Privacy Policy — fb677 Casino Bangladesh
At fb677 we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and protect it, and the rights you hold over your own information. Please read this document in full before creating an account.
Who We Are & Scope of This Policy
fb677 (hereinafter "fb677", "we", "us", or "our") operates the online casino and sports betting platform accessible at fb677.app and its associated sub-domains (collectively, "the Platform"). This Privacy Policy applies to all personal data processed by fb677 in connection with a player's registration, use of games and betting markets, customer support interactions, and any other engagement with the Platform.
This policy covers personal data relating to individuals located in Bangladesh and any other jurisdiction from which the Platform is accessed. The policy does not apply to third-party websites or services that may be linked to from the Platform. fb677 is not responsible for the privacy practices of those third parties.
By registering an account on fb677 or by otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not consent to the terms of this policy, you must not create an account or use the Platform.
Data We Collect
fb677 collects personal data from players through several channels: directly from you when you register an account or contact support; automatically through your use of the Platform; and from third-party identity verification and payment service providers. The categories of personal data we collect are described below.
1.1 Registration Data
When you create a fb677 account, we collect the following information:
- Full legal name as it appears on your government-issued identity document
- Date of birth (used for mandatory age verification — players must be 18 or older)
- Bangladeshi mobile phone number (used for account verification and OTP authentication)
- Email address (used for account communications and promotional messaging where opted in)
- Residential address in Bangladesh
- Username and encrypted password (passwords are never stored in plaintext)
1.2 Identity Verification (KYC) Data
To comply with anti-money-laundering (AML) requirements and to verify that players are aged 18 or above, fb677 requires Know Your Customer (KYC) documentation before processing any withdrawal. KYC data we collect includes:
- A clear copy of a valid government-issued photo ID (National Identity Card, passport, or driving licence)
- Proof of residential address (utility bill, bank statement, or similar document issued within the last 90 days)
- Proof of payment method ownership (screenshot or statement confirming that the bKash, Nagad, Rocket, Upay, or bank account used for deposits belongs to you)
- A selfie photograph holding your identity document, where requested by our verification team
1.3 Transaction Data
When you make deposits or withdrawals on the Platform, we record:
- Payment method type (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard)
- Transaction amount in Bangladeshi Taka (BDT)
- Transaction date, time (Bangladesh Standard Time, UTC+6), and reference number
- Transaction status (pending, completed, declined, reversed)
fb677 does not store full payment card numbers or mobile wallet PINs. Payment credentials are tokenised by our payment gateway partners and are never written to fb677 servers.
1.4 Gaming Activity Data
We record data about your activity on the Platform, including:
- Games played, bet amounts, wager outcomes, and session duration
- Sports betting markets accessed, odds accepted, and bet settlement results
- Bonus offers claimed, wagering requirement progress, and bonus expiry events
- Self-exclusion or responsible gaming tool activations
1.5 Technical & Device Data
When you access the Platform, our servers automatically collect certain technical information:
- IP address and approximate geolocation derived from IP
- Device type (mobile, tablet, desktop), operating system, and browser version
- Referring URL, pages visited within the Platform, and time spent per page
- Session identifiers and authentication tokens
1.6 Customer Support Data
When you contact fb677 support via live chat or email, we collect and retain:
- The content of your messages and any attachments you send
- Your name, Account ID, and contact details as provided in the support interaction
- A record of the resolution outcome and any follow-up actions taken
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Name, DOB, mobile number, email | Provided by player at signup |
| KYC / Identity Data | NID copy, selfie, address proof | Uploaded by player on request |
| Transaction Data | Deposit/withdrawal amounts, payment method | Automatically recorded on transaction |
| Gaming Activity | Bets placed, games played, bonuses used | Automatically recorded by Platform |
| Technical & Device Data | IP address, browser, device type | Automatically captured by server logs |
| Support Data | Chat transcripts, email correspondence | Provided by player via support channels |
How We Use Your Data
fb677 processes your personal data only for the purposes described in this section and only where we have a lawful basis for doing so. We do not sell your personal data to third parties. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected.
