fb99 Privacy Policy — How We Handle Your Personal Data

fb99 is an online casino and sports betting platform accessible at fb-99.io, operated for the benefit of players based in Bangladesh and other permitted jurisdictions. When this Privacy Policy refers to "fb99", "we", "us", or "our", it means the operator of the fb-99.io platform in its capacity as the data controller responsible for your personal information.

As data controller, fb99 determines the purposes and means by which your personal data is processed. We are committed to handling all personal data in accordance with recognised international standards of data protection and privacy, including principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

This Privacy Policy applies to all personal data collected from players and visitors when they access, register on, deposit into, play on, or otherwise interact with the fb99 platform. It applies regardless of the device used to access the platform — whether desktop, mobile browser, or mobile application where available.

fb99 collects personal data across several categories, depending on the nature of your interaction with the platform. The following table summarises the categories of personal data we collect and the context in which each category arises:

fb99 does not intentionally collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where a player voluntarily discloses such information during a responsible gaming interaction (for example, when seeking support for gambling-related harm). Any sensitive data disclosed in this context is handled with particular care and used solely for the purpose of providing appropriate support.

fb99 collects your personal data through the following channels and mechanisms:

3.1 Data You Provide Directly

The majority of the personal data fb99 holds about you is provided directly by you during the course of your relationship with the platform. This includes data you submit when:

• Completing the account registration form, including your name, date of birth, email address, and mobile number.
• Uploading identity or address verification documents as part of the KYC process.
• Making a deposit or requesting a withdrawal, including payment method details.
• Contacting the fb99 support team via live chat, email, or WhatsApp.
• Completing surveys, providing feedback, or participating in promotional activities.
• Updating your account profile or communication preferences at any time.

3.2 Data Collected Automatically

When you visit or use the fb99 platform, certain technical data is collected automatically by our systems without requiring any action on your part. This includes your IP address, the type and version of browser you are using, your device operating system, the pages you visit on the platform, the duration of your sessions, and timestamps of your activity. This data is used primarily for security monitoring, fraud prevention, and platform performance optimisation.

3.3 Data From Third Parties

In limited circumstances, fb99 may receive personal data about you from third parties. This can occur when:

• A payment provider such as bKash, Nagad, Rocket, or Upay confirms the completion of a transaction and shares associated transaction metadata.
• An identity verification service provider returns the result of a document check conducted as part of the KYC process.
• A fraud prevention or anti-money laundering screening service returns risk-related data about a player or transaction.

fb99 uses third-party data only to the extent necessary to verify your identity, process your transactions, and fulfil our compliance obligations. We do not purchase marketing lists or receive personal data from social media platforms for targeted advertising purposes.

fb99 uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below:

• Account Management: To create, maintain, and administer your fb99 player account, including processing deposits and withdrawals and managing your account balance and transaction history.
• Identity Verification (KYC): To verify your identity and confirm your eligibility to use the platform, in accordance with our age verification and anti-money laundering obligations.
• Service Delivery: To provide you with access to the games, sports betting markets, promotions, and other features of the fb99 platform.
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance through our support channels.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to apply deposit limits or self-exclusion measures at your request, and to proactively reach out where our responsible gaming monitoring system flags a concern.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited activities on the platform.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and the lawful requests of regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and user experience of the fb99 platform.
• Marketing Communications: Where you have provided explicit consent, to send you promotional emails or messages about bonuses, new games, and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

fb99 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary for fb99 to perform the contract it has entered into with you — namely, providing you with a registered gaming account and the services associated with it. Without this processing, fb99 cannot operate your account.
• Legal Obligation: fb99 is required by applicable anti-money laundering obligations, fraud prevention requirements, and related regulatory frameworks to collect and verify certain personal data, to retain records of transactions, and to report suspicious activity where required. This processing is necessary for compliance with those legal obligations.
• Legitimate Interests: fb99 processes technical data and gaming activity data on the basis of its legitimate interest in maintaining the security and integrity of the platform, preventing fraud, and monitoring for problem gambling. We have assessed that our legitimate interests are not overridden by your privacy rights in these contexts.
• Consent: Where fb99 sends you marketing communications, processes your data for platform personalisation beyond what is strictly necessary, or handles any sensitive personal data you may have voluntarily disclosed, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

fb99 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Payment Service Providers

When you make a deposit or request a withdrawal, we share the minimum necessary data with the relevant payment service provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard — to process the transaction. These providers operate their own privacy policies and are independently responsible for your data in their systems.

6.2 Identity Verification and Compliance Partners

To fulfil our KYC and anti-money laundering obligations, fb99 may share identity and address data with third-party verification service providers. These providers process data strictly on our behalf and are contractually bound to handle it securely and only for the purpose of verification.

