Privacy Policy – How f333 Collects, Uses and Protects Your Data

1 Introduction

f333 ("f333", "we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses or uses the f333 Platform at https://f-333.bio (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Policy applies to all users of the Platform, including registered players, visitors who browse without registering, and any individual who contacts us through any of our official support channels. By accessing the Platform or creating a registered account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which also govern your use of the f333 Platform. Where any conflict exists between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to matters of contractual obligation, and this Policy shall prevail with respect to matters of data privacy.

2 Data Controller

For the purposes of applicable data protection legislation, f333 acts as the data controller in respect of the personal data of players and visitors collected through the Platform. As data controller, f333 is responsible for determining the purposes and means by which your personal data is processed.

f333 operates under an international gaming licence. All data processing activities carried out by f333 are conducted in accordance with the obligations imposed by that licence, including obligations relating to the protection of player data, anti-money laundering record-keeping and responsible gaming monitoring.

Where f333 engages third-party service providers to process personal data on its behalf (for example, KYC verification providers, payment processors or game studios), those providers act as data processors and are bound by contractual obligations to process data only on f333's documented instructions and to maintain appropriate technical and organisational security measures.

3 Data We Collect

f333 collects the following categories of personal data from players and Platform visitors. We collect only what is strictly necessary for the purposes described in Section 5 of this Policy.

3.1 Identity Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (used for age verification — all players must be 21 or older)
• Nationality and country of residence
• Copies of government-issued identity documents (national ID card, passport) submitted during KYC verification

3.2 Contact Data

• Email address (used as primary account identifier and for account communications)
• Mobile telephone number (used for account security, withdrawal verification and optional SMS alerts)
• Residential address (required for KYC verification and proof-of-address checks)

3.3 Financial Data

• Mobile financial service account identifiers for bKash, Nagad, Rocket and Upay (account number/phone number used for the transaction — we do not store PINs or passwords)
• Payment card details (card number stored in tokenised form only via our PCI-DSS compliant payment processor — full card numbers are never stored on f333 servers)
• Transaction history including deposit amounts, withdrawal amounts, dates and payment method used

3.4 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser type and version
• Session identifiers and authentication tokens
• Platform interaction logs (pages visited, games played, timestamps of actions)

3.5 Gaming & Behavioural Data

• Full history of wagers placed, game sessions, outcomes and winnings
• Bonus usage and wagering activity in connection with promotions
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)
• Player-initiated support interactions and associated records

3.6 Communications Data

• Content of emails, live chat transcripts and any other correspondence exchanged with the f333 support team
• Records of marketing communications sent to you and your response preferences

4 How We Collect Data

f333 collects personal data through the following means:

• Direct collection: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawals, contacting our support team, or updating your account profile.
• Automated collection: Technical and behavioural data collected automatically as you interact with the Platform, including via cookies, web beacons, server logs and similar tracking technologies (see Section 10).
• Third-party collection: Identity and address verification data returned to us by our licensed KYC verification partners after you submit documents for review. Transaction confirmation data received from payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks) upon completion of a financial transaction.
• Responsible gaming monitoring: Behavioural data flagged by our internal responsible gaming systems, which monitor playing patterns for indicators of problem gambling as required under our licensing obligations.

5 How We Use Your Data

f333 uses the personal data it collects for the following specific purposes:

f333 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where required to do so in connection with fraud prevention or anti-money laundering obligations imposed by our licensing authority.

6 Legal Basis for Processing

f333 processes personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to perform the contract between f333 and the player — for example, processing a withdrawal or verifying an account prior to allowing access to real-money gaming.
• Legal obligation: Processing required to comply with a legal or regulatory obligation applicable to f333 under its international gaming licence — for example, KYC verification, anti-money laundering record-keeping and responsible gaming monitoring.
• Legitimate interests: Processing necessary for f333's legitimate business interests, provided those interests are not overridden by your rights and freedoms — for example, fraud detection, Platform security, and improving the gaming experience based on behavioural analytics.
• Consent: Where f333 relies on your consent to send you marketing communications or to use non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw marketing consent, contact [email protected] or use the unsubscribe link in any marketing email.

7 Data Sharing

f333 does not sell, rent, trade or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Your personal data may be shared with the following categories of recipients solely to the extent necessary to deliver the services you have requested or to fulfil f333's legal obligations:

• KYC and identity verification providers: Licensed third-party providers who verify the authenticity of identity documents submitted during the account verification process.
• Payment processors and mobile financial service operators: bKash, Nagad, Rocket, Upay and card-acquiring banks (Visa/Mastercard network), solely for the purpose of processing your financial transactions.
• Game content providers: Third-party game studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi) who may receive session identifiers and wagering data to facilitate game delivery and dispute resolution.
• IT infrastructure providers: Cloud hosting, database and content delivery providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units and gaming regulatory bodies to the extent required by applicable law or our licensing obligations.
• Professional advisers: Lawyers, auditors and accountants acting under professional confidentiality obligations, solely where necessary in connection with f333's legal and financial compliance requirements.

