Ffa4u Privacy Policy – How We Protect the Personal Data of Malaysian Members

Introduction

Ffa4u Entertainment Sdn Bhd ("ffa4u", "we", "us") operates an online betting and casino platform at https://ffa4u.bet. We understand that your trust is the most valuable asset we hold, and protecting your personal data is one of ffa4u's core operational priorities.

This Privacy Policy ("Policy") is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out transparently how ffa4u collects, processes, stores, discloses and protects your personal data when you use the ffa4u Platform — whether via the website, mobile application or other communication channels.

This Policy applies to all users of the ffa4u Platform, including visitors, registered members, and former members. By accessing or using any part of the ffa4u Platform, you confirm that you have read and understood this Privacy Policy and agree to the practices described within it.

1 Information We Collect at ffa4u

In operating the ffa4u Platform, we collect various types of personal information depending on how you interact with our platform. The following are the main categories of data we collect:

Ffa4u does not collect sensitive information such as medical data, biometric information, or data relating to race and religion unless required by law.

2 How ffa4u Uses Your Personal Data

Ffa4u uses the personal data collected for a range of legitimate purposes. We ensure that every use of data is consistent with the original purpose of collection and complies with Malaysia's PDPA requirements:

• ffa4u Account Management: Creating, verifying, and managing your account, including the KYC (Know Your Customer) process required under Malaysian financial regulations.
• Financial Transaction Processing: Processing deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX/Maybank2u, as well as securely processing withdrawals to your Malaysian bank account.
• Security Verification: To identify and prevent fraud, money laundering, unauthorised account access, and any other illegal activity on the ffa4u Platform.
• Customer Support: Assisting with enquiries, complaints, and technical issues you encounter while using ffa4u, including via Live Chat, email, and WhatsApp in Bahasa Melayu.
• Experience Personalisation: Personalising content, promotions and game recommendations on ffa4u based on your preferences and playing patterns.
• Marketing Communications: Sending information about the latest promotions, new bonuses, and ffa4u platform updates — only if you have given consent to receive such communications.
• Legal Compliance: Fulfilling applicable legal and regulatory compliance obligations, including reporting to Malaysian authorities where required by law.
• Platform Improvement: Analysing usage patterns to improve the overall performance, stability and user experience of the ffa4u Platform.

3 Legal Basis for Processing Personal Data at ffa4u

Ffa4u processes your personal data on valid legal grounds under Malaysia's PDPA 2010. Depending on the context, we rely on one or more of the following bases:

• Consent: You have given explicit consent for ffa4u to process your data for specific purposes, such as receiving marketing communications. You may withdraw this consent at any time.
• Contract Performance: Processing is necessary to fulfil the agreement between you and ffa4u — for example, processing your RM deposits and withdrawals or managing your gaming account.
• Legal Obligation: ffa4u is required by law to process certain data for KYC purposes, anti-money laundering prevention and reporting to the relevant Malaysian authorities.
• Legitimate Interests: ffa4u processes data for our legitimate interests, such as fraud prevention and platform security — provided these interests do not override your fundamental right to privacy.

4 Sharing of Personal Information

Ffa4u does not sell, rent, or trade your personal data to third parties. However, in the course of operating the platform, we may share your information with the following categories of parties under limited and controlled circumstances:

• Payment Service Providers: Required financial information is shared with e-wallet providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and partner banks (Maybank, CIMB, RHB) solely for the purpose of processing your RM deposits and withdrawals.
• Gaming Solution Providers: Third-party game software providers that operate slots, Live Casino, baccarat, and poker games on the ffa4u Platform may receive the minimum technical data required to run those games.
• KYC Service Providers: Third parties that assist ffa4u with identity verification and KYC processes to meet Malaysian legal requirements.
• Malaysian Authorities: ffa4u will disclose personal data to Malaysian government authorities or law enforcement when required by law, court order, or for crime prevention purposes.
• Audited Business Partners: In very limited cases, certain business partners who have signed strict data protection agreements with ffa4u.

