fr99 Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how fr99 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", "the Member") who access or use the services available at fr99.io. This Policy applies to all data processing activities conducted by fr99 in connection with the operation of the platform, including but not limited to account registration, identity verification, payment processing, sports betting, casino gaming, customer support, and marketing communications.

This Policy is published in English and is effective from 1 January 2026. It applies to all users of the fr99 platform, with particular relevance to players based in Bangladesh and across the broader South Asian region. In the event of any conflict between this Policy and any other document published by fr99, this Policy shall prevail with respect to the treatment of personal data.

This Policy should be read alongside the fr99 Terms & Conditions, which govern your use of the platform more broadly. Defined terms used in the Terms & Conditions and not separately defined here carry the same meaning in this Policy.

2 Data We Collect

fr99 collects the following categories of personal data in the course of operating the platform and serving its members:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (for age verification purposes — fr99 enforces a strict 21+ policy);
• Residential address, including city, district, and postal code;
• Email address registered to your fr99 account;
• Mobile phone number associated with your account and payment methods.

2.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued photo identification (National ID card, passport, or driving licence);
• Proof-of-address documents (utility bills, bank statements, or official correspondence);
• Selfie photographs submitted for liveness verification, where requested;
• Proof of ownership of payment instruments used for deposits.

2.3 Financial and Transaction Data

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Mobile wallet numbers or partial card numbers used for deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers;
• Bonus balances, wagering history, and promotional credit records.

2.4 Gameplay and Betting Data

• Sports bets placed, including market, selection, stake, and outcome;
• Casino game session data, including game title, session duration, total wagered, and outcome;
• Game provider interaction logs from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi game sessions.

2.5 Technical and Device Data

• IP address and approximate geolocation derived from it;
• Device type, operating system, and browser type and version;
• Session timestamps, page navigation paths, and interaction events;
• Cookie identifiers and similar tracking technology data as described in Section 7.

2.6 Communications Data

• Records of live chat interactions with the fr99 support team;
• Email correspondence sent to or received from [email protected];
• Feedback, complaint records, and any documentation submitted in connection with a dispute.

3 How We Collect Your Data

fr99 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated collection: Technical data collected automatically when you access fr99.io, including IP address, device identifiers, browser type, and session data, via cookies and server logs;
• Third-party sources: Identity verification data may be cross-referenced with data held by third-party KYC service providers for fraud prevention and compliance purposes. Payment data is received from payment gateway partners to confirm transaction status;
• Game provider data feeds: Session and outcome data transmitted from game studio platforms (such as Pragmatic Play and Evolution Gaming) to the fr99 back-end system in real time.

4 Legal Basis for Processing

fr99 processes your personal data on one or more of the following legal bases:

5 How We Use Your Data

The personal data fr99 collects is used for the following purposes:

• Account management: Creating and maintaining your fr99 member account, including authentication and account security;
• Identity verification: Completing KYC checks to confirm your age, identity, and residential address in accordance with our compliance obligations;
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard and maintaining accurate transaction records in BDT;
• Service delivery: Providing access to casino games from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios, as well as sports betting markets covering BPL, IPL, T20 World Cup, and other events;
• Fraud and AML compliance: Detecting and preventing fraudulent activity, money laundering, and other prohibited conduct as described in the fr99 Terms & Conditions;
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour and administering self-exclusion, deposit limits, and cooling-off tools at your request or at the Platform's discretion;
• Customer support: Responding to your queries, complaints, and requests via live chat and email;
• Marketing communications: Sending promotional offers related to fr99's casino, sports betting, and seasonal campaigns (e.g., Eid, Pohela Boishakh, BPL season) where you have opted in — you may unsubscribe at any time;
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, website usability, and customer experience;
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from competent authorities.

