fry99 Privacy Policy —
Your Data, Our Responsibility

fry99 is an online betting and gaming platform operating at fry99.io, designed specifically for the Bangladesh market. As an operator that handles personal data of players from across Bangladesh — including cities such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — fry99 takes its data protection obligations seriously.

This Privacy Policy applies to all personal data collected and processed in connection with your use of the fry99 Platform, whether you access it via web browser on desktop, mobile browser, or any other digital interface through which fry99 services are made available. It applies to registered account holders and to visitors who browse fry99.io without an account.

This Policy should be read alongside the fry99 Terms & Conditions and Responsible Gaming Policy, both of which are integral parts of the overall agreement between you and fry99. Where this Privacy Policy conflicts with a general statement in another fry99 document, this Privacy Policy shall govern with respect to the processing of personal data.

fry99 collects the following categories of personal data in connection with the operation of the Platform:

fry99 does not intentionally collect or process any special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data) except where required for a specific legal compliance purpose, in which case explicit consent will be sought separately.

fry99 collects personal data through the following channels:

• Direct Submission: Data you provide actively during account registration, KYC document upload, deposit and withdrawal requests, contact form submissions, and live chat support interactions.
• Automated Technical Collection: Data collected automatically as you interact with the fry99 Platform, including IP addresses, device identifiers, session data, and browser information gathered via server logs and first-party analytics tools.
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and local storage as described in Section 7 of this Policy. fry99 uses only strictly necessary and functional cookies on the Platform.
• Payment Processors: Confirmation data returned from payment processors (bKash, Nagad, Rocket, Upay, and banking partners) upon successful completion of a deposit or withdrawal transaction. This data confirms the transaction reference and the account holder's identity as registered with the payment provider.
• Identity Verification Partners: Where fry99 engages a third-party identity verification service to process KYC documents, that partner may return a verification result and risk score to fry99. The raw document images are not retained beyond the verification process by the third-party partner.
• Fraud Detection Systems: Automated risk-scoring data generated by fry99's internal fraud prevention systems based on patterns of Platform usage, device fingerprinting, and transaction behaviour analysis.

fry99 uses the personal data it collects for the following specific purposes:

• Account Registration and Management: To create and maintain your fry99 player account, verify your identity and age, manage your account preferences, and enable your access to Platform features.
• Payment Processing: To process your deposit requests via bKash, Nagad, Rocket, Upay, and bank transfers, and to process approved withdrawal requests back to your registered payment method in Bangladeshi Taka (BDT).
• KYC and Regulatory Compliance: To fulfil fry99's obligations regarding know-your-customer verification, anti-money laundering (AML) monitoring, age verification, and other applicable compliance requirements.
• Customer Support: To respond to your queries, complaints, and support requests through live chat and email, and to maintain a record of our correspondence for quality assurance and dispute resolution purposes.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling behaviour, to action your requests for deposit limits, session timers, cooling-off periods, or self-exclusion, and to fulfil our duty of care obligations toward players.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion, match-fixing, and money laundering on the Platform.
• Marketing Communications: With your explicit consent (where required), to send you promotional offers, bonus notifications, and seasonal campaign information relevant to your fry99 activity. See Section 12 for full details of your marketing preferences rights.
• Platform Improvement: To analyse aggregate, anonymised usage data to improve the fry99 Platform's functionality, performance, game selection, and user experience for all players.
• Legal and Regulatory Obligations: To comply with any legal obligation, court order, or lawful request from a competent regulatory authority requiring the disclosure of specific player data.

fry99 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

fry99 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary for fry99 to fulfil the contract it has entered into with you when you registered your account — including account creation, payment processing, KYC verification, and dispute resolution.
• Legal Obligation: Processing that fry99 is required to perform in order to comply with applicable legal and regulatory requirements, including AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of fry99's legitimate business interests — including fraud prevention, security monitoring, and anonymised Platform analytics — where those interests are not overridden by your privacy rights. fry99 conducts a balancing assessment before relying on this basis.
• Consent: Processing activities for which fry99 has obtained your explicit, informed, and freely given consent — primarily direct marketing communications. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.

