Your Privacy Matters at fb99

fb99 takes the privacy and security of your personal data seriously. We are committed to handling your information responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy forms part of our overall Terms and Conditions and should be read alongside our Responsible Gaming Policy.

This Policy applies to data collected through all fb99 touchpoints, including the fb99bet.net website, any mobile-optimised version of the platform, live chat interactions with our support team, and any email or messaging communication you initiate with fb99.

If you have questions about this Policy or wish to exercise any data rights, please refer to Section 15 for contact information. fb99's support team is available 24/7 via live chat and responds to data-related queries within the timeframes set out in this Policy.

fb99 collects personal data across several categories depending on your level of interaction with the platform. The following table summarises the primary data categories collected:

fb99 does not collect sensitive personal data such as biometric data, genetic data, health records, or religious/political beliefs. Where verification documents are required for KYC purposes, they are used solely for identity confirmation and are stored securely with strict access controls.

fb99 collects personal data through the following means:

• Direct provision by you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotional offer, you provide data directly to fb99.
• Automated technical collection: When you access the fb99 platform, our servers and analytics systems automatically log technical data including your IP address, device identifiers, browser type, operating system, referring URL, and session activity. This data is collected through server logs, cookies, and similar tracking technologies (see Section 7).
• Payment processing partners: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the payment processor provides fb99 with a transaction confirmation reference and the mobile account number used. fb99 does not receive or store full mobile banking credentials.
• Identity verification services: Where fb99 uses third-party KYC providers to verify identity documents, those providers may return verification status data to fb99 as part of the compliance workflow.
• Customer support interactions: All live chat sessions and email exchanges with fb99 support are recorded and stored as part of the account activity record. These records support dispute resolution, quality assurance, and compliance monitoring.
• Responsible gaming monitoring: fb99's platform monitors gameplay patterns automatically to identify indicators of potentially problematic gambling behaviour. This monitoring does not involve external data sources — it is based exclusively on your own in-platform activity.

fb99 uses the personal data it collects for clearly defined purposes. We do not use your data for any purpose incompatible with those stated at the point of collection without first obtaining your consent or establishing an alternative lawful basis. The primary uses are:

• Account management: Creating, operating, and maintaining your fb99 player account, including authentication, preference storage, and account communications.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay; maintaining transaction records for accounting and dispute resolution purposes.
• Identity and age verification: Confirming that you are at least 21 years of age and that your account details are accurate and authentic, as required by our Terms and Conditions.
• Anti-money laundering (AML) and fraud prevention: Monitoring transactions and account behaviour for indicators of money laundering, bonus abuse, multi-account operation, third-party payment use, or other fraudulent conduct.
• Regulatory and legal compliance: Retaining records and responding to lawful information requests from competent authorities as required under applicable law.
• Responsible gaming: Detecting gameplay patterns that may indicate problem gambling and triggering appropriate interventions or support outreach through our Player Protection team.
• Platform improvement and analytics: Understanding how players interact with the platform to improve game navigation, promotional design, payment flow, and support responsiveness.
• Marketing and promotions: Where you have provided explicit consent, sending you promotional communications about relevant offers, seasonal bonuses (e.g., Eid, BPL season), and new game releases. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Customer support: Using your account and interaction history to efficiently resolve support queries, complaints, and disputes.
• Security monitoring: Detecting and responding to unauthorised access attempts, credential stuffing, suspicious login behaviour, and other cybersecurity threats.

fb99 processes your personal data on the following legal bases:

Where fb99 relies on legitimate interest as a legal basis, we have assessed that our interests are not overridden by your privacy interests or fundamental rights. You may object to processing carried out on the basis of legitimate interest; see Section 10 for details of how to exercise this right.

fb99 shares personal data only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, and Upay solely to the extent necessary to execute deposit and withdrawal instructions. These providers operate under their own privacy policies and are independently responsible for their data handling.
• KYC and identity verification providers: Where third-party verification services are used to confirm player identity and age, we share the relevant document data with those providers under contractual data processing agreements. They are prohibited from using your data for any other purpose.
• Game content providers: When you play games supplied by providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, or Spribe, certain technical session data (e.g., player session tokens, game round identifiers) is exchanged with those providers to enable gameplay and resolve disputes. Personal identification data is not shared in this context.
• IT and platform infrastructure providers: Cloud hosting, content delivery, and security service providers may process data on fb99's behalf as data processors under strict contractual confidentiality obligations.
• Legal and regulatory authorities: fb99 will disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by lawful order, regulation, or as otherwise required to prevent or report suspected criminal activity.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of fb99's business, personal data held by fb99 may be transferred to the acquiring entity. Players will be notified of any such transfer and of any changes to data processing arrangements that result from it.

