Privacy Policy — fk10

Data Controller Information

fk10 acts as the data controller in respect of personal data collected through the fk10.club platform. As data controller, fk10 is responsible for determining the purposes and means by which personal data is processed. All data processing activities carried out by fk10 are conducted in accordance with applicable data protection legislation and with the safeguards described in this Privacy Policy.

The fk10 platform is operated by and on behalf of fk10, an online gaming platform serving players across Bangladesh, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All queries relating to data privacy and the exercise of data subject rights should be directed to the fk10 privacy support team at the contact address provided in Section 12 of this policy.

Where fk10 engages third-party service providers — such as payment processors, game studios, fraud prevention services, or analytics platforms — those parties act as data processors on behalf of fk10 and are bound by contractual obligations that require them to process personal data only for the purposes instructed by fk10 and in a manner consistent with the standards set out in this Privacy Policy.

Data We Collect

fk10 collects personal data from you in a number of ways: directly when you register an account, make a deposit or withdrawal, contact customer support, or interact with the platform's features; and indirectly through automated technical means such as cookies, device fingerprinting, and IP logging. The categories of personal data fk10 may collect are described in the table below.

fk10 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by responsible gaming obligations (for example, where a player voluntarily discloses a gambling-related health concern when requesting self-exclusion). Where such data is provided voluntarily, it is treated with the highest level of protection and is not used for any purpose other than the specific reason for which it was shared.

How We Use Your Data

fk10 uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent. The primary purposes for which fk10 processes personal data are set out below.

• Account creation and management: Processing your registration, verifying your identity, maintaining your account, and enabling you to log in and use the platform.
• Payment processing: Handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, including fraud screening and AML compliance checks on financial transactions.
• KYC and identity verification: Verifying your age (18+), identity, and payment method ownership in compliance with anti-money laundering and responsible gaming obligations.
• Game and sportsbook operations: Delivering cricket betting, live casino, slots, crash games, and other gaming services, including recording bet histories and calculating payouts.
• Customer support: Responding to queries, complaints, and disputes submitted via live chat, email, or WhatsApp support channels.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and applying self-exclusion, deposit limit, and cooling-off requests in accordance with your instructions.
• Fraud prevention and platform security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign updates by email or in-platform notification — only where you have not opted out and where permitted under applicable law.
• Platform improvement: Analysing usage data and technical logs to improve site performance, fix bugs, enhance the user interface, and develop new features.
• Legal compliance: Meeting obligations imposed by applicable law, including data retention requirements, regulatory requests, and court orders.

Legal Basis for Processing

Every instance of personal data processing carried out by fk10 is underpinned by one of the following lawful bases. fk10 identifies and documents the applicable legal basis for each category of processing activity.

• Contractual necessity: Processing required to perform the contract between fk10 and you as a registered player — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing necessary for fk10 to comply with applicable law — including KYC identity verification, anti-money laundering checks, age verification, and data retention obligations.
• Legitimate interests: Processing carried out in pursuit of fk10's legitimate business interests — including fraud detection, platform security monitoring, product development, and analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, informed, and specific consent — primarily in the context of marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital interests: In limited circumstances, fk10 may process data where it is necessary to protect the vital interests of a player — for example, when responding to a welfare concern raised during a responsible gaming interaction.

Data Sharing & Third Parties

fk10 does not sell your personal data to third parties under any circumstances. fk10 may share personal data with carefully selected third-party organisations where this is necessary to deliver the platform's services or to comply with legal obligations. All third parties with whom fk10 shares personal data are required to process that data only in accordance with fk10's instructions and to maintain appropriate technical and organisational security measures.

The categories of third parties with whom fk10 may share your personal data are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered banks (including BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, and Sonali Bank) — for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification platforms used to validate documents submitted during the KYC process.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming — limited to the technical session data required to deliver live casino streams and RNG game sessions.
• Fraud prevention and AML screening services: Specialist providers used to screen transactions and account behaviour against known fraud patterns and sanctions lists.
• Analytics and performance monitoring tools: Platforms used to analyse platform usage, diagnose technical issues, and measure feature performance. Data shared with analytics providers is aggregated or pseudonymised wherever possible.
• Customer support infrastructure providers: Live chat platform operators and ticketing systems used to manage and store customer support interactions.
• Law enforcement and regulatory bodies: Where fk10 is required by law, court order, or regulatory directive to disclose personal data, it will do so to the minimum extent required to satisfy the legal obligation.

fk10 does not transfer personal data to countries outside Bangladesh except where such transfer is strictly necessary for the provision of services (for example, game content delivery via internationally hosted studio providers) and where appropriate safeguards are in place to protect the data during transit and storage.

Cookies & Tracking Technologies

fk10 uses cookies and similar tracking technologies on the fk10.club website and platform to ensure core functionality, improve user experience, and gather analytical data. A cookie is a small text file placed on your device by a web server when you visit a site. Cookies do not contain executable code and cannot be used to access other data on your device.

fk10 uses the following categories of cookies:

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or notify you when a new cookie is set. Please note that disabling strictly necessary cookies will affect platform functionality — for example, you may be unable to remain logged in or to place bets. Disabling analytical or marketing cookies will not prevent you from using any core feature of the fk10 platform.

