1f5fa Privacy Policy

01 Overview and Scope

This Privacy Policy describes how 1f5fa ("1f5fa", "the Platform", "we", "us", "our") collects, processes, stores, shares, and protects personal data in connection with the operation of the 1f5fa online betting and casino platform at https://1f5fa.io and all associated services, mobile applications, and subdomains.

This policy applies to all individuals who interact with 1f5fa in any capacity, including registered players, applicants who begin but do not complete registration, and visitors who browse the platform without registering. It governs all personal data processing activities carried out by 1f5fa regardless of the device or access method used.

By registering an account, depositing funds, placing a bet, or otherwise using the 1f5fa platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the platform.

This policy should be read alongside the 1f5fa Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 1f5fa.

02 Data Controller

1f5fa acts as the data controller in respect of all personal data collected through the platform. As data controller, 1f5fa determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For data protection enquiries, requests to exercise your rights, or concerns about how your personal data is handled, you may contact the 1f5fa data team directly:

• Email: [email protected] (plain text — not a clickable link)
• Platform: https://1f5fa.io
• Support hours: 24 hours a day, 7 days a week
• Response time target: Within 14 business days for formal data requests

03 Data We Collect

1f5fa collects personal data through three primary channels: data you provide directly during registration and account use; data generated automatically through your use of the platform; and data received from trusted third-party verification and payment partners.

Data you provide directly:

• Registration data: full legal name, date of birth, email address, mobile phone number, and city or district of residence within Bangladesh.
• Identity verification documents: National Identity Card (NID), passport, driving licence, or other government-issued identification as required for KYC compliance.
• Proof of address: utility bill, bank statement, or other document confirming your residential address in Bangladesh.
• Payment information: bKash account number, Nagad account number, Rocket account number, Upay account number, or bank account details used for deposits and withdrawals.
• Support communications: messages, emails, and chat transcripts submitted to 1f5fa support staff.
• Responsible gaming declarations: self-exclusion requests, deposit limit settings, and session time restrictions.

Data collected automatically:

• Device and technical data: IP address, device identifier, browser type and version, operating system, screen resolution.
• Session data: login and logout timestamps, session duration, pages visited within the platform, features accessed.
• Betting and gaming data: complete history of all bets placed, games launched, game outcomes, bonus activations, and wagering activity.
• Transaction data: deposit amounts, withdrawal requests, bonus credits, and balance adjustments, each recorded with a timestamp and payment method reference.
• Behavioural analytics: aggregate usage patterns used to identify responsible gaming concerns and improve platform design.

Data from third parties:

• Identity verification results from KYC service providers confirming document authenticity and age.
• Payment confirmation data from MFS providers (bKash, Nagad, Rocket, Upay) and banking partners confirming transaction status.
• Fraud and sanctions screening results from compliance data services used to meet AML obligations.

04 How We Use Your Data

1f5fa processes personal data only for specific, documented purposes. The primary purposes for which we use your data are:

1. Account creation and management — to register your account, maintain your account profile, and provide access to all platform features.
2. Age and identity verification (KYC) — to confirm that you are at least 21 years of age and that your identity is as declared, as required before real-money activity is permitted on 1f5fa.
3. Payment processing — to process deposits, validate payment method ownership, and execute approved withdrawal requests to your registered MFS account or bank account.
4. Platform security and fraud prevention — to detect and prevent unauthorised account access, multiple-account registrations, bonus abuse, and fraudulent transactions.
5. Anti-money laundering (AML) compliance — to monitor transactions for patterns consistent with money laundering, to conduct sanctions screening, and to report suspicious activity to relevant authorities where legally required.
6. Responsible gaming — to monitor betting patterns for indicators of problem gambling, to enforce self-imposed limits and exclusions, and to intervene proactively where responsible gaming concerns are identified.
7. Customer support — to handle enquiries, complaints, and disputes submitted through all support channels.
8. Platform improvement — to analyse anonymised usage patterns, game performance data, and player journeys to improve the platform for all users.
9. Marketing communications — to send promotional offers, bonus notifications, and platform updates to players who have explicitly opted in to receive such communications. You may opt out at any time by contacting [email protected].
10. Legal compliance and audit — to retain records as required by applicable law and to provide evidence in legal, regulatory, or dispute proceedings where 1f5fa is a party.

