ff0000 Privacy Policy — How We Handle Your Data in Pakistan

01 Who We Are

This Privacy Policy applies to ff0000, an online gaming and sports betting platform accessible at https://ff0000.fun ("the Platform"). ff0000 is operated by its founding team and serves players across Pakistan, with all services denominated in Pakistani Rupees (PKR).

ff0000 acts as the data controller for all personal information collected through the Platform. This means we are the entity that decides why and how your personal data is collected and processed. If you have any questions about how your data is handled, you can reach us at support@ff0000.fun at any time.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming policy, which together form the full set of agreements between you and ff0000. The Privacy Policy governs all personal data processing that takes place in connection with your use of the ff0000 Platform.

02 Personal Data We Collect

ff0000 collects only the personal data that is necessary for the operation of the Platform and the provision of gaming services to you as a Pakistani player. We do not collect data that we have no genuine use for. The categories of data we collect are as follows:

In addition to information you provide directly, ff0000 also collects certain technical data automatically when you access the Platform — including device identifiers, IP address, browser type and session duration. This data is collected using standard server-side logging and cookies (see Section 07 for cookie details). It is used for security, performance monitoring and fraud detection purposes.

03 How ff0000 Uses Your Personal Data

ff0000 uses personal data for specific, clearly defined purposes. We do not use your data in ways you would not reasonably expect given the context in which it was collected. The primary purposes for which ff0000 processes personal data are:

• Account creation and management: Setting up your ff0000 account, authenticating you when you log in, and maintaining the integrity and security of your account.
• Providing gaming and betting services: Operating the Platform's games and sports betting markets, processing bets, settling results and crediting winnings to your balance.
• Payment processing: Processing deposits from and withdrawals to your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card accounts in Pakistani Rupees.
• Identity verification and fraud prevention: Verifying that you are who you say you are, that you meet the minimum age requirement of 18, and that your account is not being used for fraudulent purposes.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and activating responsible gaming tools where appropriate. This is a protective use of data that ff0000 takes seriously.
• Anti-money laundering compliance: Monitoring transactions for patterns consistent with money laundering or other financial crime, as required by applicable law.
• Customer support: Responding to your queries, complaints and support requests in a personalised, efficient way.
• Platform improvement: Analysing usage patterns to identify areas where the ff0000 Platform can be made faster, simpler or more useful for Pakistani players.
• Marketing communications (with consent): Sending you information about new games, promotions and bonuses on ff0000 if you have opted in to receive marketing messages. See Section 12 for your opt-out options.

04 Legal Basis for Processing

ff0000 processes personal data only when there is a valid legal basis for doing so. For the main data processing activities on the Platform, the legal bases are:

• Contract performance: Processing your account registration data, gaming activity data and payment data is necessary to provide the gaming services you have contracted for when you registered on ff0000. Without this processing, ff0000 cannot provide its services.
• Legal obligation: ff0000 processes identity verification and transaction monitoring data because it is legally required to do so for anti-money laundering compliance, fraud prevention and age verification obligations.
• Legitimate interest: ff0000 processes technical and device data, fraud detection signals and platform usage analytics on the basis of its legitimate interest in running a secure, reliable and high-quality platform for its players. This processing is balanced against your privacy interests and does not override your fundamental rights.
• Consent: ff0000 processes your data for marketing communications only where you have given explicit consent. You can withdraw this consent at any time through your account settings or by contacting support.

05 Data Sharing — Who We Share Your Data With

ff0000 shares your personal data only in the circumstances described below. We do not sell your data, and we do not share it with any party for that party's own commercial purposes.

• Payment processors: To process deposits and withdrawals in PKR, ff0000 shares the minimum necessary transaction information with payment service providers (such as Easypaisa, JazzCash, NayaPay, SadaPay and card processors). These providers are contractually required to handle your data securely and in accordance with applicable data protection standards.
• Game software providers: Some games hosted on ff0000 are provided by third-party game developers. To operate these games, ff0000 may share session identifiers and account reference data — but not your full personal details — with the relevant game provider's servers.
• Identity verification providers: When ff0000 requests KYC verification, it may use a third-party identity verification service. The identity data you submit for verification is processed by this service under strict confidentiality obligations.
• Regulatory and law enforcement authorities: ff0000 will disclose personal data to regulators, law enforcement agencies or other public authorities where required to do so by law, court order or equivalent legal obligation. ff0000 does not make such disclosures voluntarily and will notify you where legally permitted to do so.
• Fraud prevention services: ff0000 may share limited account and transaction data with fraud detection and prevention services to protect the Platform and all players from financial crime.

06 Payment Data — How ff0000 Handles PKR Transactions

ff0000 handles all deposits and withdrawals in Pakistani Rupees via local payment providers including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and Visa/Mastercard. Because Pakistanis are rightly cautious about sharing financial information online, we want to be transparent about exactly what happens with your payment data.

When you make a deposit via Easypaisa or JazzCash, you authenticate the transaction directly with your mobile wallet provider using your own PIN. ff0000 never sees your wallet PIN or the full details of your mobile wallet. ff0000 receives only a transaction confirmation and a reference number from the payment provider after the transaction is complete.

When you add a Visa or Mastercard for withdrawals, the card details are processed directly by ff0000's PCI-compliant card processing partner. ff0000's servers receive and store only a tokenised reference to the card — never the full card number, expiry date or CVV. This is industry-standard practice for online payment security.

ff0000 retains transaction records — including deposit and withdrawal amounts, dates and payment method types — for the period required by anti-money laundering legislation. These records are used to verify transaction history in the event of a dispute and to comply with regulatory reporting obligations.

