fbk48 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how fbk48 ("fbk48", "we", "us", "our") collects, uses, stores, protects, and shares the personal data of individuals ("you", "your", "Player") who register for and use the fbk48 online betting and casino platform, accessible at fbk48.io ("the Platform").

fbk48 is committed to handling personal data responsibly, lawfully, and transparently. We recognise that the trust of our players is fundamental to the operation of the Platform, and we take our data protection obligations seriously at every level of the organisation.

This Policy applies to all personal data processed in connection with your registration, account management, deposits, withdrawals, betting activity, customer support interactions, promotional participation, and any other use of the fbk48 Platform. It applies regardless of the device or channel through which you access the Platform.

This Policy should be read together with the fbk48 Terms & Conditions and Responsible Gaming Policy, all of which form part of the overall legal framework governing your use of the Platform.

2 Who We Are

fbk48 is an online betting and casino platform operated for the benefit of players in Bangladesh and internationally. The Platform provides sports betting — with a particular focus on cricket (BPL, T20 World Cup, IPL, and international Bangladesh Tigers fixtures), football, kabaddi, and hockey — alongside live casino games, a full slots lobby, and crash games.

For the purposes of this Privacy Policy, fbk48 acts as the data controller in respect of all personal data collected from players who use the Platform. As data controller, fbk48 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in compliance with applicable data protection law.

All data-related enquiries, rights requests, and complaints should be directed to our data team at the contact details provided in Section 15 of this Policy.

3 Data We Collect

fbk48 collects the following categories of personal data in connection with your use of the Platform:

Identity Data: Full legal name, date of birth, gender, nationality, and a copy of your government-issued identification document (National ID Card, passport, or driving licence). This data is collected as part of our mandatory Know Your Customer (KYC) process.

Contact Data: Email address, Bangladeshi mobile phone number, and residential address including division, district, and postal code.

Financial Data: Details of the payment method(s) used to deposit and withdraw funds, including the mobile financial service account (bKash, Nagad, Rocket, or Upay) or bank account details (Dutch-Bangla Bank, BRAC Bank, or City Bank) associated with your fbk48 account. We do not store full bank account numbers — only the masked reference needed to process your transactions.

Transaction Data: A complete record of all deposits, withdrawals, bonus credits, and wagering activity associated with your account, including amounts in BDT, timestamps, and transaction references.

Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected automatically when you access the Platform.

Usage Data: Information about how you interact with the Platform, including pages visited, game sessions played, betting markets accessed, session duration, and navigation paths.

Communications Data: Records of your communications with the fbk48 support team via live chat, email, or any other supported channel, including the content of those communications and associated metadata.

Marketing Preferences: Your preferences in respect of receiving promotional communications from fbk48, and records of your interactions with any promotional emails or in-platform messages we send to you.

4 How We Collect Data

fbk48 collects personal data through the following means:

• Direct Submission: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device fingerprint, browser characteristics, and session activity, via server logs, analytics tools, and cookies (see Section 11).
• Payment Processors: Confirmation data returned by our payment processing partners (including bKash, Nagad, Rocket, Upay, and banking partners) when a transaction is initiated or completed. This data is limited to transaction status, reference numbers, and the masked identifier of the payment method used.
• Identity Verification Providers: Results and risk signals returned by third-party KYC and identity verification service providers when your submitted documents are assessed against their databases and fraud detection systems.
• Responsible Gaming Monitoring: Behavioural signals generated by our responsible gaming monitoring systems, including deposit frequency, session duration patterns, and self-imposed limit utilisation. This data is processed solely for the purpose of identifying players who may be experiencing gambling-related harm.

5 How We Use Your Data

fbk48 uses the personal data we collect for the following purposes:

6 Legal Basis for Processing

fbk48 processes your personal data on the following legal bases, as applicable to each processing activity:

• Contract Performance: Processing that is necessary to register your account, maintain your account in good standing, process your financial transactions, and deliver the betting and gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering legislation, KYC obligations, responsible gambling regulations, financial record-keeping requirements, and responses to lawful requests from regulatory and law enforcement authorities.
• Legitimate Interests: Processing carried out for the purposes of fraud prevention, platform security, abuse detection, responsible gaming monitoring, and service analytics, where these interests are not overridden by your rights and interests.
• Consent: Processing of your data for direct marketing purposes, where you have given your explicit consent to receive promotional communications from fbk48. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected].

7 Data Sharing & Disclosure

fbk48 does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances:

• Payment Processors: We share the minimum necessary financial and identity data with our payment processing partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank — to facilitate deposits and withdrawals. All payment partners are bound by their own regulatory obligations and confidentiality requirements.
• Identity Verification Providers: We share identity document data with third-party KYC service providers for the purpose of verifying your identity and checking against sanctions and politically exposed persons (PEP) lists, as required by our compliance obligations.
• Game Content Providers: Session and gameplay data may be shared with game providers (including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi, and Hacksaw Gaming) to the extent necessary to deliver their game content and to comply with their own licensing audit requirements.
• IT and Security Service Providers: We engage third-party providers for hosting, cybersecurity, and platform maintenance services. These providers process data solely on our instruction and are bound by data processing agreements that prohibit any independent use of the data.
• Legal and Regulatory Authorities: We may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other public authorities where we are required to do so by applicable law, court order, or regulatory direction. Where legally permissible, we will attempt to notify affected players of such disclosure requirements.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of fbk48's assets, personal data held by fbk48 may be transferred to the acquiring entity as part of that transaction, subject to the acquirer assuming the obligations of this Policy with respect to your data.