05 Cookies and Tracking Technologies

1f5fa uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that allow the platform to recognise your session, remember your preferences, and collect anonymised usage statistics.

The following categories of cookies are used on 1f5fa:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, enforce security tokens, and preserve your account preferences between pages. These cannot be disabled without disrupting core platform functionality.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — which games are most frequently launched, which pages generate the most support contact, and how long players engage with different features. This data is used exclusively for internal platform improvement. No individual player is identifiable from analytics data.
• Functional Cookies: These cookies remember your display preferences, language settings, and responsible gaming reminder configurations so you do not need to re-enter them on each visit.

1f5fa does not deploy advertising cookies, cross-site tracking pixels, social media tracking scripts, or any third-party behavioural profiling technology on the platform. Your browsing behaviour on 1f5fa is not shared with external advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to remain logged in and use core platform features. Disabling analytics or functional cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

06 Data Sharing and Disclosure

1f5fa does not sell, rent, or disclose your personal data to third parties for commercial purposes. Data may be shared in the following limited and controlled circumstances:

• KYC and identity verification providers: Verification service partners receive the specific identity documents required to complete your KYC check. These partners are contractually bound to process data solely for verification purposes and to maintain appropriate security standards.
• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum transaction data necessary to process deposits and withdrawals. 1f5fa does not store complete MFS PIN numbers or bank account passwords.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive an anonymised session token to authenticate your game session. These providers do not receive your name, contact details, or financial data.
• Fraud and AML compliance services: Transaction monitoring and sanctions screening providers receive transactional data in pseudonymised form to perform required compliance checks.
• Legal and regulatory authorities: Where 1f5fa is legally required to disclose data — for example, in response to a court order, law enforcement request, or regulatory investigation — we will comply with the applicable legal requirement and, where permitted, notify the affected player.
• Business succession: In the event of a merger, acquisition, or sale of substantially all of 1f5fa's assets, player data may be transferred to the successor entity. Affected players will be notified in advance, and the successor will be bound by the terms of this Privacy Policy or a policy no less protective.

07 International Data Transfers

1f5fa's primary player data is processed and stored on servers located within secure data centre facilities. Some third-party service providers — particularly game software providers and payment processing infrastructure — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, 1f5fa ensures that appropriate safeguards are in place. These may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that maintain data protection standards equivalent to or exceeding those applicable to 1f5fa's operations. 1f5fa does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing compensating controls.

If you wish to obtain further information about the specific safeguards applied to international data transfers in connection with your account, you may submit a request to [email protected].

08 Data Retention

1f5fa retains personal data for the minimum period necessary to fulfil the purposes described in this policy, subject to any longer retention periods required by applicable law. The following retention principles apply:

• Active account data: Personal data associated with an active 1f5fa account is retained for the full duration of the account's active status plus a minimum of five years following account closure, to satisfy AML record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of verification or the date of account closure, whichever is later. This retention period reflects AML compliance obligations.
• Transaction records: Full betting, deposit, and withdrawal histories are retained for a minimum of five years from the date of each transaction.
• Support communications: Customer support correspondence is retained for three years from the date of the final communication in each case, or longer where a communication relates to an unresolved dispute.
• Technical and analytics data: Anonymised analytics data has no fixed retention limit as it cannot be linked to an individual. Identifiable technical data (such as IP address logs) is retained for 12 months.
• Marketing data: Marketing preference records are retained until you withdraw consent, plus 12 months for audit purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players who wish to request early deletion of their data may do so under Section 10 of this policy, subject to any legal retention obligations that override the deletion request.

