f333 Privacy
Policy

This Privacy Policy describes how f333 ("f333", "We", "Us", "Our"), the operator of the online casino and sports betting platform at https://f33app.app, collects, uses, stores, and protects the personal data of players and visitors ("You", "Your", "User") who interact with our website, mobile platform, and associated services.

f333 acts as the data controller for all personal data processed in connection with the operation of the f333 platform. This means that f333 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This policy applies to all personal data collected through the f333 registration process, account management functions, deposit and withdrawal transactions, game activity, customer support interactions, marketing communications (where consented to), and technical interactions with the f333 website and applications.

This Privacy Policy should be read in conjunction with the f333 Terms & Conditions and the f333 Responsible Gaming Policy, both of which are incorporated by reference and together form the complete contractual and regulatory framework governing your use of the f333 platform.

If you have questions about this policy or wish to exercise any of your data rights, please contact our support team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

f333 collects several categories of personal data depending on how you interact with our platform. The specific data collected falls into the following categories:

Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents such as National ID card, passport, or birth certificate — collected during the registration and KYC identity verification process.

Contact Data

Email address, mobile phone number, and residential address (including city, district, and postal code). For players in Bangladesh, district references may include Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

Financial Data

Payment method details including bKash account numbers, Nagad wallet identifiers, Rocket (Dutch-Bangla Bank) numbers, Upay account references, bank account details for participating banks (City Bank, BRAC Bank, Islami Bank, Dutch-Bangla Bank, Sonali Bank), and Visa or Mastercard details. Full card numbers are never stored on f333 servers — card processing is handled by certified PCI-DSS compliant payment processors.

Transaction Data

Records of all deposits, withdrawals, bet placements, game rounds, winnings, bonus credits, and refunds processed through your f333 account, including amounts in BDT, timestamps, and transaction reference numbers.

Technical Data

IP address, device type, operating system, browser type and version, screen resolution, time zone, session duration, pages visited, features used, and connection logs generated each time you access the f333 platform.

Behavioural Data

Game preferences, betting patterns, session frequency, average session length, preferred payment methods, and responsible gaming tool usage — collected to personalise your experience and fulfil our responsible gaming obligations.

Communications Data

Records of all live chat transcripts, email correspondence, and support ticket submissions between you and the f333 customer support team, including the date, time, and content of each communication.

Marketing Preferences Data

Your opt-in or opt-out status for promotional emails, SMS notifications, and in-platform messaging from f333 — including records of when consent was given or withdrawn.

f333 collects personal data through the following sources and mechanisms:

• Direct Submission: Data you provide when completing the f333 registration form, submitting KYC verification documents, making a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated Technical Collection: Data collected automatically through cookies, server logs, and session tracking tools each time you visit or interact with the f333 website or mobile platform.
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, bank partners, and card payment processors when you make deposits or receive withdrawals.
• Identity Verification Services: Verification results and risk flags received from third-party KYC and anti-fraud service providers when they process your identity documents on f333's behalf.
• Game Providers: Game session logs and round-result data received from certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi when you play their titles on the f333 platform.
• Publicly Available Sources: In certain fraud investigation or KYC contexts, f333 may reference publicly available information to verify the accuracy of data you have provided — for example, confirming a registered address through publicly available records.

f333 processes personal data only where a valid legal basis exists for doing so. The primary legal bases applicable to f333's data processing activities are as follows:

f333 uses the personal data it collects strictly for the purposes described in this policy. The primary uses are as follows:

• Account Creation and Management: To register your f333 account, verify your identity and age, maintain accurate account records, and enable you to access the full range of f333 games and services.
• Transaction Processing: To process your BDT deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to execute your withdrawal requests to your verified payment method.
• KYC and Anti-Money Laundering Compliance: To verify your identity documents, confirm your age as 21 or above, and screen your account activity against applicable financial crime prevention obligations.
• Fraud Detection and Platform Security: To monitor account activity for signs of fraud, multi-accounting, bonus abuse, unauthorised access, and other prohibited conduct as defined in the f333 Terms & Conditions.
• Responsible Gaming: To track your gaming patterns, enforce deposit limits and self-exclusion requests, send reality-check notifications, and identify behavioural indicators of problem gambling so that f333 can fulfil its duty of care obligations to you.
• Customer Support: To receive, investigate, and resolve your account queries, payment disputes, game complaints, and formal complaints.
• Platform Personalisation: To remember your game preferences, language settings, and platform customisations so that your f333 experience is consistent across sessions and devices.
• Marketing Communications (where consented): To send you promotional offers, bonus notifications, tournament alerts, and seasonal promotions related to events such as Pohela Boishakh, Eid, BPL, and IPL — but only where you have given explicit consent to receive such communications.
• Legal and Regulatory Compliance: To maintain records as required by applicable law, respond to lawful requests from regulatory authorities, and cooperate with law enforcement where legally obligated to do so.