8 Data Retention

f333 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or regulatory reporting requirements.

• Active account data: Retained for the duration of your active account relationship with f333 and for a period of five (5) years following permanent account closure.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the end of the business relationship, as required under anti-money laundering obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support and communications records: Retained for three (3) years from the date of the last communication, unless the communication relates to an unresolved dispute or legal matter, in which case it is retained until final resolution plus two years.
• Marketing preference and consent records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.
• Technical and session logs: Retained for twelve (12) months in active storage, then archived for a further twelve months before permanent deletion.

Where retention beyond the periods above is required by a specific legal obligation, court order or regulatory directive, f333 will retain the relevant data for the duration of that obligation and notify you where practicable.

9 Data Security

f333 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Key measures include:

• Encryption in transit: All data transmitted between your device and the f333 Platform is encrypted using 256-bit TLS/SSL encryption. The Platform enforces HTTPS across all pages without exception.
• Encryption at rest: Sensitive personal data stored on f333's databases, including identity document copies and financial records, is encrypted at rest using industry-standard AES-256 encryption.
• Password security: Account passwords are never stored in plain text. Passwords are hashed and salted using a cryptographically strong one-way algorithm prior to storage. f333 staff cannot retrieve your password in plain text under any circumstances.
• Access controls: Access to personal data within f333's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions and is subject to regular review.
• Payment card security: f333 does not store full payment card numbers. Card transactions are processed exclusively through PCI-DSS Level 1 compliant payment processors. Only tokenised card references are retained on f333 systems.
• Security monitoring: f333 operates continuous security monitoring of its Platform infrastructure, including intrusion detection systems, automated anomaly alerts and regular third-party penetration testing.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, f333 will notify affected players and the relevant regulatory authority as required by applicable law, without undue delay.

10 Cookies & Tracking Technologies

f333 uses cookies and similar tracking technologies to operate the Platform, remember your preferences and analyse how the Platform is used. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. No consent is required for strictly necessary cookies.

10.2 Functional Cookies

These cookies enable enhanced functionality such as remembering your preferred game lobby view, your responsible gaming settings, and whether you have previously acknowledged certain Platform notices. Disabling these cookies may affect the quality of your experience on the Platform.

10.3 Analytics Cookies

f333 uses analytics cookies to understand how players interact with the Platform — for example, which games are most popular, which deposit methods are most frequently used, and where players encounter difficulties. This data is aggregated and anonymised where possible. These cookies require your consent and may be declined without affecting your ability to use the core Platform services.

10.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies or be notified when new cookies are set. Note that disabling certain cookies may impair your ability to access the full functionality of the f333 Platform, including account login.

11 Your Rights

As a data subject, you hold the following rights in respect of the personal data f333 holds about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". f333 will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data f333 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request the correction of any inaccurate personal data f333 holds about you, and to have incomplete data completed.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations (see Section 8).
• Right to restriction of processing: You have the right to request that f333 restricts the processing of your personal data in certain circumstances, for example while a correction request is pending or where you contest the legal basis for processing.
• Right to data portability: You have the right to receive a structured, commonly used and machine-readable copy of the personal data you have provided to f333, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where f333 relies on legitimate interests as its legal basis. f333 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

12 International Data Transfers

f333 operates on a global infrastructure. As a result, your personal data may be transferred to and processed in countries outside of Bangladesh. Where such transfers occur, f333 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which would apply within Bangladesh.

Safeguards for international transfers may include standard contractual clauses approved by the relevant data protection authority, binding corporate rules where applicable to group entities, or transfers to recipients in jurisdictions that have been assessed as providing an adequate level of data protection.

Where f333 engages third-party game providers (such as Evolution Gaming, Pragmatic Play or Microgaming) whose servers are located in jurisdictions outside Bangladesh, data sharing with those providers is governed by data processing agreements that impose equivalent data protection obligations.

13 Protection of Minors

The f333 Platform is strictly intended for adults aged 21 years and above. f333 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If f333 becomes aware that personal data has been collected from an individual who is under 21 years of age, the associated account will be immediately suspended, all collected data will be deleted to the extent permitted by law and any funds in the account will be handled in accordance with the procedures set out in the Terms & Conditions.

Parents and guardians who believe a minor may have accessed the f333 Platform are encouraged to contact our support team immediately at [email protected]. We also recommend the use of parental control software to prevent minors from accessing online gambling platforms.

14 Changes to This Policy

f333 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable data protection legislation, our licensing obligations or our operational practices. Where changes are material, we will notify registered players by email to the address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how we protect your data. Your continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the changes.

15 Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or the manner in which f333 processes your personal data, please contact our Data Protection team using the following channels. All privacy-related communications should be in English and directed to the specific channels below.

• Privacy enquiries and data rights requests: [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request"
• General support: [email protected] — responses within 24 hours
• Live Chat: Available on the Platform — average response time under 3 minutes, 24/7 (BST, UTC+6)
• WhatsApp: +880 1700 000333 — available 24/7 (BST)

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection authority in your jurisdiction or to the regulatory authority that issued f333's gaming licence.