Privacy Policy — How fb99 Collects, Uses, and Protects Your Personal Data

fb99 ("fb99", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://fb99login.app ("Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with our Platform ("you", "your", "Player", "User").

This Privacy Policy describes the types of personal information fb99 collects, the purposes for which that information is used, the parties with whom it may be shared, the security measures we employ to protect it, and the rights available to you in relation to your personal data. This Policy applies to all data processing activities carried out by fb99 in connection with the operation of the Platform, including account registration, payment processing, customer support, and marketing communications (where consented to).

This Privacy Policy should be read alongside fb99's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection law, fb99 acts as the data controller in respect of the personal data of all Players and visitors to the Platform. This means fb99 determines the purposes and means by which your personal data is processed.

Where fb99 engages third-party service providers (such as identity verification agencies, payment processors, or analytics providers) to process personal data on its behalf, those providers act as data processors and are bound by written data processing agreements that prohibit them from using your data for any purpose beyond the specific service they have been engaged to provide.

All data protection enquiries, access requests, and complaints should be directed to fb99's data protection contact at: [email protected]

fb99 collects personal data through multiple channels, including account registration forms, KYC verification submissions, payment transactions, customer support interactions, and automated technical means (such as cookies and server logs). The categories of personal data we collect include:

fb99 does not intentionally collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, health data, or political opinions). If you voluntarily disclose such information during a support interaction, fb99 will use it only to address your specific enquiry and will not retain it beyond that purpose.

fb99 processes your personal data for the following purposes:

• Account Creation and Management: To register your Account, maintain your player profile, and provide you with access to the Platform and its features.
• Identity and Age Verification (KYC): To verify that you are at least 21 years of age and to confirm your identity in accordance with our legal obligations. The 21+ minimum age requirement is strictly enforced on the fb99 Platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions in Bangladeshi Taka (৳).
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other illegal or prohibited activities on the Platform.
• Responsible Gaming: To monitor gaming patterns and, where necessary, intervene with responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where a Player may be at risk of harm.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Legal Compliance: To fulfil fb99's obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and data protection laws.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance and features of the Platform. Such analysis uses anonymised or pseudonymised data wherever possible.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about new games or features. You may withdraw this consent at any time by contacting [email protected].

fb99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and fb99 — i.e., to provide you with the gaming services you have registered to use, process your payments, and maintain your Account.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML identity verification requirements, financial record-keeping obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for fb99's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

fb99 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Identity Verification Providers: Third-party KYC and AML service providers who assist fb99 in verifying the identity and age of Players. These providers are contractually bound to use your data solely for verification purposes.
• Payment Service Providers: Mobile financial service operators including bKash, Nagad, Rocket, and Upay, to the extent necessary to process deposits and withdrawals. Payment data is transmitted over encrypted channels and handled in accordance with each provider's own data protection framework.
• Game Content Providers: Third-party game studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming may receive session data (e.g., player ID, bet amounts) to operate their game software. This data is pseudonymised where technically feasible.
• Fraud Prevention and Security Services: Specialist providers who assist fb99 in identifying and preventing fraudulent activity, account takeovers, and money laundering. Data shared with such providers is strictly limited to what is necessary for the fraud investigation.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or lawful regulatory request, fb99 may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units.
• Professional Advisers: Lawyers, auditors, and accountants who require access to personal data to provide professional services to fb99, subject to strict professional confidentiality obligations.

All third-party data processors engaged by fb99 are required to enter into written data processing agreements and are subject to regular due-diligence assessments to ensure they maintain appropriate technical and organisational security measures.

The fb99 Platform primarily serves players based in Bangladesh, and data storage and primary processing is carried out in server infrastructure serving the South Asia region. However, certain service providers engaged by fb99 (particularly game content providers and specialist security vendors) may be located outside Bangladesh.

Where personal data is transferred to a recipient in a country that does not provide an equivalent level of data protection to that applicable in Bangladesh, fb99 will ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by a recognised data protection authority, incorporated into the data processing agreement with the relevant provider.
• Binding corporate rules where the recipient is a member of the same corporate group as fb99.
• Any other lawful transfer mechanism recognised under applicable data protection law.

