fb99 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how fb99, the online sports betting and casino platform operated at fb-99.asia ("fb99", "we", "us", "our"), collects, processes, stores and protects the personal data of individuals ("you", "your", "player") who access, register for, or use the fb99 platform and its associated services.

This Policy should be read in conjunction with the fb99 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this document. By creating an account on fb99, making a deposit, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy and consent to the data processing practices described herein.

fb99 is committed to maintaining the confidentiality, integrity and availability of your personal information at all times. We implement technical and organisational measures appropriate to the sensitivity of the data we hold and regularly review those measures to ensure they remain effective against evolving security risks.

2 Data Controller

For the purposes of applicable data protection law, fb99 acts as the data controller in respect of personal data collected from players registered at fb-99.asia. As data controller, fb99 determines the purposes and means by which your personal data is processed.

All data processing described in this Policy is carried out by fb99 directly or by carefully selected third-party processors engaged under contractual data processing agreements that require those processors to handle your data only on fb99's documented instructions and to maintain appropriate security standards equivalent to those described in this Policy.

Enquiries regarding data protection, requests to exercise your data rights, or complaints about data handling practices may be directed to fb99 in writing at: [email protected]

3 Personal Data We Collect

fb99 collects the following categories of personal data from players. The specific data points collected at any given time depend on the stage of the player relationship and the services being accessed.

fb99 does not intentionally collect sensitive personal data such as health information, religious beliefs, political opinions, or biometric data beyond what is strictly required for identity document verification purposes.

4 How We Collect Your Data

fb99 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or interact with any feature of the fb99 platform that requires you to submit information.

4.2 Automated Collection

Data collected automatically when you access and navigate the fb99 platform, including through cookies, web beacons, server log files, and similar tracking technologies. This includes your IP address, device fingerprint, browser characteristics, and behavioural data such as pages visited and time spent on each section of the platform.

4.3 Third-Party Sources

Data received from third-party service providers engaged by fb99 for specific operational purposes, including:

• Identity verification and KYC providers who confirm the authenticity of documents you submit.
• Payment processors including bKash, Nagad and Rocket who provide transaction confirmation and fraud signals.
• Anti-fraud and risk management platforms that cross-reference account activity against known fraud indicators.
• Analytics providers whose tools help fb99 understand aggregate platform usage patterns.

Data received from third-party sources is handled under the same protections as directly collected data and is used only for the purpose for which it was originally provided to fb99.

5 Legal Basis for Processing

fb99 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between fb99 and you as a registered player — including account creation, transaction processing, bet settlement and withdrawal execution.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering obligations, identity verification requirements, and records retention mandates.
• Legitimate Interests: Processing carried out in pursuit of fb99's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, abuse detection and service improvement.
• Consent: Processing based on your freely given, specific and informed consent — primarily in relation to optional marketing communications. Where consent is the basis for processing, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Personal Data

fb99 uses the personal data described in Section 3 for the following purposes:

• Account Management: Creating and maintaining your fb99 player account, authenticating your identity at login, and managing account preferences and settings.
• Transaction Processing: Executing deposits via bKash, Nagad, Rocket, Upay and bank transfer, processing withdrawal requests, and maintaining accurate financial records for each transaction.
• Identity and Age Verification: Confirming that you meet the minimum age requirement of 21 years and that your identity matches the payment methods used on your account, in accordance with our KYC obligations.
• Regulatory Compliance: Meeting anti-money laundering screening requirements, responding to lawful requests from law enforcement or regulatory bodies, and maintaining the records required by applicable legal frameworks.
• Fraud and Security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct as defined in the fb99 Terms & Conditions.
• Responsible Gaming: Monitoring your account activity for indicators of problem gambling, applying the self-imposed limits and restrictions you elect, and communicating with you about responsible gaming resources where appropriate.
• Customer Support: Responding to enquiries, resolving complaints, and maintaining records of support interactions to improve service quality over time.
• Platform Improvement: Analysing aggregated usage patterns to identify areas of the fb99 platform that can be improved, optimised or expanded in ways that benefit the player community.
• Marketing Communications: Sending you promotional offers, bonus notifications and platform updates where you have opted in to receive such communications. You may opt out at any time by contacting fb99 support.

7 Data Sharing and Disclosure

fb99 does not share your personal data with third parties except in the limited circumstances described below. All third parties with whom fb99 shares data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection principles.

7.1 Service Providers

fb99 engages carefully selected third-party service providers to support platform operations. These providers are permitted to process your data only on documented instructions from fb99 and only to the extent necessary to deliver their specific service. Categories of service provider include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank and other financial institutions involved in executing your transactions.
• KYC and identity verification providers who authenticate the documents you submit during account verification.
• Game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi, who receive the minimum session data required to deliver game content and validate game outcomes.
• Anti-fraud and risk management platforms that analyse transaction and behavioural data to detect prohibited activity.
• Customer support platform providers that host and process support ticket and live chat data.
• IT infrastructure and hosting providers on whose servers the fb99 platform operates.

7.2 Legal and Regulatory Disclosure

fb99 may disclose personal data where required to do so by applicable law, court order, or the request of a competent law enforcement or regulatory authority. fb99 will, to the extent permitted by law, notify the affected player of any such disclosure unless doing so would compromise an ongoing investigation or is prohibited by the applicable order.

7.3 Business Transfers

In the event that fb99 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred as part of that transaction. fb99 will provide reasonable notice of any such transfer and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

7.4 No Marketing Sharing

fb99 does not share your personal data with third-party organisations for their own marketing purposes. Any marketing communications you receive will originate from fb99 directly and will relate exclusively to fb99 services.