fry99 does not sell, rent, or trade your personal data. We share your personal data only with the following limited categories of third parties, strictly for the purposes described, and subject to contractual data protection obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your deposit and withdrawal transactions. These parties receive only the data required to execute the specific transaction.
• Identity Verification Partners: Third-party KYC service providers engaged by fry99 to verify the authenticity of identity documents submitted during account verification. These partners operate under strict data processing agreements and may not use your data for any purpose other than the verification service they provide to fry99.
• Game Content Providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) whose games are integrated into the fry99 Platform. These providers receive a session token and anonymised player identifier to deliver game content; they do not receive your full identity data.
• Fraud Prevention and Security Services: Third-party fraud detection and cybersecurity partners who assist fry99 in identifying and preventing fraudulent activity, operating under confidentiality and data processing obligations.
• Legal and Regulatory Authorities: Where fry99 is required by law, court order, or regulatory instruction to disclose specific player data to a competent legal or regulatory authority. fry99 will notify you of any such disclosure to the extent permitted by law.
• Professional Advisers: Lawyers, auditors, and accountants who require access to certain data as part of their professional advisory services to fry99, bound by professional confidentiality obligations.

All third parties with whom fry99 shares personal data are required to maintain the confidentiality and security of that data and are contractually prohibited from using it for any purpose beyond the specific service they provide to fry99. fry99 conducts due diligence on all third-party data processors before engaging their services.

fry99 uses cookies and similar tracking technologies on the Platform to ensure core functionality and to improve your experience. The categories of cookies used by fry99 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the fry99 Platform to function. They maintain your session when you are logged in, remember your account authentication state, and protect against cross-site request forgery. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Functional Cookies: These cookies remember your Platform preferences — such as your preferred language setting and display configuration — so that you do not need to re-enter them on each visit. They do not track your activity across other websites.
• Analytics Cookies: fry99 uses first-party analytics cookies to collect anonymised data about how players navigate and use the Platform. This data is used solely to improve Platform performance and user experience. No individual player is identified in this data.
• Security Cookies: Short-lived cookies used by fry99's fraud prevention systems to assess the risk profile of login attempts and transactions. These cookies contain no personally identifiable information.

fry99 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent the fry99 Platform from functioning correctly.

fry99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures in place include:

• SSL/TLS Encryption in Transit: All data transmitted between your device and fry99.io is encrypted using TLS 1.2 or higher. The fry99 domain enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
• Encryption at Rest: Personal data and financial records stored on fry99 servers are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a scheduled basis.
• Access Controls: Access to systems containing personal data is strictly limited to fry99 personnel who require it to perform their specific job function. All internal access is authenticated via multi-factor authentication and is logged for audit purposes.
• Penetration Testing: fry99 engages independent cybersecurity professionals to conduct regular penetration tests of the Platform's infrastructure and application layer to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: fry99 maintains a documented data breach incident response plan. In the event of a security incident that poses a material risk to your personal data, fry99 will notify affected account holders within a reasonable timeframe of becoming aware of the breach.
• Two-Step Verification: fry99 offers OTP-based two-step verification for all registered accounts via your Bangladeshi mobile number. We strongly recommend all players enable this feature immediately after registration.

While fry99 takes all reasonable and practical steps to protect your personal data, no digital system is completely immune to security threats. You also play a role in protecting your data — please use a strong, unique password for your fry99 account and never share your login credentials with any third party.

fry99 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

When data reaches the end of its retention period, it is securely deleted from fry99's active systems. Data held in backup archives is overwritten in accordance with fry99's scheduled backup rotation policy. Anonymised, aggregated data derived from personal data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

As a data subject whose personal information is processed by fry99, you hold the following rights with respect to that data:

• Right of Access: You have the right to request a copy of all personal data that fry99 holds about you, along with information about how it is being used. fry99 will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that fry99 holds about you. Where possible, you can correct certain data directly within your fry99 account settings without needing to contact support.
• Right to Erasure: In certain circumstances, you have the right to request that fry99 delete the personal data it holds about you — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other lawful basis applies. Please note that fry99 may be required to retain certain data for legal or regulatory compliance reasons even where an erasure request is made.
• Right to Restrict Processing: You have the right to request that fry99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where fry99 relies on legitimate interests as its lawful basis. fry99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". fry99 may ask you to verify your identity before processing your request to protect against unauthorised access to your data. All verified requests will be responded to within 30 calendar days of receipt. If fry99 is unable to fulfil your request, we will explain the reason in writing.

fry99 is strictly an adults-only platform. Access to and use of the fry99 Platform is permitted only for individuals who are 21 years of age or older. fry99 does not knowingly collect, process, or retain personal data from any person under the age of 21.

