joya9 bd Privacy Policy

1 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is joya9 bd, the operator of the online casino and sports betting platform accessible at https://joya9-bd.ws (the "Platform"). All references to "joya9 bd", "we", "us", or "our" in this Privacy Policy refer to the data controller in that capacity.

If you have any questions, concerns, or requests relating to the handling of your personal data, you may contact our dedicated privacy team at any time:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 working days and to provide a substantive response within 10 working days of receipt.
• Languages: Privacy enquiries may be submitted in English. Our support team handles all responses in English.

This Privacy Policy applies to all personal data collected through your use of the Platform, including via the joya9 bd website, any mobile-optimised version of the site, live chat, email correspondence, and any other communication channels operated by joya9 bd. It does not apply to third-party websites linked from our Platform, including the websites of payment providers such as bKash, Nagad, Rocket, and Upay, which each operate under their own independent privacy policies.

2 Information We Collect

joya9 bd collects personal data through several distinct channels. The categories of data we collect, and the circumstances under which each category is gathered, are described in full below.

Registration Data

When you create a joya9 bd account via the joya9 bd Login page, we collect the following mandatory registration information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Residential address in Bangladesh (street address, district, division, postcode)
• Valid email address
• Mobile phone number registered in your name (Grameenphone, Robi, Banglalink, Teletalk, or other Bangladeshi carrier)
• Chosen username and encrypted password

Identity Verification (KYC) Data

In order to comply with our Know Your Customer (KYC) obligations and to verify your age prior to processing withdrawals, we may request copies of the following documents:

• Bangladesh National Identity Card (NID) — front and back
• Valid passport (biographical data page)
• Driving licence issued by the Bangladesh Road Transport Authority (BRTA)
• Proof of address (utility bill, bank statement, or government correspondence dated within the past 3 months)
• Selfie photograph holding your identity document (for enhanced verification purposes where required)

Financial Transaction Data

When you deposit funds into or withdraw funds from your joya9 bd account, we collect transaction-level data including:

• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank)
• Mobile wallet number or masked card/bank account number
• Transaction amount in Bangladeshi Taka (BDT)
• Transaction reference numbers issued by your payment provider
• Date, time, and status of each transaction

joya9 bd does not store full card numbers, CVV codes, or mobile banking PINs on our servers. All sensitive payment credentials are handled directly by our payment processor partners under their own PCI-DSS compliant environments.

Gaming & Betting Activity Data

We record a full history of your activity on the Platform, including:

• All casino game sessions (game title, provider, stake, outcome, session duration)
• All sports and cricket betting activity (event, market, selection, stake, outcome)
• Bonus offers claimed and wagering progress
• Account balance history, including deposits, withdrawals, wins, and losses

This data is retained for regulatory compliance, responsible gaming monitoring, and dispute resolution purposes. It is also used to personalise your experience on the Platform.

Technical & Device Data

When you access joya9 bd, our servers and analytics systems automatically collect certain technical data, including:

• IP address and inferred geographic location (city/region level)
• Device type, operating system, and browser version
• Referring URL (the page you visited immediately before arriving at joya9 bd)
• Pages visited within joya9 bd, clickstream data, and session duration
• Error logs and crash reports

Communications Data

If you contact joya9 bd via live chat, email, or any other support channel, we retain a record of that correspondence including the content of the messages exchanged, the date and time of the interaction, and any attachments provided. This data is used to resolve your query, to improve our support service quality, and for training purposes.

3 How We Use Your Data

joya9 bd processes your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are as follows:

Account Management & Service Delivery

The most fundamental use of your personal data is to create and maintain your joya9 bd account, to authenticate your identity each time you use the joya9 bd Login, to process your deposits and withdrawals, and to deliver the full range of casino games, live dealer tables, cricket betting markets, slots, crash games, and promotional offers that constitute the joya9 bd service.

