Privacy Policy — How fy99 Collects, Uses, and Protects Your Data

Introduction

This Privacy Policy ("Policy") describes how fy99 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals who access or use the fy99.io website and associated services, including sports betting, live casino, slots, card games, account management, and payment processing (collectively, "the Services").

fy99 is an online betting and casino platform designed primarily for adult players located in Bangladesh. The platform is operated in the English language. By creating an account on fy99, making a deposit, or otherwise using the Services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. This Policy forms part of the fy99 Terms & Conditions and should be read in conjunction with those Terms.

We are committed to handling your personal data with integrity, transparency, and a high standard of security. We will never use your data in a way that has not been disclosed to you in this Policy, and we will never sell your personal data to third parties for commercial gain.

Data We Collect

fy99 collects personal data in two ways: data that you provide to us directly, and data that is collected automatically when you use the platform. The categories of data we collect are described below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided when creating an account.
• Identity verification documents: Copies of government-issued identity cards, passports, or other documents submitted during the KYC (Know Your Customer) process.
• Payment information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and payment card details (Visa, Mastercard) used for deposits and withdrawals. Note: full card numbers are not stored on fy99 servers.
• Support communications: Messages, queries, complaints, and attachments you send to the fy99 support team via live chat or email.
• Marketing preferences: Any preferences you indicate regarding receiving promotional communications from fy99.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
• Usage data: Pages visited on fy99.io, time spent on each page, navigation paths, search queries made within the platform, and feature interactions.
• Session data: Login timestamps, session duration, and logout times.
• Betting and gaming history: Records of all bets placed, games played, stakes wagered, winnings received, and bonuses claimed or used.
• Transaction history: Records of all deposits and withdrawals, including amounts, payment methods, timestamps, and transaction reference numbers.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 6 of this Policy.

How We Use Your Data

fy99 uses the personal data we collect for the following purposes. We will not use your data for any purpose not listed here without first obtaining your explicit consent or notifying you via an updated version of this Policy.

• Account creation and management: To register your account, verify your identity, maintain your account records, and enable you to log in and use the Services.
• Transaction processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), verify payment ownership, and maintain accurate financial records.
• Identity and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm that the identity you have provided is accurate and genuine, in accordance with our Know Your Customer obligations.
• Fraud prevention and security: To monitor account activity for suspicious or fraudulent behaviour, detect violations of our Terms & Conditions, investigate complaints, and protect the integrity of the platform and other players.
• Responsible gaming: To monitor wagering patterns and identify potential indicators of problem gambling behaviour, and to enforce self-exclusion or account restriction requests made by players.
• Customer support: To respond to queries, complaints, and requests submitted via live chat or email, and to maintain a record of your support interactions for quality assurance purposes.
• Platform improvement and analytics: To analyse how players use fy99.io, identify areas for improvement, test new features, and optimise platform performance.
• Marketing communications: Where you have given explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and seasonal offers. You may withdraw this consent at any time by contacting support.
• Legal and compliance obligations: To comply with applicable laws, regulations, and any lawful requests from regulatory or law enforcement authorities.

Legal Basis for Processing

fy99 processes your personal data on the following legal bases, depending on the specific purpose for which the data is being used:

• Contract performance: Processing necessary to fulfil our obligations under the Terms & Conditions agreement with you — including account creation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including identity verification and age checking obligations, anti-money laundering requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for fy99's legitimate business interests, where those interests are not overridden by your data protection rights — including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring.
• Consent: Processing based on your explicit, informed consent — specifically, sending you marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Third Parties

fy99 does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for each purpose.

5.1 Service Providers

fy99 engages carefully selected third-party service providers to assist in operating the platform. These providers may process personal data on our behalf in the following roles:

• Payment processors: Mobile banking operators (bKash, Nagad, Rocket, Upay) and card payment gateways (Visa, Mastercard) process transaction data to complete your deposits and withdrawals.
• Identity verification providers: Third-party KYC services that assist in verifying the identity documents you submit.
• Game providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi) receive session data necessary to deliver the games you play. These providers operate under their own privacy policies for data generated within their game environments.
• IT infrastructure and hosting providers: Cloud and server infrastructure providers that host fy99's platform and data storage systems.
• Customer support platforms: Live chat software providers that facilitate communications between you and the fy99 support team.

All service providers engaged by fy99 are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service to fy99.

5.2 Legal and Regulatory Disclosure

fy99 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, by a court order, or where fy99 reasonably believes that such disclosure is necessary to protect the safety, rights, or property of fy99, its players, or the general public.

5.3 Business Transfers

In the event that fy99 undergoes a merger, acquisition, asset sale, or other business transfer, personal data held by fy99 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the registered email address prior to their data being transferred, and will be given the opportunity to request deletion of their account if they do not wish their data to be transferred.