2.1 Account Administration
We use your registration data to create and maintain your fb677 account, to authenticate your identity each time you log in, and to communicate with you about your account status. This processing is necessary for the performance of the contract between you and fb677.
2.2 Age Verification & KYC Compliance
fb677 has a strict legal and ethical obligation to ensure that all players are aged 18 years or above. We use your date of birth and KYC documents to fulfil this obligation. We also use KYC data to comply with anti-money-laundering (AML) regulations, to detect fraud, and to verify the legitimacy of funds used on the Platform. This processing is necessary for compliance with legal obligations to which fb677 is subject.
2.3 Payment Processing
We use your transaction data to process deposits and withdrawals, to reconcile account balances, and to investigate and resolve payment disputes. Transaction records are also maintained for financial audit and AML reporting purposes. This processing is necessary both for contractual performance and for legal compliance.
2.4 Responsible Gaming Monitoring
fb677 uses your gaming activity data to monitor for indicators of problem gambling behaviour, such as rapidly escalating bet sizes, extended unbroken play sessions, or repeated self-exclusion requests. Where such indicators are detected, fb677 may proactively contact you with responsible gaming information or may temporarily limit your account activity. This processing reflects fb677's legitimate interest in operating a responsible gaming platform.
2.5 Fraud Prevention & Platform Security
We use technical and device data, transaction data, and gaming activity data to detect and investigate suspicious account activity, multi-accounting, bonus abuse, payment fraud, and potential money laundering. This processing is necessary for the legitimate interests of fb677 and its player community in maintaining a safe and fair gaming environment.
2.6 Customer Support
We use support interaction data to provide you with assistance, to investigate complaints, and to improve the quality of our support service. Support records are retained to provide continuity of service across multiple interactions relating to the same issue.
2.7 Marketing Communications
Where you have opted in to receive promotional communications from fb677, we use your email address and mobile number to send you information about bonuses, promotions, new games, and seasonal events such as those tied to the Bangladesh Premier League (BPL), IPL, T20 World Cup, Eid, and Pohela Boishakh. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.
2.8 Platform Improvement & Analytics
We use aggregated and anonymised technical and gaming activity data to analyse Platform usage patterns, optimise game performance, improve page load times, and plan new features. This data is processed in aggregated form and cannot be used to identify you as an individual.
Data Sharing & Third Parties
fb677 shares your personal data only with those third parties where it is necessary to operate the Platform, comply with legal obligations, or protect the legitimate interests of fb677 and its players. All third parties with whom fb677 shares data are required by contract to implement appropriate technical and organisational security measures and to process your data only for the specific purposes for which it was shared.
3.1 Payment Service Providers
To process deposits and withdrawals, fb677 shares relevant transaction data with our payment gateway partners and the underlying payment networks (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard). The data shared is limited to what is strictly necessary to authenticate and complete each transaction. Payment service providers are bound by their own regulatory obligations regarding data protection.
3.2 Identity Verification Providers
fb677 uses third-party KYC and identity verification service providers to cross-check identity documents and to perform automated age verification checks. These providers process KYC data on behalf of fb677 and are contractually prohibited from using that data for any purpose other than verification on fb677's behalf.
3.3 Game Software Providers
Live dealer games on the fb677 Platform are delivered by third-party providers including Evolution Gaming and Ezugi. To facilitate your participation in live dealer game sessions, fb677 shares your Account ID and session token with the relevant provider. Game providers do not receive your full name, address, or financial data. Game software providers operate their platforms under their own data protection frameworks, details of which are available in their respective privacy notices.
3.4 Fraud Prevention & AML Services
fb677 may share account, transaction, and device data with third-party fraud detection services and AML screening databases to identify and prevent financial crime. This sharing is carried out under a legitimate interests basis and, where required, in compliance with applicable AML legislation.
3.5 Legal & Regulatory Authorities
fb677 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where required by applicable law, by court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of individuals, or enforce our Terms & Conditions. fb677 will inform you of any such disclosure where legally permitted to do so.