You may request details of the specific safeguards in place for any international transfer of your data by contacting fb99 at [email protected].

fb99 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any applicable legal, regulatory, or accounting obligations that require longer retention. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you close your Account before a retention period expires, fb99 will retain the minimum data necessary to comply with its legal obligations and will restrict its processing for all other purposes.

fb99 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences (such as language selection and display settings) across sessions, improving your experience without storing any personally identifying information in third-party systems.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how players interact with the Platform (e.g., pages visited, session duration, error events). This data is used solely to improve Platform performance and is not linked to your identity.
• Fraud Prevention Cookies: Technical identifiers used to detect suspicious or anomalous browsing patterns that may indicate fraudulent activity or bot behaviour.

fb99 does not use third-party advertising cookies, behavioural profiling cookies, social media tracking pixels, or any cookie that tracks your activity across websites other than fb99login.app.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from accessing certain core features of the Platform, including the ability to log in to your Account.

fb99 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the fb99 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). The Platform's security certificate is verified by a recognised certificate authority.
• Encryption at Rest: Sensitive personal data (including identity documents and financial records) is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within fb99's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and are subject to binding confidentiality obligations.
• Multi-Factor Authentication: All internal fb99 system access requires multi-factor authentication. Players are strongly encouraged to enable two-factor authentication on their own Accounts.
• Regular Security Audits: fb99 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the Platform's infrastructure.
• Incident Response: fb99 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to affected individuals, fb99 will notify affected Players and, where required by law, relevant authorities, within the timeframes prescribed by applicable data protection legislation.

Despite these measures, no online platform can guarantee absolute security. fb99 encourages all Players to use strong, unique passwords for their Accounts and to contact [email protected] immediately if they suspect unauthorised access to their Account.

Subject to applicable data protection law, you have the following rights in relation to the personal data fb99 holds about you:

• Right of Access: You may request a copy of the personal data fb99 holds about you, together with information about how it is used and with whom it is shared. fb99 will respond to verified access requests within 30 days.
• Right to Rectification: If any of the personal data fb99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other lawful basis for processing; (c) you object to processing based on legitimate interests and those interests do not override your rights; or (d) the data has been unlawfully processed. Note that erasure requests may be declined where retention is required by law (e.g., AML obligations).
• Right to Restriction of Processing: You may request that fb99 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on fb99's legitimate interests. fb99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact fb99's data protection team at [email protected], clearly stating your full name, registered Account email address, and the specific right you wish to exercise. fb99 may request additional information to verify your identity before processing a data rights request.

The fb99 Platform is strictly intended for individuals who are 21 years of age or older. fb99 does not knowingly collect, process, or store personal data of any individual under the age of 21. Age verification is a mandatory step in the Account registration and KYC process.

If fb99 becomes aware that personal data has been collected from an individual under the age of 21, the Account will be suspended immediately, all data will be deleted as soon as practicable (subject to any legal retention obligations relating to the underage access incident itself), and any winnings or bonuses associated with the Account will be forfeited.

If you believe that a minor has accessed the fb99 Platform or that fb99 has inadvertently collected data from a person under 21, please contact fb99 immediately at [email protected].

The fb99 Platform does not contain links to third-party websites. In the event that any third-party content or tools are integrated into the Platform in future (for example, third-party game studios' embedded software), this Privacy Policy will be updated to reflect the relevant data-sharing arrangements. fb99 is not responsible for the privacy practices of third-party game content providers beyond the data processing agreements described in Section 6 of this Policy.

fb99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we provide. Material changes — those that significantly affect your rights or the way your personal data is processed — will be communicated to registered Players via email to the registered Account address no less than 14 days before the updated Policy takes effect.

Non-material changes (such as typographical corrections or clarifications that do not affect your rights) will take effect immediately upon publication. The "Effective Date" at the top of this page will always reflect the date of the most recent revision. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how fb99 is protecting your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fb99 processes your personal data, please contact our data protection team using the details below:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Support Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Response Time: Within 2 Business Days for general enquiries; within 30 days for formal data rights requests
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

fb99 does not provide telephone support. All formal data protection requests must be submitted in writing via email to ensure a documented record. When submitting a data rights request, please include your full name, registered email address, and Account ID (if applicable) to enable fb99 to locate your data and verify your identity efficiently.