99fb Privacy Policy — How We Protect Your Personal Data

99fb is Bangladesh's trusted online sports betting and casino platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond. As a platform handling real-money transactions and personal account data, we take our obligations as a data controller extremely seriously. We are committed to maintaining the highest standards of data protection, transparency, and user privacy.

This Policy applies to all personal data we collect through the 99fb platform, our mobile interface, and any communications between you and our support team. It does not apply to third-party websites or services that may be linked to or accessible from the 99fb platform — those third parties maintain their own privacy policies for which 99fb bears no responsibility.

The platform is intended exclusively for adults aged 21 years and above resident in or accessing from Bangladesh. If you do not meet these requirements, you must not use the platform and must not submit any personal data to us.

We collect only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we may collect include:

We do not collect or store sensitive financial card data such as full Visa or Mastercard numbers — such transactions are handled directly by the relevant payment provider using their own secure infrastructure.

99fb collects personal data through the following means:

• Direct submission: When you register an account, complete identity verification (KYC), initiate a deposit or withdrawal, contact our support team, or update your account profile, you directly provide us with personal data.
• Automated collection: As you navigate and use the platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies. This data is collected whether you are logged in or browsing as a guest.
• Third-party payment providers: When you use bKash, Nagad, Rocket, Upay, or a Bangladeshi bank to fund your account, the payment provider confirms the transaction to us and may share limited financial data (such as the sending account identifier and transaction reference) necessary to credit your 99fb balance.
• Game providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, Ezugi, and Microgaming) may share session and outcome data with us to settle bets and maintain accurate account records.
• Identity verification services: We may use third-party identity verification services to confirm the authenticity of documents submitted during KYC. These services process your data under their own privacy frameworks, and we select only providers that maintain appropriate data protection standards.

We process your personal data only for specific, legitimate purposes. The table below summarises those purposes alongside the corresponding data categories:

• Account registration and management: Creating and maintaining your player account, authenticating your identity at login, and managing your account preferences.
• Age and identity verification (KYC): Confirming that you meet the minimum age requirement of 21 years and verifying your identity as required under responsible gaming and anti-fraud obligations.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi banks, reconciling transaction records, and preventing fraudulent financial activity.
• Anti-money laundering (AML) compliance: Monitoring transactions for patterns indicative of financial crime and conducting enhanced due diligence on high-value transactions.
• Customer support: Responding to your account queries, resolving disputes, and delivering assistance via live chat and email.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the platform and to improve performance, design, and content.
• Responsible gaming: Monitoring account behaviour for indicators of problem gambling and, where necessary, proactively reaching out to offer support tools such as deposit limits or self-exclusion.
• Promotional communications: Sending you relevant bonus offers, tournament announcements (BPL, IPL, T20 World Cup, Eid promotions), and platform updates, but only where you have opted in to receive marketing messages.
• Legal and regulatory compliance: Retaining records as required by applicable law and cooperating with lawful requests from competent authorities.

Each instance of data processing at 99fb is grounded in one of the following lawful bases:

• Contract performance: Processing necessary to deliver the services you requested when you registered your account — including operating your account, settling bets, and processing payments.
• Legal obligation: Processing required to comply with applicable law, including KYC identity verification, AML monitoring, record-keeping obligations, and cooperation with regulatory or law enforcement authorities.
• Legitimate interests: Processing that serves our legitimate business interests — such as fraud detection, platform security, and usage analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of marketing and promotional communications. You may withdraw consent at any time by contacting us at [email protected] or updating your account preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

99fb does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive the minimum data necessary to process your deposit or withdrawal transaction.
• Game and platform technology providers: Third-party game studios and software providers (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, Spribe, NetEnt) receive session identifiers and relevant account data to deliver game services and settle outcomes.
• Identity verification services: KYC and document-verification providers receive identity document data solely for the purpose of confirming your identity and age.
• Fraud prevention and security services: Specialist providers who help us detect and prevent fraudulent transactions, account takeovers, and bonus abuse receive relevant technical and behavioural data under strict data-processing agreements.
• Legal and regulatory authorities: We may disclose your data to competent courts, law enforcement agencies, financial intelligence units, or regulatory bodies where required by law or in response to a valid legal demand. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 99fb business, your data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer that materially changes how your data is processed.

The 99fb platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by the platform when you visit. We use the following categories of cookies:

• Essential cookies: Strictly necessary for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without rendering the platform non-functional.
• Functional cookies: Store your preferences such as language selection, display settings, and last-visited game categories so that your experience is consistent across sessions.
• Analytical cookies: Collect aggregated, anonymised data about how players use the platform — such as which pages are visited most often, average session duration, and common navigation paths — to help us improve the platform's design and performance.
• Security cookies: Used to detect and prevent fraudulent sessions, unusual login behaviour, and bot activity. These are fundamental to protecting your account from unauthorised access.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, but may limit certain personalisation features. Note that disabling essential or security cookies may impair core platform functionality and account security.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. Our general retention guidelines are as follows:

• Active account data: Retained for the full duration of your account's existence on the platform, plus a post-closure period as required by law.
• Transaction and financial records: Retained for a minimum of five (5) years following account closure, in line with standard AML and financial record-keeping requirements.
• KYC and identity documents: Retained for the period required by applicable law from the date of submission or the date of account closure, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for up to three (3) years to support dispute resolution and quality assurance.
• Marketing data (opted-in): Retained until you withdraw your consent or request deletion, after which it is removed from active marketing systems within 30 days.
• Technical and usage logs: Typically retained for up to twelve (12) months for security analysis and platform improvement purposes, after which they are anonymised or deleted.

Upon the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. We do not retain data in identifiable form beyond what is necessary.

As a user of the 99fb platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on consent or contract performance, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including the use of your data for direct marketing or profiling purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The security of your personal data is a foundational commitment of the 99fb platform. We implement a comprehensive, layered security framework designed to protect your data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 99fb platform is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Encrypted password storage: User passwords are never stored in plain text. We use strong, salted cryptographic hashing algorithms to store password data securely.
• Access controls: Access to personal data within 99fb's systems is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Firewall and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for unusual access patterns and potential threats.
• Regular security audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach that poses a risk to your rights, we will notify affected users promptly — and where required, notify the relevant authorities — in accordance with applicable law.

While we take every reasonable precaution to secure your data, no online system can guarantee absolute security. We encourage you to use a strong, unique password for your 99fb account and to log out after each session, particularly on shared or public devices.

The 99fb platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to any person under the age of 21. The platform employs age-verification measures at registration to enforce this requirement.

If we become aware that personal data has been inadvertently collected from an individual under 21, we will immediately suspend the associated account, delete the data as far as legally permissible, and take steps to prevent recurrence. If you believe that a minor has registered an account or submitted personal data to 99fb, please notify us immediately at [email protected] so that we can investigate and act without delay.

99fb reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will publish an updated version of the Policy on this page and update the "Last Updated" date at the top of the hero section.

For significant changes that materially affect how your personal data is processed, we may also send a notification to the email address registered to your 99fb account. Your continued use of the platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically. Archived versions of previous policies are not maintained for public access; the version published on this page is the current and binding version at all times.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 99fb handles your personal data, please contact our dedicated data support team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Query" or "Data Rights Request" for the fastest routing
• Live Chat: Available 24 hours a day, 7 days a week, directly on the 99fb platform
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days, Bangladesh Standard Time (UTC+6)

We take every privacy query seriously and are committed to addressing your concerns fairly, transparently, and in a timely manner.