time: Privacy enquiries are acknowledged within 5 business days and substantively responded to within 30 calendar days
- Operating Timezone: Bangladesh Standard Time (BST, UTC+6)
This Policy Applies to All ff5 Players in Bangladesh. By registering an account and using the ff5 platform, you acknowledge that you have read and understood this Privacy Policy in its entirety and that you consent to the collection, use, and processing of your personal data as described herein. This policy was last reviewed and updated in January 2026 and supersedes all previously published versions of the ff5 Privacy Policy.
Continue at ff5
Your Data Is Safe. Now Enjoy the Games.
Now that you understand how ff5 protects your data, explore everything the platform has to offer — from live cricket betting and premium slots to our full casino experience. Have questions? Our FAQ page has quick answers, or reach our support team via live chat anytime. 18+ only. Please gamble responsibly.