Privacy Policy ff4u — Data Protection & Personal Information

This Privacy Policy explains how ff4u ("us", "Platform", or "ff4u") collects, uses, stores, and protects your personal information when you use our website at ff4u.win, our mobile app, and any related services under the ff4u brand.

By registering an account, accessing, or using any part of the ff4u platform, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

This policy applies to all ff4u users including visitors without an account, registered members, and promotion participants. We review and update this policy periodically to ensure it remains aligned with legal developments and industry best practices.

Ff4u only collects information necessary to provide you with a safe, legitimate, and high-quality service. Below are the categories of information we collect:

We do not collect sensitive information such as biometric data (except where voluntarily submitted for enhanced KYC purposes), health information, or religious information without your explicit consent.

Ff4u does not permit registration by users under 21 years of age. If we discover that information from an underage user has been collected inadvertently, we will delete it immediately and close the account in question.

Ff4u uses your personal information only for lawful, stated purposes. Below are the primary purposes for which your data is used:

• Account Management — Creates, verifies, and maintains your account on the ff4u platform.
• Transaction Processing — Processes deposits, withdrawals, and other financial transactions securely and promptly.
• KYC Verification — Meets anti-money laundering (AML) compliance requirements and verifies that users satisfy the minimum age requirement.
• Fraud Detection and Prevention — Monitors account activity to identify suspicious behaviour and protect you from unauthorized access.
• Customer Support — Provides technical assistance and resolves complaints or enquiries more effectively.
• Platform Improvements — Analyses usage patterns to improve the performance, design, and functionality of our platform.
• Marketing Communications — Sends information about promotions, bonuses, and platform updates only to users who have given their consent.
• Responsible Gaming — Monitors gaming patterns to identify signs of problem gambling and provide appropriate assistance.

Ff4u does not sell your personal information to any party. However, in certain limited circumstances, we share data with carefully selected third parties to enable the platform to operate smoothly:

• Payment Service Providers — Local banks, eWallet operators (Touch 'n Go, GrabPay, Boost), and cryptocurrency processors receive only the minimum transaction data required to complete your payment.
• KYC Verification Service Providers — Identity information is shared with approved third-party KYC services for verification purposes only.
• Game Providers — Player IDs and session data are shared with game providers (such as Pragmatic Play, Evolution Gaming, and others) to enable access to their games.
• Regulatory Authorities — ff4u will disclose the required information to lawful authorities when compelled to do so by law or court order.
• Technical Service Providers — Cloud infrastructure providers, email services, and analytics tools operating under strict confidentiality agreements with ff4u.

All third parties receiving your data from ff4u are bound by data processing agreements that hold them to the same or higher data protection standards as we uphold. ff4u is not responsible for the actions of third parties who receive data outside the scope of those agreements.

The security of your personal information is ff4u's top priority. We continuously invest in the latest security infrastructure to ensure your data is always protected:

• End-to-End Encryption — All communications between your browser and our servers are protected with TLS 1.3 protocol and AES-256 encryption.
• Two-Factor Authentication (2FA) — An additional security layer ensuring only you can access your account, even if your password is compromised.
• Real-Time Monitoring — An automated threat detection system monitors all account activity 24 hours a day and will automatically block suspicious access.
• Data Segregation — Financial information is stored separately from identity information using isolated, tightly controlled database systems.
• Regular Security Audits — ff4u conducts penetration testing and independent security audits at least twice a year.
• Internal Access Controls — Only approved ff4u staff who require access to your data for specific tasks are permitted to do so, and all access is logged.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. Should a data breach affecting your information occur, ff4u will notify you within 72 hours of the breach being detected, in line with international best practices.

Ff4u uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:

• Essential Cookies — These cookies are required for core platform functions such as Login session authentication, cart management, and security. They cannot be disabled without affecting platform functionality.
• Performance Cookies — Collects information on how users interact with our platform, including the most frequently visited pages and response times. All data is anonymised and used for platform improvements.
• Functional Cookies — Saves your preferences such as language, time zone, and display settings so you do not need to reset them on every visit.
• Analytics Cookies — Helps us understand aggregated usage patterns to make better decisions about platform development.

Ff4u retains your personal information only for as long as necessary to fulfil the purposes stated in this policy or as required by law. Below are our general data retention guidelines:

• Active Account Data — Retained for the duration your account is active and for 5 years after account closure, to meet audit and AML compliance requirements.
• Financial Transaction Records — Retained for a minimum of 7 years as required by accounting and tax legislation.
• KYC Data — Retained for 5 years after the business relationship ends, as required by anti-money laundering laws.
• Communication Logs — Customer support emails and chat logs are retained for 2 years for reference and training purposes.
• Analytics Cookie Data — Deleted after a period of 13 months from the date of collection.
• Marketing Data — Retained until you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be linked to you.

As an ff4u user, you have strong rights regarding your personal information. We fully respect these rights and provide straightforward mechanisms for you to exercise them:

To exercise any of the rights above, contact the ff4u support team via Live Chat, available 24/7 on the platform. We will verify your identity before processing any data-related request to keep your information secure.

As a global online platform, ff4u may process and store your data on servers located outside Malaysia. In such cases, we ensure that international data transfers are only carried out to countries or entities that provide an adequate level of data protection.

The steps we take to protect your data in international transfers include:

• Data processing agreements compliant with international standards with all overseas partners.
• Use of internationally recognised Standard Contractual Clauses for data transfers to countries without an adequacy decision.
• Data encryption in transit and at rest for all international transfers.
• A data protection impact assessment (DPIA) is conducted before any new cross-border data transfer is initiated.

Ff4u reserves the right to amend this Privacy Policy at any time to reflect changes in law, industry best practices, or how we handle data. Any significant changes will be communicated to you at least 14 days before they take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the ff4u platform after any changes take effect will be considered your acceptance of the updated terms.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. ff4u will cooperate fully with any lawful regulatory investigation.