Privacy Policy ff15 — Our Commitment to Protecting Malaysian Players' Data

1Introduction — Who We Are and Why Privacy Matters

This Privacy Policy is published by ff15 ("we", "our platform" or "ff15"), an online casino platform operating under a valid licence and providing gaming services to players in Malaysia. We are fully committed to protecting the privacy and personal data security of every individual who uses the ff15 platform.

At ff15, we understand that the trust of Malaysian players is the very foundation of everything we do. That trust goes beyond fair gameplay and fast payouts — it extends to how responsibly we handle your personal information. A player who registers with ff15 and makes a deposit via Touch 'n Go eWallet, GrabPay, or DuitNow deserves to know exactly what happens to the information they share with us.

This Privacy Policy applies to all users of the ff15 platform — including visitors browsing our website without registering, prospective members in the process of signing up, and active members making full use of ff15's gaming services. By using the ff15 platform in any capacity, you confirm that you have read and understood this Privacy Policy.

2Personal Data We Collect

Ff15 collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of each category of data we collect:

Ff15 does not collect sensitive information such as biometric data, medical records, or credit card details directly. All financial transactions are processed through licensed and regulated third-party payment providers operating in Malaysia.

3How ff15 Collects Your Personal Data

Ff15 collects your personal data through several different channels, depending on how you interact with our platform:

• Registration Form: When you register a ff15 account, you provide your name, Malaysian phone number, email address, and other basic information required to create the account.
• KYC (Know Your Customer) Process: When you make a withdrawal exceeding a certain threshold, or when our system identifies a need for verification, we may request documents such as a copy of your MyKad or bank statement for identity verification purposes.
• Financial Transactions: Every time you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, Boost, ShopeePay, GrabPay, or FPX internet banking, the transaction details are automatically recorded in the ff15 system.
• In-Platform Activity: The games you play, bets placed, session durations, and gameplay patterns are automatically recorded by the ff15 system for security and responsible gaming purposes.
• Support Communications: When you contact the ff15 support team via email, Live Chat, or WhatsApp, the content of those communications is recorded for reference purposes and to help us continuously improve our service.
• Cookies & Tracking Technologies: The ff15 platform uses cookies and similar technologies to collect technical data such as your IP address, device type and navigation patterns within the platform.

4How ff15 Uses Your Personal Data

Ff15 uses collected personal data solely for legitimate purposes necessary to operate a safe and responsible online casino platform in Malaysia. Below is a detailed explanation of how your data is used:

• Account Management: To create, verify and manage your ff15 account, including processing logins, password resets and member profile maintenance.
• Financial Transaction Processing: To process deposits and withdrawals in MYR via your chosen local payment method — whether Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX internet banking such as Maybank2u and CIMB Clicks.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, the creation of multiple accounts, and any conduct that violates ff15's Terms & Conditions.
• Regulatory Compliance: To fulfil applicable legal obligations, including anti-money laundering (AML) requirements, counter-terrorism financing (CFT) requirements and reporting obligations mandated by the relevant authorities.
• Responsible Gaming: To monitor members' gaming patterns, identify signs of problem gambling, enforce player-set limits, and fulfil ff15's obligations under its responsible gaming programme.
• Customer Support: To provide effective assistance when you contact the ff15 support team, including access to relevant account history to resolve your issues more efficiently.
• Platform Communications: To send you important notifications about your account, security updates, transaction confirmations, and relevant promotional information from ff15 — only where you have consented to receive such communications.
• Service Improvement: To analyse platform usage patterns on an aggregate (not individual) basis in order to better understand the needs of Malaysian players and continuously improve the gaming experience at ff15.

5Data Sharing with Third Parties

Ff15 does not sell, lend or disclose your personal data to third parties for commercial or marketing purposes. However, within the context of our platform's operations, there are limited situations where ff15 may share your data with specific parties:

• Technical Service Providers: ff15 works with trusted third-party providers for technical services such as server infrastructure, payment processing, and cybersecurity protection. These providers are required to sign strict data protection agreements and are only permitted to access the minimum data necessary for their specific tasks.
• Payment Providers: When you make a deposit or withdrawal, the necessary transaction information is shared with the relevant payment provider — such as Touch 'n Go eWallet, DuitNow, or FPX — solely for the purpose of processing your transaction.
• Relevant Authorities: ff15 is fully compliant with Malaysian law and will disclose required data to the relevant authorities when legally compelled to do so by a court order, warrant, or official request from a law enforcement agency. In such cases, ff15 will notify you if permitted by law to do so.
• Licensing Regulatory Body: As a licensed platform, ff15 may be required to disclose certain information to the regulatory body that issued our operating licence. This is a legal obligation, not a discretionary one.

In all data-sharing situations described above, ff15 ensures that only the minimum data necessary for that specific purpose is shared — not the player's full profile. We also ensure that all parties receiving your data are bound by data protection obligations equivalent to or stricter than those we apply at ff15.