3.6 Business Transfers
In the event that fb677 undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy implications via your registered email address before the transfer takes effect.
Cookies & Tracking Technologies
fb677 uses cookies and similar tracking technologies (collectively "cookies") on the Platform to enable core functionality, improve your experience, and gather analytics data. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.
4.1 What Are Cookies
Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store preferences and session information. Cookies cannot execute code, carry viruses, or access personal files on your device.
4.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, account login state, security tokens, fraud prevention flags | Session only |
| Functional | Language preference, odds format selection, responsible gaming tool settings | Up to 12 months |
| Analytics | Page visit counts, feature usage patterns, error logging — all in aggregated, anonymised form | Up to 24 months |
| Marketing | Tracking visits from promotional campaigns to attribute new registrations to the correct source; used only where consent has been given | Up to 30 days |
4.3 Managing Your Cookie Preferences
Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. For all other cookie categories, you may adjust your preferences at any time by updating the settings in your web browser. Most modern browsers allow you to block or delete cookies via the browser settings menu. Please note that disabling functional cookies may affect your ability to use certain features of the Platform, such as saved preferences and responsible gaming tool settings.
4.4 Do Not Track
Some browsers transmit a "Do Not Track" (DNT) signal to websites. fb677 currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how websites should respond to such signals. We will update this section if and when a recognised standard is established.
Data Security
fb677 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. No method of transmission over the internet is 100% secure, but fb677 takes all commercially reasonable steps to protect your data.
5.1 Technical Safeguards
- 256-bit TLS Encryption: All data transmitted between your browser or device and fb677 servers is encrypted in transit using Transport Layer Security (TLS) 1.2 or higher.
- Encrypted Data Storage: Sensitive personal data fields including identity document scans and payment reference data are encrypted at rest using AES-256 encryption.
- Password Hashing: Account passwords are stored as one-way cryptographic hashes using bcrypt. fb677 staff cannot retrieve your password in plaintext; only you know it.
- OTP Authentication: Account login and withdrawal confirmations are secured with one-time password (OTP) verification sent to your registered Bangladeshi mobile number via SMS.
- Access Controls: Access to player personal data within fb677 is restricted on a strict need-to-know basis. Staff with access to sensitive player data are subject to background checks and confidentiality obligations.
5.2 Organisational Safeguards
- Regular internal audits of data access logs and security configurations
- Mandatory data protection training for all staff who handle personal player data
- A defined incident response procedure for suspected or confirmed data breaches
- Vendor security assessments for all third-party providers who process player data on fb677's behalf
5.3 Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, fb677 will notify affected individuals via their registered email address within a reasonable timeframe following discovery of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps fb677 has taken or is taking to address the incident.
Data Retention
fb677 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, or to defend or establish legal claims. The retention periods set out below reflect fb677's balancing of operational necessity against the principle of data minimisation.
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration & Account Data | Duration of account + 7 years after closure | AML compliance, legal claims |
| KYC / Identity Documents | 7 years after account closure | AML & regulatory requirements |
| Transaction Records | 7 years from transaction date | Financial audit, AML reporting |
| Gaming Activity Logs | 3 years from date of activity | Responsible gaming, dispute resolution |
| Customer Support Records | 3 years from last interaction | Service continuity, complaint handling |
| Marketing Consent Records | Until consent withdrawn + 2 years | Demonstrating lawful basis for marketing |
| Server & Access Logs | 12 months | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, fb677 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where anonymisation is not technically feasible, data will be securely destroyed using industry-standard data erasure methods.
Your Privacy Rights
fb677 respects your rights in relation to your personal data. The rights described in this section may be exercised by contacting our support team at [email protected] (plain text — not a clickable link). fb677 will respond to all verified privacy rights requests within 30 days of receipt. Where a request is particularly complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
7.1 Right of Access
You have the right to request a copy of all personal data that fb677 holds about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible. The first copy is provided free of charge; fb677 may charge a reasonable administrative fee for subsequent copies requested within a 12-month period.
