fb99 Privacy Policy — How We Collect, Use, and Protect Your Data

1. Introduction

fb99 ("fb99", "we", "us", "our") operates the online casino and sports betting platform accessible at fb99bet.bet and all associated subdomains (the "Platform"). We are committed to handling the personal data of our players — all of whom are based in or accessing the Platform from Bangladesh — with transparency, integrity, and rigorous security.

This Privacy Policy sets out, in formal and precise terms, how fb99 collects, uses, stores, shares, and protects personal data. It also describes the rights available to every individual whose data we process. This policy forms part of the binding agreement between you and fb99, alongside the Terms & Conditions and the Responsible Gaming Policy.

This policy applies to all personal data processed in connection with your use of the Platform, whether you access it via a desktop browser or a mobile browser, and whether you are a registered account holder or an unregistered visitor.

2. Data Controller

2.1 For the purposes of this Privacy Policy, fb99 acts as the data controller in respect of all personal data collected from players and visitors through the Platform.

2.2 As data controller, fb99 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities are conducted lawfully, fairly, and transparently.

2.3 If you have any questions about how your personal data is handled, you may contact fb99's data support team at [email protected]. This address is a plain text contact detail and is not a clickable link.

3. Data We Collect

fb99 collects the following categories of personal data in the course of operating the Platform and delivering services to registered players:

3.1 Identity Data

• Full legal name as it appears on your Bangladeshi National Identity Card (NID) or passport
• Date of birth (required for 21+ age verification)
• Gender (where voluntarily provided)
• Copies of identity documents submitted during KYC (Know Your Customer) verification

3.2 Contact Data

• Registered mobile number (used for account authentication and SMS verification)
• Email address (where provided for account or correspondence purposes)
• City or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

3.3 Financial Data

• Mobile financial service account references (bKash, Nagad, Rocket, Upay wallet identifiers used for deposits and withdrawals)
• Transaction history including deposit amounts, withdrawal requests, and dates
• Account balance information
• Bonus and promotional credit records

3.4 Technical Data

• IP address at the time of each login and transaction
• Device type, operating system, and browser version
• Session duration and navigation patterns within the Platform
• Cookies and similar tracking identifiers (see Section 8)

3.5 Behavioural and Usage Data

• Games played, bet types selected, stake amounts, and game outcomes
• Sports markets accessed, live betting activity, and BPL / IPL / T20 World Cup fixture interactions
• Bonus offers viewed and claimed
• Responsible gaming tool usage, including deposit limit settings and self-exclusion requests

3.6 Communications Data

• Records of live chat, email, and support ticket exchanges between you and fb99 support staff
• Complaint and dispute records
• Marketing preference records (opt-in / opt-out status)

fb99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data unrelated to responsible gaming assessments, or biometric identifiers. The only exception is where identity document photographs are submitted during KYC, which may incidentally contain such information — these documents are processed solely for identity verification purposes and are not used for any other purpose.

4. How We Collect Data

4.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account preferences.

4.2 Automatically — through cookies, server logs, and tracking technologies as you interact with the Platform. This includes your IP address, device fingerprint, and session activity data collected each time you visit or log into fb99.

4.3 From third-party service providers — including KYC and identity verification vendors, mobile financial service providers (bKash, Nagad, Rocket, Upay), fraud detection services, and analytics providers. Data received from these sources is used only for the purposes described in this policy and is subject to appropriate data-sharing agreements.

4.4 From publicly available sources — such as fraud prevention databases, sanctions lists, and publicly accessible government records, where required for compliance purposes.

5. Lawful Bases for Processing

fb99 processes your personal data only where a valid lawful basis exists. The primary bases on which fb99 relies are set out in the table below:

6. How We Use Your Data

fb99 uses personal data for the following purposes:

• Account administration: creating, managing, and securing your fb99 account, including password resets and two-factor authentication via your registered mobile number.
• Identity and age verification: confirming that you are aged 21 or above and that your identity details are genuine before allowing real-money transactions.
• Payment processing: facilitating deposits and withdrawals through your chosen Eligible Payment Method (bKash, Nagad, Rocket, Upay) and maintaining accurate transaction records in Bangladeshi Taka (৳).
• Fraud and security: detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and abuse of promotional offers.
• Responsible gaming: monitoring account activity patterns that may indicate problem gambling behaviour; administering deposit limits, session reminders, and self-exclusion requests; and initiating welfare interventions where necessary.
• Personalisation: tailoring the Platform experience, including game recommendations and promotional offers relevant to your preferences and betting history, where you have not opted out of personalisation.
• Marketing: sending promotional communications about fb99 bonuses, seasonal offers (Eid, BPL, Pohela Boishakh), and new game launches — only where you have explicitly opted in and only via your registered contact details.
• Legal compliance: meeting obligations imposed on fb99 by applicable platform policies, anti-financial-crime requirements, and data retention rules.
• Dispute resolution: investigating and resolving complaints, chargebacks, and contested transactions in a fair and documented manner.

fb99 will not use your personal data for purposes that are incompatible with those listed above without first notifying you and, where required, obtaining your consent.

7. Sharing Your Data

7.1 fb99 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. Any data sharing is limited to what is strictly necessary to deliver the Platform's services or to fulfil a legal obligation.

