fb99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how fb99 ("fb99", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "the Player") who register for or use the fb99 online betting and casino platform available at fb99login.com and its associated services.

fb99 is committed to handling your personal data with the highest standards of care, transparency, and security. This Policy has been prepared in plain formal English so that players across Bangladesh can clearly understand how their information is managed. Where this Policy refers to "personal data" or "personal information", these terms mean any information that identifies you or could reasonably be used to identify you, either alone or in combination with other data.

By creating an fb99 account, making a deposit, or otherwise accessing our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the fb99 platform. This Policy should be read alongside the fb99 Terms & Conditions, which are incorporated by reference.

2 Data Controller

fb99 acts as the data controller in respect of the personal data collected through the fb99 platform. As data controller, fb99 determines the purposes and means by which your personal data is processed. All data protection enquiries, subject access requests, and privacy-related complaints should be directed to the fb99 Data Protection contact as described in Section 15 of this Policy.

Where fb99 engages third-party service providers to process personal data on its behalf (for example, payment processors and identity verification providers), those parties act as data processors and are contractually obligated to process data only on fb99's documented instructions and in accordance with applicable data protection standards.

3 Personal Data We Collect

fb99 collects the following categories of personal data from players. The specific data points collected may vary depending on the services you use and the verification level required for your account.

Data Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, gender, NID or passport number, photograph	Registration and KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration
Financial Data	bKash / Nagad / Rocket / Upay account numbers, Visa or Mastercard details (last four digits and expiry), transaction history	Deposit, withdrawal, and KYC
Technical Data	IP address, browser type and version, device type, operating system, session timestamps	Every platform visit
Usage Data	Pages visited, games played, bet history, deposit and withdrawal activity, session duration, click paths	Ongoing platform use
Communications Data	Live chat transcripts, support email content, feedback submissions	When you contact support
Responsible Gaming Data	Self-exclusion requests, deposit limit settings, time-out preferences, problem gambling indicators	When you use responsible gaming tools

4 How We Collect Your Data

fb99 collects personal data through the following channels:

4.1 Direct Collection

You provide data directly to fb99 when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our customer support team, or update your account profile settings. This is the primary source of personal data held by fb99.

4.2 Automated Collection

When you access the fb99 platform, our systems automatically collect technical and usage data through server logs, session cookies, and analytics tools. This data is collected passively and does not require any action on your part. See Section 8 for full details of our cookies and tracking practices.

4.3 Third-Party Sources

In limited circumstances, fb99 may receive personal data about you from third-party sources, including:

• Identity verification providers who cross-reference the documents you submit with official databases to confirm authenticity.
• Payment service providers such as bKash, Nagad, Rocket, and Upay, who confirm transaction status and account ownership details.
• Fraud prevention and AML screening services that flag politically exposed persons (PEPs) or individuals on sanctions lists.

5 Legal Basis for Processing

fb99 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing is required to perform the contract between fb99 and you as a registered player — including account management, bet settlement, payment processing, and customer support.
• Legal obligation: Processing is necessary for fb99 to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responsible gaming mandates.
• Legitimate interests: Processing is necessary for the legitimate business interests of fb99, including fraud prevention, platform security, network and information security, and improvement of our services — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where fb99 sends you direct marketing communications or deploys non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6 How We Use Your Personal Data

fb99 uses the personal data it collects for the following specific purposes:

6.1 Account Management and Service Delivery

We use your identity, contact, and financial data to create and maintain your fb99 account, process deposits and withdrawals, settle bets and casino game outcomes, respond to customer support enquiries, and deliver the core betting and gaming services you have contracted with us to receive.

6.2 Identity Verification and KYC Compliance

We use identity and financial data to verify that you are who you claim to be, that you meet the minimum age requirement of 21 years, that you are not a politically exposed person (PEP) or subject to sanctions, and that your use of the platform complies with anti-money-laundering regulations. KYC verification is a legal obligation that fb99 cannot waive.

6.3 Fraud Prevention and Platform Security

We use technical data, usage data, and identity data to detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in the fb99 Terms & Conditions. This processing is conducted on the basis of fb99's legitimate interests in protecting the integrity of the platform and the interests of genuine players.

6.4 Responsible Gaming Monitoring

We use usage data and responsible gaming data to monitor player behaviour for indicators of problem gambling, to enforce self-exclusion requests, and to ensure that deposit limits, loss limits, and time-out periods set by players are correctly applied. This processing is both a legal obligation and a core operational function of the fb99 responsible gaming programme.

6.5 Communications and Notifications

We use your contact data to send you transactional communications, including deposit confirmations, withdrawal notifications, account security alerts, KYC status updates, and changes to these Terms or this Policy. These communications are necessary for the performance of our contract with you and cannot be opted out of while your account is active.

Where you have provided separate consent to receive marketing communications, we may send you promotional offers, bonus announcements, and news about new games or features available on fb99. You may opt out of marketing communications at any time by contacting our support team.