09 Security Measures

1f5fa applies a layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures currently in place include:

• Transport encryption: All data in transit between your device and 1f5fa servers is encrypted using TLS 1.3 with 256-bit keys. All platform pages are served exclusively over HTTPS.
• Storage encryption: Personal data and identity documents stored in 1f5fa databases are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff access is role-based, individually authenticated, and logged. All data access events are subject to regular audit review.
• Password security: Account passwords are hashed using a modern adaptive hashing algorithm (bcrypt) with unique salting per account. 1f5fa staff cannot retrieve your plaintext password.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication on their accounts. Certain high-value operations require 2FA by default.
• Anomaly detection: 1f5fa operates automated systems that monitor login patterns, transaction activity, and session behaviour for indicators of account compromise or fraudulent activity in real time.
• Penetration testing: 1f5fa engages independent security specialists to conduct periodic penetration tests and vulnerability assessments of the platform infrastructure.

While 1f5fa makes every commercially reasonable effort to protect your data, no digital security system can provide an absolute guarantee against all threats. You are responsible for maintaining the security of your own device and account credentials. If you suspect your account has been compromised, contact [email protected] immediately.

10 Your Rights Over Your Personal Data

As a registered 1f5fa player, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected]. Requests will be acknowledged within 2 business days and resolved within 14 business days.

1. Right of Access: You may request a copy of the personal data 1f5fa holds about you, together with information about how it is used and with whom it is shared.
2. Right to Rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected. Identity-linked data changes (for example, a name change) will require supporting documentation.
3. Right to Erasure: You may request that your personal data be deleted where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to overriding legal retention obligations — for example, AML record-keeping requirements mean that certain data cannot be deleted for up to five years regardless of an erasure request.
4. Right to Restriction: In certain circumstances — for example, where you contest the accuracy of data or object to its processing — you may request that processing be restricted while the matter is under review.
5. Right to Data Portability: Where processing is based on your consent and carried out by automated means, you may request that your data be provided in a structured, commonly used, machine-readable format.
6. Right to Object: You may object to the processing of your data for direct marketing purposes at any time, with immediate effect. You may also object to other processing activities where your specific situation warrants it, subject to 1f5fa demonstrating compelling legitimate grounds.
7. Right to Withdraw Consent: Where processing is based solely on your consent (for example, marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11 Children and Minors

The 1f5fa platform is strictly intended for adults aged 21 years and above. 1f5fa does not knowingly collect, process, or retain personal data belonging to persons under the age of 21. The registration process includes a date-of-birth declaration and age verification through KYC documentation specifically to prevent underage access.

If 1f5fa becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, that data will be immediately deleted, the associated account closed, and any deposited funds returned to the source payment method.

If you believe that a person under the age of 21 has registered on 1f5fa using false information, please contact [email protected] immediately so that we can investigate and act accordingly.

12 Third-Party Services and Links

The 1f5fa platform integrates game content provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these games are delivered within the 1f5fa platform environment, the game logic and random number generation are operated by the respective provider on their own certified infrastructure.

When you launch a game provided by a third-party studio, an anonymous session token is passed to the provider to authenticate your game session. Your personal account details — including your name, contact information, and financial data — are not transmitted to game providers. Providers receive only the data required to run the game session and settle the result back to your 1f5fa account balance.

1f5fa is not responsible for the privacy practices of third-party game providers or payment service providers. We recommend reviewing the privacy policies of any third-party service you engage with independently of the 1f5fa platform.

13 Updates to This Privacy Policy

1f5fa reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. Where a change is material — for example, a change to the categories of data collected, a new third-party data sharing arrangement, or a change to retention periods — 1f5fa will notify active account holders by email or in-platform notification prior to the change taking effect.

Minor clarifications that do not affect the substance of data processing practices may be made without advance notice. The effective date displayed at the top of this document will be updated to reflect the date of the most recent revision.

Continued use of the 1f5fa platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you may request account closure and withdrawal of your account balance before the change takes effect.

The current version of this Privacy Policy is always available at https://1f5fa.io/privacy-policy.

14 Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the 1f5fa data team using the details below. All communications must be in English.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Formal data request response time: Within 14 business days of receipt
• General support response time: Typically under 5 minutes via live chat during peak Bangladesh Standard Time (BST, UTC+6) hours

When submitting a formal data rights request, please include your registered email address, a description of the right you wish to exercise, and (where applicable) the specific data or processing activity your request concerns. This helps us handle your request accurately and within the target response window.