fb22 Privacy Policy

This Privacy Policy ("Policy") describes how fb22 ("fb22", "the Platform", "we", "us", "our") collects, uses, stores, and shares personal data in connection with your use of fb22.io and all associated services, including sports betting, live casino, slot games, instant games, and account and payment functionality.

This Policy applies to all individuals who visit, register with, or otherwise interact with the fb22 platform, including players located in Bangladesh and all other territories where fb22 operates. It should be read alongside the fb22 Terms & Conditions, which govern the contractual relationship between you and fb22.

By creating an fb22 account or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you must cease using the fb22 platform and may request account closure by contacting our support team.

This Policy is written in English. In the event of any inconsistency between the English version and any translated version, the English version shall prevail in all cases.

fb22 collects personal data from you directly (when you register, make a deposit, or contact support), automatically (when you browse or use the platform), and occasionally from third parties (such as identity verification providers). The categories of personal data we collect are set out in the table below.

fb22 does not intentionally collect any special category personal data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) unless you voluntarily disclose such information in a responsible gaming self-assessment or support conversation, in which case it is used solely to assist you.

fb22 uses your personal data for the following specific purposes. Where we rely on a particular legal basis for processing, that basis is indicated in Section 4 of this Policy.

• Account creation and management: To register your account, verify your identity, and maintain an accurate record of your account details and activity on the platform.
• Transaction processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to maintain accurate financial records associated with your account in BDT.
• Identity verification (KYC/AML): To verify that you meet the fb22 age requirement (21+) and to fulfil our anti-money laundering and Know Your Customer obligations under applicable international compliance frameworks.
• Platform operation and improvement: To deliver the sports betting, live casino, and slots services you have registered for; to diagnose technical issues; and to improve the overall performance and user experience of the platform.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, collusion, and other forms of abuse that may harm you or other players on the platform.
• Customer support: To respond to your enquiries, process complaints, and assist you with account-related matters, including responsible gaming requests, in English via our 24/7 support team.
• Marketing communications: To send you promotional offers, tournament announcements (including BPL and IPL betting promotions), and platform updates by email — but only where you have provided valid consent to receive such communications and have not subsequently opted out.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory bodies or law enforcement authorities, and enforce our Terms & Conditions.
• Responsible gaming: To monitor your gambling patterns and, where our systems identify indicators of problem gambling behaviour, to contact you proactively with responsible gaming information and available self-help tools.

fb22 processes your personal data on the following legal bases, depending on the purpose for which the data is used:

• Contractual necessity: Processing required to create and manage your account, process financial transactions, and deliver the services you have contracted for when registering with fb22.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, KYC regulations, tax reporting obligations, and lawful requests from governmental authorities or licensing bodies.
• Legitimate interests: Processing carried out in pursuit of fb22's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to marketing communications and to the placement of non-essential analytical cookies on your device.

Where we rely on legitimate interests as a basis for processing, we conduct a balancing assessment to ensure that our interests do not unfairly override your privacy rights. You may request information about any such assessment by contacting our support team.

fb22 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We share your personal data only in the specific, limited circumstances described below:

• Payment processors: We share the financial and identity data necessary to process your deposits and withdrawals with our approved payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these partners processes your data in accordance with their own privacy policies and applicable financial regulations.
• Identity verification providers: To fulfil KYC requirements, we may share your identity and contact data with third-party verification services that cross-reference your submitted documents against authoritative databases. These providers are bound by strict data processing agreements with fb22.
• Game content providers: When you play games from providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, or Spribe, limited technical and account data (such as a pseudonymous player identifier and game session data) may be shared with those providers to facilitate game delivery and RNG auditing. Providers do not receive your full identity data.
• Regulatory and law enforcement authorities: fb22 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law where required to do so by applicable law, a valid legal order, or a request from the licensing authority under which fb22 operates.
• Corporate transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving the fb22 operating entity, personal data held by fb22 may be transferred to the acquiring entity, subject to that entity honouring the terms of this Privacy Policy or providing an equivalent level of protection.

fb22 is operated by an internationally licensed entity, and some of our service providers and data processors are located outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than the country in which you reside.