Identity Verification & Age Confirmation

joya9 bd is committed to strict 18+ age verification. We use your registration data and KYC documents to confirm that you meet the minimum age requirement before you can access real-money gaming features or withdraw funds. This processing is both a contractual obligation and a legal requirement under our responsible gaming commitments.

Fraud Prevention & Security

We analyse technical data, transaction patterns, and account behaviour to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other forms of prohibited conduct described in our Terms & Conditions. Where suspicious activity is identified, we may suspend account access pending investigation and, where required by law, report findings to relevant authorities.

Responsible Gaming Monitoring

joya9 bd uses your gaming and betting activity data to monitor for behavioural patterns associated with problem gambling — such as rapidly increasing stake sizes, extended unbroken session durations, or repeated failed withdrawal requests. Where such patterns are detected, our responsible gaming team may make contact proactively to offer support resources and to remind you of the deposit limit, session reminder, cooling-off, and self-exclusion tools available on the Platform.

Legal & Regulatory Compliance

Certain data processing activities are required by law. We retain financial transaction records and KYC documentation for the periods specified in the data retention table above in order to comply with applicable anti-money laundering (AML) regulations and to satisfy any lawful requests from competent authorities.

Service Improvement & Analytics

We use aggregated, anonymised technical and behavioural data to understand how players navigate the joya9 bd Platform, to identify performance bottlenecks, and to prioritise product improvements. This data is used in aggregate form and is not linked back to individual user identities for analytics purposes.

Marketing Communications

With your explicit consent, we may send you promotional emails or SMS messages about joya9 bd bonuses, new game releases, seasonal promotions (including offers tied to Eid, Pohela Boishakh, Victory Day, and major cricket tournaments such as the BPL and ICC T20 World Cup), and other relevant updates. You may withdraw your marketing consent at any time by contacting [email protected] or by updating your communication preferences within your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal.

4 Data Sharing & Disclosure

joya9 bd does not sell, rent, or trade your personal data to any third party for that third party's own marketing or commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary financial data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These partners receive only the transaction data required to execute and confirm your payment. Each payment partner operates under its own privacy policy and is independently responsible for the data it receives in that context.

Identity Verification Providers

We engage specialist third-party KYC verification providers to assist with the authentication of identity documents submitted during registration and prior to first withdrawal. These providers process your identity documents and return a verification result to joya9 bd. They are contractually prohibited from retaining or using your identity data for any purpose beyond the KYC verification service.

Game Software Providers

The casino games and live dealer experiences on the joya9 bd Platform are powered by licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers operate the game servers and may receive your player ID and session data in order to deliver and log game outcomes. They do not receive your name, contact details, or payment information.

Legal & Regulatory Disclosure

joya9 bd may disclose your personal data to law enforcement agencies, government bodies, or other competent authorities where we are required to do so by law, court order, or other binding legal process, or where disclosure is necessary to protect the rights, property, or safety of joya9 bd, our users, or the public. We will, where legally permissible, notify you of any such disclosure.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of joya9 bd's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users by email prior to any such transfer taking effect and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

5 Cookies & Tracking

joya9 bd uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session securely, and to gather aggregated analytics data about how users interact with the site. The following categories of cookies are in use on joya9 bd:

Strictly Necessary Cookies

These cookies are essential for the Platform to operate. They maintain your authenticated session after you complete the joya9 bd Login, store your session security token, remember your currency preference (BDT), and preserve your active game state. Without these cookies, core Platform features cannot function. These cookies do not require your consent as they are technically necessary.

Analytical / Performance Cookies

We use first-party analytical cookies to measure how players navigate the Platform — which pages are visited most frequently, how long sessions last, and where users encounter errors or drop off. This data is aggregated and anonymised before analysis and is used solely to improve Platform performance and user experience. These cookies are set only with your consent.

Functional Cookies

Functional cookies remember your preferences — such as your preferred lobby view, game display settings, and notification preferences — so you do not need to re-configure them on each visit. These cookies are set with your consent and may be cleared by resetting your browser settings.