7.2 fb99 may share personal data with the following categories of recipient:

• KYC and identity verification providers — third-party services that assist fb99 in verifying the identity, age, and location of players during account registration and ongoing due diligence.
• Payment processors — bKash, Nagad, Rocket, Upay and any other Eligible Payment Method provider, for the sole purpose of processing your deposit and withdrawal transactions.
• Fraud prevention and security services — specialised providers whose databases and algorithms assist fb99 in identifying suspicious account behaviour, multi-account patterns, and financial crime risks.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive limited session data required to operate their games correctly within the fb99 Platform environment. These providers do not receive your full identity profile.
• IT infrastructure and hosting providers — cloud and server partners who host Platform data under strict confidentiality and data-security obligations.
• Legal and regulatory authorities — where disclosure is required by law, court order, or formal regulatory request. fb99 will notify affected players of such disclosures to the extent permitted by law.

7.3 All third-party processors engaged by fb99 are bound by data processing agreements requiring them to process personal data only on fb99's documented instructions, to implement appropriate technical and organisational security measures, and to delete or return data at the conclusion of the processing relationship.

8. Cookies & Tracking Technologies

8.1 fb99 uses cookies and similar tracking technologies (collectively "cookies") on the Platform. Cookies are small data files stored on your device that allow the Platform to recognise you across sessions, maintain your login state, and gather analytics data.

8.2 The categories of cookies used by fb99 are as follows:

• Strictly necessary cookies: essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: remember your preferences such as language settings and your last-used payment method to improve your experience on return visits.
• Analytics cookies: collect aggregated, anonymised data about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and where players exit. This data is used solely to improve Platform performance and user experience.
• Marketing cookies: used only where you have opted into personalised communications; these allow fb99 to attribute promotions to the correct player segments.

8.3 You may control non-essential cookies through your browser settings. Disabling analytics or marketing cookies will not impair your ability to use core Platform features such as betting, deposits, or withdrawals.

8.4 fb99 does not use third-party advertising cookies or share cookie data with advertising networks.

9. Data Retention

9.1 fb99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations.

9.2 The following standard retention periods apply:

• Account and identity data: retained for the lifetime of the account and for a minimum of five (5) years following permanent account closure, in line with anti-money laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of seven (7) years from the date of each transaction.
• Responsible gaming records: retained for the lifetime of the account and for five (5) years after closure, to support any future self-exclusion requests or welfare interventions.
• Customer support communications: retained for three (3) years from the date of the interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Marketing preference records: retained for as long as your account is active, or until you withdraw consent, whichever is earlier.

9.3 Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10. Data Security

10.1 fb99 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• 256-bit TLS (Transport Layer Security) encryption for all data transmitted between your device and the fb99 Platform servers
• Encryption at rest for all stored personal and financial data
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for all administrative access
• Role-based access controls ensuring that fb99 staff can access only the minimum data required for their specific job function
• Automated anomaly detection systems that flag unusual login attempts, rapid geographic changes, and atypical transaction patterns for immediate review
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure
• Comprehensive staff training on data protection obligations and secure data handling procedures

10.2 In the event of a personal data breach that poses a risk to your rights and freedoms, fb99 will notify affected players without undue delay and will take immediate remedial action to contain the breach and prevent recurrence.

10.3 Notwithstanding the measures described above, no internet-based system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for promptly reporting any suspected unauthorised access to [email protected].

11. Your Rights

As a data subject whose personal data is processed by fb99, you hold the following rights. Requests to exercise any of these rights should be submitted to [email protected]. fb99 will respond within 30 calendar days of receiving a verified request.

• Right of access: you may request a copy of the personal data fb99 holds about you, together with information about the purposes for which it is processed and the recipients with whom it has been shared.
• Right to rectification: you may request that inaccurate or incomplete personal data is corrected. Where the data in question affects account verification status, additional documentation may be required.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to overriding legal retention obligations — in particular, transaction records and KYC documentation must be retained for the periods specified in Section 9.
• Right to restriction: you may request that fb99 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is contested or while an objection is being assessed.
• Right to data portability: where processing is based on consent or contractual necessity and is carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to object: you may object at any time to processing based on legitimate interests (including direct marketing) and to automated decision-making that significantly affects you. fb99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based solely on your consent (for example, marketing communications), you may withdraw that consent at any time by updating your account preferences or contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12. Children's Privacy

12.1 The fb99 Platform is intended exclusively for individuals aged 21 and above. fb99 does not knowingly collect personal data from any person under the age of 21.

12.2 If fb99 becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately suspended, all data collected will be securely deleted, and any deposits received will be returned to the originating payment method after verification.

12.3 Parents or guardians who believe that a minor may have registered an account on the fb99 Platform are urged to contact [email protected] immediately.

13. Third-Party Links

13.1 The fb99 Platform does not contain outbound links to third-party websites. All navigation within the Platform remains within the fb99bet.bet domain.

13.2 Game content delivered within the Platform by providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi operates within embedded iframes or integrated APIs. These providers may collect limited technical session data as described in Section 7. fb99 is not responsible for the privacy practices of its game content partners beyond the data-processing agreements described in Section 7.3.

14. Policy Amendments

14.1 fb99 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered players via a prominent notice displayed on the Platform upon next login, and the "Last updated" date at the top of this document will be revised accordingly.

14.2 It is your responsibility to review this Privacy Policy periodically. Your continued use of the Platform after an amendment has been published constitutes acceptance of the revised policy.

14.3 Where an amendment materially changes the basis on which fb99 processes your personal data in a way that requires fresh consent, fb99 will seek that consent before the change takes effect.

15. Contact Us

15.1 All privacy-related enquiries, data rights requests, and concerns about this Privacy Policy should be directed to the fb99 support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 30 calendar days for formal data rights requests; within 24 hours for general privacy enquiries
• Language: English

15.2 fb99 is committed to resolving all privacy concerns fairly and transparently. If you are dissatisfied with the outcome of a privacy enquiry, you retain the right to escalate the matter through any applicable dispute resolution process available under the terms of your account agreement.