fb99 Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy applies to all services provided under the fb99 brand at https://fb99.io, including the online casino, sports betting platform, live dealer games, payment services, and any associated mobile or web-based applications. It explains how fb99 collects, processes, stores, and protects personal data belonging to players and visitors based primarily in Bangladesh.

By registering an account on fb99, making a deposit, or otherwise using any fb99 service, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, you must discontinue use of the fb99 platform immediately.

fb99 acts as the data controller for all personal data collected through the fb99 platform. As data controller, fb99 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing complies with applicable data protection obligations.

All data-related requests, complaints, and enquiries should be directed to fb99's support team at [email protected]. fb99 aims to acknowledge all data-related requests within 48 hours of receipt.

fb99 collects personal data through several channels: directly from you during registration and account use, automatically through your interactions with the platform, and from third-party service providers where necessary for compliance or fraud prevention purposes. The table below summarises the categories of data collected.

fb99 uses the personal data it collects for the following specific purposes only. Any use of your data beyond these stated purposes requires your prior consent, which you may withdraw at any time.

• Account Management: Creating, maintaining, and operating your fb99 player account, including processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Identity Verification (KYC): Verifying your identity and age (21+) as required to comply with anti-money-laundering obligations and responsible gaming standards.
• Transaction Processing: Processing all financial transactions, including deposits, withdrawals, bonus credits, and refunds, accurately and securely.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in the fb99 Terms & Conditions.
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify signs of problem gambling and administering responsible gaming tools including deposit limits, cool-off periods, and self-exclusion.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, reliability, and user experience of the fb99 platform.
• Marketing Communications: Sending promotional emails or platform notifications about bonuses, seasonal offers (e.g., Eid promotions, BPL season offers), and new game launches — only where you have opted in to receive such communications. You may opt out at any time.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Legal Compliance: Fulfilling fb99's obligations under applicable laws and regulations, including responding to lawful requests from regulatory authorities.

fb99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform the contract between you and fb99 (i.e., to operate your account, process transactions, and deliver platform services).
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for fb99's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your explicit opt-in consent, such as receiving marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

fb99 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, and to gather anonymised analytics data about how the platform is used. The following categories of cookies are deployed on fb99:

• Strictly Necessary Cookies: Essential for the platform to operate. These include session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred games, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how visitors interact with the fb99 platform, which pages are visited most, and where users exit. This data is used in aggregate form only and cannot be used to identify individual players.

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your fb99 account and using core platform features.

fb99 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared with third parties only in the following strictly defined circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners require certain transaction data to process deposits and withdrawals. Data shared is limited to what is strictly necessary for the transaction.
• Identity Verification Providers: Third-party KYC and age verification services that assist fb99 in verifying player identities in accordance with responsible gaming obligations. These providers operate under strict data processing agreements.
• Fraud Prevention Services: Specialist fraud detection and anti-money-laundering screening services that help fb99 identify and prevent prohibited activity on the platform.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games within the fb99 platform. These providers do not receive personally identifiable data.
• Regulatory and Legal Authorities: fb99 will disclose personal data to competent regulatory or law enforcement authorities where required to do so by law, court order, or in connection with an investigation into suspected financial crime or fraud.

Some of the third-party service providers that fb99 works with may process your personal data in jurisdictions outside Bangladesh. Where such transfers occur, fb99 takes reasonable steps to ensure that your personal data receives an equivalent level of protection to that described in this Privacy Policy.

fb99 uses contractual safeguards — including data processing agreements with all third-party processors — to ensure that transferred data is handled securely and only for the purposes described in this policy. If you have questions about the safeguards applicable to a specific transfer, you may contact fb99 at [email protected].

fb99 retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and regulation. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial, usage) is retained for the full duration of your account's active status.
• Following account closure, fb99 retains identity and transaction data for up to five years to comply with anti-money-laundering record-keeping obligations.
• Support communications are retained for up to three years after the resolution of the relevant query or complaint.
• Anonymised, aggregated analytics data — which cannot be used to identify individual players — may be retained indefinitely for platform improvement purposes.
• Marketing consent records are retained for the full period during which you are subscribed plus six months following opt-out, to evidence your consent history.

When personal data is no longer required and no retention obligation applies, fb99 will securely delete or anonymise it in accordance with industry-standard data destruction practices.

As an fb99 player, you have the following rights over your personal data. To exercise any of these rights, contact fb99 at [email protected]. fb99 will respond to all verifiable requests within 30 days.

• Right of Access: Request a copy of the personal data fb99 holds about you, along with information about how it is processed.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data held by fb99.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention obligations.
• Right to Restrict Processing: Request that fb99 restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: Request that fb99 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, although fb99 may be required to continue processing for legal or compliance reasons.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

fb99 is strictly an adult platform. No person under the age of 21 is permitted to register an account or use fb99 services. fb99 does not knowingly collect personal data from any individual under the age of 21. If fb99 discovers that personal data has been collected from an underage user, that account will be immediately closed, all data will be deleted, and any deposited funds will be handled in accordance with applicable law.

fb99 employs a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• TLS 1.3 encryption on all data transmitted between your device and fb99 servers, ensuring that your login credentials, payment details, and account data cannot be intercepted in transit.
• Encryption at rest for sensitive data fields including identity documents, payment account numbers, and password hashes. Passwords are never stored in plain text.
• Role-based access controls that restrict access to personal data to only those fb99 employees and contractors who have a legitimate operational need.
• Regular internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in the platform's data handling infrastructure.
• Automatic session timeout and re-authentication requirements to reduce the risk of unauthorised account access via unattended devices.
• Two-factor authentication (2FA) available to all registered players as an optional additional layer of account security.

While fb99 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. If you suspect that your fb99 account has been compromised, please contact fb99 support immediately at [email protected] and change your password without delay.

fb99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, applicable law, or industry best practices. When material changes are made, the "Last Updated" date at the top of this document will be revised accordingly. For significant changes that affect how your personal data is processed, fb99 will notify registered players via email or a prominent platform notification prior to the changes taking effect.

Your continued use of the fb99 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using fb99 and may request account closure by contacting support. It is your responsibility to review this policy periodically.

For all data privacy enquiries, rights requests, or complaints, please contact the fb99 data team using the details below. fb99 is committed to handling all privacy-related communications with care and confidentiality.

• Email: [email protected]
• Subject line: Please include "Privacy Request" or "Data Complaint" in your subject line to ensure prompt routing.
• Response time: fb99 aims to acknowledge all privacy requests within 48 hours and to provide a substantive response within 30 days.
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

If you are dissatisfied with fb99's response to a privacy complaint, you may escalate the matter through fb99's formal internal dispute resolution process. Details of this process will be provided at the time of the initial response to your complaint.