Privacy Policy — facai77

facai77 collects personal data from you in several ways: directly when you register an account or contact support, automatically when you use the platform, and from third parties such as payment providers and identity verification services where relevant. The categories of data we collect are set out below.

Account registration data:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Email address (used for account communications and login)
• Mobile phone number registered in Bangladesh (used for two-factor authentication and account notifications)
• Residential address in Bangladesh (used for identity verification and fraud prevention)
• Username and encrypted password (the password itself is never stored in plain text)

Identity verification (KYC) data:

• Scanned copy or photograph of a government-issued photo ID (Bangladesh National Identity Card, passport, or driver's licence)
• Proof of address document (recent utility bill, bank statement, or similar document issued in Bangladesh)
• Selfie photograph where required to match against identity document
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing registered name and number)

Transaction and financial data:

• Deposit and withdrawal amounts, dates, and methods (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Mobile wallet numbers associated with bKash, Nagad, or Rocket transactions
• Bank account details where bank transfer is used as a payment method
• Transaction reference numbers and payment provider confirmation codes
• Running account balance and bonus balance history

Gaming activity data:

• Game sessions played, including game title, provider, stakes, and outcomes
• Sports bets placed, including event, market, odds, stake, and settlement result
• Bonus offers activated, wagering progress, and bonus settlement records
• Session durations and login/logout timestamps

Technical and device data collected automatically:

• IP address at the time of each session
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Referring URL (the page you visited before arriving at facai77)
• Pages visited within the facai77 platform and time spent on each page
• Cookie identifiers and session tokens (see Cookies section below)

facai77 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are: contractual necessity (processing required to operate your account and deliver the services you have requested), legal obligation (processing required to comply with anti-money-laundering, fraud prevention, and age verification laws), legitimate interests (processing required to keep the platform secure and to improve user experience), and, where applicable, your consent (for optional communications and non-essential cookies).

The table below summarises the key purposes for which facai77 processes your personal data:

facai77 does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects without human review. Where automated systems flag an account for fraud or AML review, a member of the facai77 compliance team will conduct a manual assessment before any account action is taken.

facai77 does not sell your personal data to any third party. We share personal data only where it is necessary to deliver the services you have requested, to comply with our legal obligations, or to protect the safety and integrity of the platform. The categories of third parties with whom we may share data are described below.

• Payment service providers: When you make a deposit or request a withdrawal, the transaction data necessary to process that payment is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, or Mastercard, as applicable. These providers are contractually bound to use your data only for the purpose of processing the transaction.
• Identity verification services: To fulfil our KYC obligations, we may share identity document images and related data with third-party identity verification providers. These providers process your data on our behalf under strict data processing agreements.
• Game content providers: When you play a game supplied by a third-party studio — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — certain session data (such as player ID, stake, and game outcome) is transmitted to and processed by that provider's gaming server. These providers operate independently certified RNG systems and are bound by their own data protection obligations as game suppliers.
• Fraud prevention and AML services: We may share transaction data, IP addresses, and device fingerprints with third-party fraud detection and anti-money-laundering screening services to protect the platform and its players.
• Law enforcement and regulatory authorities: facai77 may be required by law to disclose personal data to governmental authorities, law enforcement agencies, or financial intelligence units in connection with fraud investigations, AML inquiries, or court orders. We will disclose only the minimum data required to comply with a lawful request and will notify affected players where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the facai77 business, player personal data may be transferred to the acquiring entity as part of the business assets. Affected players will be notified in advance of any such transfer and of any changes to the Privacy Policy that result from it.

facai77 uses cookies and similar client-side tracking technologies (such as local storage tokens and session identifiers) to operate the platform, maintain your login session, detect fraud, and collect anonymised performance analytics. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files stored on your device.

