fg64 Privacy Policy — How We Protect Your Personal Data

01 Introduction

This Privacy Policy ("Policy") describes how fg64 ("fg64", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "User") who register for an account, make deposits, place wagers, or otherwise interact with the fg64 online casino and sports betting platform at https://fg64.io and all associated interfaces (collectively, the "Platform").

fg64 is committed to handling your personal data with the highest standards of care, transparency, and security. This Policy has been prepared in alignment with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR), adapted to the operational context of the Bangladesh market.

This Privacy Policy forms part of the complete legal framework governing your use of fg64, alongside the Terms and Conditions and the Responsible Gaming Policy. If you have any questions about how fg64 handles your personal data, please contact our support team at any time — contact details are provided in Section 14.

02 Data Controller

For the purposes of this Privacy Policy, fg64 acts as the data controller in respect of all personal data collected from players and visitors who interact with the fg64 Platform. As data controller, fg64 determines the purposes for which, and the means by which, personal data is processed.

Where fg64 engages third-party service providers (such as identity verification agencies, payment processors, or game providers) to process personal data on its behalf, those providers act as data processors under binding contractual obligations that require them to protect your data to the same standard as fg64 itself.

03 Data We Collect

fg64 collects personal data through several channels: directly from you when you register, deposit, play, or contact support; automatically from your device and browser as you use the Platform; and from trusted third-party verification services where necessary to fulfil our identity verification obligations.

3.1 Registration and Account Data

When you create an fg64 account, we collect the following information:

• Full legal name
• Date of birth (used to verify you are 21 years of age or older)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or otherwise)
• Email address and mobile number
• Username and encrypted password
• Preferred currency (Bangladesh Taka, BDT)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and confirm player eligibility, fg64 may collect:

• National Identity Card (NID) number and scan
• Passport or birth certificate details
• Proof of address documents (utility bills, bank statements)
• Photographs or video selfies submitted for liveness checks
• bKash, Nagad, Rocket, or Upay account details registered in your name

3.3 Financial Transaction Data

fg64 records all deposit and withdrawal transactions associated with your account, including:

• Transaction amount (in BDT / ৳)
• Payment method used (bKash, Nagad, Rocket, Upay)
• Transaction date, time (Bangladesh Standard Time, UTC+6), and reference ID
• Running account balance at the time of each transaction

3.4 Gameplay and Betting Data

The fg64 Platform automatically records all gameplay activity associated with your account, including bet amounts, game titles, wager outcomes, session duration, and bonus usage history. This data is used for account integrity verification, dispute resolution, responsible gaming monitoring, and platform improvement purposes.

3.5 Technical and Device Data

When you access the fg64 Platform, our servers automatically log certain technical data, including:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Referring URL and pages visited within the Platform
• Session timestamps and duration
• Cookie identifiers (see Section 7)

Data Category	Primary Purpose	Retention Period
Registration Data	Account creation and management	Duration of account + 5 years
KYC Documents	Identity verification, AML compliance	Duration of account + 7 years
Financial Transactions	Payment processing, audit trail	7 years from transaction date
Gameplay Records	Dispute resolution, responsible gaming	Duration of account + 3 years
Technical / Device Logs	Security monitoring, fraud prevention	13 months from collection
Support Communications	Customer service, complaint handling	3 years from last interaction

04 How We Use Your Data

fg64 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your account, verify your eligibility (including the 21+ age requirement), manage your profile, and maintain accurate records of your account activity.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain a complete and auditable record of all financial transactions on your account.
• Identity Verification and AML Compliance: To fulfil Know Your Customer (KYC) obligations, prevent identity fraud, and comply with anti-money laundering best practices applicable to online gaming platforms.
• Platform Personalisation: To customise your experience on fg64 — including displaying relevant game recommendations, tailoring promotional offers to your activity level, and applying your saved preferences across sessions.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-imposed account limits and exclusion orders, and provide targeted support resources where necessary.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain a history of all communications between you and the fg64 support team.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, multi-accounting, and other platform integrity violations.
• Legal Compliance: To comply with applicable laws and regulations, respond to lawful requests from competent authorities, and enforce fg64's Terms and Conditions.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve game offerings, optimise platform performance, and enhance the overall player experience.

05 Legal Basis for Processing

fg64 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your registration data, KYC documents, and transaction history is necessary to enter into and perform our contract with you (i.e., to provide you with access to the fg64 Platform and process your bets and payments).
• Legal Obligation: Certain processing activities — particularly identity verification, AML record-keeping, and responding to lawful authority requests — are required by applicable law and regulation.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregate analytics is carried out on the basis of fg64's legitimate interest in maintaining a safe, fair, and commercially viable platform, balanced against your privacy rights.
• Consent: Where fg64 sends you optional marketing communications (such as promotional emails or SMS messages regarding special offers), we do so only with your prior express consent, which you may withdraw at any time via your account settings or by contacting support.

06 Data Sharing and Disclosure

fg64 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data only in the following limited and controlled circumstances:

6.1 Certified Service Providers

fg64 engages the following categories of third-party service providers who may process your personal data on our behalf, under binding data processing agreements:

• Identity Verification Partners: Third-party KYC and AML screening services used to verify the authenticity of identity documents submitted during account registration.
• Payment Processors: Mobile financial service operators (including bKash, Nagad, Rocket, and Upay) through whose infrastructure deposit and withdrawal transactions are routed.
• Game Providers: Certified studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, whose game software is integrated into the fg64 Platform. These providers may receive anonymised session identifiers necessary for game functionality but do not receive full player identity data.
• Cloud Infrastructure and Hosting Providers: Secure data centre and cloud services used to host the fg64 Platform and store player data.
• Customer Support Platform: Live chat and ticketing software used to manage and respond to player support requests.