07 Cookies and Tracking Technologies

ff0000 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, detect fraud and analyse Platform usage. The following types of cookies are used on ff0000:

You can manage cookie preferences through your browser settings. Blocking required cookies will prevent you from logging in and using the ff0000 Platform. Blocking optional cookies will not prevent you from playing games but may result in your preferences not being saved between sessions. On mobile, cookie management is available through your mobile browser settings.

08 How Long We Keep Your Data

ff0000 keeps your personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following retention periods apply to the main categories of data held by ff0000:

• Account data: Retained for the duration of your account and for five years after account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: Retained for five years from the date of each transaction, in line with financial record-keeping obligations.
• KYC and identity documents: Retained for five years after account closure or the completion of the business relationship, whichever is later.
• Gaming activity logs: Retained for three years. Used during this period for dispute resolution, responsible gaming monitoring and fraud investigation.
• Customer support records: Retained for two years from the date of the last interaction, to allow follow-up and for quality assurance purposes.
• Device and technical data: Retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.
• Marketing consent records: Retained for the duration of your consent and for six months after you withdraw consent, to evidence the history of your marketing preferences.

When data reaches the end of its retention period, it is either securely deleted from ff0000's systems or anonymised so that it can no longer be linked back to you as an individual. ff0000 does not retain data indefinitely.

09 Your Privacy Rights

As an ff0000 player, you have a range of rights over your personal data. These rights are real and exercisable — not theoretical. Here is what you can ask ff0000 to do:

To exercise any of these rights, contact ff0000 at support@ff0000.fun with the subject line "Privacy Rights Request". Include your registered mobile number to help us verify your identity. ff0000 will respond within 30 days. We may need to verify your identity before acting on a request — this is to protect your data from unauthorised access by a third party claiming to be you.

10 Security Measures at ff0000

ff0000 takes data security seriously because your money and your personal information are both at stake. The Platform uses a layered security approach designed to protect your data against unauthorised access, disclosure, alteration and destruction. Key security measures in place at ff0000 include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ff0000 Platform — the same encryption standard used by banks.
• Encrypted storage for sensitive data at rest on ff0000's servers, including hashed passwords and tokenised payment references.
• Two-factor authentication option available for all ff0000 accounts, providing an additional layer of protection beyond your password.
• Real-time fraud detection systems that monitor login attempts, payment behaviour and gaming patterns for signs of account compromise.
• Regular security audits conducted by independent third-party security professionals to identify and address vulnerabilities before they can be exploited.
• Access controls that limit internal access to personal data to staff who have a legitimate need to see it as part of their role. All internal data access is logged and reviewed.
• PCI-compliant payment handling through certified third-party processors — ff0000 never stores raw payment credentials.

Despite these measures, no online platform can guarantee absolute security. If ff0000 becomes aware of a data breach that affects your personal data and poses a risk to your rights, we will notify you as required by applicable law and take immediate steps to contain and investigate the breach.

11 Children's Privacy

ff0000 does not knowingly collect personal data from any person under the age of 18. The Platform operates a strict minimum age policy and uses technical and procedural measures to prevent underage registration, including date of birth verification at registration and identity document verification where account activity triggers an age check.

If ff0000 discovers that personal data has been collected from a person under 18, the account will be immediately suspended, all personal data associated with the account will be deleted, any deposited funds will be returned to the payment source, and no winnings generated by the account will be paid out.

If you are a parent or guardian and believe your child may have created an ff0000 account, please contact us immediately at support@ff0000.fun and we will investigate and take appropriate action without delay.

12 Marketing Communications

ff0000 may send you promotional messages about new games, bonuses, tournaments and other offers on the Platform. We only send marketing communications to players who have given explicit consent to receive them. Consent is collected during registration and can be updated at any time.

Marketing communications from ff0000 may be sent via SMS to your registered mobile number or via email. We do not use push notifications for marketing purposes without additional permission.

Opting out is simple and immediate. You can withdraw your marketing consent at any time by:

• Updating your communication preferences in your ff0000 account settings (under Profile → Notifications).
• Replying "STOP" to any ff0000 SMS marketing message.
• Emailing support@ff0000.fun with the subject "Unsubscribe from Marketing".

Once you opt out, ff0000 will stop sending marketing communications within 48 hours. You will continue to receive transactional messages — such as deposit confirmations, withdrawal notifications and security alerts — which are necessary for the operation of your account and cannot be opted out of while your account is active.

13 Changes to This Privacy Policy

ff0000 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data handling practices. When we make material changes, we will update the "Last updated" date at the top of this page and, where practically possible, notify registered players via email or in-platform notification.

The current version of the Privacy Policy is always available at https://ff0000.fun/privacy-policy. We encourage you to review this page periodically to stay informed of how ff0000 handles your personal data. Continued use of the Platform after a Privacy Policy update constitutes acceptance of the revised policy.

If you have concerns about any change to the Privacy Policy, you can contact us at support@ff0000.fun before continuing to use the Platform. If you do not wish to accept the updated policy, you may close your account as described in the Terms and Conditions.

14 Contact Us & Raising a Privacy Complaint

If you have any question about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how ff0000 has handled your personal data, please get in touch with us through one of the following channels:

• Live Chat: Available 24/7 directly in your ff0000 account once logged in. Fastest response channel for urgent privacy matters.
• Email: support@ff0000.fun — use the subject line "Privacy Request" or "Privacy Complaint" so your message reaches the right team. We respond to all emails within 4 business hours during standard operating hours.

If you raise a formal privacy complaint, ff0000 will acknowledge receipt within 5 business days, investigate the matter thoroughly and provide a written response within 30 days. If you are not satisfied with ff0000's response to your complaint, you may escalate the matter through the relevant data protection or consumer protection authority in Pakistan.