The cookies used by facai77 fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your authenticated session, remember your language preference, and ensure that security tokens are correctly validated on each request. The platform cannot be used without these cookies. No consent is required for strictly necessary cookies.
• Functional cookies: These cookies remember your platform preferences, such as preferred game category, display settings, and notification preferences. Disabling functional cookies may result in a reduced platform experience but will not prevent access to core features.
• Analytics cookies: facai77 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical errors occur. This data is used solely for platform improvement and is not linked to individual player profiles.
• Fraud and security cookies: Device fingerprinting tokens and session integrity cookies help facai77 detect suspicious login behaviour, account takeover attempts, and coordinated bonus abuse. These cookies are classified as strictly necessary from a security standpoint.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your facai77 account. For mobile users accessing the platform via a mobile browser on devices in Dhaka, Chittagong, Sylhet, or elsewhere in Bangladesh, the same cookie management options are available through your mobile browser's privacy settings.

facai77 applies a layered approach to data security, combining technical controls, organisational policies, and staff training to protect the personal data of our players. While no online platform can guarantee absolute security against all possible threats, we maintain the following measures as a baseline:

• Transport layer encryption: All communications between your browser or app and the facai77 platform are encrypted using TLS 1.2 or higher. Older, insecure protocol versions are disabled.
• Password hashing: Account passwords are stored as salted cryptographic hashes using an industry-standard algorithm. Plain-text passwords are never stored or logged.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts using a registered Bangladesh mobile number. 2FA adds a one-time code requirement to the login process, significantly reducing the risk of unauthorised account access.
• Access controls: Access to player personal data within facai77 is restricted to staff members whose role requires it. All internal data access is logged and subject to regular audit review.
• Encryption at rest: Sensitive data fields — including identity document images, payment method details, and KYC records — are encrypted at rest in the facai77 database infrastructure.
• Security monitoring: The platform employs continuous monitoring for anomalous login activity, unusual transaction patterns, and known attack signatures. Suspicious events trigger automated alerts and manual review by the security team.
• Incident response: In the event of a personal data breach that is likely to result in a risk to affected individuals, facai77 will notify affected players without undue delay, providing details of the nature of the breach, the data involved, and the steps being taken to address it.

You play an important role in keeping your account secure. Do not share your password or 2FA codes with anyone, including persons claiming to represent facai77. Our support team will never ask you for your password. If you believe your account has been accessed without your authorisation, contact support@facai77 immediately so that we can investigate and take protective action.

facai77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply as a general guide:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player. KYC documents and financial records are subject to the longer retention periods described above due to legal obligations, even where a player has requested account closure or data deletion.

If you request deletion of your account and personal data, facai77 will process that request as promptly as possible. However, data that is subject to a legal retention obligation — such as transaction records and KYC documents — cannot be deleted until the applicable retention period has elapsed. You will be informed of any such limitations when your deletion request is acknowledged.

As a registered player on the facai77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at support@facai77 from the email address associated with your account. We will respond to your request within a reasonable timeframe, and in any event within 30 days. We may need to verify your identity before processing your request.

• Right of access: You have the right to request a copy of the personal data that facai77 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details (such as your email address or phone number) directly within your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to legal retention obligations as described in the Data Retention section.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests. If you object, facai77 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing emails or promotional SMS messages), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to restrict processing: In certain circumstances — such as where you contest the accuracy of the data we hold, or where you have objected to processing and the outcome is pending — you may request that we restrict processing of your data to storage only while the matter is resolved.

facai77 reviews this Privacy Policy periodically and will update it to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. The effective date at the top of this document will be updated whenever a new version is published. Where changes are material — meaning they significantly affect how we use your data or the rights available to you — we will notify registered players via email to the address on record, or via a prominent notice on the platform, before the new version takes effect.

Your continued use of the facai77 platform following notification of a material change to this Privacy Policy constitutes your acknowledgement of the updated version. If you do not agree with the changes, you may request closure of your account in accordance with the Account Closure provisions in our Terms & Conditions.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which facai77 handles your personal data, please contact our data protection team:

• Email: support@facai77
• Response time: We aim to respond to all privacy-related enquiries within 5 business days. Complex data subject access requests may require up to 30 days to process fully.
• Language: All communications regarding this Privacy Policy are handled in English.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the facai77 Privacy Policy. For the avoidance of doubt, this Privacy Policy applies only to the facai77 platform and does not extend to any third-party websites, payment providers, or game studio platforms that may be linked to or integrated with our services. Please review the privacy policies of those third parties separately.