fmxbd Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Who We Are

This Privacy Policy is issued by fmxbd ("fmxbd", "the Platform", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://fmxbd.io. fmxbd is Bangladesh's trusted destination for cricket betting, live casino games, slots, fishing games, and a broad range of other online gaming products.

For the purposes of this Privacy Policy, fmxbd is the data controller in respect of personal data collected from individuals who visit, register with, or otherwise interact with the Platform. As data controller, fmxbd determines the purposes and means by which personal data is processed.

If you have any questions about this Privacy Policy or about how fmxbd handles your personal data, you may contact our Data Protection team at any time using the details provided in Section 14 of this document.

2 Data We Collect

fmxbd collects a range of personal data in the course of providing its services. The categories of data we may collect about you include the following:

We do not knowingly collect sensitive special-category personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where such data is voluntarily provided to us (for example, in a support communication) or where its collection is specifically required by applicable law for identity verification or responsible gaming compliance purposes.

3 How We Collect Your Data

fmxbd collects personal data through the following channels:

• Direct provision: Data you provide when completing the registration form, submitting KYC documents, updating your account profile, contacting our support team, or participating in promotions and surveys.
• Automated technical collection: Data collected automatically when you access and navigate the Platform, including IP address, device identifiers, and browsing behaviour, via server logs, cookies, pixel tags, and similar technologies. See Section 5 for full details on cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and any other payment providers in order to verify deposit and withdrawal activity.
• Identity verification providers: Data received from third-party KYC and identity verification services used to confirm the identity and age of players during the verification process.
• Fraud and risk management providers: Data signals received from fraud detection services used to identify suspicious activity, protect player accounts, and maintain the integrity of the Platform.
• Public sources: In limited circumstances, fmxbd may verify information against publicly available records or databases where permitted by law and necessary for compliance purposes.

4 Purposes and Legal Basis for Processing

fmxbd processes your personal data only where we have a lawful basis to do so. The table below sets out the primary purposes for which we use personal data and the corresponding legal basis for each:

5 Cookies and Tracking Technologies

fmxbd uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how players interact with the site. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot be used to access other files on your device.

The categories of cookies used on the fmxbd Platform are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They include session cookies that maintain your login state, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data is used to improve the reliability and performance of the Platform.
• Functionality cookies: These cookies remember your preferences, such as display settings and your preferred payment method, to provide a more personalised experience on your return visits.
• Targeting and advertising cookies: Where applicable, these cookies track your activity on the Platform to enable fmxbd and its marketing partners to deliver relevant promotional content. These cookies are only placed with your consent.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may limit your ability to use specific features of the Platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

6 Sharing Your Personal Data

fmxbd does not sell, rent, or trade your personal data to third parties. We may, however, share your personal data with the following categories of recipients where necessary and proportionate:

• Payment processors: bKash, Nagad, Rocket, Upay, and any other payment service providers used to facilitate deposits and withdrawals. These processors receive only the data necessary to process the specific transaction.
• Identity and age verification providers: Third-party KYC service providers engaged to verify the identity, age, and, where required, source of funds of players. These providers are contractually bound to process data only for verification purposes.
• Fraud prevention and risk management services: Specialist providers that help fmxbd identify fraudulent account activity, detect suspicious betting patterns, and maintain the integrity of the Platform.
• IT and cloud infrastructure providers: Service providers that supply the underlying hosting, database, and technology infrastructure on which the Platform operates. These providers act as data processors under fmxbd's instruction and are bound by data-processing agreements.
• Customer support platforms: Tools and platforms used to manage support tickets, live chat, and email correspondence with players.
• Legal and regulatory authorities: Where required or permitted by law, fmxbd may disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts. In such cases, fmxbd discloses only the minimum data required to satisfy the legal obligation.
• Professional advisors: Lawyers, accountants, auditors, and insurers, subject to strict confidentiality obligations, where disclosure is necessary for the conduct of fmxbd's business operations.

7 International Data Transfers

fmxbd's primary operations and data storage infrastructure are designed to serve the Bangladesh market. However, some of the third-party service providers engaged by fmxbd may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, fmxbd takes steps to ensure that an adequate level of protection is afforded to the transferred data.

The safeguards employed by fmxbd for international transfers may include:

• Reliance on standard contractual clauses or equivalent mechanisms approved for cross-border data transfers.
• Verification that the recipient country offers an adequate level of data protection.
• Supplementary technical measures, such as encryption, where required to address any residual risks identified in a transfer impact assessment.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact our Data Protection team at [email protected].

