fz66 Privacy Policy
for Bangladesh Players

1 Introduction

fz66 ("we", "us", "our") operates the online betting and casino platform accessible at fz66.io (the "Platform"). We are committed to protecting the personal information of every player who registers and uses our services. This Privacy Policy sets out, in detail, what personal data we collect from you, the purposes for which we process that data, the parties with whom we may share it, the security measures we apply to keep it safe, and the rights available to you as an individual data subject.

This Policy applies to all users of the fz66 Platform, including registered players accessing the service from Bangladesh. If you do not agree with the practices described in this Policy, you must not register an account or continue using the Platform.

This Privacy Policy should be read alongside the fz66 Terms & Conditions, which govern your use of the Platform more broadly. Terms defined in the Terms & Conditions carry the same meaning in this Policy unless otherwise stated.

2 Data Controller

For the purposes of data protection law, fz66 is the data controller in respect of personal data collected through the Platform. As data controller, fz66 determines the purposes for which, and the means by which, your personal data is processed. All data protection queries, access requests, and complaints should be directed to our dedicated support team at [email protected].

3 Data We Collect

fz66 collects personal data in several categories. The following table summarises what we collect and why each category is necessary:

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, National ID number, passport number	KYC verification, age verification (21+), account creation
Contact Data	Bangladesh mobile number, email address	Account communications, OTP delivery, support
Financial Data	bKash, Nagad, Rocket wallet numbers; transaction history; deposit and withdrawal amounts in BDT	Payment processing, AML compliance, fraud prevention
Technical Data	IP address, device type, browser type, operating system, session timestamps	Security monitoring, fraud detection, service optimisation
Usage Data	Games played, bets placed, betting history, session duration, navigation paths	Responsible gaming monitoring, product improvement, personalisation
Communications Data	Live chat transcripts, email correspondence, support tickets	Dispute resolution, quality assurance, training
Document Data	Scanned copies of National ID, passport, proof of address	KYC compliance, identity verification, age verification

We collect only the minimum data necessary to provide our services securely and in compliance with applicable obligations. We do not collect sensitive personal data such as biometric data, health records, or political opinions.

4 How We Collect Data

fz66 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a promotional offer.
• Automated collection: Technical and usage data collected automatically when you interact with the Platform, via server logs, session tracking tools, and browser storage technologies including cookies.
• Third-party sources: Identity verification data returned by KYC service providers following document checks; fraud risk scores provided by anti-fraud technology partners; payment confirmation data relayed by mobile banking operators (bKash, Nagad, Rocket, Upay).
• Public sources: In limited circumstances, publicly available information may be used to verify or supplement the data you have provided, for example to confirm the legitimacy of a payment account.

5 Legal Basis for Processing

fz66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and maintain your account, process your deposits and withdrawals, and deliver the betting and casino services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) laws, age verification requirements, and any other applicable legal or regulatory obligations.
• Legitimate interests: Processing carried out to detect and prevent fraud, protect the security of the Platform, improve our services, and manage our business — where these interests are not overridden by your own rights and interests.
• Consent: Processing for marketing communications (including promotional SMS, email newsletters, and bonus notifications) where we have obtained your explicit prior consent. You may withdraw this consent at any time.

6 How We Use Your Data

fz66 uses your personal data for the following purposes:

• Creating and managing your registered fz66 account.
• Verifying your identity and age (21+) through the KYC process.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, and money laundering activity.
• Monitoring betting and gaming activity to identify signs of problem gambling and to deliver responsible gaming interventions where appropriate.
• Providing customer support via live chat and email, including resolving disputes and processing complaints.
• Sending you transactional communications — account confirmations, deposit receipts, withdrawal notifications, security alerts, and KYC status updates.
• Sending you promotional communications about bonuses, offers, and platform updates — only where you have provided your consent to receive such communications.
• Analysing aggregate and anonymised usage data to improve Platform performance, game selection, and user experience.
• Meeting our legal and regulatory obligations, including data retention requirements and response to lawful requests from authorities.

7 Data Sharing

fz66 does not sell, rent, or trade your personal data to any unaffiliated third party. We may share your data with the following categories of trusted service partners, each of whom is bound by strict contractual data protection obligations:

• KYC and Identity Verification Providers: Specialist third-party services that process the identity documents you submit during account verification.
• Payment Processors: Mobile banking platforms (bKash, Nagad, Rocket, Upay) and payment gateway operators that facilitate your financial transactions. Only the data necessary to complete each transaction is shared.
• Game Content Providers: Casino game studios including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, and NetEnt receive limited technical session data (e.g., player session tokens) required to deliver their games securely within the fz66 lobby. Game providers do not receive your identity or financial data.
• Fraud Prevention and Security Services: Technology platforms that analyse technical and behavioural data to identify suspicious activity and protect the integrity of the Platform.
• Customer Support Platforms: Live chat and helpdesk software providers that facilitate our support operations. These providers process support communications on our behalf.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, or where necessary to protect the legal rights of fz66 or its players.

