fb 99 Privacy Policy

1 Introduction

This Privacy Policy describes how fb99 ("we", "us", or "our") collects, processes, stores, and protects the personal information of users ("you" or "Player") who access or use the fb99 online casino and sports betting platform available at fb-99.biz (the "Platform"). It applies to all interactions you have with the Platform, including account registration, deposits and withdrawals, gameplay, customer support communications, and visits to our website.

fb99 is committed to handling your personal data with transparency, integrity, and care. This policy has been written in plain English so that every player — whether based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or anywhere else in Bangladesh — can fully understand what information we collect and why.

By registering an account on fb99 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy forms part of, and should be read alongside, our Terms & Conditions and our Responsible Gaming policy.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is fb99, the operator of the Platform at fb-99.biz. As the data controller, fb99 determines the purposes for which personal data is collected and the means by which it is processed.

All data processing activities carried out by fb99 are conducted in accordance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

fb99's designated point of contact for all data protection matters is the Support Team, reachable 24 hours a day, seven days a week via the live chat function on the Platform or by email at [email protected] (plain text — not a clickable link).

3 Personal Data We Collect

fb99 collects the following categories of personal data from players. The table below summarises each category, specific data points within it, and the primary reason for collection.

fb99 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such information is inadvertently included in documents you submit for KYC purposes, it will not be processed for any purpose other than confirming the authenticity of the document itself.

4 How We Collect Your Data

4.1 Direct Collection

The majority of your personal data is collected directly from you when you: complete the account registration form; submit KYC verification documents; make a deposit or withdrawal; contact our support team via live chat or email; or complete any form or survey on the Platform.

4.2 Automated Collection

When you access and navigate the Platform, fb99 automatically collects technical and usage data through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, pages visited, time spent on each page, and actions taken within the Platform. See Section 10 for full details on cookies.

4.3 Third-Party Sources

In certain circumstances, fb99 may receive personal data about you from third-party sources, including: identity verification providers (for KYC checks); payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, Mastercard) to confirm transaction details; fraud prevention and anti-money-laundering screening services; and game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) for gameplay data tied to your Account.

5 How We Use Your Personal Data

fb99 uses your personal data only for the purposes described below. For each purpose, we have identified the lawful basis on which the processing relies.

• Account creation and management: To register your Account, maintain it in good standing, and authenticate your identity when you log in. Lawful basis: performance of contract.
• KYC verification and age verification: To confirm that you are at least 21 years of age and that your identity matches the payment methods you use. Lawful basis: legal obligation and legitimate interest.
• Payment processing: To process deposits from and withdrawals to your registered payment methods (bKash, Nagad, Rocket, and others). Lawful basis: performance of contract.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email. Lawful basis: performance of contract and legitimate interest.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited activities. Lawful basis: legal obligation and legitimate interest.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour and, where appropriate, to reach out proactively with responsible gaming resources. Lawful basis: legal obligation and legitimate interest.
• Service improvement and analytics: To analyse how players use the Platform, identify areas for improvement, and develop new features and products. All analytics data is processed in aggregated or pseudonymised form where possible. Lawful basis: legitimate interest.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting support. Lawful basis: consent.
• Legal and regulatory compliance: To meet our obligations under applicable laws, respond to lawful requests from authorities, and maintain records as required by law. Lawful basis: legal obligation.

6 Sharing Your Personal Data

fb99 does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances and only to the extent strictly necessary for the relevant purpose:

6.1 Payment Service Providers

To process deposits and withdrawals, we share relevant financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard. These providers act as independent data controllers for the processing of your payment data within their own systems and are bound by their own privacy policies.

6.2 Identity Verification Providers

To fulfil our KYC obligations, we share identity documents and personal details with third-party verification services. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.

6.3 Game Software Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical data (such as a pseudonymised player identifier and stake amounts) that is necessary to deliver and settle game rounds. These providers do not receive your full identity or contact information.

6.4 Fraud Prevention and AML Services

To meet our anti-money-laundering and fraud prevention obligations, we may share transactional and identity data with specialist third-party screening services. Data shared for this purpose is subject to strict confidentiality agreements.

6.5 Legal and Regulatory Disclosures

fb99 may disclose personal data to competent authorities, law enforcement bodies, or courts where required to do so by applicable law, a binding legal order, or a valid regulatory request. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of fb99's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, in advance where reasonably practicable.

