Privacy Policy – How fa998 Protects Your Data

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information by fa998 ("we", "us", "our", "the Platform") in connection with the services available at fa998.app. By creating an account, making a deposit, or otherwise using any service on fa998.app, you ("the User", "the Player", "you") acknowledge that you have read and understood this Policy and consent to the data practices described herein.

fa998 is committed to handling all personal data with care, transparency, and respect. We collect only what is necessary to deliver a safe, secure, and enjoyable platform experience for players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond. We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

1 Data We Collect

fa998 collects personal data through several channels: information you provide directly, information generated automatically by your use of the Platform, and in limited cases, information obtained from trusted third-party verification services. The categories of data we collect are described below.

1.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, Bangladeshi mobile number, and email address (where applicable) submitted when opening a fa998 account.
• Identity verification documents: National Identity Card (NID), passport, or driver's licence images submitted during KYC verification.
• Payment information: bKash wallet number, Nagad number, Rocket number, Upay number, or bank account details provided when making deposits or requesting withdrawals. fa998 does not store full card numbers or full banking credentials — only the information necessary to process the transaction.
• Support communications: Messages, screenshots, and any other content shared with the fa998 support team via live chat, WhatsApp, or email.
• Responsible gaming preferences: Deposit limits, session time limits, cool-off periods, and self-exclusion elections made through the account dashboard.

1.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage and session data: Pages visited, game sessions initiated, bets placed, time spent on each page, clickstream data, and login timestamps.
• Geolocation data: Approximate geographic location derived from your IP address, used to verify eligibility and comply with any applicable geographic restrictions.
• Cookie and tracking data: Information stored via cookies, web beacons, and similar technologies as described in Section 4 of this Policy.

1.3 Data from Third Parties

fa998 may receive limited personal data from third-party identity verification providers engaged to assist with KYC checks, and from payment processors who confirm transaction status. In all such cases, fa998 requires these providers to handle data in a manner consistent with this Policy and applicable data protection standards.

2 How We Use Your Data

fa998 processes personal data only for lawful, specific, and clearly defined purposes. We do not process your data in ways that are incompatible with the original purpose for which it was collected. The principal purposes for which fa998 uses your personal data are as follows:

• Account creation and management: To register your account, authenticate your identity, and maintain your player profile on fa998.app.
• Service delivery: To enable you to access games, place bets, participate in promotions, and use all features of the Platform.
• Payment processing: To process deposits from and withdrawals to your bKash, Nagad, Rocket, Upay, or bank account, and to maintain accurate financial records.
• Identity verification and fraud prevention: To complete KYC checks, verify the authenticity of submitted documents, and detect fraudulent or suspicious account activity.
• Responsible gaming obligations: To monitor play patterns for signs of problem gambling, enforce self-imposed limits, and action voluntary self-exclusion requests.
• Customer support: To respond to your queries, resolve disputes, and improve the quality and efficiency of the fa998 support team's responses.
• Legal and regulatory compliance: To fulfil anti-money laundering (AML) obligations, maintain transaction records as required by applicable financial regulations, and respond to lawful requests from competent authorities.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and guide decisions about new features and game offerings.
• Marketing communications: To send you promotional offers, bonus alerts, and platform updates via your registered mobile number or email — subject to your communication preferences. You may opt out at any time through your account settings or by contacting support.

3 Data Sharing & Disclosure

fa998 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

3.1 Service Providers and Data Processors

fa998 engages a limited number of trusted third-party service providers who process personal data on our behalf, under written data processing agreements that obligate them to maintain appropriate security standards. These providers include:

• Identity verification and KYC technology partners
• Payment gateway operators and mobile financial service partners (bKash, Nagad, Rocket, Upay)
• Cloud infrastructure and hosting providers operating data centres that meet international security standards
• Fraud detection and risk analytics platforms
• Customer support software providers (live chat infrastructure)

All such providers are contractually prohibited from using your data for any purpose other than the specific service they provide to fa998.

3.2 Game Software Providers

Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive limited technical data (such as a pseudonymous player identifier and session token) solely for the purpose of delivering the game experience. They do not receive your name, mobile number, or payment details.

3.3 Legal and Regulatory Disclosure

fa998 may disclose personal data to competent governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful instruction. In such cases, fa998 will disclose only the minimum data required and, where legally permissible, will notify the affected user of the disclosure.

3.4 Business Transfers

In the event that fa998 undergoes a merger, acquisition, or sale of all or a material portion of its assets, personal data held by fa998 may be transferred to the acquiring entity as part of the transaction. Any such transfer will be subject to equivalent data protection obligations, and affected users will be notified prior to their data being subject to a materially different privacy policy.

4 Cookies & Tracking

fa998.app uses cookies and similar tracking technologies to deliver a functional, secure, and personalised browsing experience. A cookie is a small text file stored on your device when you visit a website. fa998 uses the following categories of cookies:

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, fraud detection, session continuity between pages, and shopping cart functionality for the cashier. The Platform cannot operate properly without these cookies, and they cannot be disabled.

