fbalee Privacy Policy — How We Handle Your Personal Data

When you register and use fbalee, we collect personal data necessary for the safe, compliant, and high-quality operation of our platform. The categories of information we collect are described below. We apply the principle of data minimisation — we collect only what is genuinely necessary for each stated purpose and do not retain data beyond the period required.

Registration and Account Data

When you create a fbalee account, you provide us with your full legal name, date of birth, residential address, mobile phone number, and email address. This information is required to establish your account, verify your identity, and deliver core platform services. You may also set a username and password at registration; your password is stored in irreversibly hashed form and is never accessible in plain text by fbalee staff.

Identity Verification (KYC) Documents

To comply with our anti-money laundering and fraud prevention obligations, we collect copies of identity and address verification documents when you request a withdrawal or when our risk systems flag an account for review. Accepted documents include your Bangladesh National Identity Card (NID), valid passport, and recent proof-of-address documents such as utility bills or bank statements dated within 90 days. We also collect evidence of payment method ownership, such as a screenshot of your bKash, Nagad, or Rocket wallet registered in your name.

Financial Transaction Data

fbalee records details of all deposits and withdrawals made through your account, including transaction amounts in Bangladeshi Taka (৳), timestamps, payment method identifiers (such as mobile wallet numbers associated with bKash, Nagad, Rocket, or Upay), and transaction reference numbers. This data is used for account management, fraud prevention, and regulatory compliance. We do not store full card numbers for Visa or Mastercard transactions — these are processed through encrypted payment gateways that return only masked token references to fbalee.

Gameplay and Betting Activity

We collect a detailed record of your gaming and betting activity on fbalee, including the games played, wagers placed, outcomes, bonuses used, and session durations. This data serves multiple purposes: it allows us to resolve disputes accurately, power personalised game recommendations, monitor for responsible gaming indicators, and comply with audit requirements. Gameplay data is associated with your account and retained for the full duration of the data retention period described in Section 6 of this Privacy Policy.

Technical and Device Data

When you access fbalee through a browser or mobile device, we automatically collect certain technical data including your IP address, device type, browser type and version, operating system, preferred language, referring URL, and pages visited on fbalee along with timestamps. This data is used for security monitoring, fraud detection, platform performance optimisation, and anonymous aggregate analytics. Your IP address may be used to make a general geographic determination consistent with our Bangladesh market focus.

Customer Support Communications

If you contact fbalee via live chat, email, or any other support channel, we retain a record of that communication including the content of messages exchanged, the date and time of contact, and the resolution outcome. These records help us maintain service quality, train support staff, and provide an accurate reference in the event of a subsequent dispute or follow-up enquiry.

fbalee does not sell or rent your personal data to third parties. We may share your data with trusted third parties only where necessary for delivering our services, complying with legal obligations, or protecting the safety and integrity of the platform. All third-party recipients of your data are required to handle it in accordance with applicable data protection standards and are permitted to use your data only for the specific purpose for which it was shared.

Payment Processing Partners

To process deposits and withdrawals, fbalee shares the minimum necessary transaction data with payment partners including bKash, Nagad, Rocket, Upay, Visa/Mastercard processing networks, and Dutch-Bangla Bank. These partners receive only the data required to execute the specific transaction and are bound by their own regulatory obligations regarding data protection and financial security. fbalee does not share your full identity documentation with payment partners.

Game Software Providers

fbalee hosts games from third-party studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. When you launch a game from one of these providers, technical session data — including a session token and your account's stake limits — may be transmitted to the provider's servers to facilitate game operation. These providers do not receive your full personal profile, NID documents, or financial transaction history. Provider integrations are governed by data processing agreements that restrict the use of your data to game delivery purposes only.

Regulatory and Law Enforcement Authorities

fbalee is required by law to disclose personal data to competent authorities where lawfully demanded. This includes, but is not limited to, anti-money laundering investigations, fraud inquiries, court orders, and regulatory inspections. We will make such disclosures in strict compliance with applicable legal requirements and will not go beyond what is legally mandated. Where permitted by law, fbalee will notify affected users of such disclosures.

Identity Verification Service Providers

To assist with KYC verification, fbalee may use third-party identity verification providers who process your submitted documentation on our behalf. These providers act as data processors under our instruction and may not use your data for their own purposes. All such providers are required to maintain appropriate security standards and destroy or return your verification documents once the verification process is complete.

fbalee implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our security programme is reviewed regularly and updated in response to emerging threats and industry best practices. The following measures form the core of fbalee's data security framework.

Encryption in Transit

All data exchanged between your browser or mobile device and fbalee's servers is encrypted using TLS 1.2 or higher. This means that even if a network-level attacker intercepted your traffic, the data would be unreadable. You can verify that fbalee is using a secure connection by checking for the padlock icon in your browser's address bar before logging in or making any transaction.

Encryption at Rest

Sensitive data fields stored in fbalee's databases — including identity document metadata, financial transaction records, and contact details — are encrypted at rest using AES-256 encryption. Access to the underlying database servers is restricted to a small number of authorised system administrators and is protected by multi-factor authentication.

Access Control

fbalee operates a strict role-based access control policy. Platform employees can only access user data relevant to their specific operational function. Customer support agents, for example, can access account details and transaction history but cannot access raw KYC documents. Privileged access is logged, monitored, and subject to periodic review. Any attempt to access data outside an employee's authorised scope triggers an automatic security alert.

Account Security Features for Users

fbalee provides several tools to help you protect your own account. We recommend enabling two-factor authentication (2FA), which requires a one-time SMS code in addition to your password on each login. You should also choose a strong, unique password for fbalee that you do not reuse on other websites. If you suspect your fbalee account has been accessed without your authorisation, contact [email protected] immediately so that the account can be frozen pending investigation.

Security Incident Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, fbalee will notify affected users as soon as reasonably practicable. Notification will be sent to the email address registered on your fbalee account and will describe the nature of the breach, the categories of data affected, and the steps fbalee is taking to address it.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fbalee handles your personal data, our dedicated privacy team is available to assist you. We are committed to resolving all privacy-related enquiries fairly and promptly.

You may reach the fbalee privacy team by emailing [email protected] with the subject line "Privacy Enquiry". Please include your registered username and a clear description of your request so we can identify your account and respond accurately. All privacy enquiries are handled in strict confidence.

For data rights requests specifically — including access requests, erasure requests, or objections to processing — please use the subject line "Data Rights Request" when emailing us. We aim to acknowledge all data rights requests within 3 business days and to provide a full response within 30 calendar days.

fbalee operates on Bangladesh Standard Time (BST, UTC+6). Our support team is available 24 hours a day, 7 days a week, including during public holidays such as Eid, Victory Day (December 16), and Independence Day (March 26).