All third parties that receive personal data from ffa4u are required to uphold security and privacy standards that are equivalent to or higher than ffa4u's own standards.

5 Data Security Measures at ffa4u

Ffa4u continually invests in the latest security infrastructure to ensure your personal data is always protected. Key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your device and ffa4u's servers are encrypted using TLS 1.3 protocol with 256-bit encryption — the same standard used by major banking institutions in Malaysia.
• Data-at-Rest Encryption: Sensitive data such as financial information and passwords are encrypted using the strongest encryption algorithms before being stored in the ffa4u database.
• Two-Factor Authentication (2FA): All ffa4u members are encouraged to enable 2FA for an additional layer of security when logging in.
• 24/7 Monitoring: The ffa4u security team continuously monitors platform activity to detect and prevent any unauthorised access attempts or suspicious activity.
• Regular Security Audits: ffa4u conducts regular penetration testing and security audits carried out by independent cybersecurity experts.
• Strict Access Controls: Access to ffa4u members' personal data is granted only to staff who require it to perform their duties, and all access is logged and monitored.

6 Cookies & Tracking Technologies

The ffa4u platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. The following are the types of cookies we use:

You can control and manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the ffa4u Platform. ffa4u does not use third-party advertising cookies or cross-site tracking technologies.

7 Data Storage & Transfer

Ffa4u retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law:

• Active Account Data: For as long as your ffa4u account remains active, all personal data and transactions are retained to enable us to provide uninterrupted service.
• Post-Account Closure Data: Following the closure of your ffa4u account, we retain your personal data for a minimum period of 5 years for legal compliance, dispute resolution and audit purposes.
• Log & Technical Data: Security logs and technical data are retained for 12 months for threat detection and technical troubleshooting purposes.
• Marketing Data: If you have withdrawn consent for marketing communications, the relevant data will be deleted within 30 days.

Ffa4u's primary servers are located in Malaysia. In limited cases, data may be processed outside Malaysia by registered cloud service providers; however, all such transfers are carried out with adequate contractual safeguards and in compliance with the PDPA 2010.

8 Your Privacy Rights as a ffa4u Member

Under Malaysia's PDPA 2010 and ffa4u's Privacy Policy, you have important rights regarding your personal data. You may exercise these rights at any time by contacting the ffa4u team:

To exercise any of the rights above, please contact the ffa4u Data Protection Officer at support@ffa4u.bet. ffa4u will respond to your request within 14 working days.

9 Children's Data

The ffa4u platform is strictly for individuals aged 18 and above. ffa4u does not intentionally collect, store or process any personal data from individuals under the age of 18.

Should ffa4u discover that personal data of a minor has been inadvertently collected, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on ffa4u without permission should contact us immediately at support@ffa4u.bet.

10 Links to Third-Party Websites

The ffa4u platform may contain links to third-party websites or services from time to time. Please note that ffa4u's Privacy Policy does not apply to those third-party websites.

Ffa4u is not responsible for the privacy practices or content of third-party websites. We encourage you to read the Privacy Policy of each website you visit individually. The inclusion of third-party links on the ffa4u Platform does not imply that ffa4u endorses or validates those websites.

11 Amendments to the ffa4u Privacy Policy

Ffa4u reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, Malaysian legislation, or platform improvements. When we make material amendments, we will:

• Updating the "Last Updated" date at the top of this Privacy Policy.
• Displaying a clear notice on the ffa4u Platform homepage.
• Sending notifications to your registered email address when changes are significant and directly affect your privacy rights.

Your continued use of the ffa4u Platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, please stop using the ffa4u Platform and contact us to close your account.

12 Contact the ffa4u Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or the way ffa4u handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe ffa4u has violated your privacy rights under PDPA 2010 and a direct resolution with us has not been successful.