8 Cookies and Tracking Technologies

fb99 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your web browser when you visit fb-99.asia. Cookies do not contain executable code and cannot access other data stored on your device.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the fb99 platform.
• Functional Cookies: Remember your preferences such as language settings, display options and responsible gaming limit configurations so that you do not need to re-enter them on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the fb99 platform. This data helps fb99 understand which areas of the site are most used and where improvements should be prioritised.
• Security Cookies: Support fb99's fraud detection and account security systems by helping to identify unusual login patterns or suspicious device activity.

8.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair platform functionality and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in the help documentation of your browser provider.

9 Data Retention

fb99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of the player's registration with fb99 and for a period of no less than five years following permanent account closure, in line with standard anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping requirements.
• KYC Documents: Retained for no less than five years from the date of verification or from account closure, whichever is the later date.
• Support Communications: Retained for three years from the date of the most recent interaction in a given thread, or longer where the communication relates to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of the consent plus three years following withdrawal of consent, to demonstrate compliance.
• Technical and Usage Data: Retained in identifiable form for up to 24 months, after which it is either deleted or anonymised for aggregate analytical use.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual records. fb99 does not archive data beyond the periods described above without a documented legal or operational justification.

10 Data Security

fb99 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. Key measures include:

• Encryption in Transit: All data transmitted between your device and the fb99 platform is encrypted using TLS 1.2 or higher, delivering the equivalent of 256-bit SSL encryption across all platform connections.
• Encryption at Rest: Sensitive data fields — including identity document data and financial account identifiers — are encrypted in the fb99 database using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted to fb99 staff members and authorised processors who have a documented operational need to access that data. Access is controlled through role-based permissions and reviewed regularly.
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their fb99 accounts. fb99 operational systems also enforce multi-factor authentication for all internal personnel with access to production data.
• Intrusion Detection: fb99 operates automated monitoring systems that detect and alert on anomalous access patterns, brute-force attempts and other indicators of unauthorised access in real time.
• Incident Response: fb99 maintains a documented data breach response plan. In the event of a confirmed breach affecting player data, affected individuals will be notified without undue delay and in accordance with applicable legal obligations.

11 Your Data Rights

As a player whose personal data is processed by fb99, you have the following rights in relation to your personal information. To exercise any of these rights, please submit a written request to fb99 support at the contact details in Section 15. fb99 will respond to all valid rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data fb99 holds about you, together with information about how that data is processed, where it came from, and to whom it has been disclosed.
• Right to Rectification: You have the right to request that fb99 correct any inaccurate or incomplete personal data held about you. Where a correction is made to data that has been shared with a third party, fb99 will notify that party of the correction where feasible.
• Right to Erasure: You have the right to request that fb99 delete your personal data in certain circumstances — for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to fb99's legal retention obligations, which may require certain data to be retained notwithstanding an erasure request.
• Right to Restriction: You have the right to request that fb99 restrict processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you object to processing based on legitimate interests pending determination of that objection.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where fb99 relies on legitimate interests as the legal basis. fb99 will cease that processing unless compelling legitimate grounds can be demonstrated that override your interests, rights and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Please note that certain rights are subject to limitations and that exercising some rights may affect your ability to use the fb99 platform. fb99 will inform you of any such implications before acting on a rights request.

12 Children's Privacy

The fb99 platform is strictly for adults. No person under the age of 21 is permitted to register for, access, or use any service offered by fb99. fb99 does not knowingly collect personal data from individuals under the age of 21.

If fb99 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed with all balances forfeited. If you have reason to believe that a minor may have accessed or registered on the fb99 platform, please notify fb99 immediately at [email protected] so that appropriate action can be taken without delay.

13 Third-Party Links

The fb99 platform does not contain links to third-party websites for general browsing purposes. To the extent that any third-party content, game provider interface, or payment gateway is accessible through the fb99 platform, please be aware that those third-party environments are governed by their own privacy policies and terms of service, for which fb99 accepts no responsibility.

fb99 recommends that you review the privacy policies of any third-party service you interact with in connection with your fb99 account — including your mobile banking provider for bKash, Nagad or Rocket transactions — to understand how your data is handled within those environments.

14 Updates to This Privacy Policy

fb99 reserves the right to amend this Privacy Policy at any time. Where a material change is made to the Policy — such as a change to the categories of data collected, the purposes for which data is processed, or the third parties with whom data is shared — fb99 will provide reasonable advance notice to registered players via the email address on file or via a notice displayed on the fb99 platform.

The revised Policy will take effect on the date stated in the update notice. Your continued use of the fb99 platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. The most current version of this Privacy Policy is always available at fb-99.asia/privacy-policy. The effective date displayed at the top of this document reflects the date of the most recent revision.

If you disagree with any change to this Policy, you should cease using the platform and may contact fb99 to request account closure and return of your verified account balance before the revised Policy takes effect.

15 Contact and Data Enquiries

All data-related enquiries, rights requests and privacy complaints should be submitted in writing to the fb99 data team. fb99 will acknowledge receipt of all written data enquiries within 48 hours and provide a substantive response within 30 calendar days of receipt.

Contact channel for privacy matters:

Email: [email protected] (plain text — not a clickable link)

Support is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6). For data protection enquiries specifically, please use the subject line "Privacy Enquiry" to ensure your message is directed to the appropriate team member without delay.