fb99 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how fb99 ("we", "us", "our", or "the Platform") collects, uses, stores, and discloses personal information provided by or relating to players ("you", "your") who access or use the fb99 website at fb-99.bio and all associated services, including sports betting, live casino, slots, lottery, and any other gaming or wagering product offered thereon.

fb99 is committed to protecting the privacy and security of personal data entrusted to us by players in Bangladesh and elsewhere. We operate this Platform with the expectation that every player deserves to know precisely what information we hold about them and how that information serves the delivery of our services.

By registering an account on the fb99 platform, depositing funds, placing bets, or otherwise using any part of our service, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Personal Data We Collect

fb99 collects personal data in the categories described below. In each case, collection is limited to what is genuinely necessary for the stated purpose. We do not collect sensitive categories of personal data (such as health data, religious beliefs, or political opinions) unless specifically required to satisfy a legal obligation and with your explicit knowledge.

3 How We Collect Your Data

fb99 collects personal data through the following channels and mechanisms:

• Direct submission: Information you actively provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support, or responding to a promotional survey.
• Automated technical collection: Data collected automatically as you use the Platform, including IP addresses, device identifiers, browser characteristics, session durations, pages visited, and click-path data gathered via server logs and analytics tools.
• Cookies and similar technologies: Tracking cookies, session cookies, and similar browser-based technologies placed on your device when you access the fb99 website. See Section 8 for full details on our cookie practices.
• Third-party sources: Information received from payment processors (e.g., bKash, Nagad) in connection with deposit and withdrawal transactions, and from identity verification partners used to fulfil KYC obligations.
• Fraud prevention databases: Where permitted, fb99 may cross-reference submitted data against industry fraud prevention databases to detect duplicate accounts, stolen identities, or financial crime patterns.

4 Purpose and Legal Basis for Processing

fb99 processes personal data only where a clear and legitimate purpose exists. The table below sets out the primary purposes for which we process player data and the corresponding legal basis for each processing activity:

Where processing is based on your consent — for example, receiving promotional emails or SMS notifications — you may withdraw that consent at any time by contacting support at [email protected] or by adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

5 Data Sharing and Disclosure

5.1 Service Providers. fb99 may share personal data with carefully selected third-party service providers who assist in the operation of the Platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and crypto transaction facilitators), identity verification and KYC providers, IT infrastructure and cloud hosting providers, fraud detection and prevention services, and customer support software providers. All such providers are bound by contractual obligations that restrict their use of your data to the specific services they are engaged to provide.

5.2 Game Providers. When you play games powered by third-party studios — such as Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, or Microgaming — limited technical and account data (such as a player session token and account balance) may be transmitted to those providers solely to facilitate gameplay. These providers operate their own privacy policies and are contractually required to handle player data in a manner consistent with good industry practice.

5.3 Legal Disclosure. fb99 may disclose personal data to law enforcement authorities, regulatory bodies, or other government agencies in Bangladesh or internationally where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of fb99, its players, or the public. Such disclosures will be made without prior notification to the affected player where legally required.

5.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of the fb99 business, personal data held by fb99 may be transferred to the acquiring entity as part of that transaction. In such circumstances, fb99 will take reasonable steps to ensure that the acquiring entity honours the commitments made in this Privacy Policy.

6 Data Retention

6.1 fb99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial recordkeeping requirements.
• KYC and identity documents: Retained for the duration of your account relationship plus 5 years following account closure.
• Customer support communications: Retained for 3 years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Technical and device logs: Retained for up to 13 months from collection for security, fraud detection, and platform analytics purposes.
• Marketing consent records: Retained for the duration of your consent plus 2 years following withdrawal, to demonstrate compliance with consent obligations.