All third-party data processors engaged by fb99 are required to maintain appropriate technical and organisational security measures and are contractually prohibited from processing fb99 player data for purposes beyond those specified in their engagement with fb99.

fb99 uses cookies and similar tracking technologies to enable platform functionality, enhance the user experience, and support security and analytics operations. A cookie is a small text file placed on your device by a web server when you visit a website. It allows the website to remember your session, preferences, and interactions across page loads.

fb99 uses the following categories of cookies:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. Without these, core features such as account login and payment processing cannot operate. These cookies cannot be disabled.
• Functional cookies: Store your platform preferences, such as your preferred language setting, game display options, and notification preferences. These improve your experience but are not strictly required for basic functionality.
• Analytics cookies: Collect aggregated, anonymised data about how players interact with the fb99 platform — which pages are visited, how long sessions last, and which features are used most frequently. This data informs platform improvements. No individually identifying information is transmitted through analytics cookies.
• Security cookies: Support fraud detection, bot mitigation, and suspicious behaviour identification. These operate silently in the background and do not affect the player-facing experience.

fb99 does not use third-party advertising cookies or behavioural profiling cookies that track your activity across other websites outside the fb99 platform.

fb99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no longer than is required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as standard:

Longer retention periods may apply where fb99 is subject to a legal hold, ongoing investigation, or formal dispute that requires the preservation of relevant data beyond the standard periods above. Following expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

fb99 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security controls in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the fb99 platform is encrypted using industry-standard TLS protocols, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encrypted data storage: Sensitive data fields — including password hashes, financial identifiers, and identity document references — are stored using strong encryption algorithms. Passwords are never stored in plain text.
• Access controls: Access to personal data within fb99's systems is restricted on a strict need-to-know basis. Staff members can only access the data categories required for their specific role. Access rights are reviewed periodically and revoked immediately upon role change or departure.
• Multi-factor authentication: Internal administrative access to systems containing personal data requires multi-factor authentication. Players are encouraged to enable OTP verification on their accounts for additional login security.
• Intrusion detection and monitoring: fb99's infrastructure is monitored continuously for anomalous access patterns, known attack signatures, and indicators of compromise. Security events are logged and reviewed by the technical team.
• Penetration testing and security audits: fb99 conducts periodic security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a personal data breach that poses a risk to affected players, fb99 will notify affected users promptly and take immediate steps to contain and remediate the breach.

As a data subject whose personal information is processed by fb99, you have the following rights in relation to your data. These rights are not absolute and may be subject to limitations where overriding legal obligations or legitimate interests apply.

• Right of access: You have the right to request confirmation of whether fb99 holds personal data about you, and to receive a copy of that data in a structured, readable format. fb99 will respond to access requests within 30 days.
• Right to rectification: If you believe that personal data held by fb99 about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Minor account details can often be updated directly within your account settings; for identity-related data, please contact support.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the basis), or where the processing was unlawful. Note that erasure may not be possible where retention is required by law (e.g., financial records held for AML compliance).
• Right to restriction of processing: In certain circumstances (e.g., while a rectification request is pending, or where you have objected to processing), you may request that fb99 restrict the processing of your data to storage only.
• Right to data portability: Where processing is based on contract or consent and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interest. fb99 will consider and respond to objections, and will cease processing unless compelling legitimate grounds exist that override your interests.
• Right to withdraw consent: Where processing is based on your explicit consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact fb99 via live chat or at the email address listed in Section 15. fb99 will verify your identity before processing any data rights request and will respond within the applicable timeframe. Requests will be handled free of charge except in cases of manifestly unfounded or excessive repetition.

fb99 employs age verification procedures at registration and at the point of first withdrawal to confirm that all account holders meet the minimum age requirement. Where fb99 discovers, at any point, that a registered account is held by a person under 21 years of age, the account will be immediately suspended, all activity will be reversed to the extent technically possible, and any deposited funds will be returned to the originating payment account. Winnings accrued during the period of underage use will be forfeited.