8 Payment Data

Financial data — including your bKash, Nagad, or Rocket mobile wallet number and transaction records — is treated with the highest level of sensitivity on the fz66 Platform. The following specific rules apply to payment data:

• Full mobile wallet numbers are never stored in plain text. They are masked and encrypted using AES-256 at the database level.
• Transaction history is retained for a minimum of five years after the relevant transaction date, in compliance with anti-money-laundering regulatory requirements.
• Payment data is shared only with the specific mobile banking operator required to process each individual transaction. No payment data is shared between operators.
• fz66 staff with access to payment records are subject to strict role-based access controls and regular access audits.
• In the event of a data breach affecting payment records, fz66 will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection law.

9 Cookies & Tracking Technologies

fz66 uses cookies and similar browser-based technologies to operate the Platform effectively and to understand how players use our services. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, anti-CSRF tokens, and load-balancing cookies. These cannot be disabled without preventing your use of the Platform.
• Functional Cookies: Store your preferences such as language setting, game lobby layout, and bet slip configuration to improve your experience across sessions.
• Analytics Cookies: Collect anonymised data on how players navigate the Platform — pages visited, time spent, errors encountered — to help us improve the service. No personally identifiable information is included in analytics data.
• Security Cookies: Used to detect suspicious login behaviour, identify potentially compromised sessions, and support our fraud prevention systems.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect Platform functionality. fz66 does not currently use advertising or cross-site tracking cookies.

10 Data Security

fz66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and fz66 servers is encrypted using TLS 1.2 or higher. The fz66.io domain is enforced over HTTPS at all times.
• Encryption at Rest: Sensitive data records — including identity documents, payment details, and KYC files — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data systems is restricted to authorised fz66 personnel on a strict need-to-know basis. Multi-factor authentication is required for all internal system access.
• Two-Factor Authentication for Players: fz66 automatically applies SMS-based two-factor authentication when a new device login is detected on your account. This is not optional and cannot be disabled.
• Security Monitoring: fz66 operates continuous monitoring of its systems for unusual activity, potential intrusions, and data access anomalies.
• Penetration Testing: fz66 commissions regular third-party security assessments and penetration tests of its Platform infrastructure.
• Staff Training: All fz66 personnel with access to personal data undergo mandatory data protection and security awareness training.

11 Data Retention

fz66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of your active account, plus a minimum of five years following account closure, to comply with anti-money-laundering requirements.
• Transaction and Payment Records: Retained for a minimum of five years from the date of each transaction.
• KYC Documents: Retained for the duration of the account relationship plus five years post-closure.
• Support Communications: Retained for three years from the date of each interaction, or longer if the communication relates to a dispute that remains unresolved.
• Technical and Usage Data: Typically retained for 13 months from collection, then anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your active marketing consent, plus three years following withdrawal of consent.

When personal data is no longer required, fz66 securely deletes or anonymises it so that it can no longer be associated with you as an individual.

12 Your Rights

As a data subject, you hold the following rights in respect of your personal data held by fz66. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

• Right of Access: You may request a copy of all personal data fz66 holds about you, along with information about how it is being used.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are legally required to retain (e.g., AML transaction records).
• Right to Restriction: You may request that we temporarily restrict processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (e.g., CSV) so that you can transfer it to another provider.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests grounds, though this right may be overridden where fz66 has compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

13 Marketing Communications

With your prior consent, fz66 may send you promotional communications about bonuses, special offers, new game launches, and seasonal promotions (such as Eid, Pohela Boishakh, and BPL cricket season campaigns) via SMS to your registered Bangladesh mobile number, or via email to your registered address.

You may opt out of marketing communications at any time by:

• Replying STOP to any promotional SMS from fz66.
• Clicking the unsubscribe link included in any promotional email.
• Contacting our support team at [email protected] and requesting removal from our marketing list.
• Updating your communication preferences from within your account dashboard.

Please allow up to 5 business days for opt-out requests to take effect across all communication channels. Even after opting out of marketing, you will continue to receive essential transactional communications such as deposit confirmations and security alerts — these cannot be disabled as they are necessary for your account security.

14 Children's Privacy

If you are a parent or guardian and believe that a person under 21 in your care has registered on fz66, please contact us immediately at [email protected]. We take underage access extremely seriously and will act on all such reports promptly.

15 Third-Party Links

The fz66 Platform may contain references to third-party game providers (Pragmatic Play, Evolution Gaming, etc.) and payment operators (bKash, Nagad, Rocket). While fz66 exercises care in selecting its service partners, we are not responsible for the privacy practices of third-party websites or platforms. Once you leave the fz66.io domain, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party service you interact with.

16 Policy Updates

fz66 may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or applicable legal requirements. When a material change is made, we will notify registered players via email to their registered address and by displaying a prominent notice on the Platform, no less than seven (7) days before the change takes effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

17 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by fz66, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Support Language: English
• Peak Response Hours: Bangladesh Standard Time (BST, UTC+6)
• Email Response Time: Within 24 hours
• Data Request Response Time: Within 30 days of receipt