6.2 Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

7 Security Measures

fb99 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption: All data in transit between player devices and fb99 servers is encrypted using current SSL/TLS protocols, preventing interception of data during transmission.
• At-rest encryption: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using strong encryption standards.
• Access controls: Access to player data within fb99's internal systems is restricted on a strict need-to-know basis. Employees are granted the minimum data access rights required to perform their specific job function.
• Multi-factor authentication: Internal systems holding player data are protected by multi-factor authentication requirements for fb99 staff.
• Regular security audits: fb99 conducts periodic security assessments to identify and remediate vulnerabilities in our systems and data handling processes.
• Incident response procedures: fb99 maintains documented data breach incident response procedures. In the event of a data breach that poses a risk to player rights, affected players will be notified without undue delay.
• Staff training: All fb99 staff who handle personal data receive regular training on data protection obligations and secure data handling practices.

8 Cookies & Tracking Technologies

8.1 What Are Cookies? Cookies are small text files placed on your device when you visit a website. They enable the website to recognise your device on subsequent visits and store certain preferences or session information. fb99 uses cookies and similar technologies (such as pixel tags and local storage) to operate and improve the Platform.

8.2 Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable you to log in, maintain your session, navigate between pages, and complete transactions. The Platform cannot function without these cookies and they do not require your consent.
• Functional Cookies: Allow the Platform to remember your preferences, such as your preferred language or display settings, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised information about how players use the Platform — including which pages are visited most frequently, session duration, and navigation paths — to help us improve the service.
• Security Cookies: Used to support fraud detection, bot prevention, and the detection of suspicious login behaviour to protect your account.

8.3 Managing Cookies. You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is set. Please note that blocking strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Instructions for managing cookies vary by browser — please refer to your browser's help documentation for guidance.

8.4 fb99 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on other websites.

9 Your Privacy Rights

As a player on the fb99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered mobile number, and a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data fb99 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data fb99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data — for example, where the data is no longer necessary for the purpose it was collected or where you withdraw consent and no other legal basis applies. Note that certain data must be retained to meet our legal and regulatory obligations even following a deletion request.
• Right to Restriction of Processing: You may request that fb99 restrict the processing of your data in specific circumstances, such as while the accuracy of your data is being contested or while a complaint is under investigation.
• Right to Data Portability: Where processing is carried out on the basis of your consent or in performance of a contract, and is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on fb99's legitimate interests, including profiling related to direct marketing.

fb99 will respond to all valid data rights requests within a reasonable timeframe, typically within 30 days of receipt. We may ask you to verify your identity before processing a request to ensure that we are responding to the correct individual. Where a request is complex or there are numerous requests in a short period, we may extend this timeframe and will notify you accordingly.

10 Protection of Minors

10.1 The fb99 platform is strictly intended for adults aged 21 years and above. fb99 does not knowingly collect, process, or retain any personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent minors from creating accounts.

10.2 If a parent, guardian, or any concerned party believes that a minor has registered an account on fb99 or has provided personal data to the Platform without appropriate parental consent, they should contact us immediately at [email protected]. Upon verification of the report, fb99 will close the account, delete all associated personal data, and ensure that any funds involved are dealt with appropriately.

10.3 fb99 encourages parents and guardians to make use of available parental control software to prevent minors from accessing online gambling services. A range of free and commercially available tools exist for this purpose and can be applied at the device or network level. 21+ only.

11 Changes to This Privacy Policy

11.1 fb99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, the updated Policy will be published on this page with a revised "Last Updated" date at the top.

11.2 Where changes are significant — such as a new category of data being collected or a new type of third-party disclosure — fb99 may notify registered players via their registered mobile number or email address prior to the changes taking effect.

11.3 Your continued use of the fb99 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and request account closure by contacting support at [email protected].

12 Contact Us

12.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which fb99 handles your personal data, please contact our dedicated support team. We aim to respond to all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6).

12.2 Contact details:

• Email: [email protected] (plain text — not a clickable link)
• Platform: fb-99.bio
• Operating hours: 24 hours a day, 7 days a week
• Response time: Typically within 24–48 hours

12.3 When contacting us about a data rights request, please include your registered full name, your registered mobile number, and a clear description of your request so that we can verify your identity and process your request efficiently.