facai Privacy Policy — Your Data, Handled with Care

1 Introduction

This Privacy Policy ("Policy") sets out how facai ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the facai website at https://facai.onl, including all related services such as casino gaming, sports betting, live dealer tables, crash games, payment processing, and customer support.

facai is committed to handling your personal data responsibly, transparently, and in a manner consistent with internationally recognised data protection principles. This Policy applies to all players registered on the facai platform regardless of whether they access the platform via a desktop browser or mobile device, and regardless of whether they are located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or any other location in Bangladesh or the broader South Asia region.

By registering an account on facai, making a deposit, placing a wager, or otherwise using the facai platform, you confirm that you have read this Privacy Policy in its entirety and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the facai platform.

This Policy was last updated in January 2026. The most current version of this Policy will always be available at https://facai.onl/privacy-policy. Continued use of the facai platform following publication of any updated version constitutes acceptance of the revised Policy.

2 Data We Collect

facai collects two broad categories of personal data: information that you provide to us directly, and information that we collect automatically as a result of your interaction with the platform. The specific categories of data we collect are detailed below.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access the facai platform, certain technical and behavioural data is collected automatically through standard web technologies and server logging systems:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, time spent on each page, navigation paths, search queries entered within the platform, game sessions initiated, bets placed, and features accessed.
• Session Data: Login timestamps, session duration, logout events, and session termination reasons.
• Location Data: General geographic location derived from your IP address (city and country level). facai does not use GPS-level precise location tracking.
• Cookie and Tracking Data: Data collected via cookies, local storage, and similar technologies as described in Section 7 of this Policy.

3 How We Collect Your Data

facai collects personal data through the following channels and mechanisms:

3.1 Direct Interactions

The majority of personal data held by facai is provided by you directly during the following interactions:

• Completing the account registration form at facai.onl
• Submitting identity verification documents through the KYC verification portal within your account dashboard
• Making a deposit or requesting a withdrawal through the cashier section
• Contacting the facai support team via live chat, email, or WhatsApp
• Responding to promotional communications or opting into specific bonus offers
• Completing responsible gaming assessments or activating self-management tools
• Submitting a formal complaint through the platform's dispute resolution process

3.2 Automated Technologies

facai uses standard automated technologies to collect technical and behavioural data as you interact with the platform. These include server logs, session tracking software, and first-party cookies as described in Section 7. This data is collected passively as a natural consequence of your use of the platform and does not require any action on your part.

3.3 Third-Party Sources

In certain limited circumstances, facai may receive personal data about you from third-party sources, including:

• Payment service providers such as bKash, Nagad, Rocket, and Upay, who confirm transaction details and account ownership during payment verification.
• Identity verification services that facai engages to assist in the KYC process, which may cross-reference your submitted documents against official databases.
• Fraud prevention and risk management services that flag accounts or transactions associated with known fraudulent activity, money laundering, or platform abuse.

In all cases, facai receives data from third-party sources only where a lawful basis exists for the transfer and only to the extent necessary for the stated purpose.

4 How We Use Your Data

facai processes your personal data for the following specific and lawful purposes:

4.1 Account Management and Service Delivery

Your identity, contact, and credential data is used to create and maintain your player account, authenticate your login sessions, deliver the games and betting services you request, process deposits and withdrawals, and send you account-related notifications such as transaction confirmations and security alerts. This processing is essential for the delivery of the facai service and cannot be disabled without closure of your account.

4.2 Identity Verification and Regulatory Compliance

facai uses your identity and document data to verify that you meet the minimum age requirement of 21 years, to confirm that the payment methods you use are registered in your own name, and to fulfil anti-money laundering (AML) and know-your-customer (KYC) obligations. This processing is mandatory; accounts that cannot be verified may be suspended or closed.

4.3 Fraud Prevention and Platform Security

Technical data, financial data, and behavioural usage data are analysed to detect and prevent fraudulent activity, account takeovers, bonus abuse, multi-accounting, collusion, and other prohibited conduct defined in the facai Terms and Conditions. Where suspicious activity is identified, facai may restrict account functionality pending investigation.

4.4 Responsible Gaming

facai uses your account activity data — including deposit frequency, session duration, wager amounts, and loss patterns — to monitor for indicators of problem gambling and to provide personalised responsible gaming prompts where appropriate. Responsible gaming data (such as self-exclusion requests and limit settings) is processed to enforce the protections you have requested.

