ft999 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

ft999 ("ft999", "we", "us", "our") is committed to protecting the privacy and security of the personal data of all registered players and website visitors. This Privacy Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data in connection with the ft999 platform available at https://ft999.io.

This Policy applies to all users of the ft999 platform, including registered players, prospective players who browse the website without registering, and any person who contacts ft999 customer support. It applies regardless of the device or method used to access the platform.

This Privacy Policy should be read alongside the ft999 Terms and Conditions and the ft999 Responsible Gaming Policy, both of which are incorporated by reference into the complete agreement between you and ft999.

2. Data Controller

For the purposes of applicable data protection law, ft999 acts as the data controller in respect of the personal data you provide when registering for and using the ft999 platform. As data controller, ft999 determines the purposes and means of processing your personal data.

All data protection queries, subject access requests, and privacy-related complaints should be directed to the ft999 Data Protection contact at: [email protected] (plain text — not a clickable link). ft999 aims to respond to all privacy-related requests within 30 calendar days of receipt.

3. Personal Data We Collect

ft999 collects the following categories of personal data from players and website users:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you are 21 years of age or older)
• Residential address in Bangladesh
• Mobile phone number
• Email address
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence)
• Proof of payment method ownership (screenshots of bKash, Nagad, Rocket, or Upay accounts; bank statements for card payments)
• Selfie photographs with identity documents, where requested by the compliance team

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction history, including amounts, dates, times, and payment methods used
• Payment method identifiers (mobile numbers associated with bKash/Nagad/Rocket/Upay; masked card numbers for Visa/Mastercard)
• Account balance history
• Bonus and promotional credit history

3.4 Gameplay and Betting Activity Data

• Records of all bets placed, games played, wagering amounts, outcomes, and winnings
• Session duration, login frequency, and gameplay patterns
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Cookies and session identifiers (see Section 8)
• Platform interaction logs, including pages visited, time spent, and features used

3.6 Communications Data

• Records of support conversations via email, live chat, or any other channel
• Marketing communication preferences and opt-in/opt-out records
• Feedback, complaints, and dispute correspondence

4. How We Collect Your Personal Data

ft999 collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account settings.
• Automatically through the platform: Technical and device data is collected automatically when you access the ft999 website or platform, through server logs, cookies, and similar tracking technologies.
• From third-party service providers: ft999 may receive data about you from identity verification partners, payment processing providers, and fraud detection services as part of standard account and transaction verification processes.
• From game providers: Game suppliers may share session-level gameplay data with ft999 for the purposes of dispute resolution, responsible gaming monitoring, and platform improvement.

5. How We Use Your Personal Data

ft999 uses the personal data it collects for the following purposes:

6. Legal Basis for Processing

ft999 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to create and manage your ft999 account, process deposits and withdrawals, and provide the gaming and betting services you have registered to use.
• Legal obligation: Processing necessary for ft999 to comply with its legal obligations, including identity verification requirements, anti-money laundering controls, and responsible gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and improvement of ft999 services — where those legitimate interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, non-essential cookies, and any other processing activities for which ft999 has sought and obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

7. Sharing Your Personal Data

ft999 does not sell your personal data to third parties. ft999 may share your personal data with the following categories of recipients only where necessary and for the purposes described in this Policy:

• Payment processing providers: bKash, Nagad, Rocket, Upay, Visa network processors, and Mastercard network processors — for the purpose of processing deposits and withdrawals on your behalf.
• Identity verification and KYC partners: Third-party services used to verify the authenticity of identity documents and confirm your eligibility to use the ft999 platform.
• Game content suppliers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other game providers — for the purpose of delivering game content, resolving gameplay disputes, and ensuring fair play compliance.
• Fraud prevention and security services: Specialist third-party services that help ft999 identify and prevent fraudulent activity, money laundering, and other security threats.
• Cloud infrastructure and hosting providers: The technical infrastructure providers that host the ft999 platform and data storage systems, subject to appropriate data processing agreements.
• Legal and regulatory authorities: Where ft999 is required by applicable law, court order, or regulatory direction to disclose personal data to a government body, law enforcement agency, or other competent authority.

All third-party service providers engaged by ft999 are required to process personal data only in accordance with ft999's instructions and to maintain appropriate security standards. ft999 does not permit its service providers to use your personal data for their own independent purposes.

8. Cookies and Tracking Technologies

ft999 uses cookies and similar technologies on its platform to ensure correct functionality, maintain your login session, remember your preferences, and analyse platform usage patterns. The categories of cookies used by ft999 are as follows:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without preventing core platform functionality.
• Functional cookies: Store your preferences such as language settings, display preferences, and responsible gaming tool configurations to improve your experience on return visits.
• Analytics cookies: Used in aggregated, anonymised form to help ft999 understand how players navigate and use the platform, which pages are most visited, and where technical issues occur. This data does not identify individual players.
• Marketing cookies (with consent): Used only where you have given explicit consent to receive personalised promotional communications. These cookies help ft999 understand which promotions are relevant to your gameplay interests.

