fg22 Privacy Policy

This Privacy Policy ("Policy") describes how fg22 ("fg22", "we", "us", "our") collects, uses, stores, and discloses information about you when you access or use the fg22 online gaming platform available at fg22.app. By using the fg22 platform you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all players, visitors, and registered users of the fg22 platform regardless of location. It covers data collected through the website, through customer support interactions, through payment processing activities, and through any other means by which you provide us with information in connection with your use of fg22. This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between you and fg22.

Our Privacy Commitments

1Information We Collect

fg22 collects personal data in order to provide, operate, and improve the gaming platform, to fulfil our legal and regulatory obligations, and to communicate with you about your account and eligible promotions. The categories of information we collect include the following:

• Identity data: full legal name, date of birth, gender, and a copy of a government-issued identity document (National ID, passport, or driving licence) collected as part of the mandatory KYC verification process.
• Contact data: email address, mobile phone number, and residential address. This information is used to communicate with you about your account, process deposits and withdrawals, and send any required regulatory notifications.
• Financial data: payment method details including mobile banking account references (bKash, Nagad, Rocket wallet numbers), card details (where applicable), transaction history, deposit amounts, withdrawal amounts, and account balance information.
• Gaming activity data: game participation records, bet history, wins and losses, session duration, game preferences, and responsible gaming tool usage. This data is used to maintain accurate account records, detect problem gaming patterns, and support responsible gaming initiatives.
• Technical and device data: IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages viewed on the platform, and session timestamps. This data is collected automatically and is used for platform security, fraud prevention, and performance analytics.
• Communications data: records of your correspondence with fg22 customer support, including chat transcripts, email exchanges, and call logs where applicable. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

2How We Use Your Information

fg22 uses the personal data it collects for the following purposes. All uses are consistent with the legal bases described in Section 3 of this Policy, and data is not used for any purpose incompatible with the purposes stated at the time of collection.

• Account creation and management: to register your account, verify your identity through KYC, maintain accurate account records, process deposits and withdrawals, and communicate with you about account-related matters including security alerts, transaction confirmations, and policy updates.
• Platform operation and game delivery: to provide access to games, betting markets, and ancillary services; to process bets and settle winnings; to enforce game rules and platform terms; and to resolve disputes arising from platform use.
• Legal and regulatory compliance: to meet KYC, AML, and responsible gaming obligations imposed by applicable law or regulatory requirements; to respond to lawful requests from government authorities, courts, or law enforcement agencies; and to maintain records as required by applicable record-keeping rules.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, and any other prohibited conduct set out in our Terms and Conditions; to monitor platform activity for unusual patterns; and to protect the integrity of all games and betting markets.
• Responsible gaming: to identify players who may be at risk of problem gambling based on gaming activity patterns; to apply responsible gaming tools (deposit limits, self-exclusion, session reminders) where these have been requested; and to proactively contact players where our monitoring indicates a potential problem.
• Marketing communications (where consented): to send you information about promotions, bonuses, new games, and platform updates where you have provided consent to receive such communications. You may withdraw consent for marketing communications at any time through your account settings or by contacting customer support.

3Legal Basis for Processing

fg22 processes your personal data on one or more of the following legal bases, depending on the specific purpose and context of each processing activity:

• Contractual necessity: processing that is necessary to perform the contract between you and fg22 — including account creation, identity verification, payment processing, game delivery, and dispute resolution. Without this processing fg22 cannot provide the platform services to you.
• Legal obligation: processing that is required in order for fg22 to comply with applicable legal or regulatory requirements, including KYC identity verification, anti-money laundering screening, responsible gaming obligations, and mandatory record retention.
• Legitimate interests: processing carried out on the basis of fg22's legitimate operational interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and analytics used to improve platform performance. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights.
• Consent: processing carried out where you have provided an explicit, freely given, informed, and unambiguous indication of agreement — most commonly in relation to receiving marketing communications. Where processing is based on consent you may withdraw that consent at any time without prejudice to the lawfulness of processing carried out before withdrawal.

4Sharing Your Information

fg22 does not sell your personal data. We share personal data with third parties only where it is necessary for the operation of the platform, required by law, or where you have given explicit consent. The categories of third parties with whom we may share data are limited to the following:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other payment processor integrated into the platform. Data shared is limited to what is strictly necessary to process your deposit or withdrawal transaction and is governed by each provider's own privacy terms.
• Identity verification and KYC service providers: third-party services used to verify identity documents and confirm that players meet eligibility requirements, including age verification. These providers process identity data under strict confidentiality obligations and are not permitted to use it for any other purpose.
• Game content and platform technology providers: software studios and platform infrastructure providers whose technology powers games and platform features available on fg22. These providers may receive anonymised or aggregated gaming activity data to ensure fair operation of their games but do not receive individually identifiable personal data beyond what is technically required.
• Regulatory and law enforcement authorities: where fg22 is required by applicable law, court order, or regulatory direction to disclose personal data to a competent authority, we will do so in compliance with that requirement. Where legally permissible, fg22 will notify affected players of such disclosure.

