fr999 Privacy Policy — How We Handle Your Personal Data

fr999 is Bangladesh's premier online casino and sports betting platform, providing cricket betting, live casino games, slots, and speciality titles to players aged 21 and above across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

As a platform that handles real-money transactions and processes sensitive personal data, fr999 takes its data protection obligations seriously. This Policy sets out a transparent, comprehensive account of our data practices so that every player can make an informed decision about sharing their personal information with us.

This Policy applies to all personal data collected through the fr999 website at https://fr999.io, the fr999 mobile web experience, all customer support communications, and all related services provided under the fr999 brand. It does not apply to third-party websites, payment processors, or game studios whose own privacy policies govern their respective data practices.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the fr999 website. Together these documents form the complete framework governing your relationship with fr999.

fr999 collects personal data from you in the following categories, depending on how you interact with our platform:

fr999 does not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, political opinions, or biometric data) unless expressly required for identity verification purposes, in which case such data is handled with additional safeguards.

fr999 uses the personal data we collect for the following clearly defined purposes:

• Account Management: To create, maintain, and administer your fr999 account, including verifying your identity at registration and during ongoing KYC checks;
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard, and to execute withdrawal requests to your registered payment method;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other forms of prohibited conduct as described in our Terms & Conditions;
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to administer self-exclusion, cooling-off periods, deposit limits, and session time reminders requested by you or triggered by our responsible gaming monitoring systems;
• Customer Support: To respond to your enquiries, complaints, and support requests submitted via live chat or email;
• Legal & Regulatory Compliance: To comply with applicable laws, including age verification, anti-money laundering obligations, and requests from authorised regulatory or law enforcement bodies;
• Platform Improvement: To analyse aggregate usage data and improve the performance, security, and usability of the fr999 platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and event-based campaigns (such as BPL cricket season promotions or Eid special offers) where you have opted in to receive such communications. You may withdraw your consent at any time.

fr999 does not use your personal data for any automated individual decision-making or profiling that produces legal or similarly significant effects, except for automated fraud detection alerts that are always reviewed by a human compliance officer before any account action is taken.

fr999 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and fr999 — specifically, to operate your account, process payments, and deliver gaming services;
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including age verification, anti-money laundering checks, and regulatory reporting obligations;
• Legitimate Interests: Processing is necessary for fr999's legitimate business interests, including fraud prevention, platform security, and improving our services, provided these interests do not override your fundamental rights and freedoms;
• Consent: For optional processing activities — principally the sending of marketing and promotional communications — fr999 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting [email protected] or adjusting your account notification settings.

fr999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the following limited and controlled circumstances:

• Payment Processors: When you make a deposit or withdrawal, your financial transaction data is shared with the relevant payment service provider (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) solely for the purpose of completing that transaction;
• KYC & Identity Verification Providers: To verify your identity and age, fr999 may share identity documents with third-party KYC service providers operating under strict data processing agreements;
• Game Studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data (such as a pseudonymised player ID and game round data) necessary to deliver and audit their games on the fr999 platform;
• Fraud Prevention Services: fr999 may share data with specialist fraud and anti-money laundering detection services where we have grounds to suspect prohibited conduct;
• Legal & Regulatory Authorities: fr999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by law or by a valid legal order;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of fr999's business, personal data held by fr999 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

All third-party service providers who process personal data on fr999's behalf are required to handle that data in accordance with this Policy and applicable data protection law, and are prohibited from using it for any purpose other than the specific service they provide to fr999.

fr999 uses cookies — small text files placed on your device — and similar tracking technologies (such as pixel tags and local storage) to operate and improve the fr999 platform. The following categories of cookies are used on fr999:

• Strictly Necessary Cookies: Essential for the operation of the fr999 platform. These enable core functions such as session authentication, security token validation, and fraud detection. These cookies cannot be disabled without breaking core site functionality;
• Performance Cookies: Collect anonymised aggregate data about how players use the fr999 platform — for example, which game categories are visited most frequently. This data is used solely to improve platform performance and user experience;
• Functional Cookies: Remember your account preferences, such as language settings and game view preferences, to provide a more personalised experience across sessions;
• Session Integrity Cookies: Used by fr999's security infrastructure to detect and prevent session hijacking, cross-site request forgery, and similar security threats.

You may manage or disable non-essential cookies through your browser settings at any time. However, disabling strictly necessary cookies may impair your ability to log in, make payments, or use core platform features. For full details on the specific cookies fr999 uses, their duration, and how to manage them, please contact [email protected].

The core security measures fr999 employs include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the fr999 platform is encrypted using industry-standard TLS protocols, ensuring your login credentials, payment details, and personal data cannot be intercepted in transit;
• Access-Controlled Infrastructure: Access to databases and systems containing personal data is restricted on a strict need-to-know basis. Access credentials are individually assigned, logged, and regularly reviewed;
• Regular Security Audits: fr999 conducts periodic internal and third-party security reviews, including vulnerability assessments, to identify and remediate potential weaknesses in our infrastructure before they can be exploited;
• Breach Response Protocol: In the event of a confirmed or suspected data breach, fr999 has a documented incident response plan. Affected players will be notified promptly in the event that a breach poses a material risk to their rights and interests;
• Staff Training: All fr999 personnel with access to personal data receive regular data protection and security awareness training.

