Privacy Notice

The personal data we collect

Ffbet, a licensed online gaming operator regulated in Curacao, acts as the data controller for the personal data of users and visitors to the Ffbet platform. This privacy notice describes the categories of personal data we collect, the purposes for processing, recipients, retention, user rights, and security measures applicable to Ffbet users.

  • Identification data: name, date of birth, nationality, and government-issued identification numbers when required for verification.
  • Contact data: email address, telephone number, postal address.
  • Account data: username, password, language and communication preferences, and security settings.
  • Financial data: payment method details, transaction history, and billing information. We do not store full payment card numbers on our systems; card details are processed by licensed payment service providers.
  • Identity verification data: documents such as a passport or national ID, and, where required, a live selfie for facial verification.
  • Technical and usage data: IP address, device type, operating system, browser, pages visited, timestamps, geolocation approximations, and session duration.
  • Communications data: correspondence with support and service inquiries, feedback and surveys.
  • Marketing preferences: consent status and unsubscribe settings.

How we use your personal data

  • To provide and manage the Ffbet service, including account creation, maintenance, and feature delivery.
  • To verify identity and comply with anti-money laundering (AML) and know-your-customer (KYC) obligations.
  • To process payments and settlements with licensed payment providers and merchants; to detect and prevent fraud.
  • To communicate with users, respond to inquiries, and administer account-related notices.
  • To improve, tailor, and secure our services, including analytics, auditing, and product development.
  • To comply with legal and regulatory obligations, including record-keeping and dispute resolution.
  • To conduct marketing communications in accordance with user preferences and applicable law where consent or legitimate interests apply.

How we share your personal data

  • With affiliates, service providers, and contractors who perform functions on our behalf (such as identity verification, payment processing, IT services, hosting, and customer support), under data protection agreements that require appropriate safeguards.
  • With regulators, law enforcement, or other authorities as required by law or to protect our rights and users.
  • In connection with corporate transactions such as mergers or asset sales, with a successor entity subject to data protection obligations.
  • Across borders to entities in jurisdictions with adequate data protection or where safeguards are in place; where required, we implement standard contractual clauses or other legally recognized safeguards.

Legal bases for processing

Where applicable, we process personal data on the basis of contractual necessity, legitimate interests, and where required, user consent. Identity verification, AML/KYC compliance, and payment processing are necessary for contract performance; marketing communications are conducted in accordance with consent or legitimate interests in line with applicable law.

Data retention and security

We retain personal data for the duration of the user relationship and for up to eight (8) years after termination to satisfy regulatory obligations and potential dispute resolution. We implement technical and organizational measures to protect data, including:

  • Encryption in transit with TLS 1.2 or higher (preferably TLS 1.3) and 256-bit encryption where applicable.
  • Secure storage on protected servers with access controls; we do not store full payment card numbers on our systems; payment card data is handled by PCI-DSS compliant processors.
  • Regular security testing, monitoring, and incident response procedures.

Cookies and tracking technologies

We use cookies and similar technologies to operate the site, remember preferences, and analyze usage. We categorize cookies as strictly necessary, functional, and advertising. We may deploy tracking pixels to measure advertising performance and user interactions. You may adjust browser settings to manage cookies; blocking cookies may affect site functionality.

Marketing communications

We may send promotional communications by email, phone, or SMS based on your consent or our legitimate interests, in accordance with applicable law. You may opt out at any time by using the unsubscribe option or contacting [email protected]; opting out may affect eligibility for certain promotions.

International transfers

Personal data may be transferred to entities located outside your country of residence, including affiliates and service providers, subject to lawful safeguards and contractual protections. Transfers to the European Economic Area or other jurisdictions will be conducted with appropriate data protection measures.

Data security and breach notification

We maintain appropriate technical and organizational security measures to protect personal data. If a data breach is likely to result in a high risk to individuals’ rights and freedoms, we will notify affected users without undue delay and provide information about the breach and corrective actions. We will notify the relevant supervisory authority within 72 hours of becoming aware of the breach where required by law.

Your rights

You have rights regarding your personal data, including:

  • Access to data: obtain confirmation of processing and a copy of your data.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion in certain circumstances.
  • Restriction: request processing restrictions under specific conditions.
  • Portability: receive data in a structured, commonly used, machine-readable format and transfer to another controller where feasible.
  • Objection: oppose processing based on legitimate interests or direct marketing.
  • Withdraw consent: withdraw consent where processing is based on consent; withdrawal does not affect prior lawfulness of processing.

To exercise any of these rights, submit a written request to [email protected]. We will verify your identity and respond within 30 days; complex requests may be extended to 60 days with notice.

Age and eligibility

Ffbet provides services only to individuals aged eighteen (18) years or older. Age verification is carried out during registration and on an ongoing basis to ensure compliance with eligibility requirements.

Changes to this privacy notice

We may update this privacy notice from time to time. We will publish the updated version on the Ffbet platform and indicate the date of the latest revision. Changes take effect upon publication unless otherwise stated.

How to contact us and file complaints

For questions about this privacy notice or to exercise rights, contact the Ffbet privacy office at [email protected]. For support regarding data processing, contact [email protected]. If you believe your data protection rights have been violated, you may lodge a complaint with the competent supervisory authority in your jurisdiction or with the Curacao Data Protection Authority where applicable.