8 International Data Transfers

The fbk48 Platform is operated for players primarily based in Bangladesh. Some of the third-party service providers engaged by fbk48 — particularly game content providers and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, fbk48 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Bangladeshi law and internationally recognised data protection principles. Safeguards may include contractual data processing agreements incorporating standard data protection clauses, the data protection laws of the receiving jurisdiction, or the service provider's participation in recognised international compliance frameworks.

If you wish to obtain further information about the specific safeguards in place for any particular international data transfer, please contact us at [email protected].

9 Data Retention

fbk48 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Once a retention period has expired, the relevant data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any individual player. We do not retain data "just in case" — retention is purposeful, time-limited, and reviewed periodically.

10 Security Measures

fbk48 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Encryption in Transit: All data exchanged between your device and the fbk48 Platform is encrypted using TLS 1.2 or higher, ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data fields stored in our databases — including identity document data and payment method references — are encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. fbk48 support staff have no ability to view your password.
• Access Controls: Access to personal data within fbk48's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication: Players are encouraged — and in some cases required — to enable SMS-based two-factor authentication on their accounts. This provides an additional layer of security beyond the account password.
• Penetration Testing & Vulnerability Management: The fbk48 platform undergoes regular security assessments including penetration testing and vulnerability scanning. Identified weaknesses are prioritised and remediated according to their severity within defined timeframes.
• Incident Response: fbk48 maintains a documented data breach response plan. In the event of a security incident that poses a risk to your personal data, we will notify affected players promptly and take all necessary steps to contain and remediate the incident.

11 Cookies & Tracking

fbk48 uses cookies and similar tracking technologies on the Platform to support core functionality, improve your experience, and gather analytics data that helps us understand how the Platform is used and where it can be improved.

The following categories of cookies are used on the fbk48 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, store your language and display preferences, and enable core security features such as fraud detection signals. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform — including which pages are most visited, session durations, and navigation flows — which we use to improve the Platform. Analytics data is processed in aggregated form and is not linked to individually identifiable players.
• Functional Cookies: These cookies remember your preferences and personalisation choices — such as your preferred odds format, favourite sports markets, or last-visited game category — so that you do not need to re-enter them each time you visit the Platform.
• Session Cookies: Temporary cookies that are deleted when you close your browser. They are used to maintain continuity within a single browsing session, such as preserving a bet slip across different pages of the Platform.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse some or all cookies, or to be alerted when a cookie is being set. Note that disabling strictly necessary cookies may prevent you from using certain features of the fbk48 Platform, including logging in to your account.

fbk48 does not use third-party advertising cookies and does not permit third-party ad networks to place tracking cookies on the Platform for the purpose of delivering targeted advertising to our players.

12 Minors & Age Restriction

The fbk48 Platform is strictly intended for adults aged 21 and above. fbk48 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. The Platform's registration process includes mandatory date-of-birth verification and KYC document checks designed to confirm that all players meet this age requirement before any account is activated.

If fbk48 becomes aware — through its own processes or through a report from a third party — that personal data belonging to a person under 21 has been collected in connection with an account on the Platform, we will immediately suspend that account, delete the associated personal data, and take appropriate steps to prevent re-registration by that individual.

13 Exercising Your Rights

fbk48 is committed to facilitating the exercise of your data rights in a straightforward and timely manner. To submit any data rights request — including access, rectification, erasure, restriction, portability, or objection — please follow this process:

• Send an email to [email protected] with the subject line "Data Rights Request — [Your Request Type]" (e.g., "Data Rights Request — Access").
• Include your registered fbk48 username and the email address associated with your account so that we can verify your identity before processing the request.
• Describe your request clearly, specifying which right you wish to exercise and, where relevant, which specific categories of data the request relates to.
• fbk48 will acknowledge your request within 5 business days and will provide a substantive response within 30 calendar days of receipt. In complex cases this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.
• There is no charge for submitting a data rights request. We may, however, charge a reasonable administrative fee or decline to respond to requests that are manifestly unfounded, excessive, or repetitive.

Please note that certain rights are subject to exceptions and limitations under applicable law. For example, we cannot erase data that we are legally required to retain for anti-money-laundering or financial record-keeping purposes, even if you submit an erasure request. Where we cannot fulfil a request in full, we will explain the reason clearly in our response.

14 Changes to This Policy

fbk48 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or industry best practice. When material changes are made to this Policy, we will notify registered players by email to their registered address and/or by displaying a prominent notice on the Platform at least 14 days before the updated Policy takes effect.

The "Last Updated" date displayed at the top of this Policy indicates when the most recent version took effect. We encourage you to review this Policy periodically to stay informed about how fbk48 handles your personal data. Your continued use of the Platform after any update to this Policy constitutes acceptance of the revised terms.

Prior versions of this Privacy Policy are archived and available on request by contacting [email protected] with the subject line "Privacy Policy Archive Request".

15 Contact Our Data Team

If you have any questions, concerns, or feedback about this Privacy Policy or about how fbk48 handles your personal data, or if you wish to exercise any of your data rights as described in this Policy, please contact our data team using the details below:

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Platform: fbk48.io — accessible 24 hours a day, 7 days a week
• Support Hours: Round-the-clock English-language support available via the in-platform live chat feature
• Response Time: All privacy-related enquiries are acknowledged within 5 business days

We take all privacy enquiries seriously and will provide a clear, substantive response to every legitimate request we receive. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or competent regulatory body in your jurisdiction.