7.2 Right to Rectification
If any of the personal data fb677 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. To update basic account details such as your email address or mobile number, you may do so directly within your Account settings. For corrections to identity or KYC data, please contact the support team.
7.3 Right to Erasure
You may request that fb677 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that the right to erasure is not absolute: fb677 may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements) even after you request deletion. Where erasure is not possible in full, fb677 will explain which data must be retained and why.
7.4 Right to Restriction of Processing
You have the right to request that fb677 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being resolved, or where you have objected to processing pending a determination of fb677's legitimate interests. During a period of restriction, fb677 will continue to store your data but will not process it for any purpose other than storage, unless you consent to other processing or processing is necessary for legal claims.
7.5 Right to Data Portability
Where fb677 processes your personal data by automated means on the basis of your consent or for contractual performance, you have the right to receive that data in a structured, commonly used, and machine-readable format and to transmit it to another service provider of your choosing. To exercise this right, contact [email protected] with the subject line "Data Portability Request".
7.6 Right to Object to Marketing
You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, fb677 will cease marketing processing immediately. You may also use the unsubscribe link in any marketing email to exercise this right without contacting the support team directly.
7.7 How to Exercise Your Rights
To exercise any of the rights described above, send a written request to the fb677 support team at [email protected] (plain text — not a clickable link) with the subject line "Privacy Rights Request". Please include your full name and the email address registered on your fb677 account so that we can verify your identity before processing the request. fb677 will not action privacy rights requests that cannot be verified as coming from the account holder.
Policy Updates & Contact
fb677 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes to applicable law, or improvements to the Platform. The "last updated" date at the top of this document will be revised to reflect the date of any amendment.
Where a change to this Privacy Policy is material — meaning it substantially alters how we collect, use, or share your personal data — fb677 will notify registered players by email to their registered address at least 14 days before the change takes effect. For non-material changes (such as clarifications of existing language), fb677 may update the policy without advance notice. In all cases, the current version of this policy is the version that governs fb677's data processing activities.
Your continued use of the Platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree to any revised Privacy Policy, you must stop using the Platform and may request account closure by contacting fb677 support.
Contact the fb677 Privacy Team
For any questions, concerns, or requests relating to this Privacy Policy or fb677's data processing practices, please contact us:
Email (plain text — not a link): [email protected]
Response time: Within 2 business days for privacy-related queries.
Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).
How fb677 Protects Your Privacy
Privacy at fb677 is not just a legal obligation — it is a core part of how we build trust with every player across Bangladesh. Here is a summary of our key privacy commitments.
256-bit TLS Encryption
Every data transfer between your browser and fb677 is protected by 256-bit Transport Layer Security. Your personal details, payment data, and gaming history are never transmitted in plaintext over the internet.
Strict Data Minimisation
fb677 collects only the personal data that is genuinely necessary for account operation, payment processing, and legal compliance. We do not collect data speculatively or for purposes we cannot justify to you in plain English.
No Data Selling — Ever
fb677 does not sell, rent, or license your personal data to third-party advertisers, data brokers, or any commercial partner. Your information stays within the fb677 ecosystem and its authorised service providers.
Your Rights, Clearly Explained
We set out your full range of privacy rights — access, rectification, erasure, portability, and objection — in plain English. You can exercise any right simply by emailing our support team at any time.
Defined Retention Periods
fb677 publishes exact data retention periods for every data category — from 12-month server logs to 7-year AML records. When a retention period expires, your data is securely deleted or anonymised, not kept indefinitely.
Breach Notification Commitment
In the unlikely event of a data breach affecting your personal information, fb677 commits to notifying affected players promptly by email, describing what happened, what data was involved, and what steps we have taken to address it.
Explore fb677 — Bangladesh's Home of Online Gaming
Now that you have read our Privacy Policy, you are ready to enjoy everything fb677 has to offer — from live cricket betting on BPL and IPL matches to premium live dealer tables and hundreds of slots. Deposit securely via bKash, Nagad, Rocket, or Upay and play in BDT.