fb99 Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") describes how fb99 ("the Platform", "we", "us", "our") collects, uses, stores, and shares personal data when you access or use the fb99 website, mobile application, and all associated online betting and gaming services.

fb99 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy applies to all individuals who interact with the fb99 platform, including registered players, visitors who browse the platform without registering, and individuals who contact the fb99 support team.

This Policy should be read alongside the fb99 Terms & Conditions and the fb99 Responsible Gaming policy, both of which incorporate this Privacy Policy by reference. By registering an fb99 account or using any fb99 service, you acknowledge that you have read, understood, and accepted the data practices described in this Policy.

If you have questions about this Policy or wish to exercise any of your data subject rights, please contact us using the details set out in Section 14.

Data Controller Information

fb99 acts as the data controller in respect of all personal data collected from players and visitors on the fb99 platform. As data controller, fb99 determines the purposes for which personal data is processed and the means by which that processing takes place.

fb99 operates under an international gaming licence and provides its services on an offshore basis to players in Bangladesh. The platform's data processing activities are governed by the terms of this Policy and by applicable international data protection standards.

For all data protection enquiries, subject access requests, and complaints, players may contact the fb99 data protection point of contact at the support email address listed in Section 14. fb99 aims to acknowledge all data-related requests within 5 business days of receipt.

Personal Data We Collect

fb99 collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically through your use of the platform; and, in limited circumstances, from third-party service providers engaged to verify your identity or process your payments.

fb99 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes unless strictly required to fulfil a legal obligation (for example, processing a responsible gaming request that involves health-related information voluntarily disclosed by the player).

How We Use Your Personal Data

fb99 uses the personal data described in Section 3 for the following purposes:

• Account management: Creating, maintaining, and closing your fb99 player account; verifying your identity and age (21+); processing your login and session management.
• Service delivery: Processing deposits and withdrawals; settling bets and game outcomes; delivering bonuses and promotional rewards you have qualified for; providing 24/7 customer support.
• KYC and compliance: Verifying the accuracy of the identity documents you submit; carrying out anti-money laundering (AML) checks; reporting to relevant authorities where legally required.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent account activity, bonus abuse, collusion, and other forms of prohibited conduct as described in the fb99 Terms & Conditions.
• Platform improvement: Analysing aggregate usage patterns to improve the fb99 user experience, optimise platform performance, and develop new product features.
• Responsible gaming: Monitoring account activity for signs of problem gambling; enforcing self-exclusion and cooling-off periods; communicating with players who have activated responsible gaming tools.
• Marketing communications: Sending promotional offers, seasonal campaigns (BPL, Eid, Pohela Boishakh), and product updates to players who have opted in to receive marketing communications. Marketing consent is separate from the consent required to use the platform and can be withdrawn at any time.
• Legal obligations: Meeting fb99's obligations under applicable laws and the terms of its gaming licence, including data retention obligations and cooperation with lawful regulatory or law enforcement requests.

fb99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

Legal Basis for Processing

fb99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing your account registration data, financial transaction data, and bet/game data is necessary to perform the contract between you and fb99 (i.e., to provide the gaming services you have signed up for).
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and product improvement is justified by fb99's legitimate business interests, provided those interests are not overridden by your privacy rights.
• Legal obligation: Processing for AML compliance, age verification, KYC verification, responsible gaming enforcement, and cooperation with lawful regulatory requests is required by applicable law and the terms of fb99's gaming licence.
• Consent: Processing for marketing communications and non-essential cookies is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal or your ability to continue using the platform.

Data Sharing and Third Parties

fb99 does not sell or rent your personal data to third parties. fb99 may share your personal data with the following categories of recipients for the purposes described in this Policy:

• Payment processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) and card networks (Visa, Mastercard) receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for their own compliance.
• KYC verification providers: Third-party identity verification services receive the identity documents you submit during KYC to assist fb99 in verifying their authenticity. These providers are contractually bound to use your data only for the purpose of KYC verification on fb99's behalf.
• Game studios and content providers: Licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive the session data necessary to deliver their games within the fb99 platform. These providers are bound by applicable data processing agreements.
• Technology and hosting providers: Cloud hosting, platform infrastructure, and cybersecurity service providers may process technical data as part of their service delivery to fb99. These providers act as data processors under contract with fb99 and are not permitted to use your data for their own purposes.
• Legal and regulatory authorities: fb99 may disclose personal data to law enforcement agencies, gaming regulators, or other government bodies where required to do so by law, court order, or in connection with legal proceedings.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of fb99's business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and of any changes to data processing arrangements that result from it.

All third-party service providers with access to fb99 player data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with fb99's documented instructions.

International Data Transfers

fb99 operates on an international basis, and your personal data may be transferred to and processed in countries outside Bangladesh. These countries may have data protection laws that differ from those applicable in Bangladesh.

Where fb99 transfers personal data internationally, it takes reasonable steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data protection clauses, data processing agreements, and security certifications held by the receiving party.

By registering an fb99 account and using the platform's services, you acknowledge that your personal data may be transferred internationally in the manner described in this section.

