fb778 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how fb778 ("fb778", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use the fb778 online casino and sports betting platform, including the website available at fb778.ws, all associated mobile-optimised interfaces, account management systems, game clients, and customer support channels (collectively, the "Platform").

This Policy is written in plain English and is intended to be easily understood by players across Bangladesh. Where technical or legal language is unavoidable, we provide context to aid comprehension. The English version of this Policy is the authoritative version. Any translation provided for convenience does not supersede the English text.

This Policy should be read alongside the fb778 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement governing your relationship with fb778.

fb778 is an English-language online casino and sports betting platform serving players in Bangladesh. The Platform operates at fb778.ws and offers a comprehensive range of services including live casino games, slot games powered by third-party providers such as Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi, sports betting markets covering cricket (BPL, IPL, T20 World Cup), football, kabaddi, and other sports popular in Bangladesh, as well as card and casual games including Callbreak and Fortune Bingo.

For the purposes of this Privacy Policy, fb778 is the data controller responsible for the personal data collected through the Platform. As data controller, we determine the purposes for which your personal data is collected and the means by which it is processed.

All correspondence, data access requests, and privacy complaints should be directed to our support team at [email protected]. Our English-language team is available 24 hours a day, 7 days a week, and operates on Bangladesh Standard Time (BST, UTC+6).

fb778 collects personal data in several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect and the primary purpose for collecting each category:

fb778 collects personal data through the following channels and mechanisms:

• Account registration: Information you provide directly when creating your fb778 account, including name, date of birth, email address, and mobile number.
• Account verification: Identity documents you upload as part of the Know Your Customer (KYC) verification process, which may be required before your first withdrawal or at any point during your account lifecycle.
• Deposits and withdrawals: Transaction data generated when you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or Visa/Mastercard.
• Platform usage: Behavioural and technical data collected automatically as you browse the Platform, launch games, place bets, or interact with account features — collected via server logs, session tracking, and first-party cookies.
• Customer support interactions: Data you provide when contacting us through live chat or email, including the content of your messages and any attachments you send.
• Promotional participation: Information you provide when claiming a bonus or participating in a tournament or seasonal promotion.
• Third-party identity verification services: In certain cases, fb778 may use accredited third-party identity verification providers to cross-check identity data against public records or commercially available databases for the purpose of fraud prevention and AML compliance.

fb778 uses the personal data it collects for the following purposes. Where a legal basis applies to each purpose, it is identified in Section 6.

• Account management: Creating, maintaining, and administering your player account, including processing login sessions, updating account details, and enforcing account security policies.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity to prevent the creation of fraudulent or duplicate accounts.
• Payment processing: Facilitating deposits and withdrawals, reconciling transactions, investigating payment disputes, and maintaining accurate financial records.
• Game and service delivery: Providing access to casino games, sports betting markets, Callbreak, Fortune Bingo, and all other Platform features you request.
• Fraud prevention and security: Monitoring account activity for signs of fraud, collusion, money laundering, automated betting abuse, and other prohibited activities as defined in the Terms & Conditions.
• Responsible gaming: Monitoring betting patterns and session activity to identify players who may be exhibiting signs of problem gambling, and applying responsible gaming controls where appropriate.
• Customer support: Responding to enquiries, resolving disputes, processing responsible gaming requests (deposit limits, self-exclusion), and conducting post-interaction quality reviews.
• Legal and regulatory compliance: Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and data protection requirements.
• Platform improvement: Using aggregated, anonymised analytics data to understand how players interact with the Platform and to improve navigation, game selection, and performance.
• Marketing communications (opt-in only): Sending promotional emails, SMS notifications, and in-platform messages about bonuses, new games, seasonal promotions (including Eid, Pohela Boishakh, and BPL-season offers), and other Platform news — but only to players who have expressly opted in to receive such communications.

fb778 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract we have with you as a registered player — including account management, payment processing, and game delivery. Without this processing, we cannot provide the Platform services.
• Legal obligation: Processing required to comply with applicable legal requirements, including Know Your Customer (KYC) verification, anti-money laundering checks, and the retention of transaction records for audit purposes.
• Legitimate interests: Processing carried out to pursue fb778's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and the improvement of our services — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing activities for which we have obtained your freely given, specific, and informed consent — in particular, the sending of marketing communications. Consent may be withdrawn at any time by contacting [email protected] or adjusting your in-account notification preferences.

fb778 does not sell, rent, or trade your personal data to any third party for their own independent commercial or marketing purposes. We share personal data with external parties only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and Visa/Mastercard gateway operators receive only the data necessary to process your deposit or withdrawal transaction. These providers are subject to their own privacy policies and security standards.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level data (such as Player ID and wager amounts) necessary to deliver game outcomes and resolve game-round disputes. Game providers do not receive your full identity data.
• Identity verification services: Accredited KYC and AML compliance platforms may receive identity data strictly for the purpose of verifying your identity and screening against relevant watchlists. These processors are contractually bound to data confidentiality obligations.
• IT and hosting providers: Secure cloud infrastructure and hosting providers who process data on our behalf under strict data processing agreements, with servers subject to access controls and regular security audits.
• Analytics providers: Aggregated, anonymised usage statistics may be processed by analytics tools. No personally identifiable information is shared with analytics providers.
• Law enforcement and regulatory authorities: fb778 will disclose personal data to competent law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or where disclosure is necessary to prevent or investigate suspected criminal activity including fraud, money laundering, or match-fixing.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of the fb778 business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and provided an opportunity to close their account prior to the transfer taking effect if they do not wish their data to be transferred.

