fa9 Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is published by fa9 ("the Platform", "we", "us", "our"), an internationally operated online casino and sports betting service available to players in Bangladesh at fa9.club. This Policy explains how we collect, process, store, share, and protect personal data in connection with your use of our platform, and describes the rights you hold in relation to that data.

By registering an account on fa9, accessing any part of the platform, or interacting with our customer support team, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the fa9 platform immediately.

This Policy applies to all personal data collected through the fa9 website at fa9.club, through our mobile-compatible platform interface, and through any communications you initiate with our support team via email or live chat. It covers all players, including registered account holders and unregistered visitors who browse the platform without creating an account.

Data We Collect

fa9 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems as you browse and play, and in limited circumstances from third-party verification and fraud-prevention partners. The categories of personal data we collect include:

fa9 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, trade union membership, genetic data, biometric data (for identification purposes), or health data beyond what is strictly necessary to assess responsible gaming concerns where a player voluntarily discloses such information.

How We Use Your Data

fa9 processes your personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties, and we do not use it for purposes that are incompatible with the reasons it was originally collected. The primary purposes for which fa9 processes personal data are:

• Account Registration & Management: To create and maintain your fa9 player account, verify your identity and age, manage your account settings, and ensure each player holds only one registered account on the platform.
• Service Delivery: To provide access to our full range of betting and gaming products, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and deliver customer support services.
• Legal & Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification mandates, and any reporting obligations imposed by relevant authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and any other conduct that threatens the integrity of the platform or the safety of other players.
• Responsible Gaming: To monitor gameplay patterns for signs of problematic gambling behaviour, enforce deposit limits, time-out periods, and self-exclusion requests, and proactively reach out to players who may benefit from responsible gaming support.
• Marketing & Promotions: Where you have provided consent, to send promotional communications about fa9 bonuses, seasonal offers (such as BPL promotions, Eid offers, and Pohela Boishakh specials), and platform updates. You may withdraw this consent at any time by contacting [email protected].
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the platform's performance, game selection, user experience, and payment processes for players across Bangladesh.

Data Sharing & Disclosure

fa9 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with a limited set of carefully selected third parties in the following circumstances:

1. Payment Processing Partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum personal and financial data required to process your deposit or withdrawal transactions. These providers operate under their own privacy frameworks and are bound by strict data security standards.
2. Identity Verification & KYC Providers: fa9 uses regulated third-party identity verification services to confirm player age and identity. These providers may receive copies of the identity documents you submit and are obligated to handle such data with the highest level of confidentiality.
3. Game Software Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game logic on their own servers. Technical session data (such as a session token and game result records) is shared with these providers to facilitate gameplay. These providers do not receive your full personal profile.
4. Fraud Detection & AML Services: fa9 uses specialist third-party fraud detection and anti-money laundering screening tools. Relevant transaction and identity data may be shared with these providers strictly for the purpose of detecting and preventing financial crime.
5. Legal & Regulatory Authorities: fa9 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where fa9 has reasonable grounds to believe that disclosure is necessary to prevent a serious crime or protect the safety of any individual.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or part of fa9's business, personal data held by fa9 may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity honouring the terms of this Privacy Policy.

Cookies & Tracking Technologies

fa9 uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, measure platform performance, and — where consent has been given — deliver relevant promotional content. The following types of cookies and trackers are used on the fa9 platform:

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect your ability to use certain features of the fa9 platform. Please note that blocking strictly necessary cookies may prevent you from logging in or accessing your account. To opt out of marketing cookies specifically, contact [email protected].

