fa66 Privacy Policy

fa66 operates fa66.io as an online entertainment and betting platform serving adult players in Bangladesh. The Platform offers a broad range of products including cricket betting, live casino games, slots, fishing games, and specialty titles provided in partnership with leading third-party game studios.

For the purposes of this Privacy Policy, fa66 acts as the data controller in respect of the personal information collected from players and visitors to the Platform. As data controller, fa66 determines the purposes and means by which your personal data is processed.

Where fa66 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and game studio partners — those parties act as data processors under instruction from fa66 and are bound by appropriate data processing agreements.

If you have any questions about how fa66 handles your personal data, or wish to exercise any of your data rights, you may contact our support team at [email protected] or via the 24/7 live chat available on the Platform.

fa66 collects the following categories of personal data in connection with your use of the Platform:

• Identity Data: Your full legal name, date of birth, gender, and government-issued identification number (such as your National Identity Card number or passport number). This data is collected during account registration and identity verification.
• Contact Data: Your email address, Bangladeshi mobile phone number, and city or region of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi). This data is used to communicate with you about your account and transactions.
• Financial Data: Mobile banking wallet identifiers (such as your bKash, Nagad, or Rocket account number), masked payment card details (last four digits, expiry date) for Visa and Mastercard transactions, deposit and withdrawal amounts, and transaction timestamps. fa66 does not store full payment card numbers on its own systems.
• Technical Data: Your IP address, device type, operating system, browser type and version, screen resolution, session start and end times, and referral source. This data is collected automatically when you access the Platform.
• Usage Data: Records of games you have played, bets you have placed (including stake, odds, outcome, and timestamps), pages you have visited, features you have used, and bonus offers you have claimed or declined.
• Responsible Gaming Data: Any deposit limits, session reminders, cool-off periods, or self-exclusion requests that you have submitted through your account settings. This data is processed to protect your welfare and to comply with our responsible gaming obligations.
• Communications Data: The content of any live chat conversations, support emails, complaint submissions, and survey responses you have submitted to fa66.
• Verification Documents: Copies of identity documents (NID, passport, driving licence) and payment method ownership confirmations that you submit during the KYC (Know Your Customer) verification process.

fa66 does not intentionally collect any special categories of sensitive personal data (such as biometric data, health information, religious beliefs, or political opinions) from players. If any such information is inadvertently provided — for example, within a support message — it will not be processed for any purpose beyond resolving the specific query.

fa66 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotional offer.
• Automated Technologies: Data collected automatically as you use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 10 (Cookies & Tracking) for full details.
• Third-Party Sources: Data received from identity verification providers, payment processors, fraud prevention services, and (where applicable) publicly available registers used for AML screening. fa66 uses this data only to verify your identity, process payments, and detect fraud.
• Inferred Data: Data inferred from your usage patterns, such as game preferences, betting behaviour, and platform engagement frequency. This data is used internally for responsible gaming monitoring and platform improvement — it is not shared with third parties for profiling or advertising.

When you contact fa66 support via live chat, the conversation is recorded and stored for quality assurance, dispute resolution, and compliance purposes. You will be notified of this at the start of the chat session.

fa66 processes your personal data for the following defined purposes:

• Account Management: To create, maintain, and administer your fa66 player account, including processing your registration, verifying your identity, and enabling access to Platform features.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all account activity.
• Legal and Regulatory Compliance: To fulfil our anti-money laundering (AML) obligations, including verifying the source of funds for large or unusual transactions, and to comply with any applicable legal requirements.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bot use, and other prohibited conduct that may threaten the integrity of the Platform or the security of other players.
• Responsible Gaming: To monitor your gaming activity for indicators of potential problem gambling, to apply and enforce any limits or restrictions you have set, and to fulfil our duty of care obligations to players.
• Customer Support: To respond to your queries, resolve complaints, and provide technical assistance in relation to your account or the Platform.
• Platform Improvement: To analyse aggregate usage data and identify areas for improvement in Platform design, game selection, performance, and user experience. This analysis is conducted on aggregated or anonymised data wherever possible.
• Service Communications: To send you essential account-related notifications such as deposit confirmations, withdrawal updates, security alerts, and changes to our terms or policies. These communications are not optional as they are necessary to the service contract.
• Promotional Communications: Where you have opted in, to send you information about fa66 bonuses, promotions, tournaments, and offers tailored to the Bangladesh market. You may opt out of promotional communications at any time by contacting support.

fa66 will not use your personal data for any purpose that is materially different from those listed above without first obtaining your explicit consent or providing adequate notice in an updated version of this Policy.

For each category of data processing described in this Policy, fa66 relies on one or more of the following legal bases:

• Contract: Processing is necessary to perform the contract between you and fa66 — including registering your account, processing transactions, and delivering the services you have requested.
• Legal Obligation: Processing is required to comply with applicable law — including AML legislation, identity verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing is in the legitimate interests of fa66 or a third party, and those interests are not overridden by your fundamental rights. This basis covers fraud prevention, platform security, responsible gaming monitoring, and service improvement activities.
• Consent: For certain optional processing activities — such as the use of non-essential cookies or the sending of promotional communications — fa66 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

fa66 does not make fully automated decisions that produce significant legal effects on you without human oversight. Automated risk scoring (for example, in fraud detection) is reviewed by qualified fa66 staff before any consequential action is taken against an account.

fa66 does not sell, rent, or exchange your personal data with third parties for their own commercial or marketing purposes under any circumstances. Personal data is shared only in the following limited and controlled contexts:

• Payment Processors: Your financial data is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquirers) solely to process your requested deposit or withdrawal transaction.
• Identity Verification Providers: Where third-party KYC services are used to verify your identity documents or screen your name against AML watchlists, your identity data is shared with those providers under strict data processing agreements.
• Game Studio Partners: Technical session data (such as a pseudonymous player ID and session token) is shared with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi solely to enable delivery of the games you play. These providers do not receive your full identity or financial data.
• Fraud Prevention Services: Technical and behavioural data may be shared with third-party fraud detection services to identify and prevent prohibited conduct on the Platform.
• Legal and Regulatory Authorities: fa66 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation of match-fixing, money laundering, or other serious criminal conduct.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of fa66's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy practices of the new entity before the transfer takes effect.