Cookies and Tracking Technologies

fy99.io uses cookies and similar browser-based tracking technologies to ensure the platform functions correctly, to maintain your session security, and to understand how players use the site. A cookie is a small text file placed on your device by the fy99 web server when you visit the site.

6.1 Categories of Cookies Used

6.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies will prevent you from logging into your fy99 account and using the Services. Instructions for managing cookies are available in your browser's help documentation. fy99 does not use cookies to track your activity on websites other than fy99.io.

Data Retention

fy99 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including satisfying legal, accounting, compliance, and dispute resolution obligations. The retention periods for the main categories of personal data are as follows:

• Account registration data: Retained for the lifetime of your active account, plus a period of 5 years after account closure, to satisfy anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a period of 5 years from the date of verification, or from the date of account closure, whichever is later.
• Transaction records: Retained for a period of 7 years from the date of each transaction, in accordance with financial record-keeping standards.
• Betting and gaming history: Retained for a period of 5 years from the date of each wager, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for a period of 3 years from the date of the last communication in each support thread.
• Marketing consent records: Retained until you withdraw consent, plus an additional 12 months as evidence of the consent record.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. fy99 conducts periodic reviews of its data holdings to ensure that retention periods are being observed.

Data Security

fy99 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the fy99 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using fy99.io.
• Encryption at rest: Sensitive personal data stored on fy99 servers, including identity documents and payment references, is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to systems containing personal data is restricted to authorised fy99 personnel who require that access to perform their job functions. All access is logged and audited.
• Two-factor authentication: fy99 staff accessing internal systems containing personal data are required to use multi-factor authentication.
• Regular security reviews: fy99 conducts periodic reviews of its security infrastructure and data handling practices to identify and address potential vulnerabilities.
• Incident response: fy99 maintains a data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, fy99 will notify affected players promptly via the registered email address.

Your Data Rights

As a player on the fy99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the fy99 support team via live chat or at [email protected]. We will respond to all data rights requests within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data fy99 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. If your personal details change (e.g., residential address or email address), please update them via your account settings or contact support.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right is subject to limitations where we are required to retain data to comply with legal obligations (e.g., anti-money laundering record-keeping) or to resolve outstanding disputes.
• Right to restrict processing: You have the right to request that fy99 temporarily restrict the processing of your personal data while a correction or objection request is being assessed.
• Right to data portability: You have the right to request a copy of the personal data you have provided to fy99 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on fy99's legitimate interests. You also have the absolute right to object to the use of your data for direct marketing purposes, at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Children and Minors

The fy99 platform is strictly restricted to individuals aged 21 years and above. fy99 does not knowingly collect personal data from persons under the age of 21. Registration is not permitted for persons under 21, and fy99 applies age verification procedures at account creation and before processing withdrawals to enforce this restriction.

If fy99 becomes aware that personal data has been collected from a person under the age of 21 — whether through misrepresentation at registration or any other means — the relevant account will be immediately suspended, all pending transactions will be frozen, and the personal data of the minor will be securely deleted as promptly as possible, subject to any legal obligations to retain records of the breach.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on fy99, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Third-Party Links and Game Providers

The fy99 platform integrates games and content supplied by third-party providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, JILI, and Spribe. When you access and play games supplied by these providers through the fy99 platform, certain data relating to your game session may be processed directly by those providers' systems in order to deliver the game to you.

These game providers operate under their own independent privacy policies and data handling practices. fy99 is not responsible for the data practices of third-party game providers, and we encourage you to review the privacy policies of relevant providers if you have concerns about how your data is handled within their game environments.

fy99 does not include links to external third-party websites within its platform content. Any links you may encounter within game interfaces that lead outside the fy99.io domain are the responsibility of the relevant game provider, not fy99.

Amendments to This Policy

fy99 reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be published at fy99.io/privacy-policy with a new effective date. Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — fy99 will notify registered players via the email address on record prior to the changes taking effect.

Your continued use of the fy99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not agree to the revised terms, you must cease using the platform and request account closure before the effective date of the changes.

We encourage all players to review this Policy periodically to remain informed about how fy99 protects and uses your personal data. The date at the top of this document always reflects the most recent review date.

Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fy99 handles your personal data, please contact our support team through one of the following channels:

• Live Chat: Available on fy99.io from 09:00 AM to 11:00 PM Bangladesh Standard Time (BST, UTC+6). Automated support is available 24 hours a day, 7 days a week.
• Email: [email protected] — please use the subject line "Privacy Request" so that your message is directed to the appropriate team promptly.

fy99 aims to acknowledge all privacy-related enquiries within 48 business hours and to provide a full response within 14 calendar days of receipt. For complex data rights requests, an extension of up to an additional 30 days may be required, in which case you will be notified of the reason for the delay.