fb99 Privacy Policy — How We Handle Your Personal Data

Introduction and Scope

This Privacy Policy ("Policy") is issued by fb99 ("fb99", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "the Player") who access, register with, or otherwise interact with the fb99 online betting and casino platform, accessible at https://fb-99.cc and all associated subdomains and interfaces (collectively, the "Platform").

fb99 is committed to protecting the privacy and personal data of all players, including those accessing the Platform from Bangladesh. This Policy explains what personal data we collect, the lawful bases on which we process it, how it is used, with whom it may be shared, how long it is retained, and what rights you hold in respect of your own data.

This Policy should be read alongside the fb99 Terms and Conditions, which are available at fb-99.cc/terms-conditions. By registering an account on the fb99 Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

Data Controller Information

For the purposes of this Privacy Policy, fb99 acts as the data controller in respect of personal data collected from players who register and use the Platform. As the data controller, fb99 determines the purposes for which, and the means by which, your personal data is processed.

fb99 operates as an internationally operated offshore online gaming platform serving the Bangladesh market in English. All data processing activities are conducted in accordance with the principles of data minimisation, purpose limitation, storage limitation, integrity, and confidentiality.

All privacy-related queries, data subject requests, and concerns should be directed to the fb99 data protection contact as set out in Section 15 of this Policy. fb99 will make every reasonable effort to respond to all legitimate privacy enquiries promptly and in good faith.

Personal Data We Collect

fb99 collects the following categories of personal data from players, depending on the nature of their interaction with the Platform:

fb99 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or data concerning health or sexual orientation. In the event that such data is incidentally provided in a support communication, it will not be used for any processing purpose and will be deleted at the earliest opportunity.

How We Collect Your Data

fb99 collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete identity verification, make deposits or withdrawals, place bets, participate in promotions, or contact the support team.
• Automated technologies: As you interact with the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data is collected to ensure the Platform operates correctly, to detect fraud, and to improve user experience.
• Third-party identity verification services: Where fb99 engages third-party KYC (Know Your Customer) service providers to verify the identity and age of players, those providers may supply us with verification outcomes and associated data.
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, the relevant payment processor may share transaction confirmation data with fb99 to enable the transaction to be matched to your account.
• Fraud prevention and AML partners: fb99 may receive risk-scoring or fraud indicator data from specialist third-party partners engaged for the purpose of protecting the Platform and its players from fraudulent activity and money laundering.

Legal Basis for Processing

fb99 processes your personal data on the following lawful bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing that is necessary to perform the contract between you and fb99 — including account registration, transaction processing, customer support, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, know-your-customer (KYC) requirements, and financial record-keeping obligations.
• Legitimate interests: Processing that is necessary for the legitimate interests of fb99, including fraud detection and prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — in particular, for sending marketing and promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How We Use Your Data

fb99 uses the personal data it collects for the following purposes:

• Account management: To register, maintain, and administer your fb99 player account, including processing deposits, withdrawals, and bet settlements.
• Identity and age verification: To confirm that you meet the eligibility requirements set out in the fb99 Terms and Conditions, including the mandatory minimum age of 21 years.
• Payment processing: To process financial transactions via bKash, Nagad, Rocket, Upay, and other payment methods, and to match payments to the correct player accounts.
• Customer support: To respond to your queries, complaints, and requests via our English-language support team.
• Fraud and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling and to apply responsible gaming tools such as deposit limits, session limits, cooling-off periods, and self-exclusion where necessary or requested.
• Platform improvement: To analyse usage patterns, game preferences, and technical performance data to improve the quality, reliability, and range of features available on the Platform.
• Marketing communications: Where you have consented, to send you information about promotions, bonuses, and new features available on the fb99 Platform. You may opt out at any time.
• Legal compliance: To comply with legal obligations, respond to regulatory enquiries, and enforce the fb99 Terms and Conditions.

Sharing Your Data with Third Parties

fb99 does not sell or rent your personal data to unaffiliated third parties. However, we do share personal data with carefully selected third parties in the following circumstances and on a strictly need-to-know basis:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank Mobile Banking), Upay, Visa, Mastercard, and partner banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age-verification service providers engaged by fb99 to verify player identity and age before account activation and before processing withdrawals above defined thresholds.
• Fraud prevention partners: Specialist third-party services engaged to assist fb99 in detecting and preventing fraudulent transactions, account takeover, and money laundering activity.
• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive pseudonymised session and gameplay data necessary for game delivery and round settlement.
• IT and infrastructure providers: Cloud hosting, content delivery network (CDN), and technology infrastructure providers who process data on fb99's behalf under strict data processing agreements.
• Legal and regulatory bodies: Where fb99 is required by law, court order, or regulatory direction to disclose personal data to a government body, law enforcement agency, or other competent authority, we will comply with that obligation to the extent required.

All third-party processors engaged by fb99 are required to process personal data only in accordance with fb99's documented instructions and to implement appropriate technical and organisational security measures. fb99 does not permit third-party processors to use player data for their own independent commercial purposes.

Cookies and Tracking Technologies

fb99 uses cookies and similar tracking technologies on the Platform to ensure its proper operation, to analyse usage patterns, and to deliver a more personalised experience to players. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that maintain your logged-in state, security tokens, and load-balancing identifiers.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how players use the Platform — including pages visited, time spent, and error messages encountered — to help us improve the Platform's performance and reliability.
• Functionality cookies: These cookies remember your preferences (such as language and display settings) to provide a more personalised experience across sessions.
• Fraud detection cookies: These cookies support our fraud prevention systems by enabling device fingerprinting and multi-accounting detection across sessions.