Cookies and Tracking Technologies

fb99 uses cookies and similar technologies (including local storage and session storage objects) on the fb99 platform. Cookies are small text files placed on your device by the platform's server. The following categories of cookies are in use on fb99:

fb99 does not deploy third-party advertising cookies, cross-site tracking pixels, or retargeting technologies. You can manage or delete cookies through your browser settings at any time. Deleting strictly necessary cookies will require you to log in again and may affect platform functionality. Deleting analytics or functional cookies will not affect your ability to use the platform.

Data Retention

fb99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any disputes or enforcement actions. The following retention guidelines apply:

• Active account data: Retained for the lifetime of the account plus a minimum of 5 years following account closure, in line with standard financial and gaming record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the last transaction date, whichever is later, to comply with AML and identity verification obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 3 years from the date of the last communication in a given support case.
• Marketing consent records: Retained for the duration of the account and for 2 years following account closure, as evidence of the consent basis on which marketing communications were sent.
• Responsible gaming records (self-exclusion, limits): Retained for the full self-exclusion or limit period and for a minimum of 5 years thereafter, to prevent re-registration during an active exclusion period and to fulfil regulatory obligations.
• Technical / log data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised. Anonymised data — from which you cannot be identified — may be retained and used indefinitely for aggregate statistical analysis and platform improvement purposes.

Your Rights

As a data subject, you have the following rights in relation to the personal data fb99 holds about you. To exercise any of these rights, please contact the fb99 support team using the details in Section 14:

• Right of access: You may request a copy of the personal data fb99 holds about you. fb99 will provide this information within 30 days of receiving a valid request.
• Right to rectification: If any personal data fb99 holds about you is inaccurate or incomplete, you may request that it be corrected. Some corrections (such as name changes) may require supporting documentation.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to exceptions — for example, fb99 cannot delete data it is legally required to retain under AML or gaming licence obligations. Where deletion is not possible, fb99 will explain the reason and, where feasible, restrict processing instead.
• Right to restriction of processing: You may request that fb99 restrict the processing of your personal data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to data portability: You may request that fb99 provide your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You may object to the processing of your personal data where that processing is based on fb99's legitimate interests. fb99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw marketing consent: You may withdraw consent to receive marketing communications at any time by updating your account preferences or contacting support. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

fb99 will acknowledge all data subject requests within 5 business days and will provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days with written notice to the requesting player explaining the reason for the extension.

Children and Underage Users

The fb99 platform is strictly restricted to individuals aged 21 years and above. fb99 does not knowingly collect personal data from individuals under the age of 21 and does not market its services to minors.

If fb99 discovers or reasonably suspects that personal data belonging to a person under the age of 21 has been collected — whether through account registration, payment processing, or any other mechanism — fb99 will take the following immediate steps: suspend the account; freeze any pending transactions; notify the relevant parties where required by law; and securely delete the personal data of the underage individual to the extent permitted by legal retention obligations.

If you are a parent or guardian and believe that your child under the age of 21 has registered an fb99 account, please contact the fb99 support team immediately using the details in Section 14. fb99 takes reports of underage account use very seriously and will act on them promptly.

Security Measures

fb99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmission between your device and fb99 servers
• Encryption of sensitive data at rest, including stored KYC documents and payment instrument references
• Role-based access controls ensuring that fb99 staff can only access the personal data necessary for their specific job function
• Continuous security monitoring, intrusion detection, and automated alerting for unusual account or system activity
• Regular penetration testing and vulnerability assessments of the fb99 platform infrastructure
• Secure data deletion procedures applied when personal data reaches the end of its retention period
• Staff training on data protection principles and obligations on a regular basis

While fb99 takes all reasonable steps to protect your personal data, no online system can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their fb99 account, to keep their registered mobile number up to date, and to report any suspected unauthorised account access to the fb99 support team immediately.

Changes to This Policy

fb99 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable legal requirements, or the services offered on the platform. When material changes are made to this Policy, fb99 will notify registered players via a notice displayed on the platform at login and/or via a message to the player's registered mobile number.

The updated Policy will specify its effective date. Your continued use of the fb99 platform following that effective date constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must stop using the platform and request account closure before the effective date.

fb99 recommends that players review this Privacy Policy periodically, particularly before submitting any new personal data to the platform (for example, when completing KYC verification or updating payment methods). The current version of this Policy is always accessible at fb-99.id/privacy-policy.

Contact and Complaints

For any questions about this Privacy Policy, to exercise your data subject rights, or to submit a data-related complaint, please contact the fb99 data protection team using the following details:

• Support Email (plain text): [email protected] — Please include "Privacy Request" or "Data Subject Request" in the subject line of your message so it can be routed to the correct team promptly.
• Live Chat: Available 24/7 through the fb99 platform after login. For complex data requests, the live chat team will escalate your request to the data protection point of contact.
• Response Times: Acknowledgement within 5 business days; substantive response within 30 calendar days (extendable to 60 days with notice for complex requests).

If you are not satisfied with fb99's response to a data protection concern, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in the jurisdiction applicable to your situation. fb99 will cooperate fully with any such authority in connection with a complaint investigation.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the fb99 Privacy Policy.