fr99 Privacy Policy

1 Introduction

fr99 is an online gaming platform serving adult players in Bangladesh and other permitted jurisdictions. We take the privacy and security of our players' personal data seriously. This Privacy Policy sets out the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the rights available to you as a data subject.

This Policy is effective as of 1 January 2026 and applies to all personal data processed by fr99 in connection with the operation of the fr99.vip platform, including through the fr99 Login system, the mobile-optimised site, and all associated gaming, betting, and payment services offered therein.

We are committed to processing personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. We review this Privacy Policy periodically and will notify registered account holders of any material changes via the platform or by email.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is fr99, the operator of the platform at fr99.vip. As data controller, fr99 determines the purposes and means by which your personal data is processed in connection with the operation of the platform and related services.

If you have any questions about how fr99 processes your personal data, or if you wish to exercise any of your rights described in Section 10 of this Policy, you may contact the fr99 data protection team using the contact details provided in Section 14.

3 Data We Collect

3.1 Registration Data

When you create an account via the fr99 Login registration process, we collect the following personal data:

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, district, and country)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

As part of our know-your-customer (KYC) obligations, we may request and collect:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or equivalent document)
• Proof of payment method ownership (e.g., screenshot of bKash, Nagad, or Rocket account showing the account holder's name)
• Selfie or live photo for facial verification purposes where required

3.3 Financial Transaction Data

When you make deposits or withdrawals through the fr99 platform, we collect:

• Payment method details (mobile banking account reference for bKash, Nagad, Rocket, Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported institutions)
• Transaction amounts in Bangladeshi Taka (৳)
• Transaction timestamps and reference numbers
• Transaction status and outcome records

3.4 Gaming Activity Data

We record details of your gaming and betting activity on the platform, including:

• Games played, bets placed, and wager amounts
• Game outcomes and winnings
• Bonus claims, wagering progress, and promotional participation history
• Session durations and login timestamps

3.5 Technical & Device Data

When you access fr99.vip, our servers automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Referring URL and pages visited on the fr99 platform
• Session identifiers and cookie data (see Section 8)

3.6 Communications Data

If you contact fr99 via live chat, email, or WhatsApp, we retain records of that correspondence, including the content of messages, timestamps, and any support tickets raised, for quality assurance, training, and dispute resolution purposes.

4 How We Use Your Data

The table below summarises the primary purposes for which fr99 processes your personal data and the corresponding categories of data involved:

fr99 does not use automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated systems flag an account for review (for example, due to suspected fraud or bonus abuse), a member of the fr99 compliance team will conduct a manual review before any consequential action is taken.

5 Legal Basis for Processing

fr99 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the contract between fr99 and the Player — including account registration, payment processing, and the provision of gaming services — is carried out on the basis that it is necessary to perform the contract you have entered into with us.
• Legal obligation: Certain processing activities are required by applicable law, including identity verification, anti-money-laundering checks, and the retention of financial records. This processing is carried out on the basis of compliance with a legal obligation.
• Legitimate interests: fr99 processes certain data on the basis of its legitimate interests in operating a secure, fair, and commercially sustainable gaming platform — for example, fraud detection, security monitoring, and aggregate platform analytics. We ensure that these interests do not override the privacy rights of players.
• Consent: Where fr99 sends promotional communications (such as bonus offers, seasonal promotions tied to Eid, Pohela Boishakh, or BPL events, or personalised game recommendations), we do so only where you have given your express consent. You may withdraw consent for marketing communications at any time by contacting support or updating your account preferences.

6 Sharing Your Personal Data

6.1 Payment Service Providers

In order to process your deposits and withdrawals, fr99 shares the minimum necessary payment and identity data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks. These providers are contractually required to process your data only for the specific purpose of completing your transaction and may not use it for any other purpose.

6.2 Game Providers

Games on the fr99 platform are supplied by third-party providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive a player session token and anonymised game activity data to enable live game connections and to record game outcomes. Full personal data (name, address, payment details) is not shared with game providers.

6.3 Identity Verification Services

fr99 may use third-party KYC and identity verification services to assist with document verification and age confirmation. Any personal data shared with such providers is processed under a formal data processing agreement and is used solely for the purpose of verification.

6.4 Legal and Regulatory Disclosure

fr99 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, a court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or harm to persons.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of fr99, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data processing arrangements that result from it.

7 Data Retention

fr99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, taking into account applicable legal, regulatory, and operational requirements. The following general retention principles apply:

• Active account data: Retained for the full duration of the account relationship and for a period thereafter as required by applicable financial and gaming regulations.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of the account relationship, in accordance with standard anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the recorded session or bet.
• Customer support communications: Retained for two (2) years from the date of the last communication in a support thread, unless the matter is subject to ongoing dispute or legal proceedings.
• Technical and device data: Anonymised or deleted within twelve (12) months of collection unless required for active security investigations.