As part of the account registration and KYC verification process, fry99 requires all applicants to confirm their date of birth and to submit valid government-issued identity documentation proving that they are aged 21 or above. Accounts that cannot be verified as belonging to a person aged 21 or above will be rejected or suspended pending verification.

If fry99 becomes aware that personal data has been inadvertently collected from a person who is under 21 years of age, that data will be deleted immediately from fry99's systems and the associated account will be permanently closed. Any funds held in the account will be returned in accordance with fry99's standard verification and withdrawal procedures.

If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to fry99, please contact us immediately at [email protected] with the subject line "Minor Account Report". fry99 treats all such reports as a highest-priority matter and will investigate and action within 24 hours of receipt.

With your explicit consent, fry99 may send you promotional communications relating to bonuses, special offers, seasonal campaigns (such as Eid, Pohela Boishakh, Victory Day, and IPL/BPL season promotions), new game launches, and other fry99 news. These communications may be delivered via email, SMS to your registered Bangladeshi mobile number, or in-Platform notification.

fry99 will never send you marketing communications without your prior consent. At the time of account registration, you will be given a clear, opt-in choice regarding marketing communications — it is not pre-ticked or assumed. You are under no obligation to opt in to marketing in order to use the fry99 Platform.

You may opt out of marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included in every fry99 marketing email.
• Replying "STOP" to any fry99 promotional SMS message.
• Updating your communication preferences within your fry99 account settings.
• Contacting fry99 support at [email protected] with the subject line "Marketing Opt-Out".

Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications, which fry99 is required to send in connection with your account — such as deposit confirmations, withdrawal notifications, KYC request emails, and security alerts.

The fry99 Platform may, from time to time, contain references to third-party services, payment providers, or game studios. While fry99 takes care to reference only reputable third-party services, fry99 is not responsible for the privacy practices or content of any third-party website or service that is not owned and operated by fry99.

If you follow a link to a third-party website — for example, navigating to the bKash or Nagad mobile banking platform to complete a deposit — you should read the privacy policy of that third-party service carefully, as it will govern how that service handles your personal data independently of this Privacy Policy.

This Privacy Policy applies exclusively to data collected and processed by fry99 in connection with the operation of fry99.io. It does not apply to any data processed by third parties acting as independent data controllers in connection with their own services.

fry99 reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the features and functionality of the Platform.

When fry99 makes a material change to this Privacy Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — we will notify registered account holders via the email address associated with their account at least 14 days before the change takes effect. A prominent notice will also be displayed within the Platform at the point of next login.

Minor, non-material updates (such as formatting corrections, clarification of existing practices, or updates to contact details) may be made without direct notification. The "Last Updated" date shown in the hero section of this page and at the top of the Policy document will always reflect the date of the most recent revision.

Your continued use of the fry99 Platform after any update to this Privacy Policy constitutes your acknowledgement that you have read the revised Policy and accept the updated data processing practices it describes. If you do not agree with any change to this Policy, you should stop using the Platform and contact [email protected] to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fry99 processes your personal data, please do not hesitate to get in touch. fry99 takes all privacy-related correspondence seriously and commits to responding to every inquiry within 5 business days.

• Email: [email protected] — use subject line "Privacy Enquiry" for general questions, "Data Rights Request" to exercise a specific right, or "Minor Account Report" for urgent child safety matters.
• Live Chat: Available 24/7 at fry99.io — our support team can handle initial privacy queries via live chat and escalate to the compliance team where necessary.
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (BST, UTC+6) business hours for general account and privacy queries.