Managing Your Cookie Preferences

You may control and manage cookies through your browser settings at any time. Most modern browsers allow you to view, block, or delete cookies through the browser's privacy or security settings menu. Please note that blocking strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your joya9 bd account. Clearing analytical and functional cookies will not affect your account balance or gaming history, which are stored server-side.

6 Data Retention

joya9 bd retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The specific retention periods for each category of data are set out in the table in Section 2 above. The following general principles govern our data retention practices:

• Active Accounts: For as long as your account remains active, joya9 bd retains all registration, KYC, financial transaction, and gaming activity data associated with your account. This data is necessary to provide the Platform services, to resolve disputes, and to comply with our legal and regulatory obligations.
• Closed Accounts: When your account is closed — whether at your request, due to a Terms & Conditions breach, or for any other reason — joya9 bd retains your data for the post-closure retention periods specified in the table in Section 2. This retention is required to satisfy our AML record-keeping obligations and to handle any post-closure disputes or chargebacks.
• Anonymisation: Where retention of identifiable personal data beyond the required periods is not legally necessary, joya9 bd will anonymise the data rather than delete it outright, allowing us to retain aggregated statistical records for business and analytical purposes without retaining personally identifiable information.
• Deletion Requests: Where you exercise your right to erasure (see Section 7), joya9 bd will delete your identifiable personal data to the extent permitted by law. We cannot delete data that we are legally required to retain, such as AML-mandated financial transaction records.

7 Your Privacy Rights

joya9 bd respects your rights over your personal data. You have the following rights in relation to the personal data we hold about you, exercisable by contacting our support team at [email protected]:

Right of Access

You have the right to request a copy of the personal data joya9 bd holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. We will provide this information within 10 working days of a verified request.

Right to Rectification

If any personal data joya9 bd holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. For registration data, you may be able to update certain fields directly within your account settings. For KYC and identity data, corrections must be submitted via [email protected] with supporting documentation.

Right to Erasure

You have the right to request that joya9 bd delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal retention obligations — we cannot erase financial transaction data that we are required to retain under AML law, for example.

Right to Restriction of Processing

You have the right to request that joya9 bd restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, while we verify your rectification request; or where you have objected to processing based on legitimate interest, while we assess that objection.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive the personal data you have provided to joya9 bd in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to joya9 bd's processing of your personal data where that processing is based on our legitimate interests. Upon receipt of an objection, joya9 bd will cease the relevant processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

Right to Withdraw Consent

Where joya9 bd processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to that withdrawal.

8 Data Security

joya9 bd applies a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and joya9 bd's servers is protected using 256-bit SSL/TLS encryption — the same standard applied by international banking institutions. This prevents interception of your credentials, financial data, and personal information during transit.
• Encrypted Password Storage: User passwords are never stored in plain text. joya9 bd uses a one-way cryptographic hashing algorithm with per-user salting to store password credentials. Even in the event of a data breach, stored password hashes cannot be reversed to reveal your original password.
• Access Controls: Access to personal data within joya9 bd's systems is restricted to staff members who require it in the course of their legitimate duties. All staff with data access are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): joya9 bd supports optional two-factor authentication on user accounts for an additional layer of login security. We strongly encourage all players to enable 2FA from within their account security settings.
• Penetration Testing & Vulnerability Management: joya9 bd conducts regular security assessments of the Platform, including third-party penetration testing. Identified vulnerabilities are remediated in accordance with a risk-based patching schedule.
• Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected users, joya9 bd will notify affected individuals without undue delay, providing details of the nature of the breach, the categories of data affected, and the steps taken to mitigate the impact.

While joya9 bd takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your joya9 bd Login credentials and for ensuring that your device and network connection are adequately secured. If you believe your account has been compromised, contact [email protected] immediately.