5Cookies and Tracking Technologies

fg22 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather analytics data used to improve platform performance. Cookies are small text files placed on your device when you visit the platform. The types of cookies we use are as follows:

• Strictly necessary cookies: essential for the platform to function. These cookies enable core functionality including session management, authentication, and security. They cannot be disabled as the platform cannot function without them.
• Functional cookies: used to remember your preferences such as language settings, game history, and responsible gaming tool configurations. These improve your experience on the platform and can be disabled, though doing so may affect certain platform features.
• Analytics cookies: used to collect aggregated data about how players use the platform, including pages visited, session duration, and navigation paths. This data is used to identify areas for improvement and optimise the player experience. Analytics data is anonymised before aggregation and is not linked to individual player accounts.
• Security cookies: used to detect and prevent fraudulent activity, identify unusual login patterns, and protect against automated attacks. These cookies work alongside our fraud prevention systems and cannot be disabled without reducing the security level of your account.

You may manage cookie preferences through your device or browser settings. Please note that disabling non-essential cookies may affect certain features of the fg22 platform. Strictly necessary and security cookies remain active regardless of your cookie preference settings, as they are essential for safe platform operation.

6Data Retention

fg22 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. Retention periods vary depending on the category of data and the purpose of processing:

• Account and identity data: retained for the duration of your account and for a minimum of 5 years following account closure, in order to meet applicable AML and KYC record-keeping obligations. Where a longer retention period is required by law, the longer period applies.
• Transaction and financial data: retained for a minimum of 5 years following the date of the relevant transaction, in compliance with applicable financial record-keeping requirements. Payment method reference data is retained only for as long as the associated payment method remains registered on your account.
• Marketing and communications data: retained until you withdraw consent for marketing communications or request deletion, whichever occurs first. Records of consent and opt-out actions are retained for as long as necessary to demonstrate compliance with applicable marketing communications obligations.

7Data Security

fg22 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes the following measures, which are reviewed and updated on a regular basis:

• 256-bit SSL encryption on all data transmitted between your device and the fg22 platform, ensuring that account credentials, payment data, and personal information cannot be intercepted in transit.
• Encrypted storage of sensitive personal data at rest, including identity documents, payment references, and account credentials. Encryption keys are managed separately from the encrypted data and are subject to their own access controls.
• Role-based access controls ensuring that personal data is accessible only to fg22 personnel who require access in order to carry out their defined job functions. Access rights are reviewed regularly and revoked immediately upon a change in role or departure from the organisation.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited. Critical findings are addressed on a priority basis and remediation timelines are tracked through our internal security governance process.

8Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by fg22. To exercise any of these rights, contact our support team at [email protected]. We will respond to verifiable requests within a reasonable timeframe and in accordance with applicable requirements.

• Right of access: you have the right to request a copy of the personal data fg22 holds about you, together with information about how that data is being used and with whom it has been shared.
• Right to rectification: you have the right to request correction of any inaccurate or incomplete personal data fg22 holds about you. Corrections to identity data may require re-submission of supporting documentation.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. This right is subject to any overriding legal obligation to retain the data.
• Right to restriction: you have the right to request that fg22 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing and that objection is pending determination.
• Right to data portability: where processing is based on your consent or on a contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to object: you have the right to object to the processing of your personal data where that processing is based on fg22's legitimate interests. fg22 will cease processing unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

9Payment Data and Financial Privacy

The security and privacy of your financial data is a priority for fg22. Payment data — including bKash wallet numbers, Nagad references, Rocket account details, and any card information — is handled with the highest level of protection available and is processed only as necessary to complete your requested transactions.

• Full payment account credentials (such as complete mobile banking PINs or full card numbers) are never stored by fg22 after a transaction is processed. Only the reference data needed to identify your registered payment method for future withdrawals is retained on our systems.
• All payment transactions are processed through encrypted connections. fg22 does not have access to the internal security credentials of your mobile banking wallet or bank account — payment processing is handled entirely by the relevant payment service provider using their own secured systems.
• Transaction records are retained for the period required by applicable financial record-keeping rules. You may request a summary of your transaction history at any time by contacting customer support. This summary will be provided in a standard format within a reasonable timeframe.

10Children's Privacy

The fg22 platform is strictly for adults aged 21 and above. fg22 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the account registration process, and accounts found to belong to individuals under 21 will be closed immediately with all associated data deleted or anonymised to the extent permitted by law.

11Changes to This Privacy Policy

fg22 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaningfully affecting how we collect, use, or share your personal data — we will provide advance notice through the platform or by email to your registered address. The effective date of any revised Policy will be stated at the top of this page.

Your continued use of the fg22 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with a revised Policy, you should stop using the platform and may request account closure in accordance with our Terms and Conditions. The most current version of this Policy is always available on this page at fg22.app/privacy-policy.

12Contact Us — Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how fg22 is handling your personal data, please contact our support team. All privacy-related enquiries are handled confidentially and responded to within the timeframes required by applicable law.