You may manage your cookie preferences through your browser settings at any time. Blocking essential cookies may affect your ability to use certain features of the ft999 platform.

9. Data Security

ft999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and ft999 servers.
• Encryption at rest for all personal and financial data stored on ft999 servers and cloud infrastructure.
• Payment data tokenisation: Full payment instrument details are never stored by ft999 in plain text. Payment processing partners handle sensitive card and mobile wallet data under their own PCI-DSS compliant systems.
• Role-based access controls: Access to personal data within ft999 is granted only to employees and contractors who require it for their specific job function. All access is logged and subject to regular audit.
• Two-factor authentication (2FA) enforced on all ft999 internal administrative systems.
• Regular security testing including penetration testing and vulnerability scanning of the ft999 platform infrastructure.
• Incident response procedures: ft999 maintains documented procedures for responding to data security incidents, including notification to affected players where required by applicable law.

10. Data Retention

ft999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data is retained for the full duration of your account's active status on the ft999 platform.
• Transaction and financial records are retained for a minimum of five (5) years following the date of the transaction, in accordance with standard financial record-keeping requirements.
• Identity verification (KYC) documents are retained for a minimum of five (5) years following account closure.
• Customer support communications are retained for a minimum of three (3) years following the closure of the relevant support case.
• Marketing preference records — including opt-in and opt-out records — are retained indefinitely to provide a complete audit trail of your consent history.
• Technical logs and session data are retained for up to twelve (12) months for platform security and debugging purposes, after which they are deleted or anonymised.

Where personal data is no longer required and the applicable retention period has expired, ft999 will securely delete or irreversibly anonymise the data so that it can no longer be associated with any individual.

11. Your Privacy Rights

As a data subject whose personal data is processed by ft999, you hold the following rights, exercisable at any time by contacting [email protected]:

• Right of Access (Subject Access Request): You may request a copy of all personal data ft999 holds about you, along with information about how it is used and with whom it has been shared. ft999 will respond to confirmed subject access requests within 30 calendar days.
• Right to Rectification: If any personal data ft999 holds about you is inaccurate or incomplete, you may request that it be corrected. ft999 will process verified correction requests within 15 business days.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds. Note that ft999 may be required to retain certain data for legal compliance purposes even following an erasure request.
• Right to Data Portability: You may request a structured, commonly used, machine-readable export of the personal data you have provided to ft999 for the purposes of transferring it to another service provider.
• Right to Restrict Processing: You may request that ft999 restricts processing of your personal data in defined circumstances, for example while a data accuracy dispute is being investigated.
• Right to Object: You may object to processing of your personal data where ft999 relies on legitimate interests as the legal basis for processing. ft999 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, please send your request in writing to [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. ft999 will not action rights requests from unverified individuals in order to protect against unauthorised access to account data.

12. Protection of Minors

ft999 is strictly a 21+ platform. ft999 does not knowingly collect personal data from any person under the age of 21. If ft999 becomes aware that personal data has been collected from a person under 21 — whether through a registration attempt or otherwise — that data will be deleted immediately and the registration attempt blocked. Parents and guardians who believe a minor may have attempted to register with ft999 should contact [email protected] immediately. ft999 takes underage gambling prevention extremely seriously and cooperates fully with any investigation relating to potential underage access.

13. Marketing Communications

ft999 may send you promotional communications about new games, bonus offers, seasonal promotions, and platform updates via email or SMS, subject to the following conditions:

• Marketing communications are sent only to players who have given their explicit consent to receive them during registration or subsequently through their account settings.
• You may opt out of marketing communications at any time by updating your communication preferences in your account settings, or by contacting [email protected] with an opt-out request. Opt-out requests are processed within 5 business days.
• Withdrawing consent to marketing communications does not affect your ability to continue using the ft999 platform or access your account. You will continue to receive essential account-related communications (e.g., deposit confirmations, withdrawal notifications, account security alerts) regardless of your marketing preference.
• ft999 does not share your contact details with third parties for the purpose of those third parties sending you their own marketing communications.

14. Changes to This Privacy Policy

ft999 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made, ft999 will notify registered players by email to the address on their account and by posting the updated Policy on this page with a revised effective date. Your continued use of the ft999 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not accept the revised Policy, you must cease using the platform and contact support to arrange account closure.

15. Contact Us

For all privacy-related queries, subject access requests, data correction requests, or complaints relating to ft999's handling of your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Within 30 calendar days for privacy requests; within 24 hours for general support queries
• Support Hours: 24 hours a day, 7 days a week, in English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with ft999's response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or seek independent legal advice regarding your rights under applicable law.