6ff15 Data Security Measures

Ff15 continuously invests in the latest security infrastructure to ensure all members' personal data is protected against any threats or unauthorised access. The following are the key security measures we have in place:

• 256-bit SSL Encryption with TLS 1.3: All communications between your device and ff15's servers are encrypted using the latest industry-standard security protocols. This ensures no third party can intercept or read your data in transit — whether you access ff15 via public WiFi, 5G mobile data, or a home connection.
• Two-Factor Authentication (2FA): ff15 provides and encourages the use of two-factor authentication for all accounts. With 2FA enabled, even if someone knows your password, they will be unable to log in without the additional verification code sent to your phone.
• Encrypted Data Storage: Personal data stored in ff15's databases — including identity information and financial details — is encrypted at rest using robust encryption algorithms. No passwords are stored in plain text anywhere in the ff15 system.
• 24/7 Real-Time Security Monitoring: ff15's automated monitoring system operates around the clock to detect any suspicious or unusual activity on the platform. Any unauthorised access attempts or suspicious activity patterns will immediately trigger an alert to the ff15 security team.
• Periodic Penetration Testing: ff15 undergoes periodic penetration testing conducted by independent third parties to identify and remediate security vulnerabilities before they can be exploited.

7Personal Data Retention Period

Ff15 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required under applicable Malaysian law. Once the relevant retention period has lapsed, your data will be securely deleted or anonymised.

• Active Account Data: For as long as your ff15 account remains active, all associated data will be retained to ensure our services run smoothly for you.
• After Account Closure: When your ff15 account is closed for any reason, we retain financial and transaction records for the period required under Malaysia's anti-money laundering laws and applicable financial regulations — typically between 5 and 7 years.
• Support Communication Data: Communication records with the ff15 support team are retained for 3 years for reference purposes and to assist in resolving any disputes that may arise at a later stage.
• Security Log Data: Access logs and platform activity records are retained for 12 months for security monitoring and incident investigation purposes.

Once the applicable retention period has expired, ff15 will permanently delete your data or anonymise it in a manner that makes it no longer attributable to you as an individual. This deletion and anonymisation process is carried out under strict security procedures to ensure no residual data can be recovered.

8Your Rights Regarding Personal Data

As an ff15 member and data subject, you hold several important rights in relation to the personal data we hold about you. ff15 fully respects these rights and provides accessible channels for you to exercise them:

To exercise any of the rights listed above, please contact the ff15 privacy team by email at [email protected] with the subject line "Data Privacy Rights Request". We may need to verify your identity before processing the request to ensure the security of your data. All requests are handled free of charge.

9Cookies & Tracking Technologies on the ff15 Platform

The ff15 platform uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and analyse aggregated usage patterns. Cookies are small text files stored on your device when you access the ff15 platform.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the ff15 platform — particularly essential cookies required for secure login sessions. ff15 recommends keeping essential and security cookies enabled for the best and safest gaming experience.

10Child Protection — 18+ Age Restriction

The ff15 platform is strictly for adults aged 18 and above. ff15 does not knowingly collect personal data from anyone under the age of 18. All ff15 registration processes include explicit age verification.

Ff15 employs multiple mechanisms to prevent underage registration — including active Malaysian phone number verification, identity database checks and a rigorous KYC process. If there is reason to believe a member is under 18 years of age, ff15 will immediately suspend the account while an investigation is carried out.

11Cross-Border Data Transfers

In the course of operating the ff15 platform, it is possible that some of your personal data may be stored or processed on servers located outside Malaysia — for example, when ff15 uses international cloud service providers for our technical infrastructure.

In all cases of such cross-border data transfers, ff15 ensures that a level of data protection equivalent to, or greater than, what is required in Malaysia is applied. We only engage service providers that have robust, internationally recognised data protection mechanisms in place.

12Changes to ff15's Privacy Policy

Ff15 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or developments in security technology. We are committed to maintaining full transparency in this regard at all times.

When significant changes are made to this Privacy Policy, ff15 will notify all active members via their registered email and/or a prominent in-platform notice at least 14 days before the changes take effect. Minor updates such as spelling corrections or clarity improvements that do not alter the substantive meaning may be implemented without prior notice.

The "Last Updated" date shown at the top of this page reflects the effective date of the current version of ff15's Privacy Policy. Previous versions of ff15's Privacy Policy are kept in our archive and can be requested via our support email if needed for reference.

13Contact the ff15 Privacy Team

If you have any questions, concerns or complaints regarding this ff15 Privacy Policy — or wish to exercise any of your data privacy rights — please contact us through the following channels:

We encourage you to reach out to us directly before taking any formal action. The ff15 privacy team will make every effort to address your concerns promptly, transparently, and to your satisfaction.