ff4u Casino Privacy Policy

ff4u Casino ("ff4u", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the ff4u Platform at ff4u.org. This Privacy Policy explains how ff4u collects, processes, stores, discloses, and protects personal information in connection with your use of our casino and sports betting services.

This Privacy Policy applies to all registered Players, visitors to ff4u.org, and any individual whose personal data ff4u processes in the course of operating the Platform. By registering an account or using any ff4u service, you acknowledge that you have read, understood, and accepted this Privacy Policy.

ff4u operates under international gaming authority licensing, which imposes specific data handling, identity verification, and record-keeping obligations that inform several of the data processing activities described in this policy. Compliance with those licensing requirements is both a legal obligation and a reflection of ff4u's commitment to operating a transparent, trustworthy platform for Malaysian players.

ff4u collects personal data from you directly, automatically through your use of the Platform, and from third parties as described below.

Data you provide directly:

• Full legal name as it appears on your Malaysian identity document;
• Date of birth (for age verification — ff4u is strictly 21+ only);
• Malaysian IC number or passport number;
• Residential address;
• Email address;
• Malaysian mobile phone number;
• Payment account details including Touch 'n Go eWallet IDs, Boost account identifiers, and bank account numbers for Maybank, CIMB, and Public Bank transfers;
• Any documents uploaded for KYC purposes (copies of IC, utility bills, bank statements);
• Communications you send to ff4u support via live chat or email.

Data collected automatically:

Data from third parties: ff4u may receive data about you from identity verification providers, payment processors, fraud prevention agencies, and, where applicable, responsible gaming databases such as self-exclusion registries.

ff4u uses the personal data described in Section 2 for the following purposes:

• Account creation and management: To register and maintain your ff4u account, verify your identity, and enable you to access the Platform.
• Payment processing: To process deposits and withdrawals in MYR via your chosen payment method and to maintain accurate transaction records.
• Identity verification (KYC): To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years, as required by our licensing obligations.
• Fraud prevention and security: To detect, prevent, and investigate fraudulent activity, money laundering, multi-accounting, and other misuse of the Platform.
• Legal and regulatory compliance: To fulfil ff4u's obligations under its international gaming authority licence, including record-keeping, reporting, and anti-money-laundering (AML) requirements.
• Responsible gaming: To monitor gaming behaviour, enforce deposit and loss limits you have set, process self-exclusion requests, and identify players who may need support.
• Platform personalisation: To customise the game lobby, bonus offers, and promotional communications based on your activity on ff4u.
• Customer support: To respond to your queries, resolve disputes, and maintain a record of support interactions for quality assurance.
• Analytics and improvement: To analyse anonymous usage data and improve the performance, usability, and content of the ff4u Platform.
• Marketing communications: To send you promotional offers, newsletters, and bonus notifications — only where you have provided consent or where ff4u has a legitimate interest as an existing Player.

ff4u processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contract with you — including account management, payment processing, and game access — is necessary for the performance of the contract between you and ff4u.
• Legal obligation: ff4u processes certain data — particularly KYC documents, transaction records, and AML-related data — to comply with mandatory legal and regulatory obligations under our gaming licence.
• Legitimate interests: ff4u processes some data (such as fraud detection signals, IP geolocation, and anonymised analytics) on the basis of our legitimate interest in operating a secure, compliant, and effective platform, where those interests are not overridden by your fundamental rights.
• Consent: Where ff4u relies on consent as the basis for processing — principally for optional marketing communications and non-essential cookies — you may withdraw that consent at any time by contacting support or adjusting your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ff4u does not sell, rent, or trade your personal data to any third party for commercial purposes. ff4u shares your personal data only with the following categories of recipients, and only to the extent necessary:

• Payment service providers: Touch 'n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank) receive transactional data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services receive the personal and documentary information necessary to verify your identity and screen against sanctions lists as required by our gaming licence.
• Game content providers: Game studios and aggregators may receive your account identifier and game session data to deliver game content and calculate results. These providers do not receive your name, address, or payment details.
• Fraud prevention and security agencies: ff4u may share data with specialist fraud prevention agencies where there is reasonable suspicion of criminal activity, multi-accounting, or money laundering.
• Regulatory and law enforcement authorities: ff4u will disclose personal data to competent authorities where required by law, court order, or the terms of our gaming licence, including reporting obligations under applicable AML regulations.
• Responsible gaming registries: Where a Player requests self-exclusion that extends to a third-party registry, ff4u will share necessary data to register and enforce that exclusion.
• IT and hosting service providers: Technical infrastructure partners who process data on ff4u's behalf under data processing agreements that impose equivalent privacy and security obligations.

ff4u is operated under international gaming authority licensing, which means that some personal data may be processed on servers located outside Malaysia. Where personal data is transferred to a jurisdiction that does not offer a level of data protection equivalent to that applicable in Malaysia, ff4u implements appropriate safeguards including contractual protections with the relevant data processors and technical security measures to ensure your data remains protected.