Whenever we transfer personal data internationally, we take appropriate steps to ensure that your data receives a level of protection equivalent to that which it would receive in its country of origin. These steps may include:

• Transferring data only to countries that have been assessed as providing an adequate level of data protection.
• Using contractual safeguards — including standard contractual clauses — with data processors located in countries that do not meet an adequacy threshold.
• Ensuring that all international data processors are bound by the same data security obligations as those set out in this Policy.

By using the fb22 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh as described in this section, where such transfers are necessary to provide you with the services you have requested.

fb22 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. The cookies used on fb22.io fall into the following categories:

fb22 does not place third-party advertising cookies, retargeting cookies, or social media tracking pixels on fb22.io. You will not see fb22 advertisements following you around external websites as a result of cookies placed by our platform.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may impair platform functionality, including your ability to maintain a logged-in session. Disabling analytical cookies will not affect your ability to use any feature of fb22.io.

As a player whose personal data is processed by fb22, you hold the following rights in respect of that data. To exercise any of these rights, please contact our support team using the details provided in Section 13 of this Policy.

• Right of access: You have the right to request a copy of the personal data fb22 holds about you and to receive information about how that data is used, who it is shared with, and how long it will be retained.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: You may request that fb22 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent on which processing was based, or where you have objected to processing and there are no overriding legitimate grounds. Note that erasure requests may be declined where retention is required by law (e.g., AML record-keeping obligations).
• Right to restriction of processing: You may request that fb22 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed or where you have contested the lawfulness of our processing.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transmitted directly to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling carried out on that basis. You also have the unconditional right to object to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

fb22 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

fb22 retains personal data only for as long as is necessary for the purposes set out in this Policy, or for as long as required by applicable law or regulatory obligation, whichever is the longer period. The following retention guidelines apply to the main categories of data we hold:

Once a retention period has expired, personal data is securely deleted from fb22's active systems or, where deletion is not technically feasible (for example, in backup archives), it is anonymised so that it can no longer be associated with an identifiable individual.

The fb22 platform is strictly for adults aged 21 years and above. fb22 does not knowingly collect personal data from any person under the age of 21, and it is a breach of our Terms & Conditions for any person under 21 to register or use the platform.

If fb22 discovers or is notified that personal data belonging to a person under the age of 21 has been collected, we will immediately suspend the relevant account, delete the data without undue delay, and, where applicable, report the matter to the appropriate authorities. If you are a parent or guardian and believe that your child has created an account on fb22, please contact our support team immediately at support at fb22.io so that we can take prompt action.

fb22 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and fb22.io is encrypted using current SSL/TLS protocols, preventing interception by third parties during transit.
• Encryption at rest: Personal data, payment credentials, and identity documents stored on fb22 servers are encrypted using industry-standard encryption algorithms.
• Access controls: Access to player personal data is restricted to authorised personnel who require it to perform specific job functions. Access rights are reviewed regularly and revoked immediately upon role change or departure.
• Two-factor authentication: fb22 provides two-factor authentication options for player accounts to reduce the risk of unauthorised account access resulting from compromised credentials.
• Device recognition: Our systems monitor login activity and flag unusual access patterns — such as logins from unrecognised devices or new geographic locations — for additional verification.
• Regular security assessments: fb22 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, fb22 will notify affected players without undue delay and will take immediate remedial action to contain and address the breach.

While fb22 applies industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for logging out of your account when using shared or public devices. If you suspect unauthorised access to your account, contact our support team immediately.

fb22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our operating structure. When material changes are made, we will update the "Last updated" date displayed at the top of this page and, where the changes significantly affect how we handle your personal data, we will notify active players via the email address registered to their account.

We encourage you to review this Privacy Policy periodically to stay informed about how fb22 is protecting your data. Your continued use of the platform following the posting of any update constitutes your acceptance of the revised Policy. If you do not accept a revised Privacy Policy, you must cease using the platform and may request account closure by contacting fb22 support.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a concern about how fb22 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English by our dedicated data support staff.

Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6), and covers players across all major cities and districts in Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

• Email (privacy enquiries): support at fb22.io
• Response time: Within 30 calendar days for formal data rights requests; within 48 hours for general privacy enquiries.
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)

fb22 is committed to resolving all privacy concerns promptly and transparently. If you feel that your concern has not been adequately addressed, you may escalate the matter to the relevant data protection authority in your jurisdiction.