While fr999 takes all reasonable and practicable steps to protect your personal data, no method of electronic data transmission or storage is entirely immune to risk. You are responsible for keeping your own account credentials confidential and for notifying fr999 immediately if you suspect any unauthorised access to your account.

fr999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, accounting, or regulatory reporting requirements. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active account relationship with fr999, and updated as necessary to keep records accurate;
• Post-Closure Account Data: Following the closure of your fr999 account, core account and transaction records are retained for a minimum of five (5) years to comply with anti-money laundering and financial record-keeping obligations;
• KYC Documentation: Identity verification documents (e.g., copies of National ID cards or passports) are retained for five (5) years from the date of submission, in line with standard financial services compliance requirements;
• Support Communications: Customer support chat logs and email correspondence are retained for three (3) years from the date of the interaction;
• Marketing Consent Records: Records of your marketing opt-in or opt-out preferences are retained for as long as your account is active, and for two (2) years following account closure.

When personal data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymised in accordance with fr999's data disposal procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and business improvement purposes.

fr999 respects your rights over your personal data. You may exercise the following rights at any time by contacting our support team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data fr999 holds about you, together with information about how and why it is processed;
• Right to Rectification: If any personal data fr999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay;
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right applies where the data is no longer necessary for its original purpose, where you withdraw consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. This right does not apply where fr999 is required to retain data to comply with a legal obligation;
• Right to Restriction: You may request that fr999 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed;
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to fr999 in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to the processing of your personal data on grounds relating to your particular situation, where that processing is based on fr999's legitimate interests;
• Right to Withdraw Consent: Where fr999 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

fr999 will respond to all data rights requests within thirty (30) days of receipt. In complex cases this period may be extended by up to a further sixty (60) days, in which case fr999 will notify you of the extension and the reason for it within the initial 30-day window. fr999 will not charge a fee for handling data rights requests unless the request is manifestly unfounded, repetitive, or excessive.

fr999 employs age verification procedures at account registration and reserves the right to request documentary proof of age at any time. If fr999 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all balances will be returned in accordance with our Terms & Conditions, and the associated data will be securely deleted.

Parents and guardians are strongly encouraged to implement parental control and internet filtering software on devices used by minors to prevent underage access to online gambling platforms. If you believe a minor may have accessed fr999, please contact us immediately at [email protected].

The fr999 platform may contain references to, or integrations with, third-party services including game studios, payment processors, and technology infrastructure providers. This Privacy Policy applies exclusively to personal data collected and processed by fr999 directly.

Third-party services accessed through or in connection with the fr999 platform — such as bKash, Nagad, Rocket, Pragmatic Play, and Evolution Gaming — operate under their own privacy policies and data practices, which are independent of fr999. fr999 is not responsible for the privacy practices of these third parties and encourages all players to review the relevant third-party privacy policies before providing personal data to those services.

Where fr999 integrates with third-party game content providers, those providers receive only the minimum data necessary to deliver and certify their games (typically a pseudonymised session token and bet/win data), and are contractually prohibited from using that data for any other purpose.

Where you have provided your consent, fr999 may send you marketing and promotional communications by email or SMS. These communications may include information about: welcome bonus offers, reload promotions, free spin awards, cashback programmes, cricket season betting promotions (including BPL, IPL, and T20 World Cup campaigns), seasonal festival promotions tied to Eid, Pohela Boishakh, Bangladesh Victory Day, and other relevant calendar events.

fr999 does not use your personal data to build individual advertising profiles or to serve targeted ads through third-party advertising networks. All promotional communications are sent directly by fr999 to opted-in players only.

fr999 operates a platform that serves players primarily located in Bangladesh. However, some of the third-party service providers and technology infrastructure partners we work with may process personal data on servers located outside of Bangladesh. In such cases, fr999 takes appropriate steps to ensure that any international transfer of personal data is subject to adequate safeguards.

Where personal data is transferred to a third-party service provider located in another country, fr999 ensures that such transfers are governed by legally binding data processing agreements that require the recipient to protect personal data to a standard at least equivalent to that described in this Policy. fr999 does not transfer personal data internationally beyond what is strictly necessary to operate the services described herein.

If you have questions about the specific countries to which your personal data may be transferred, or the safeguards in place for such transfers, please contact us at [email protected].

fr999 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, updates to applicable law, or improvements to our services. When material changes are made to this Policy, fr999 will notify registered players by email to the address on file and/or by posting a prominent notice on the fr999 website at least fourteen (14) days before the revised Policy takes effect.

The "Last updated" date at the top of this Policy will be revised whenever changes are made. Your continued use of the fr999 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must discontinue use of the fr999 platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or fr999's data practices, please contact our Privacy and Data Protection team using the details below. All enquiries are handled in English and responses will be provided within thirty (30) days.

fr999 is committed to resolving all privacy-related concerns promptly and transparently. We treat every data rights request with the same diligence and respect that we bring to all aspects of our platform — because your trust is the foundation of everything we do at fr999.