8 Data Retention

fmxbd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of five years following account closure, to comply with anti-money laundering and record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Responsible gaming records: Retained for the duration of any self-exclusion or cooling-off period plus five years, to ensure that self-exclusion decisions are respected and that historic responsible gaming interventions are documented.
• Communications data: Support tickets and email correspondence are retained for two years from the date of the last communication in a thread, unless the communication is relevant to an ongoing legal matter, in which case it is retained until the matter is resolved.
• Technical and usage data: Aggregated and anonymised within 13 months of collection. Individual-level technical logs are retained for up to 12 months for security and fraud investigation purposes.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where deletion is not immediately practicable — for example, where data is held in encrypted backup archives — the data is isolated from active processing until it can be securely destroyed.

9 Your Privacy Rights

As a player on fmxbd, you hold the following rights in respect of your personal data. These rights may be subject to certain limitations and exceptions under applicable law, but fmxbd will always consider requests carefully and respond transparently.

• Right of access: You may request a copy of the personal data fmxbd holds about you, along with information about how it is used. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update many data fields directly through your account profile settings.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to exceptions — for example, where retention is required by law or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: You may request that fmxbd restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to data portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of fmxbd's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Rights related to automated decision-making: If fmxbd makes decisions about you solely by automated means that produce significant effects, you have the right to request human review of those decisions and to contest the outcome.

To exercise any of the above rights, please submit a written request to [email protected]. We may ask you to verify your identity before processing a rights request to ensure that we do not disclose personal data to, or action a request from, an unauthorised individual. There is no charge for submitting a rights request in the majority of circumstances.

10 Children and Minors

fmxbd is an adult-only platform. Access to and use of the Platform is strictly restricted to individuals who are at least 21 years of age. fmxbd does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

Where fmxbd discovers or has reasonable grounds to believe that an individual under the minimum age has registered an account or is using the Platform, we will:

• Immediately suspend the account and restrict access to all Platform features.
• Delete any personal data associated with that account that is not required to be retained by law.
• Return any deposits made, minus any winnings generated, to the payment source used.
• Permanently close the account and record it against any future re-registration attempts.

If you have reason to believe that a minor has created an account on fmxbd or is accessing the Platform, please notify us immediately at [email protected] so that we can take prompt action. We take our safeguarding obligations in this area extremely seriously.

11 Security Measures

fmxbd employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the fmxbd Platform is encrypted using industry-standard SSL/TLS protocols. You can verify the presence of an active SSL certificate by checking for the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive personal data stored in fmxbd's databases — including financial data and identity documents — is encrypted at rest using strong encryption algorithms.
• Access controls: Access to systems that hold personal data is restricted to authorised fmxbd personnel and processors. Access is granted on a principle of least privilege and is subject to multi-factor authentication for administrative access.
• Security monitoring: fmxbd operates continuous security monitoring, including intrusion detection systems and regular vulnerability assessments, to identify and respond to potential security incidents promptly.
• Incident response: fmxbd maintains a documented data breach response procedure. In the event of a confirmed data breach that creates a material risk to affected individuals, fmxbd will notify the relevant authorities and affected players in accordance with applicable legal obligations.
• Staff training: All fmxbd personnel with access to personal data receive regular training on data protection obligations and security best practices.

While fmxbd takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You also play an important role in protecting your own data — please refer to the account security guidance in our Terms & Conditions and ensure that your account credentials are kept confidential at all times.

12 Third-Party Links

The fmxbd Platform may, from time to time, contain references to game providers, sports organisations, or other third-party entities. Where such references include links to external websites, please be aware that those websites operate under their own privacy policies, which are entirely independent of this document.

fmxbd has no control over the content, privacy practices, or data processing activities of any third-party website. We do not accept any responsibility or liability for the privacy policies or practices of external sites. We strongly encourage you to review the privacy policy of any third-party website you visit before providing any personal data to that site.

13 Changes to This Privacy Policy

fmxbd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, to incorporate new legal requirements, or to clarify existing provisions. The effective date at the top of this document will be updated whenever a material revision is made.

Where changes are material — meaning they meaningfully affect the way fmxbd processes your personal data or the rights available to you — we will notify registered players via the email address associated with their account at least 7 days before the changes take effect. Non-material corrections, such as typographical fixes or formatting adjustments, may be made without advance notice.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised Privacy Policy, please cease using the Platform and contact our support team to close your account.

14 Contact Us and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way fmxbd handles your personal data, please contact our Data Protection team using the following details:

• Email: [email protected]
• Support availability: 24/7, Bangladesh Standard Time (UTC+6)
• Response commitment: Acknowledgement within 3 business days; substantive response within 30 calendar days

When contacting us about a privacy matter, please include your registered username, a clear description of your question or request, and any relevant reference numbers so that we can locate your records and respond efficiently.

If you are not satisfied with fmxbd's response to a privacy complaint, or if you believe that fmxbd is processing your personal data in a manner that is inconsistent with applicable data protection law, you have the right to escalate your complaint to the relevant supervisory authority or seek legal redress through the courts.