6 Data Sharing and Disclosure

fr99 does not sell your personal data to any third party. We may share your data only in the following limited circumstances:

• KYC and compliance service providers: Third-party identity verification platforms engaged to assist with KYC checks and AML screening. These providers are contractually bound to process your data solely for verification purposes;
• Payment processing partners: Payment gateway operators facilitating bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions. These partners receive only the data necessary to process the specific transaction;
• Game studio platforms: Game data is shared with Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated game providers as required to deliver and authenticate your gaming sessions;
• IT infrastructure providers: Cloud hosting, server management, and cybersecurity providers who process data on our behalf under strict data processing agreements;
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other competent authorities where fr99 is required to disclose data by law, court order, or regulatory obligation;
• Fraud prevention networks: Industry fraud prevention databases where sharing of specific data is necessary to protect the platform and its members from fraud and abuse.

All third-party processors engaged by fr99 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with fr99's documented instructions.

7 Cookies and Tracking Technologies

fr99 uses cookies and similar technologies (including web beacons and local storage) when you access fr99.io. Cookies are small text files placed on your device that help the platform function correctly and allow us to analyse how the site is used.

The categories of cookies used by fr99 are as follows:

fr99 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in to your fr99 account.

8 Data Retention

fr99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, to satisfy AML record-keeping obligations;
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later;
• Transaction records: Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements;
• Customer support records: Retained for three years from the date of last interaction;
• Marketing consent records: Retained for the duration of your subscription and for one year following withdrawal of consent;
• Technical logs: Typically retained for 90 days and then anonymised or deleted.

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Data that is subject to an ongoing investigation, legal proceeding, or regulatory inquiry will be retained until that matter is resolved, regardless of the standard retention period.

9 Data Security

fr99 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and fr99.io;
• Encryption of sensitive data fields (including KYC document files) at rest using industry-standard encryption protocols;
• Access controls ensuring that only authorised personnel with a documented business need can access personal data;
• Multi-factor authentication requirements for all fr99 administrative systems;
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
• Incident response procedures enabling rapid detection, containment, and notification in the event of a data breach;
• Staff training on data protection obligations and secure data handling practices.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your fr99 login credentials confidential. If you suspect that your account has been accessed without authorisation, you must notify our support team at [email protected] immediately.

10 Your Rights

As an fr99 member whose personal data is processed by the platform, you hold the following rights with respect to your data. To exercise any of these rights, please contact our support team using the details in Section 13:

• Right of Access: You have the right to request a copy of the personal data fr99 holds about you and information about how it is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you;
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to legal retention obligations — fr99 cannot delete data that we are required by law to retain;
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible;
• Right to Object: You have the right to object to processing of your data based on legitimate interests, including profiling for fraud detection, where you have grounds relating to your particular situation;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal;
• Right to Restrict Processing: In certain circumstances, you may request that fr99 limit the processing of your data while a dispute is being resolved.

fr99 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, an extension of up to an additional 60 days may apply, and you will be notified of this extension within the initial 30-day period.

11 Children's Privacy

The fr99 platform is strictly intended for adults aged 21 years and above. fr99 does not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory step of the fr99 registration and KYC process.

If fr99 becomes aware that personal data has been collected from a person under the age of 21 through misrepresentation or circumvention of age verification controls, that account will be suspended immediately, all data will be securely deleted to the extent permitted by law, and any deposits will be returned to the originating payment method after verification of the account holder's identity.

If you are a parent or guardian and believe that a person under 21 in your care has registered an fr99 account, please contact our support team at [email protected] immediately so that appropriate action can be taken.

12 Changes to This Policy

fr99 reserves the right to update or amend this Privacy Policy at any time. Where a change is material — for example, a significant change to the categories of data collected, the purposes for which data is used, or the parties with whom data is shared — fr99 will notify registered members via the email address associated with their account or via a notice displayed upon login to fr99.io.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the fr99 platform after the publication of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated Policy. If you do not agree to the revised Policy, you must cease using the platform and may request account closure by contacting our support team.

We encourage you to review this Policy periodically to stay informed about how fr99 is protecting your personal information.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data fr99 holds about you, please contact our dedicated support and compliance team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the fr99.io platform
• Average Response Time: 2–5 minutes via live chat; within 24 hours via email
• Operating Timezone: Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request or a privacy-related query, please include your registered username and a clear description of your request so that our compliance team can identify and assist you efficiently. For data erasure or portability requests, identity verification will be required before the request can be actioned.

fr99 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to your query, you may have the right to escalate your complaint to a relevant supervisory authority in accordance with applicable law.