By using the ff4u Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to servers and processors located in the jurisdictions described above, subject to the safeguards outlined in this section.

ff4u uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and collect anonymous analytics data. The categories of cookies used on ff4u are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, store your language preference, and manage security tokens. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These cookies remember your preferences — such as game lobby sort order — to provide a more personalised experience. Disabling them will not prevent you from using the Platform but may affect convenience features.
• Analytics cookies: ff4u uses anonymised analytics tools to understand how players navigate the Platform so we can make improvements. These cookies do not identify you individually and are processed in aggregate only.
• Responsible gaming cookies: These cookies support session time tracking and reality check pop-ups as part of ff4u's responsible gaming features.

You can manage non-essential cookies through your browser settings. Clearing cookies will log you out of the Platform and may reset your preferences. Please note that ff4u does not use third-party advertising cookies or behavioural targeting cookies for the purpose of serving advertisements on other websites.

ff4u retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our gaming authority licensing obligations or applicable law.

• Account data and KYC documents: Retained for a minimum of 5 years from the date of account closure, as required by AML regulations applicable under ff4u's gaming licence.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing preferences: Retained until you withdraw your consent or request deletion, whichever is earlier.
• Self-exclusion records: Retained for the duration of the exclusion period plus a further period as required by responsible gaming obligations, to prevent inadvertent re-registration.

Once the applicable retention period has expired, ff4u will securely delete or anonymise the relevant personal data unless a legitimate legal basis for further retention exists.

As a player on the ff4u Platform, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data ff4u holds about you at any time.
• Right to rectification: You may request that ff4u correct any inaccurate or incomplete personal data it holds about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ff4u's overriding legal obligations (e.g., AML record-keeping requirements).
• Right to restrict processing: You may request that ff4u restricts the processing of your data in certain circumstances, such as where you contest its accuracy or object to processing based on legitimate interests.
• Right to data portability: You may request that ff4u provide your personal data in a structured, machine-readable format where processing is carried out by automated means on the basis of consent or contract.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, ff4u will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time by contacting support or adjusting your account settings.

To exercise any of the above rights, please contact the ff4u privacy team at [email protected]. ff4u will respond to verified requests within 30 days. No fee is charged for exercising your rights, except in cases of manifestly unfounded or excessive requests.

The ff4u Platform is strictly restricted to individuals aged 21 years and above. ff4u does not knowingly collect personal data from any person under the age of 21. If ff4u becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, the relevant account will be closed immediately, any balance will be forfeited, and the data will be deleted to the extent permitted by law.

If you are a parent or guardian and have reason to believe that a minor has created an account on ff4u, please contact our support team at [email protected] immediately. ff4u takes the protection of minors seriously and will act on any such report promptly.

ff4u may send promotional emails, SMS messages, and in-platform notifications about bonuses, new games, and special offers. For new registered players, ff4u relies on its legitimate interest as a gaming platform to communicate about offers directly related to your account activity for a reasonable period following registration.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email;
• Adjusting your communication preferences in your ff4u account settings; or
• Contacting ff4u support and requesting removal from all marketing lists.

Opting out of marketing will not affect transactional communications — ff4u will continue to send emails relating to your account activity, deposits, withdrawals, KYC requests, and security alerts regardless of your marketing preference.

Players who are self-excluded from ff4u will be removed from all marketing lists automatically and will not receive any promotional communications during or after the exclusion period.

ff4u implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption of personal data at rest;
• TLS 1.3 encryption of all data in transit between your device and ff4u servers;
• Multi-factor authentication for internal staff access to player data systems;
• Role-based access controls limiting data access to personnel with a legitimate operational need;
• Regular third-party penetration testing and vulnerability assessments;
• 24/7 infrastructure monitoring with automated intrusion detection;
• Segregated storage of player funds separate from ff4u operational accounts.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, ff4u will notify affected players without undue delay and will take immediate remedial steps to contain and mitigate the breach.

ff4u reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this document.

Where changes are material — for example, a new category of data being collected or a new purpose for processing — ff4u will notify registered Players by email and by a prominent notice on the Platform before the changes take effect. Your continued use of ff4u following notification of such changes constitutes acceptance of the revised Privacy Policy.

For any queries about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact the ff4u data privacy team using the following channels:

• Email: [email protected] — mark your subject line with "Privacy Request" for faster routing to the relevant team.
• Live Chat: Available 24/7 within the ff4u Platform. Average response time under 3 minutes.

ff4u commits to acknowledging all privacy-related enquiries within 2 business days and to providing a substantive response within 30 days of receiving a verified request.

If you are not satisfied with ff4u's response to a privacy concern, you have the right to raise a complaint with the relevant supervisory authority or the dispute resolution body designated under ff4u's international gaming authority licence.