6.3 Game Studio Providers

The games available on fb99 are supplied by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, certain technical data such as session identifiers and bet amounts may be transmitted to the relevant studio's platform to facilitate gameplay and settle outcomes. These studios do not receive your name, address, or payment details.

6.4 Legal and Regulatory Disclosure

fb99 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to prevent or detect fraud, money laundering, or other criminal activity.

fb99 uses cookies and similar tracking technologies to operate, secure, and improve the platform. A cookie is a small text file placed on your device when you visit a website. The cookies used by fb99 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and enable secure navigation between pages. The platform cannot operate correctly without them, and they cannot be disabled.
• Functional Cookies: These cookies remember choices you make — such as your preferred language, your last visited game category, and your notification preferences — to provide a more personalised experience on subsequent visits. They are not used for advertising.
• Analytics Cookies: fb99 uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues are occurring. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies help fb99 detect and prevent fraudulent activity, unauthorised access attempts, and bot behaviour on the platform. They form part of our technical security infrastructure.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the fb99 platform. Strictly necessary and security cookies cannot be disabled as they are fundamental to the safe operation of the service.

fb99 takes the security of your personal data seriously and applies a layered set of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the fb99 platform is encrypted in transit using industry-standard SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted during transmission.
• Access Controls: Access to personal data within fb99's internal systems is restricted to authorised personnel who have a legitimate need to access it in order to perform their job functions. Access rights are reviewed regularly and revoked when no longer required.
• Two-Factor Authentication: fb99 offers two-factor authentication (2FA) for player accounts and requires it for internal administrative access. Players are strongly encouraged to enable 2FA from their account settings.
• Intrusion Detection and Monitoring: fb99's infrastructure is monitored continuously for suspicious activity. Automated alerts are triggered when anomalous access patterns or potential security incidents are detected.
• Data Minimisation in Storage: fb99 limits the personal data stored in production systems to what is strictly necessary. Historical data is archived or anonymised where operationally feasible.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, fb99 will notify affected players and take all reasonable steps to mitigate the impact of the breach as quickly as possible.

fb99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account relationship and for a period of five years following the closure or termination of the account, in line with standard financial record-keeping requirements.
• KYC and Verification Documents: Identity and address verification documents submitted as part of the KYC process are retained for a minimum of five years from the date of submission, in accordance with anti-money laundering record-keeping obligations.
• Transaction Records: Records of all deposits, withdrawals, and gaming transactions are retained for a minimum of five years to support audit, compliance, and dispute resolution processes.
• Support Communications: Records of customer support interactions, including chat transcripts and email correspondence, are retained for two years from the date of the interaction, unless the interaction relates to an unresolved complaint or legal matter.
• Marketing Data: Where you have consented to marketing communications, we retain your contact details and consent record for as long as the consent remains valid. If you withdraw consent, your details are removed from our marketing lists within 30 days.
• Technical and Analytics Data: Anonymised analytics data may be retained indefinitely as it cannot be linked to individual players. Identifiable technical data such as IP logs is retained for a maximum of 12 months unless required for an ongoing security investigation.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

As a player on the fb99 platform, you have the following rights in relation to your personal data. fb99 is committed to facilitating the exercise of these rights promptly and without undue burden:

• Right of Access: You have the right to request a copy of the personal data fb99 holds about you. We will provide this information in a clear and accessible format within a reasonable timeframe.
• Right to Rectification: If any personal data fb99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update much of your account information directly from your account settings page.
• Right to Erasure: You may request that fb99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where you object to the processing and fb99 has no overriding legitimate interest to continue. Note that certain data must be retained to comply with legal obligations and cannot be erased on request.
• Right to Restriction: You may request that fb99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Object: You have the right to object to processing carried out on the basis of fb99's legitimate interests. fb99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request its transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where fb99 processes your data on the basis of consent, you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact the fb99 support team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The fb99 platform is strictly intended for adults aged 21 and above. fb99 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account, make a deposit, or use any feature of the fb99 platform.

If fb99 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will take immediate steps to verify the account holder's age, suspend the account pending investigation, and permanently delete the associated personal data to the extent permitted by our legal compliance obligations.

fb99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. All changes will be posted at fb-99.io/privacy-policy with a revised effective date at the top of the document.

Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — fb99 will provide advance notice to registered players by email to the address on file or via a prominent notice displayed on the platform when you next log in. We will provide at least 14 days' notice before material changes take effect, giving you an opportunity to review the revised policy before it applies to you.

Your continued use of the fb99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any revised version of this policy, you should stop using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fb99 handles your personal data, please contact our support team using any of the following channels:

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• WhatsApp: +880 1700-000000 (available 08:00–24:00 Bangladesh Standard Time)
• Live Chat: Available 24/7 via the fb99 platform website

fb99 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days. For formal data rights requests, please submit your request in writing via email to ensure a proper audit trail and allow us to verify your identity before acting on the request.