f333 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without your knowledge. Any automated processing used for fraud detection or responsible gaming monitoring is reviewed by trained f333 staff before any account-level action is taken.

f333 may share your personal data with the following categories of third parties in the circumstances described:

• Payment Processors: Your payment method details and transaction data are shared with the relevant payment processors (bKash, Nagad, Rocket, Upay, bank partners, Visa/Mastercard networks) solely to execute your deposit and withdrawal transactions. These processors are contractually bound to handle your data securely and in compliance with applicable financial data protection standards.
• Identity Verification Providers: Your identity documents and personal details may be shared with certified KYC and anti-fraud service providers to complete the identity verification process required for account activation and withdrawal processing.
• Game Providers: Your account identifier and gameplay data may be shared with game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to enable you to play their titles on the f333 platform and to resolve any game-related disputes.
• IT and Platform Service Providers: Technical service providers who support the operation of the f333 platform — including hosting, content delivery, and security monitoring services — may process your data as data processors acting on f333's behalf. All such providers are subject to strict data processing agreements.
• Legal and Regulatory Authorities: f333 may disclose your personal data to law enforcement agencies, financial regulators, or other competent authorities where required to do so by law, court order, or valid regulatory demand. f333 will notify you of any such disclosure unless legally prohibited from doing so.
• Business Successors: In the event of a merger, acquisition, or sale of substantially all of f333's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to how your data will be processed as a result.

f333 retains personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following retention periods apply to the main categories of data f333 holds:

When your personal data is no longer required for any of the above purposes, it will be securely deleted or anonymised so that it can no longer be linked to your identity. f333 conducts periodic data audits to ensure retention schedules are applied consistently.

f333 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, remember your preferences, analyse usage patterns, and maintain security. The following categories of cookies are used on the f333 platform:

• Strictly Necessary Cookies: Essential cookies required for the platform to function correctly. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Cookies used to collect anonymised information about how players use the f333 platform — including which pages are visited most frequently, how long sessions last, and which features are used. This data is used exclusively to improve the platform and is not linked to your personal identity.
• Functional Cookies: Cookies that remember choices you have made on the platform — such as your preferred game categories, display settings, and whether you have dismissed certain notices — so that your experience is consistent across visits.
• Responsible Gaming Cookies: Cookies used to enforce session timer settings, deposit limit configurations, and reality check preferences that you have set within your account. These are classified as strictly necessary in the context of f333's responsible gaming obligations.

f333 does not use third-party advertising or retargeting cookies. No behavioural advertising profiles are built from your f333 platform activity and no cookie data is sold to advertising networks or data brokers.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent certain platform features from functioning correctly. For detailed guidance on managing cookies in your browser, refer to your browser's official help documentation.

The principal security measures applied by f333 to protect your personal data include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and f333 servers is encrypted using industry-standard SSL/TLS protocols. This applies to account login, registration, payment processing, and all API communications.
• Encrypted Data Storage: Sensitive data fields — including identity document copies, financial data, and account credentials — are stored in encrypted form in f333's secured database environment. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data stored in f333's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific roles. All access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): All f333 staff accounts with access to player data systems are protected by mandatory two-factor authentication. Players are also encouraged to enable 2FA on their f333 accounts for additional security.
• Network Security: f333's server infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services. Regular vulnerability assessments and penetration tests are conducted to identify and remediate security weaknesses.
• Incident Response: f333 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, f333 will notify affected players and relevant authorities within the timeframes required by applicable law.

While f333 takes all reasonable technical and organisational precautions to protect your data, no security system is completely impenetrable. You are responsible for maintaining the confidentiality of your f333 account credentials and for reporting any suspected unauthorised access to your account immediately by contacting [email protected].