Data Retention

fa9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, regulatory obligation, or legitimate business need. The following retention principles apply:

• Active Accounts: Personal data associated with an active fa9 player account is retained for the full duration of the account's existence and for a minimum of five (5) years following account closure, in order to comply with AML record-keeping obligations and to resolve any disputes that may arise after closure.
• Financial Transaction Records: Records of all deposits, withdrawals, and betting activity are retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Documents: Identity verification documents (such as copies of national ID cards or passports) are retained for the period required by applicable AML regulations, which is typically five (5) years from the date of verification or from the date of account closure, whichever is later.
• Support Communications: Records of customer support interactions, including email correspondence and live chat transcripts, are retained for three (3) years from the date of each interaction to facilitate dispute resolution and service improvement.
• Marketing Data: Where you have consented to receiving promotional communications, your contact details will be retained for this purpose until you withdraw your consent. Upon withdrawal of consent, your data will be removed from our marketing lists within 30 days.
• Technical Logs: Server logs and technical usage data are generally retained for up to twelve (12) months, after which they are anonymised or deleted, unless specific records are required to be retained longer for fraud investigation or legal proceedings.

Your Privacy Rights

fa9 respects your rights in relation to your personal data. Depending on the laws applicable to you, you may hold some or all of the following rights with respect to the data we hold about you:

1. Right of Access: You have the right to request a copy of the personal data that fa9 holds about you, along with information about how that data is being used. fa9 will respond to a verified access request within 30 calendar days.
2. Right to Rectification: If any personal data held by fa9 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly through your account settings, or contact support for assistance.
3. Right to Erasure: In certain circumstances, you may request that fa9 delete your personal data. Please note that this right is subject to exceptions — for example, fa9 is required to retain financial and KYC records for the periods described in Section 6 above, and erasure requests cannot override these legally mandated retention periods.
4. Right to Restriction of Processing: You may request that fa9 restrict the processing of your personal data in certain situations, such as while a dispute regarding the accuracy of the data is being resolved.
5. Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on fa9's legitimate interests, though such objections will be assessed on a case-by-case basis.
6. Right to Data Portability: Where processing is carried out by automated means and based on your consent or a contract, you may request that fa9 provide your personal data in a structured, commonly used, machine-readable format.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

Data Security

fa9 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL Encryption: All data transmitted between your device and the fa9 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all pages of the platform, including the account registration flow, cashier, and support portal.
• Encrypted Data Storage: Sensitive personal data, including identity document copies and financial records, is stored in encrypted form within secure, access-controlled data infrastructure. Access is restricted to authorised personnel on a strict need-to-know basis.
• Access Controls: Internal access to personal data is governed by role-based access control policies. fa9 staff members are granted access only to the data necessary to perform their specific job function. All access is logged and subject to periodic review.
• Fraud Monitoring Systems: Automated systems continuously monitor account activity for anomalies indicative of unauthorised access, account takeover attempts, or suspicious financial behaviour. Alerts are reviewed by our security team in real time.
• Staff Training: All fa9 personnel who handle personal data receive regular training on data protection obligations, secure data handling procedures, and the recognition and reporting of data security incidents.
• Incident Response: In the event of a data security incident that poses a risk to the rights and freedoms of players, fa9 will notify affected individuals and relevant authorities as required by applicable law, within the timeframes specified by those laws.

Third-Party Links & Services

The fa9 platform may contain references to or integrations with third-party services, including game software providers, payment processors, and analytics tools. While fa9 carefully selects its third-party partners, please be aware of the following:

• Separate Privacy Policies: Third-party services integrated with the fa9 platform — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate under their own privacy policies. fa9 is not responsible for the data practices of these third parties.
• Payment Providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your interaction with those payment systems is governed by the privacy terms of the respective payment provider. fa9 does not store full payment credentials on its own servers.
• No Endorsement of Third-Party Practices: The fact that fa9 integrates with a third-party service does not constitute an endorsement of that party's privacy or data security practices. fa9 encourages all players to review the privacy policies of any third-party service they interact with.

Policy Updates & Contact

fa9 reserves the right to amend this Privacy Policy at any time. When material changes are made, we will update the effective date displayed at the top of this page and, where the changes are significant, notify registered players via the email address associated with their account. Continued use of the fa9 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed of how fa9 handles your personal data. The most current version of this Policy will always be accessible at fa9.club/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fa9 processes your personal data, please contact our support team using the details below. fa9 is committed to responding to all privacy-related enquiries promptly and transparently.