The security of financial data is treated with the highest priority at fb778. The following specific provisions apply to payment-related personal data:

• No PIN or CVV storage: fb778 never stores your bKash PIN, Nagad PIN, Rocket PIN, Upay PIN, or the CVV/CVC code from any debit or credit card. These sensitive authentication credentials are handled exclusively by the respective payment provider and never pass through fb778's servers.
• Tokenisation: Where technically possible, payment method identifiers are stored in tokenised form. A token is a randomly generated reference that cannot be reverse-engineered to reveal the underlying payment details.
• Transaction records: fb778 retains records of deposit and withdrawal transactions — including amounts in BDT, timestamps, payment method type, and masked account identifiers — for a minimum of five years for audit, AML compliance, and dispute resolution purposes.
• Matched payment methods: Withdrawals are only permitted to payment methods that have been previously used to deposit into the same account and that are registered in your own name. This policy protects against money laundering and unauthorised fund diversion.

fb778 uses first-party cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session, and to understand how players interact with the site so we can improve it.

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and load-balancing cookies that ensure stable performance during peak periods.
• Functional cookies: These cookies remember your preferences such as language settings, table-game display preferences, and notification settings so you do not need to re-configure them on each visit.
• Analytics cookies: Anonymised cookies that help us understand aggregate usage patterns — such as which game categories are most popular and how players navigate between sections of the Platform. No personally identifiable information is contained in analytics cookies.
• No third-party advertising cookies: fb778 does not use third-party advertising networks or behavioural tracking cookies. We do not track your activity across websites other than fb778.ws.

You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies may impair your ability to log in and use core Platform features. Browser-level cookie settings are the mechanism by which you can manage your cookie preferences on the fb778 Platform.

fb778 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

fb778 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login requests, game data, payment instructions, and support messages.
• Encryption at rest: Sensitive personal data fields stored in our databases — including identity documents, payment references, and contact details — are encrypted at the storage layer.
• Access controls: Access to player personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement can access identifiable player records, and all such access is logged and auditable.
• Password security: Account passwords are stored as salted cryptographic hashes. fb778 staff cannot view your password in plain text, and fb778 will never ask you to reveal your password via any communication channel.
• Intrusion detection: Our infrastructure is continuously monitored for anomalous access patterns, and automated systems flag and block suspected brute-force login attempts, credential stuffing attacks, and other hostile activity.
• Vendor due diligence: Third-party service providers who process player data on our behalf are assessed for their own security posture and are contractually required to maintain security standards compatible with those applied by fb778.

As a player on the fb778 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and account username so that we can verify your identity.

• Right of access: You may request a copy of all personal data fb778 holds about you, along with information about how it is used, who it is shared with, and how long it is retained. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may update certain account details (such as email address and phone number) directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and we have no overriding legitimate grounds. Note that some data must be retained to meet legal obligations even after an erasure request (see Section 10).
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of data you have challenged is being verified.
• Right to data portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based solely on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to object to marketing: You may opt out of receiving marketing communications at any time by contacting [email protected] or adjusting your notification preferences within your account settings. Opt-out requests are processed within 5 business days.

The fb778 Platform is strictly intended for adults aged 21 years and above. fb778 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to ensure compliance with this requirement.

If fb778 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, that account will be immediately suspended, all funds held in the account will be handled in accordance with our Terms & Conditions, and the relevant personal data will be securely deleted as promptly as is practicable given any applicable legal hold requirements.

The fb778 Platform does not contain links to third-party websites for browsing or informational purposes. However, the payment journey for transactions via bKash, Nagad, Rocket, Upay, or card gateways may redirect you to the payment provider's own interface to complete authentication. Once you leave the fb778 Platform environment and enter a third-party payment interface, that third party's own privacy policy governs the handling of your data.

fb778 is not responsible for the privacy practices or content of any third-party interface to which you are redirected as part of a payment flow. We encourage you to review the privacy policies of bKash, Nagad, Rocket, Upay, and any other payment provider you use before entering credentials into their interfaces.

fb778 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date at the top of this Policy ("Last Updated") will be revised each time a material change is made.

Where a change is material — meaning it significantly affects your rights or the way we handle your data — fb778 will provide notice via the email address associated with your registered account at least 14 days before the change takes effect. For non-material amendments, the updated Policy will be published on this page and the "Last Updated" date will be revised accordingly.

Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should cease using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data fb778 holds about you, please contact our dedicated support team using the details below. All privacy-related enquiries are handled by our English-language team operating on Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

• Email address: [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Response time: Within 30 days for formal data rights requests; typically under 2 hours for general privacy enquiries during peak BST hours.
• Live chat: Available directly on the fb778 Platform — typically under 5 minutes response time.