4.5 Customer Support

Support communications are processed to respond to your queries, resolve disputes, and improve the quality of the facai support service. Support records are retained for a defined period to enable consistent handling of follow-up contacts related to the same issue.

4.6 Marketing Communications

Where you have provided explicit consent to receive marketing communications, facai may send you promotional emails or in-platform notifications about new games, seasonal offers (such as Eid or Pohela Boishakh promotions), cricket betting markets, and other platform news. You may withdraw your marketing consent at any time by contacting support or updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

4.7 Platform Improvement and Analytics

Anonymised and aggregated usage data is used to understand how players navigate the facai platform, which game categories are most popular, where technical issues occur, and how the overall user experience can be improved. This analytics processing does not identify individual players.

5 Legal Basis for Processing

facai processes personal data only where a valid legal basis exists for doing so. The legal bases relied upon by facai for the processing activities described in this Policy are as follows:

• Contractual Necessity: Processing required to perform the contract between facai and the player — including account management, game delivery, payment processing, and customer support — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC/AML compliance, age verification, and record-keeping obligations — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics is based on facai's legitimate interests in maintaining a safe, fair, and sustainable platform. In each case, facai has assessed that these interests are not overridden by your interests or fundamental rights.
• Consent: Processing for marketing communications and for certain cookie-based tracking is carried out on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time.

6 Sharing Your Data

facai does not sell your personal data. We do not rent it, trade it, or share it with third parties for their own independent marketing or commercial purposes. Personal data is shared externally only in the specific, limited circumstances described below, and always subject to strict contractual data protection obligations.

6.1 Payment Service Providers

To process your deposits and withdrawals, facai shares the minimum necessary payment data with the relevant payment service provider — which may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank. These providers act as independent data controllers for their own services and their handling of your data is governed by their own privacy policies.

6.2 Identity Verification and KYC Partners

facai engages specialist third-party identity verification services to assist in confirming the authenticity of documents submitted during the KYC process. These partners receive only the data necessary to perform the verification and are contractually prohibited from using it for any other purpose.

6.3 Technology and Infrastructure Providers

facai uses third-party technology providers for services including cloud hosting, database management, email delivery, and live chat software. These providers process personal data only on facai's documented instructions and under binding data processing agreements that impose equivalent data protection standards.

6.4 Game Content Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi provide game content to the facai platform. These studios may receive anonymised session and wagering data to support game performance monitoring and fairness certification. Individually identifiable player data is not passed to game studios without explicit justification.

6.5 Legal and Regulatory Disclosures

facai may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, by a valid legal process, or where disclosure is necessary to protect the rights, property, or safety of facai, its players, or the public. facai will, where legally permitted, notify affected players of any such disclosure request before complying with it.

7 Cookies & Tracking Technologies

The facai website uses cookies and similar technologies to enable essential platform functionality, remember your preferences, maintain your login session, and gather anonymised usage analytics. A summary of the cookie categories used by facai is provided below.

facai does not use third-party advertising cookies or behavioural tracking cookies that profile you for advertising purposes on external websites. All analytics cookies used by facai collect data in anonymised or pseudonymised form only.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will prevent the facai platform from functioning correctly, and facai cannot be held responsible for any degraded experience resulting from cookie restrictions applied at the browser level.

8 Data Retention

facai retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following retention schedule applies to the main categories of personal data held by facai:

• Account and Identity Data: Retained for the duration of your active account and for a minimum period of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of your account and for five (5) years post-closure. Document images are stored in encrypted form with access restricted to compliance personnel.
• Customer Support Records: Retained for three (3) years from the date of the last communication in a given support thread, to enable consistent handling of related follow-up contacts.
• Marketing Consent Records: Retained for the duration of your account and for two (2) years following withdrawal of consent, as evidence of the consent obtained and the withdrawal recorded.
• Session and Usage Logs: Retained for twelve (12) months for security monitoring and platform analytics purposes, then deleted or permanently anonymised.
• Responsible Gaming Records: Retained for the duration of your account and for five (5) years post-closure to support any future re-registration review or regulatory audit.

At the end of the applicable retention period, personal data is either securely deleted, rendered permanently anonymous, or archived in a form that does not permit identification of individual players. facai conducts periodic data audits to ensure that retention schedules are being applied consistently across all data storage systems.