You may configure your browser to refuse all or some cookies, or to alert you when cookies are being set. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the fb99 Platform, including the ability to log in to your account.

Data Security

fb99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include but are not limited to:

• SSL/TLS encryption: All data transmitted between your browser or device and the fb99 Platform is encrypted using industry-standard SSL/TLS protocols to prevent interception in transit.
• Secure server infrastructure: Personal and financial data is stored on secured servers with access controls, firewall protection, intrusion detection systems, and regular vulnerability assessments.
• Access controls: Access to personal data within fb99's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to periodic audit review.
• Password security: Player passwords are stored using strong one-way cryptographic hashing algorithms. fb99 does not store passwords in plain text and cannot retrieve your password — only reset it.
• Two-factor authentication: Where available, fb99 offers two-factor authentication (2FA) as an additional layer of account security for players.

While fb99 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, fb99 will notify affected players without undue delay in accordance with its data breach response procedures.

Data Retention

fb99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to perform our contractual obligations, and to comply with applicable legal and regulatory requirements. The following general retention principles apply:

• Active account data: Personal data associated with an active fb99 account is retained for the full duration of the account's active status and for a defined period following account closure.
• Financial and transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum period as required by applicable AML legislation and financial record-keeping regulations. This period is typically a minimum of five (5) years from the date of the transaction.
• Identity verification documents: Copies of identity documents submitted for KYC purposes are retained for the period required by applicable AML and KYC regulations, typically a minimum of five (5) years from the end of the business relationship.
• Customer support communications: Records of customer support interactions are retained for a period sufficient to resolve ongoing disputes and to provide continuity of service, typically no longer than three (3) years from the date of the last interaction.
• Marketing consent records: Records of your marketing consent status are retained for as long as they are relevant to our ability to demonstrate compliance with our consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised so that it can no longer be attributed to any identifiable individual.

Your Rights

As a data subject whose personal data is processed by fb99, you hold the following rights in respect of your personal information. fb99 will respond to all valid data subject requests within a reasonable timeframe and at no charge for standard requests.

• Right of access: You have the right to request a copy of the personal data that fb99 holds about you and to receive information about how it is processed.
• Right to rectification: You have the right to request that fb99 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: You have the right to request that fb99 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and no other lawful basis exists. This right is subject to fb99's legal and regulatory obligations to retain certain data.
• Right to restriction of processing: You have the right to request that fb99 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where fb99 relies on legitimate interests as the legal basis for processing. fb99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the fb99 data protection team by email at [email protected] with the subject line "Data Subject Request" and a clear description of your request. fb99 may require you to provide proof of identity before processing your request to ensure that personal data is not disclosed to an unauthorised party.

Children and Minors

The fb99 Platform is strictly intended for adult players who are at least 21 years of age. fb99 does not knowingly collect, process, or retain personal data from any person under the age of 21. This minimum age threshold exceeds the legal adulthood age in many jurisdictions and reflects fb99's commitment to responsible gaming and the protection of young people from the potential harms of online gambling.

If fb99 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data from our systems, suspend the associated account, and, where applicable, report the matter to the relevant authorities.

If you are a parent or guardian and believe that your child has registered an account with fb99 or has provided personal data to the Platform without your knowledge, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

International Data Transfers

As an internationally operated online gaming platform, fb99 may transfer your personal data to countries outside of Bangladesh in the course of its operations. Such transfers may occur when personal data is processed by third-party service providers — including cloud infrastructure providers, KYC verification services, and payment processors — whose servers are located in jurisdictions other than Bangladesh.

Where personal data is transferred internationally, fb99 takes steps to ensure that appropriate safeguards are in place to protect the security and integrity of your data. These safeguards may include contractual data transfer agreements, standard contractual clauses, or the engagement of service providers whose data handling standards are assessed by fb99 as being equivalent to those required under the applicable data protection principles to which fb99 adheres.

By registering an account with fb99 and consenting to this Privacy Policy, you acknowledge and agree that your personal data may be transferred to and processed in countries other than Bangladesh in accordance with the safeguards described above.

Changes to This Policy

fb99 reserves the right to update, modify, or replace any part of this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. The date of the most recent revision will always be displayed prominently at the top of this page.

Where changes to this Policy are material — meaning they significantly affect your rights as a data subject or substantially alter how your personal data is used — fb99 will make reasonable efforts to notify registered players via email or an in-platform notification before the updated Policy takes effect.

Your continued use of the fb99 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure by contacting the support team at [email protected].

This Privacy Policy was last reviewed and updated on 1 January 2026. fb99 recommends that you revisit this page periodically to stay informed of any changes.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which fb99 processes your personal data, please contact the fb99 data protection team using the details below. All privacy-related communications should be in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Subject Request" as appropriate
• Support Language: English
• Availability: 24 hours a day, 7 days a week, 365 days a year
• Response Target: fb99 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days

fb99 takes all privacy enquiries seriously and will investigate every concern raised in good faith. Where a concern relates to a potential data breach or an urgent matter affecting the security of your personal data, please mark your email as urgent and fb99 will prioritise your request accordingly.

This Privacy Policy was last reviewed on 1 January 2026. Thank you for trusting fb99 with your personal data.