7 Data Retention

fb99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to satisfy our legal and regulatory obligations, and to resolve any disputes that may arise. The table below sets out our standard retention periods by data category.

When data is no longer required and its retention period has expired, fb99 will securely delete or anonymise it so that it can no longer be associated with you. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

8 Security Measures

fb99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our current security framework includes:

• Encryption in transit: All data transmitted between your device and the fb99 Platform is protected with TLS 1.2 or higher (SSL encryption), ensuring that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Encryption at rest: Personal data and financial records stored on fb99's servers are encrypted using AES-256 encryption, one of the strongest symmetric encryption standards available.
• Access controls: Access to personal data within fb99 is restricted on a strict need-to-know basis. All employees and contractors with data access undergo background screening and receive mandatory data protection training.
• Two-factor authentication: Administrative access to systems holding personal data requires multi-factor authentication. We also strongly encourage players to enable two-step verification on their Accounts.
• Intrusion detection: fb99's infrastructure is monitored continuously by automated intrusion detection and prevention systems. Suspicious activity triggers immediate alerts reviewed by our security team.
• Regular security audits: fb99 conducts periodic security assessments and penetration testing of its platform to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the unlikely event of a data breach that poses a risk to your rights, fb99 has a documented incident response plan and will notify affected players and relevant authorities within the timeframes required by applicable law.

9 Your Data Rights

As a player on the fb99 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days.

• Right of access: You may request a copy of the personal data fb99 holds about you, along with information about how it is used and who it is shared with.
• Right to rectification: If any personal data fb99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly within your Account settings.
• Right to erasure ("right to be forgotten"): You may request that fb99 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that erasure requests may be limited where retention is required by law (e.g., AML record-keeping obligations).
• Right to restriction of processing: You may request that fb99 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on fb99's legitimate interests, though fb99 may continue processing if it can demonstrate compelling grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

fb99 will not charge a fee for handling data rights requests unless requests are manifestly unfounded or excessive. In such cases, we will explain our reasons before applying any charge. fb99 will never discriminate against you (e.g., by restricting your Platform access) simply because you exercise your data rights.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and collect information about how you use the site. fb99 uses cookies and similar technologies (including web beacons and local storage) on the Platform.

10.2 Types of Cookies We Use

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, restrict them to specific sites, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will impair the functionality of the fb99 Platform — you may not be able to log in or complete transactions if these cookies are blocked.

11 Minors and Age Restriction

The fb99 Platform is strictly for individuals aged 21 and above. fb99 does not knowingly collect personal data from anyone under the age of 21. If you are under 21 years old, you must not use the Platform or provide any personal information to us.

During the registration process, fb99 requires all players to confirm that they meet the minimum age requirement of 21 years. fb99 performs age verification as part of its KYC process, and any account found to belong to a person under 21 will be immediately closed, with all funds returned to the payment source where possible and no winnings released.

If you have reason to believe that a minor has registered on the fb99 Platform or has provided personal data to us, please contact our support team immediately via live chat or at [email protected]. We will investigate and take appropriate action without delay.

12 Changes to This Privacy Policy

fb99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer . When we make material changes to this policy, we will notify you by posting a prominent notice on the Platform for a period of at least 14 days before the changes take effect. For significant changes that affect how we process your personal data, we may also send a direct notification to your registered email address or mobile number.

The "Last Updated" date at the top of this document will always reflect the date on which the most recent version came into effect. We encourage you to review this Privacy Policy periodically so that you remain informed about how fb99 protects your information. Your continued use of the Platform after any changes to this policy constitutes your acceptance of the revised terms.

If you disagree with any changes to this Privacy Policy, you have the right to close your Account and request deletion of your personal data in accordance with Section 9, subject to the retention obligations described in Section 7.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fb99 handles your personal data, please do not hesitate to get in touch. Our data protection team is available to assist you through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the Platform. Average response time is under 2 minutes.
• Support Email: [email protected] (plain text — not a clickable link). We aim to respond to all email enquiries within 24 hours.
• Time Zone: All support operations run on Bangladesh Standard Time (BST, UTC+6).

When contacting us about a data rights request, please include your registered Account username or email address so that we can identify your records promptly. For security reasons, we may need to verify your identity before processing your request.