fx99 Privacy Policy — Your Data, Your Rights

When you register an account or interact with fx99 support, we collect:

• Full legal name as provided during registration.
• Bangladesh mobile phone number used to create the account and receive OTP verification codes.
• Date of birth, collected to verify that you meet the 21+ age eligibility requirement.
• Identity documents (national ID, passport) submitted during KYC verification, stored securely and used exclusively for age and identity verification purposes.

When you use the fx99 platform, the following data is automatically recorded:

• IP address and approximate geographic location derived from it, used to enforce geo-restrictions and detect suspicious login patterns.
• Device type, operating system, and browser version, used to optimise the platform's display and investigate technical issues.
• Session data including login timestamps, pages visited, games played, bets placed, and session duration, used for platform security monitoring and responsible gaming analysis.
• Cookie and similar tracking technology data, as described in the Cookies section of this Policy.

When you make a deposit or withdrawal via bKash, Nagad, Rocket or Upay, the following transaction-related data is recorded by fx99:

• The mobile wallet number used for the transaction (partial masking applied in stored records).
• Transaction amount in Bangladeshi Taka (BDT), timestamp, and unique transaction reference number.
• Transaction status (successful, pending, failed) and any error codes returned by the payment provider, used for dispute resolution and fraud prevention.

Processing is necessary to perform the contract between you and fx99 — namely, to operate your player account, process your deposits and withdrawals, settle your bets, and provide customer support services. Without this processing, fx99 cannot deliver the core services you signed up for.

fx99 is required to collect and retain certain data by applicable law and regulatory obligations. This includes identity verification data (KYC) for age compliance, transaction records for financial reporting and anti-money laundering purposes, and player activity records required by responsible gaming obligations.

fx99 processes certain data on the basis of legitimate interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security monitoring, responsible gaming analysis to protect vulnerable players, and statistical analysis to improve platform performance. fx99 conducts a balancing test before relying on this basis and does not use it to override your fundamental privacy rights.

• Payment service providers (bKash, Nagad, Rocket, Upay) — receive only the minimum transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are not permitted to use your data for any purpose other than processing the specific transaction.
• Game content providers (Pragmatic Play, Evolution Gaming, and others) — receive anonymised session identifiers and game outcome data only, which are necessary to verify game results and resolve any disputes. They do not receive your name, mobile number, or payment details.
• Regulatory and law enforcement authorities — fx99 will disclose personal data to the relevant authorities when required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosure where legally permitted to do so.
• Fraud prevention and security partners — where fx99 employs third-party tools to detect suspicious account activity or verify the authenticity of identity documents, the minimum necessary data may be shared with those tools' operators under strict data processing agreements.

• Strictly necessary cookies — required for the platform to function. These include your session authentication token, currency preference, and language setting. You cannot opt out of these cookies while using the platform, as they are essential to delivering the service.
• Functional cookies — remember your account preferences such as your default game category, notification settings, and responsible gaming limit configurations so you do not need to reconfigure them on every visit.
• Analytics cookies — collect anonymised, aggregated data about how players navigate and use the platform. This data is used internally to improve page performance and user experience. Individual player behaviour is not tracked at a personally identifiable level through analytics cookies.
• Security cookies — help identify and prevent fraudulent login attempts, detect unusual session behaviour, and protect your account from unauthorised access. These are non-optional and directly protect your account security.

Active account data (name, mobile number, date of birth, KYC documents) is retained for the duration of your account's active life plus 5 years after account closure, to comply with financial record-keeping obligations. Transaction records (deposit/withdrawal history, bet records) are retained for 7 years from the date of each transaction in accordance with financial reporting requirements. Session logs and security event data are retained for 12 months, after which they are anonymised for aggregate analytics purposes. Marketing consent records are retained for the duration of your account life plus 3 years, so that fx99 can demonstrate compliance with consent obligations if required. Identity documents submitted for KYC are securely deleted within 30 days of a successful verification outcome, with only the verification result (pass/fail and date) retained in your account record.

• SSL/TLS encryption on all data transmitted between your device and the fx99 servers. All connections to fx99.vip are served over HTTPS; unencrypted HTTP requests are automatically redirected.
• Password hashing — account passwords are stored as one-way cryptographic hashes using a modern algorithm. fx99 employees cannot read your password in plain text and will never ask you for it.
• OTP-based authentication — all logins require verification via a one-time password sent to your registered Bangladesh mobile number, providing a second layer of account access security.
• Access controls — access to player personal data within fx99's internal systems is restricted on a strict need-to-know basis. Support agents can access only the data fields required to resolve your specific query; they cannot access payment credentials or full identity document images.

• Right of access — request a copy of all personal data fx99 holds about you. We will provide a structured summary of your account data, transaction history, and any KYC records within 30 days of a verified request.
• Right of rectification — request correction of any inaccurate personal data we hold about you. If your name, date of birth, or contact details were recorded incorrectly, we will correct them following identity re-verification.
• Right of erasure — request deletion of your account and associated personal data. We will comply subject to our legal obligation to retain certain records (e.g., transaction history for financial reporting). Any data we are legally required to retain will be held securely and isolated from active account processing.
• Right to restrict processing — request that we restrict our use of your data to storage only, pending resolution of a dispute about its accuracy or the lawfulness of our processing activities.
• Right to withdraw consent — where we process your data on the basis of consent (e.g., sending promotional communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, your mobile wallet PIN and full account credentials are entered directly into the payment provider's own interface — they are never transmitted to or stored by fx99. fx99 receives only the transaction confirmation reference (a tokenised identifier) and the transaction amount from the payment provider. Wallet numbers stored in fx99 records are partially masked (e.g., 017XXXXX89) and are used solely to verify that withdrawal requests are directed to the same wallet used for deposit, in accordance with our anti-money laundering obligations.