9 Data Security

facai implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the facai servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon in your browser confirms that your connection is secure.
• Encrypted Data Storage: Sensitive data fields — including password hashes, payment account numbers, and identity document images — are stored in encrypted form at rest using strong cryptographic algorithms.
• Access Controls: Access to player personal data within facai's internal systems is restricted to authorised personnel whose job roles require it. All access is authenticated, role-based, and subject to audit logging.
• Two-Factor Authentication: facai staff with access to administrative systems are required to use two-factor authentication. Players are also strongly encouraged to enable 2FA on their accounts via the account security settings.
• Penetration Testing and Security Audits: facai engages independent security specialists to conduct regular penetration tests and vulnerability assessments of the platform infrastructure.
• Incident Response: facai maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, facai will notify affected players without undue delay and will take immediate remedial action.

10 Your Rights

As a player on the facai platform, you have the following rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting the facai support team via the channels listed in Section 14 of this Policy.

• Right of Access: You have the right to request a copy of the personal data that facai holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of your verified request.
• Right to Rectification: If any personal data that facai holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Minor corrections (such as a change of address) can be made directly in your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that facai delete the personal data it holds about you. This right is subject to exceptions — for example, data that must be retained to comply with legal obligations (such as AML record-keeping) cannot be deleted on request. facai will explain any applicable exceptions when responding to an erasure request.
• Right to Restriction of Processing: You may request that facai restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: Where facai relies on legitimate interests as the legal basis for processing, you have the right to object to that processing. You may also object at any time to the processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without prejudice to the lawfulness of processing carried out prior to withdrawal.

All rights requests are handled by facai's data compliance team. facai will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case facai will notify you of the extension and the reason for it within the initial 30-day period.

11 Children and Minors

The facai platform is strictly intended for use by adults aged 21 years and above. facai does not knowingly collect personal data from persons under the age of 21. The minimum age requirement is enforced through the KYC identity verification process, and accounts that cannot be verified as belonging to an adult aged 21 or over will be suspended pending resolution.

If facai becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to:

• Suspend the relevant account immediately.
• Delete all personal data associated with the account, except where retention is required by law.
• Refund any deposits made during the period of underage use to the original payment method, without interest.
• Void any wagering activity and associated winnings generated during the period of underage use.

If you are a parent or guardian and have reason to believe that a person under the age of 21 in your care has registered an account on facai, please contact the support team immediately at [email protected] so that the account can be identified and closed without delay.

12 International Data Transfers

facai operates infrastructure and engages service providers located in multiple countries. As a result, personal data collected from players in Bangladesh may be processed in countries outside Bangladesh. Where personal data is transferred internationally, facai takes steps to ensure that an appropriate level of protection is maintained, including through the use of:

• Standard contractual data protection clauses incorporated into agreements with all international data processors.
• Transfers to service providers located in jurisdictions assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent mechanisms where applicable.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact the facai support team using the details provided in Section 14 of this Policy.

13 Updates to This Policy

facai reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the facai platform and services. When material changes are made to this Policy, facai will notify registered players by email to the address associated with their account and by displaying a prominent notice on the facai website for a period of not less than 14 days prior to the updated Policy taking effect.

Minor clarifications or non-material amendments may be published without advance notice, but the effective date at the top of this Policy will always be updated to reflect the date of the most recent revision. The version of the Policy in effect at the time you use the facai platform governs the processing of your personal data during that use.

If you do not agree with any amendment to this Privacy Policy, you must stop using the facai platform and may request closure of your account by contacting the support team. Continued use of the platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to facai's handling of your personal data, please contact our data compliance and support team through any of the following channels:

• Email: support@facai.onl (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the facai platform
• WhatsApp Support: Available daily from 08:00 to 24:00 Bangladesh Standard Time (UTC+6)

All privacy-related enquiries will be acknowledged within 48 hours of receipt and fully responded to within 30 calendar days. If your enquiry relates to a formal rights request as described in Section 10, please indicate this clearly in your message so that it can be routed directly to the data compliance team for expedited handling.

facai is committed to resolving all privacy concerns through direct dialogue with players. If, however, you are not satisfied with facai's response to your privacy concern, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.