6.6 Platform Analytics and Improvement

We use anonymised or aggregated usage data to analyse platform performance, identify technical issues, understand how players navigate the site, and make informed decisions about platform improvements and new feature development. This data cannot be used to identify individual players and is processed on the basis of fb99's legitimate interests in maintaining and improving our services.

7 How We Share Your Data

fb99 does not sell, rent, or trade your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated financial service providers.
• Identity verification providers: Third-party KYC and AML screening services receive the identity documents and personal details you submit for verification purposes. These providers are contractually bound to process data only for verification purposes.
• Game content providers: Casino game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe may receive a pseudonymous player identifier and game activity data necessary to deliver game functionality and resolve game disputes. These providers do not receive your full identity data.
• IT and hosting providers: fb99 uses third-party cloud hosting and infrastructure providers to store and process platform data. These providers act as data processors under contract and have no independent right to access or use player data.
• Legal and regulatory authorities: fb99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory direction. fb99 will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of fb99's assets, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

8 Cookies and Tracking Technologies

fb99 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and understand how players use the site. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the fb99 platform to function. They maintain your login session, remember your account settings, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing your ability to use the platform.

8.2 Functional Cookies

These cookies remember your preferences, such as your preferred language, display settings, and last-used payment method. They improve your experience by personalising the platform to your previous choices.

8.3 Analytics Cookies

fb99 uses analytics tools to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely for internal platform improvement purposes and does not identify individual players. Analytics cookies are deployed on the basis of our legitimate interests and, where required by applicable law, your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the fb99 platform.

9 Data Retention

fb99 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account data and transaction history: Retained for a minimum of five years from the date of account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for five years from the date of submission or from the date of account closure, whichever is later, in accordance with applicable AML obligations.
• Customer support communications: Retained for two years from the date of the interaction, unless the communication relates to a formal complaint or legal dispute, in which case it is retained for the duration of the dispute resolution process plus one year.
• Technical and usage data: Retained for 13 months on a rolling basis to enable year-on-year platform performance comparison, after which it is aggregated and anonymised.
• Marketing consent records: Retained for the duration of your account plus two years, to demonstrate compliance with consent obligations.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players, even after account closure.

10 Data Security

fb99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the fb99 platform.
• AES-256 encryption for all personal and financial data stored in fb99 databases.
• Role-based access controls ensuring that only authorised personnel can access player records, with all access events logged and regularly audited.
• Two-factor authentication (2FA) for all internal administrative access to systems holding personal data.
• Regular penetration testing and vulnerability scanning of the fb99 platform infrastructure.
• Formal incident response procedures to detect, contain, and report personal data breaches in accordance with applicable notification requirements.

While fb99 takes all reasonable measures to protect your personal data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately if you suspect that your account has been compromised.

11 Your Data Rights

As a registered player on fb99, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Protection team as described in Section 15.

• Right of Access: You may request a copy of the personal data fb99 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as email address updates) can be made directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to fb99's legal obligation to retain certain data for the periods specified in Section 9.
• Right to Restriction: You may request that fb99 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of the personal data you have provided to fb99 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on fb99's legitimate interests. fb99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.

fb99 will respond to all data rights requests within 30 calendar days of receipt of a verified request. We may need to verify your identity before processing your request to protect against fraudulent or unauthorised requests.

12 Children's Privacy

The fb99 platform is strictly restricted to adults aged 21 years and above. fb99 does not knowingly collect, use, or retain personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately suspend the relevant account, delete the personal data in question, and take all necessary steps to prevent further access.

If you are a parent or guardian and believe that a person under your care has registered on the fb99 platform, please contact our support team immediately at the email address provided in Section 15. We take underage access seriously and will act on all credible reports without delay.

13 Third-Party Links

The fb99 platform may contain references to third-party payment service providers and game studios. These entities operate their own independent websites and privacy policies. fb99 is not responsible for the privacy practices, security measures, or content of any third-party services. We encourage you to review the privacy policies of any third-party providers you interact with in connection with your use of fb99.

14 Updates to This Privacy Policy

fb99 reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made — meaning changes that substantively affect your rights or how your data is used — fb99 will notify all registered players by email to their registered address and via an in-platform dashboard notification at least seven days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the fb99 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you may close your account and withdraw any remaining real-money balance in accordance with the withdrawal conditions set out in the fb99 Terms & Conditions.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a data protection complaint, please contact fb99 through the following channels:

• Email: [email protected]
• Subject line: Please use "Privacy Enquiry" or "Data Rights Request" in your email subject line so that your message is routed directly to our Data Protection team.
• Live Chat: Available 24/7 through the chat widget inside your account dashboard. For formal data rights requests, email is preferred as it creates a documented record.
• Response Time: All privacy-related enquiries are acknowledged within 48 hours and resolved within 30 calendar days of receipt of a verified request.

fb99 takes all data protection enquiries seriously and is committed to resolving concerns in a fair, transparent, and timely manner. If you are dissatisfied with fb99's response to a data protection complaint, you retain the right to escalate the matter through appropriate legal or regulatory channels in your jurisdiction.