Parents and guardians are responsible for preventing minors in their household from accessing online gambling platforms. fb99 recommends the use of parental control software if minors share devices with adults who have active fb99 accounts. If you are aware of a minor who has accessed or attempted to access the fb99 platform, please notify support immediately via live chat.

fb99 does not direct any marketing communication or targeted content toward individuals under the age of 21. Age restrictions are applied uniformly across all promotional materials and platform content.

fb99 primarily processes and stores player data on servers serving the Bangladesh market. Where the use of infrastructure providers or game content partners results in personal data being processed or stored in jurisdictions outside Bangladesh, fb99 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or greater than the protections described in this Policy.

Safeguards used for international transfers include:

• Contractual data processing agreements incorporating standard data protection clauses that bind the receiving party to appropriate security and confidentiality obligations.
• Restricting transfers to partners whose data security certifications and practices have been assessed by fb99 as meeting the security standards described in Section 9.
• Minimising the personal data included in any cross-border transfer to only that which is strictly necessary for the purpose of the transfer.

If you would like more information about the specific safeguards applied to any particular international data transfer involving your personal data, please contact fb99 via the channels described in Section 15.

The fb99 platform integrates with third-party services to deliver its full range of functionality. These third parties operate under their own privacy policies and are independently responsible for their data processing practices. fb99 is not responsible for the privacy practices of third-party services, and this Policy does not extend to cover data processed by them independently of their engagement with fb99.

Third-party services integrated with the fb99 platform include:

• Mobile payment providers: bKash, Nagad, Rocket, and Up ay process transaction data according to their own privacy policies. fb99 recommends reviewing the privacy documentation of whichever payment provider you use.
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe each operate their own data handling practices in relation to game session data. Only the minimum technical data required for gameplay continuity is exchanged between fb99 and these providers.
• Identity verification providers: Third-party KYC services used by fb99 to verify player identity process document data under contractual data processing agreements, as described in Section 6.
• Infrastructure and hosting providers: Cloud and hosting partners that support the operation of the fb99 platform may process technical and account data on fb99's behalf. All such providers are engaged as data processors under contractual obligations consistent with this Policy.

fb99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. All changes will be published on this page at fb99bet.net/privacy-policy with an updated effective date displayed prominently at the top of the page.

Where a proposed amendment is material — meaning it meaningfully changes how your personal data is collected, used, or shared — fb99 will provide at least 7 days' advance notice before the amended Policy takes effect. Notice will be delivered via:

• A prominent notice on the fb99 platform homepage and login area.
• An in-platform notification to active account holders.
• An email notification to the address associated with your account, where email marketing consent is active.

Minor clarifications, corrections of typographical errors, or formatting changes that do not affect the substance of the Policy may be made without advance notice and take effect immediately upon publication.

Your continued use of the fb99 platform following the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any material amendment, you should cease using the platform and contact support to discuss your account options before the amendment takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 10, or have concerns about how your personal data is being handled by fb99, please contact us using the following channels:

• Live chat: Available 24/7 directly on the fb99 platform. Live chat is the fastest way to reach fb99 support and is the recommended channel for time-sensitive data requests.
• Email (plain text): [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" to ensure your message is routed to the correct team.

fb99 commits to acknowledging all privacy-related enquiries within 48 hours of receipt and to providing a substantive response to data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, fb99 may extend this period by up to a further 30 days, in which case we will inform you of the extension and the reasons for it within the initial 30-day window.

When submitting a data rights request, please provide your registered account username, the mobile number associated with your fb99 account, and a clear description of the right you wish to exercise or the concern you wish to raise. fb99 will verify your identity before processing any request to ensure that personal data is not disclosed to or actioned by unauthorised parties.

fb99 handles all formal complaints about data processing in good faith and in accordance with the procedure described in our Terms and Conditions. Where you remain dissatisfied following fb99's internal response, you retain the right to escalate the matter to a relevant supervisory authority or seek independent legal advice.