In addition to cookies, fk10 uses device fingerprinting technology for fraud prevention and multi-account detection purposes. Device fingerprinting collects technical attributes of your device — such as screen resolution, installed fonts, and browser plugins — and combines them into a unique device identifier. This data is processed solely for security and compliance purposes and is not used for marketing profiling.

Data Retention

fk10 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods applied to different categories of personal data are outlined below.

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering and financial record-keeping obligations.
• Transaction and payment records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial regulatory and AML compliance requirements.
• KYC verification documents: Retained for the duration of your account plus five (5) years following account closure, or longer if required by a specific legal or regulatory obligation.
• Gaming activity logs: Retained for up to three (3) years from the date of each gaming session, used for dispute resolution, responsible gaming monitoring, and fraud analysis.
• Customer support records: Retained for up to two (2) years from the date of the last support interaction, used for quality assurance, dispute resolution, and training purposes.
• Marketing consent records: Retained for the duration of your active account plus one (1) year following account closure, to evidence consent and opt-out history.
• Technical and usage logs: Retained for up to twelve (12) months, used for security analysis, performance optimisation, and fraud detection.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any individual. Where deletion is not immediately technically feasible (for example, in backup storage systems), fk10 ensures that the data is isolated from active processing until it can be securely destroyed.

Your Privacy Rights

As a user of the fk10 platform, you hold a number of rights with respect to the personal data fk10 holds about you. fk10 is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact the fk10 privacy team at [email protected] with your registered account username and a clear description of your request.

• Right of access: You have the right to request a copy of the personal data fk10 holds about you, along with information about how it is used and with whom it is shared. fk10 will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data fk10 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Account details such as email address and phone number can also be updated directly in your account settings.
• Right to erasure: You may request that fk10 delete your personal data where there is no longer a legitimate reason to retain it. Please note that fk10 may be required to retain certain data for legal or regulatory compliance reasons, in which case the erasure request will be fulfilled to the extent permitted by law.
• Right to restrict processing: You have the right to request that fk10 suspend active processing of your personal data — for example, while a rectification request is being evaluated — while the data itself is retained.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to request that fk10 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where fk10 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of fk10's legitimate interests. fk10 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights and interests.

Data Security Measures

fk10 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis to reflect the evolving threat landscape and industry best practices for online gaming platforms operating in the Bangladesh market.

• 256-bit SSL/TLS encryption: All data transmitted between your device and the fk10 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Password hashing: Account passwords are never stored in plain text. fk10 uses secure one-way hashing algorithms with salting to protect password data at rest.
• Two-factor authentication (2FA): Optional OTP-based two-factor authentication is available to all registered players and is strongly encouraged for added account security.
• Access controls: Access to personal data within fk10's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are bound by confidentiality obligations.
• Intrusion detection and monitoring: fk10's infrastructure is monitored continuously for anomalous activity, and automated alerts are triggered upon detection of suspicious access patterns.
• Data minimisation: fk10 collects only the minimum personal data necessary for each stated processing purpose and avoids retaining data beyond its required retention period.
• Third-party security assessments: Key technology and payment partners are assessed for their security posture before being onboarded as processors of fk10 player data.

Despite these measures, no online platform can guarantee absolute security against all threats. In the event of a personal data breach that poses a risk to your rights and freedoms, fk10 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. You are also encouraged to protect your own account by using a strong, unique password and enabling two-factor authentication.

Minors & Under-18 Protection

The fk10 platform is strictly intended for adults aged 18 years and above. fk10 does not knowingly collect or process personal data from individuals under the age of 18. If you are under 18, you must not register an account, deposit funds, or use any feature of the fk10 platform.

If fk10 discovers — through age verification checks, document review, or any other means — that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be permanently closed, and any deposits or winnings held in the account will be returned to the originating payment method where technically possible.

Parents or guardians who believe that a minor may have registered an account on fk10 are encouraged to contact the fk10 support team immediately at [email protected]. fk10 will treat all such reports as urgent and will conduct a thorough investigation. fk10 also recommends the use of parental control software to restrict access to gambling websites on shared or family devices.

Updates to This Policy

fk10 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business operations, or data processing practices. When material changes are made to this policy, fk10 will notify registered users through one or more of the following channels: an in-platform notification displayed upon next login, an email to the address registered on your account, or a prominent notice on the fk10.club homepage.

The "Last Updated" date displayed at the top of this page and in the hero section above will always reflect the date on which the most recent version came into effect. fk10 encourages all users to review this Privacy Policy periodically to stay informed about how their personal data is being protected and used. Continued use of the fk10 platform following the effective date of any update constitutes acceptance of the revised policy.

Where changes to this policy require your active consent — for example, where a new processing purpose is introduced that is not covered by the existing legal bases — fk10 will request your explicit agreement before the new processing begins. You will always have the option to withdraw consent or to close your account if you do not agree with the updated terms.

Contact the Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way fk10 handles your personal data, please contact the fk10 privacy support team using the details below. fk10 is committed to responding to all privacy-related enquiries promptly and transparently.

If you are not satisfied with fk10's response to a privacy enquiry or data rights request, you have the right to escalate your complaint to the relevant data protection authority or regulatory body applicable in your jurisdiction. fk10 will cooperate fully with any such regulatory investigation.