6.2 Legal and Regulatory Disclosure

fg64 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or other legally binding process. fg64 will, where legally permitted, endeavour to notify the affected player of such a disclosure request prior to complying.

6.3 Business Transfers

In the event that fg64 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, fg64 will provide reasonable advance notice to affected players and ensure that the receiving entity assumes obligations consistent with this Privacy Policy.

07 Cookies & Tracking Technologies

fg64 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and ensure the security of your browsing session. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and last-played games, so you do not need to re-enter them each time you visit.
• Analytics Cookies: fg64 uses first-party analytics tools to understand how players navigate the Platform in aggregate — which pages are visited most frequently, where users encounter difficulties, and how the Platform performs across different device types. This data is processed in anonymised or pseudonymised form only.

Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies; however, please note that disabling strictly necessary cookies will prevent you from logging into your fg64 account and using the Platform.

08 Data Security

fg64 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data exchanged between your browser or device and the fg64 Platform is transmitted over encrypted HTTPS connections, preventing interception by third parties.
• AES-256 Encryption at Rest: Sensitive personal data stored in fg64 databases — including identity documents and payment information — is encrypted at rest using AES-256, one of the strongest commercially available encryption standards.
• Multi-Factor Authentication: fg64 supports and encourages the use of multi-factor authentication (MFA) for player account logins, providing an additional layer of protection beyond username and password.
• Access Controls: Access to player personal data within fg64's internal systems is restricted on a strict need-to-know basis. All staff members with data access privileges undergo regular data protection training and are bound by confidentiality obligations.
• Regular Security Audits: fg64 engages independent cybersecurity specialists to conduct periodic penetration testing and vulnerability assessments of the Platform and underlying infrastructure.
• Incident Response: fg64 maintains a documented data breach response procedure. In the event of a breach that is likely to pose a risk to your rights and freedoms, fg64 will notify affected players without undue delay.

09 Data Retention

fg64 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention schedules outlined in Section 3.5 apply across all data categories.

Upon account closure — whether at your request or due to a Terms and Conditions violation — fg64 will:

• Immediately restrict access to your account and cease active processing of your data for marketing and personalisation purposes.
• Retain transaction records, KYC documents, and account activity logs for the minimum retention periods required by applicable anti-money laundering and financial record-keeping obligations.
• Securely delete or irreversibly anonymise all personal data upon expiry of the applicable retention period, so that it can no longer be associated with any identifiable individual.

If you have been self-excluded from the fg64 Platform, your account data will be retained for the duration of the self-exclusion period to prevent re-registration. After the exclusion period expires and any mandatory legal retention period has also elapsed, your data will be scheduled for secure deletion.

10 Your Privacy Rights

As a player on the fg64 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via the details provided in Section 14. fg64 will respond to all valid data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data fg64 holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data fg64 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that fg64 delete all personal data it holds about you. Please note that this right is subject to overriding legal retention obligations — fg64 cannot erase data it is legally required to retain.
• Right to Restriction of Processing: You may request that fg64 restrict the processing of your personal data in certain situations — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to fg64 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data where fg64 relies on legitimate interests as its legal basis. You may also withdraw consent for marketing communications at any time via your account settings.

11 Children's Privacy

The fg64 Platform is intended exclusively for adults aged 21 years and above. fg64 does not knowingly collect personal data from individuals under the age of 21. This age threshold is stricter than standard adult age definitions and reflects fg64's firm commitment to preventing underage gambling.

If fg64 has reasonable grounds to believe that an account has been registered by a person under 21, the account will be immediately suspended, all funds will be frozen pending investigation, and any personal data collected from that individual will be deleted from active systems as soon as practicable, subject to any overriding legal obligations.

12 International Data Transfers

fg64 primarily processes and stores player data on servers located in secure data centres within the Asia-Pacific region. In some circumstances, personal data may be transferred to and processed in countries outside Bangladesh — for example, where a game provider or cloud infrastructure partner operates servers in a different jurisdiction.

Whenever personal data is transferred internationally, fg64 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. Such safeguards may include:

• Binding contractual clauses incorporating standard data protection obligations into agreements with the receiving party.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Technical measures such as end-to-end encryption that protect data in transit regardless of the jurisdiction through which it passes.

Details of specific international transfer safeguards applicable to your data are available upon request from the fg64 support team.

13 Changes to This Privacy Policy

fg64 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made to this Policy, fg64 will:

• Update the "Last Updated" date at the top of this Policy.
• Notify registered players via email to the address associated with their fg64 account.
• Display a prominent notice on the fg64 Platform for a minimum of 14 days prior to the changes taking effect.

Your continued use of the fg64 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fg64 handles your personal data, please reach out to our dedicated support team using any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the fg64 Platform
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days, and to formal data rights requests within 30 calendar days.

fg64 is committed to resolving all privacy concerns promptly and transparently. If you feel your concern has not been addressed to your satisfaction, you retain the right to escalate the matter to a relevant supervisory authority in your jurisdiction.