All third-party service providers who receive personal data from fa66 are required to implement appropriate technical and organisational security measures and are contractually prohibited from using that data for any purpose other than providing the service for which they have been engaged.

The fa66 Platform is operated for and primarily used by players based in Bangladesh. Some of our third-party service partners — including game studio providers and technical infrastructure vendors — may be based in or operate servers in countries outside Bangladesh.

Where personal data is transferred to, processed in, or stored in a country other than Bangladesh, fa66 takes reasonable steps to ensure that such transfers are subject to appropriate safeguards. These may include contractual clauses between fa66 and the relevant third party that require the third party to protect the data to at least the same standard as described in this Policy.

By using the fa66 Platform and providing your personal data, you acknowledge that your data may be transferred to and processed in countries where data protection laws may differ from those applicable in Bangladesh. fa66 will, however, always ensure that appropriate protections are in place for any such international transfer.

fa66 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with fa66, plus a minimum period of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with financial record-keeping obligations.
• Communications and Support Records: Retained for three (3) years from the date of the last interaction, or longer where a complaint or dispute remains unresolved.
• Technical and Usage Data: Aggregated or anonymised usage statistics are retained indefinitely for analytical purposes. Identifiable technical data (such as IP address logs) is retained for up to twelve (12) months and then deleted or anonymised.
• Cookie and Tracking Data: Session cookies are deleted at the end of your browser session. Persistent preference cookies expire after a maximum of twelve (12) months from the date they are set.
• Responsible Gaming Data: Self-exclusion records are retained for a minimum of five (5) years following the expiry of the exclusion period to prevent circumvention.

When personal data is no longer required and no legal retention obligation applies, fa66 will securely delete or irreversibly anonymise that data. Where technical constraints prevent immediate deletion (for example, data held in backup systems), the data will be isolated and protected until deletion is possible.

fa66 uses cookies and similar technologies (such as web beacons and local storage) on the Platform. This section explains what cookies we use, why we use them, and how you can manage your preferences.

What is a cookie? A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits and can store certain preferences or session information.

fa66 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain your account security, and enable core features such as game loading and transaction processing. These cookies cannot be disabled without impairing Platform functionality.
• Preference Cookies: These cookies remember settings you have chosen — such as your preferred language, display settings, and responsible gaming reminder intervals — so you do not have to reconfigure them on each visit. They expire after twelve (12) months.
• Analytics Cookies: These cookies help fa66 understand how players use the Platform in aggregate — for example, which pages are visited most frequently, where users navigate from, and how long sessions last. This data is anonymised and used solely for internal service improvement. fa66 does not share analytics data with advertising networks.
• Security Cookies: These cookies assist in detecting and preventing fraudulent activity, including session hijacking and bot-driven interactions, by verifying that activity on the Platform originates from legitimate human users.

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using key Platform features including logging in and placing bets. For detailed guidance on cookie management, refer to your browser's help documentation.

fa66 does not use third-party advertising cookies or participate in cross-site tracking advertising networks. Our use of tracking technologies is limited to the purposes described above.

fa66 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the fa66 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. You can verify this by checking for the padlock icon in your browser's address bar.
• Password Security: Player account passwords are stored using one-way cryptographic hashing algorithms. fa66 staff cannot view your password in plain text. You are encouraged to use a strong, unique password for your fa66 account and to change it periodically.
• Access Controls: Internal access to personal data is restricted to fa66 employees and contractors who require it to perform their specific job functions. All such personnel are subject to confidentiality obligations and receive data protection training appropriate to their role.
• Secure Infrastructure: fa66's Platform infrastructure is hosted in secured data centres with physical access controls, redundant power and connectivity, and 24/7 monitoring for intrusion attempts and anomalous activity.
• Payment Security: fa66 does not store full payment card numbers on its own systems. Payment card transactions are processed by PCI-DSS compliant payment providers. Mobile banking transactions via bKash, Nagad, Rocket, and Upay are processed through the encrypted APIs of those respective services.
• Incident Response: fa66 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to the rights and freedoms of players, fa66 will notify affected individuals without undue delay and will take all reasonable steps to contain and remediate the breach.

While fa66 takes these security measures seriously, no system connected to the internet can be guaranteed to be completely secure. Players are responsible for maintaining the security of their own account credentials and should contact support immediately if they suspect unauthorised access to their account.

fa66 reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, new Platform features, or feedback from players and regulators.

When material changes are made to this Policy, fa66 will notify registered players by email to the address associated with their account and/or by displaying a prominent notice on the Platform for a minimum of thirty (30) days following the update. Minor clarifications that do not change the substance of the Policy may be made without advance notice.

The "Effective Date" at the top of this Policy will always reflect the date of the most recent revision. Continued use of the fa66 Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree with changes to the Policy, you should stop using the Platform and contact support to close your account.

fa66 recommends that players bookmark this page and review it at least every six months to stay informed of any developments in our data practices. All previous versions of this Policy are available on request by contacting support.