As a player whose personal data is processed by f333, you have the following rights with respect to that data. f333 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access: You have the right to request a copy of all personal data that f333 holds about you, including a description of how it is being used and with whom it has been shared. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If you believe that personal data f333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor profile corrections (such as updating your contact email or phone number) can be made directly in your account settings.
• Right to Erasure: Also known as the "right to be forgotten", this allows you to request that f333 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that this right is subject to f333's legal obligations to retain certain data for the periods specified in Section 7 of this policy.
• Right to Restrict Processing: In certain circumstances — such as when you have contested the accuracy of your data or objected to processing based on legitimate interest — you may request that f333 temporarily restrict processing of your data while the matter is resolved.
• Right to Data Portability: Where f333 processes your data by automated means on the basis of your consent or a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to f333 processing your data where that processing is based on legitimate interest. You also have an unconditional right to object to the use of your data for direct marketing purposes, which will be honoured immediately upon receipt of your objection.
• Right to Withdraw Consent: Where f333 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected], clearly identifying the right you wish to exercise, your f333 account username, and sufficient information to verify your identity. f333 aims to respond to all data rights requests within 30 days of receipt.

f333 takes the protection of minors extremely seriously. As part of the account registration process, all players are required to confirm that they are 21 years of age or older. f333 further requires all players to complete a mandatory identity verification (KYC) process before any withdrawal can be processed, which includes confirmation of date of birth against a government-issued identity document.

If f333 discovers or has reasonable grounds to believe that a registered account belongs to an individual under the age of 21, f333 will immediately suspend the account, freeze any associated balance pending investigation, conduct a full KYC review, and if the age violation is confirmed, permanently close the account and return any deposits made (excluding any winnings derived from gameplay, which will be forfeited). The matter may also be referred to the relevant authorities where appropriate.

Parents and guardians who believe that a minor in their household has registered an f333 account or accessed the f333 platform are encouraged to contact f333 immediately at [email protected]. f333 will investigate and take appropriate action without delay. f333 also recommends the use of parental control software to restrict access to online gambling platforms for households with minors.

f333 does not knowingly collect any personal data from individuals under the age of 21. If it is determined that data has been collected from a minor in error, all such data will be permanently deleted from f333's systems as soon as the matter is confirmed.

f333 operates a platform that serves players in Bangladesh and may utilise third-party service providers whose servers and infrastructure are located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than Bangladesh in connection with the services described in this policy.

Where personal data is transferred outside Bangladesh, f333 takes appropriate steps to ensure that the transfer is conducted lawfully and that your data receives an equivalent level of protection to that afforded within Bangladesh. These steps may include:

• Entering into data processing agreements with the receiving party that incorporate standard contractual clauses requiring the application of appropriate data protection safeguards.
• Transferring data only to service providers located in jurisdictions that maintain adequate data protection standards as assessed by f333's data governance review process.
• Applying technical safeguards such as end-to-end encryption to data transferred between jurisdictions, so that the data cannot be accessed in usable form even if intercepted during transit.

If you have questions about the specific international transfer arrangements applicable to your personal data, please contact [email protected] and a member of our team will provide further details.

f333 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational developments on the f333 platform. The current effective version of this Privacy Policy is always available at https://f33app.app/privacy-policy.

Where changes to this Privacy Policy are material — meaning they significantly affect the way in which your personal data is processed, the rights available to you, or the third parties with whom your data is shared — f333 will provide advance notice of the changes by sending an email notification to the address registered on your f333 account at least 14 days before the updated policy takes effect.

For minor or administrative changes that do not materially affect the substance of this policy (such as corrections to typographical errors, clarifications of existing wording, or updates to contact details), f333 may update the policy without prior notice but will update the effective date shown at the top of this page.

Your continued use of the f333 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree to a material change in this Privacy Policy, you should cease using the f333 platform and contact [email protected] to request account closure.

f333 is committed to handling all privacy-related enquiries and data rights requests with care and within the timeframes stated in this policy. If you wish to contact f333 regarding any aspect of this Privacy Policy, to exercise any of your data subject rights, or to raise a privacy concern, please use the contact details below.

Data Controller Contact

Response Timeframes

f333 will acknowledge receipt of all privacy-related emails within 2 business days. Subject Access Requests and other formal data rights requests will be fulfilled within 30 days of receipt, or within 60 days in cases of particular complexity, in which case you will be informed of the extension and the reasons for it within the initial 30-day period.

Complaints

If you are not satisfied with how f333 has handled your personal data or responded to a data rights request, you have the right to raise a formal complaint. Please send your complaint to [email protected] with the subject line "Privacy Complaint". f333 will investigate all privacy complaints thoroughly and provide a written response within 14 business days of receipt.

f333 takes all privacy complaints seriously and is committed to resolving them fairly. If you remain dissatisfied following f333's response to your complaint, you may seek independent advice or escalate the matter to the appropriate authority in your jurisdiction.