4.2 Performance and Analytics Cookies

These cookies collect anonymised or pseudonymised data about how visitors use fa998.app — which pages are visited most frequently, how long users spend on each page, and where users navigate after landing on the homepage. This information is used exclusively to improve the Platform's performance, layout, and user experience. Individual users cannot be identified from these analytics.

4.3 Functional Cookies

Functional cookies remember your preferences and settings, such as your preferred language (English), display settings, and previously entered account information (such as your username in the login screen). These cookies improve the convenience of using fa998.app without compromising security.

4.4 Managing Cookies

You can manage or disable non-essential cookies through the settings menu of your browser. Please note that disabling certain cookies may impair the functionality of fa998.app, including the ability to stay logged in during a session. Instructions for managing cookies in common mobile browsers used in Bangladesh (Chrome for Android, Samsung Internet, Opera Mini) are available in each browser's official help documentation.

5 Data Retention

fa998 retains personal data for only as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of the account's active lifecycle and for a minimum of five (5) years following permanent account closure, to support financial record-keeping and AML compliance obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law.
• Support communications: Retained for two (2) years from the date of the most recent interaction, to support dispute resolution and service quality review.
• Session and usage logs: Retained for up to twelve (12) months in identifiable form, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of the account and for one (1) year following account closure, to evidence the basis on which communications were sent.

When personal data is no longer required, fa998 securely deletes or irreversibly anonymises it. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for platform analytics purposes.

6 Your Privacy Rights

fa998 recognises that every player has rights in relation to their personal data. While the specific legal framework governing data protection in Bangladesh continues to develop, fa998 voluntarily applies the following player rights in line with internationally recognised data protection principles:

• Right of access: You have the right to request a copy of the personal data fa998 holds about you. Requests will be acknowledged within five (5) business days and fulfilled within thirty (30) calendar days.
• Right to rectification: If you believe that any personal data held by fa998 is inaccurate or incomplete, you may request that it be corrected. Minor corrections (such as updating a mobile number) can often be made directly through the account settings page.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to fa998's legal obligations to retain certain data (such as transaction records and KYC documents) for the periods described in Section 5.
• Right to restrict processing: You may request that fa998 restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested or where processing is unlawful but you prefer restriction to deletion.
• Right to data portability: Where technically feasible, you may request a machine-readable copy of the personal data you have provided to fa998, for the purpose of transferring it to another service provider.
• Right to object: You may object to the processing of your personal data where fa998 relies on legitimate interests as the legal basis for processing, including profiling for responsible gaming monitoring purposes.
• Right to withdraw marketing consent: You may withdraw consent to receive promotional communications at any time by updating your communication preferences in the account settings dashboard or by contacting the support team.

To exercise any of the above rights, please contact the fa998 data support team at support at fa998.app. Please include your registered mobile number and a description of your request. fa998 will not charge a fee for reasonable data subject requests.

7 Data Security Measures

fa998 applies a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your device and fa998.app is protected by 256-bit SSL/TLS encryption — the same standard used by major Bangladeshi financial institutions for internet banking.
• Encryption at rest: Sensitive personal data, including identity document images and payment reference data, is encrypted at rest in fa998's cloud infrastructure using industry-standard encryption algorithms.
• Access controls: Access to personal data within fa998's internal systems is governed by role-based access controls. Staff members access only the data necessary to perform their specific function, and all access is logged and auditable.
• Two-factor authentication: fa998's internal administration systems require multi-factor authentication for all personnel who handle personal data.
• Vulnerability management: fa998 conducts regular security assessments of its platform infrastructure. Critical vulnerabilities are remediated in accordance with a prioritised patching schedule.
• Data breach response: fa998 maintains an incident response plan for potential data security incidents. In the event of a breach that is likely to result in a risk to your rights and freedoms, fa998 will notify affected users without undue delay, describing the nature of the breach, the data involved, and the steps taken to address it.

8 Policy Updates & Contact

8.1 Changes to This Policy

fa998 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered users via their registered mobile number or email address and update the "Last updated" date at the top of this page. Where changes are significant, we may seek renewed consent from affected users before implementing the new practices.

We encourage all players to review this Policy periodically to stay informed about how fa998 handles personal data. Continued use of fa998.app following the publication of a revised Policy constitutes acceptance of the updated terms, subject to any additional consent requirements.

8.2 Contact for Privacy Matters

If you have any questions, concerns, or complaints regarding this Privacy Policy or fa998's data handling practices, you may contact the fa998 privacy support team through any of the following channels:

• Email: support at fa998.app (plain text — not a clickable link)
• WhatsApp: +880 1700 000 000 (plain text — not a clickable link)
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

fa998 aims to respond to all privacy-related enquiries within five (5) business days. Formal data subject access requests will be acknowledged within five (5) business days and fulfilled within thirty (30) calendar days of identity verification.