When personal data is no longer required for its original purpose and no legal basis exists for continued retention, fr99 will securely delete or irreversibly anonymise it so that it can no longer be associated with any individual.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and gather aggregate usage information. fr99 uses cookies and similar technologies (such as local storage and session tokens) to deliver and improve the platform.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the fr99 platform to function. They maintain your logged-in session via the fr99 Login system, remember your language preference, and ensure that the platform responds correctly to your requests. These cookies cannot be disabled without materially impairing your ability to use the platform.
• Functional Cookies: These cookies remember choices you make on the platform — such as your preferred game view, notification preferences, and responsible gaming settings — so that you do not need to re-enter them on each visit.
• Analytics Cookies: fr99 uses aggregate analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is processed in aggregate and is not linked to individual player identities for analytics purposes.

8.3 Third-Party Advertising Cookies

fr99 does not deploy third-party advertising cookies that track your behaviour across unrelated websites or build cross-site advertising profiles. Any analytics or tracking tools used by fr99 are limited to activity within the fr99.vip domain.

8.4 Managing Cookies

You can manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your fr99 account and using the platform's core features. Instructions for managing cookies are available in your browser's help documentation.

9 Data Security

fr99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and fr99 servers is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal data — including fr99 Login credentials and payment details — cannot be intercepted in transit.
• Secure Password Storage: Passwords are never stored in plain text. fr99 uses modern one-way cryptographic hashing algorithms with salting to store password data in a form that cannot be reversed to reveal the original password.
• Access Controls: Access to personal data within the fr99 organisation is restricted to employees and contractors who require it to perform their specific role. All staff with access to personal data are subject to confidentiality obligations.
• Regular Security Reviews: fr99 conducts periodic internal reviews of its data security practices and technical infrastructure to identify and address potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that may affect your personal data, fr99 will take prompt steps to contain the incident, assess the impact, and notify affected players in accordance with applicable legal requirements.

While fr99 takes data security seriously and applies appropriate safeguards, no online platform can guarantee absolute security. Players are encouraged to protect their own Account by using a strong, unique password for their fr99 Login and by not sharing their credentials with any third party.

10 Your Privacy Rights

As a registered player on the fr99 platform, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data that fr99 holds about you. We will provide this information in a clear and accessible format within a reasonable timeframe following verification of your identity.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Many basic account details can be updated directly through your fr99 account settings.
• Right to Erasure: In certain circumstances, you may request that fr99 delete your personal data. This right is subject to legal retention obligations — for example, we are required to retain certain financial and KYC records for a minimum period and cannot delete them on request during that period.
• Right to Restriction of Processing: You may request that fr99 restrict the processing of your personal data in certain circumstances, for example while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where technically feasible and applicable, you may request that fr99 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests. fr99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the fr99 support team using the contact details in Section 14. We will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, and we will notify you of any such extension.

11 Children's Privacy

The fr99 platform is strictly intended for adults aged 18 years and above. fr99 does not knowingly collect personal data from individuals under the age of 18. All account registrations require the applicant to confirm that they meet the minimum age requirement, and fr99 verifies age as part of the standard KYC process.

If fr99 becomes aware that personal data has been collected from an individual under the age of 18, we will take immediate steps to close the associated account, delete the collected data, and return any deposited funds to the original payment source. Parents or guardians who believe a minor has registered an account on fr99 should contact support immediately at [email protected] (plain text — not a clickable link).

12 Third-Party Links

The fr99 platform may contain references to or links from third-party game providers and payment services. This Privacy Policy applies solely to data processed by fr99 on the fr99.vip platform. Third-party services — including payment providers such as bKash, Nagad, and Rocket, and game providers such as Evolution Gaming and Pragmatic Play — operate under their own independent privacy policies, which fr99 does not control.

Players are encouraged to review the privacy policies of any third-party services they interact with in connection with their fr99 account. fr99 accepts no responsibility or liability for the privacy practices of third-party providers.

13 Updates to This Privacy Policy

fr99 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable law, or the services we offer. The effective date at the top of this document will be updated whenever the Policy is revised.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — fr99 will provide advance notice to registered account holders via a prominent notice on the platform and, where an email address is held, by direct email notification. Non-material changes (such as minor clarifications or formatting corrections) may take effect immediately upon publication.

Continued use of the fr99 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the updated Policy, you should stop using the platform and may request account closure by contacting support.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by fr99, please contact us through any of the following channels:

• Live Chat: Available 24/7 on the fr99 platform — accessible following fr99 Login or from the homepage without logging in.
• Email: [email protected] (plain text — not a clickable link). Please include your registered username, the nature of your request, and your preferred contact method in your message.
• WhatsApp: +880 1XXX-XXXXXX (plain text — not a clickable link). Available during Bangladesh Standard Time (BST, UTC+6) business hours for non-urgent privacy enquiries.

For formal data rights requests (access, erasure, portability, rectification), please use the email channel and include "Data Rights Request" in the subject line. fr99 aims to acknowledge all privacy-related contact within two (2) business days and to resolve substantive requests within the thirty (30) day statutory timeframe.