joya09 Privacy Policy

joya09 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who registers, browses, or interacts with the joya09.app platform. This Privacy Policy sets out in clear terms what data we collect, why we collect it, how we use it, who we may share it with, and what rights you have over your own information.

joya09 primarily serves players based in Bangladesh and processes personal data in the context of online casino gaming, sports betting (including cricket, BPL, IPL, and international fixtures), and related account management activities. The vast majority of transactions on the Platform are conducted in Bangladeshi Taka (৳) through payment methods including bKash, Nagad, Rocket, and Upay.

This Privacy Policy should be read alongside the joya09 Terms & Conditions and Responsible Gaming Policy, both of which are published on this site and incorporated herein by reference. In the event of any conflict between these documents, this Privacy Policy governs in respect of data protection matters specifically.

joya09 collects personal data in several categories depending on your level of engagement with the Platform. The following table summarises the types of personal data we process:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for responsible gaming purposes (for example, where a player voluntarily discloses a gambling-related health concern to our support team). Any such disclosures are treated with the highest level of confidentiality.

joya09 collects personal data through the following channels:

• Direct submission: Information you provide when registering an Account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to a promotion.
• Automated collection: Technical and behavioural data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you navigate and interact with the Platform.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a payment through their respective systems.
• Identity verification partners: Data returned by third-party Know Your Customer (KYC) and Anti-Money Laundering (AML) service providers when we conduct mandatory verification checks on your Account.
• Fraud prevention services: Risk signals and device fingerprint data supplied by fraud detection partners to identify suspicious activity or multiple-account patterns.
• Public sources: In limited circumstances, joya09 may verify information against publicly available records to confirm the accuracy of data you have provided.

joya09 processes your personal data only for specific, legitimate purposes. The table below maps each processing purpose to the category of data involved:

joya09 does not use your personal data to make fully automated decisions that produce significant legal effects without human review, except where required by AML or fraud prevention systems. In such cases, you have the right to request human review of any automated decision that affects your Account.

joya09 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered Account holder — including Account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and responsible gaming obligations.
• Legitimate interests: Processing carried out in the legitimate interests of joya09 where those interests are not overridden by your rights — including fraud prevention, platform security, and internal analytics to improve our service.
• Consent: Processing based on your explicit, freely given consent — specifically for the delivery of marketing communications and personalised promotional offers. You may withdraw this consent at any time by contacting support at [email protected] or updating your Account preferences.

joya09 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for commercial purposes. We may share your data with the following categories of trusted partners strictly to the extent necessary for the purposes described in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals securely.
• KYC and AML service providers: Third-party identity verification partners receive your identity documents and personal details solely to complete mandatory compliance checks on your Account.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to facilitate gameplay. They do not receive your full identity data.
• Fraud detection services: Risk analytics partners receive technical and behavioural data to identify fraudulent activity and protect the integrity of the Platform.
• Cloud infrastructure providers: joya09's platform infrastructure is hosted on secure cloud services. These providers process data on our behalf under strict data processing agreements and have no independent rights over your data.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful request from a competent authority, joya09 may disclose personal data without prior notice to you.

All third parties with whom joya09 shares personal data are required to process that data in accordance with applicable data protection standards and solely for the purposes specified in their agreements with joya09.

joya09 uses cookies and similar tracking technologies to operate the Platform effectively, enhance your user experience, and gather analytical data to improve our service. The following categories of cookies are used on joya09.app:

• Strictly necessary cookies: Essential for the Platform to function. These include session management cookies, login state cookies, and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations so you do not need to re-enter them on each visit.
• Analytical cookies: Collect anonymised or aggregated data about how visitors interact with the Platform — including page views, session durations, and navigation paths — to help joya09 identify and resolve usability issues.
• Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login attempts, and enforce account-level security measures.

joya09 does not use third-party advertising cookies or cross-site tracking cookies that share your browsing behaviour with external advertising networks.

joya09 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account data: Retained for the duration of your Account's active status and for a period of no less than five years following Account closure, in compliance with AML record-keeping requirements.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven years to satisfy financial compliance obligations.
• KYC and identity documents: Verification documents are retained for a minimum of five years following the last transaction or Account closure, whichever is later.
• Support communications: Customer support records, including live chat transcripts and email correspondence, are retained for up to three years to facilitate dispute resolution and quality assurance.
• Analytical data: Anonymised or aggregated analytical data that cannot be linked back to an individual may be retained indefinitely for internal business intelligence purposes.
• Marketing preferences: Records of your marketing consent or opt-out are retained for as long as reasonably necessary to demonstrate compliance with your stated preferences.

When personal data is no longer required and no legal obligation mandates its retention, joya09 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

joya09 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport layer encryption: All data transmitted between your device and joya09.app is encrypted using 256-bit TLS/SSL protocols. This applies to Account login, payment transactions, and all API communications.
• Data-at-rest encryption: Sensitive personal data stored on joya09's servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within joya09's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Penetration testing: joya09 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities in the Platform infrastructure.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected individuals, joya09 will notify impacted players via their registered email address as promptly as reasonably possible and take immediate steps to contain and investigate the incident.

joya09 respects your rights over your personal data. Depending on your circumstances, you may be entitled to exercise the following rights by contacting our support team at [email protected]:

• Right of access: You may request a copy of the personal data joya09 holds about you, along with information about how and why it is being processed.
• Right to rectification: You may request that joya09 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: In certain circumstances, you may request that joya09 delete your personal data. This right is subject to overriding legal obligations — for example, we are unable to erase transaction records that must be retained for AML compliance purposes.
• Right to restrict processing: You may request that joya09 limit the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that joya09 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where joya09 relies on legitimate interests as the legal basis — including profiling for responsible gaming monitoring purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

joya09 will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you within the initial 30-day window and explain the reason for the delay.

The joya09 Platform is strictly intended for individuals aged 18 years and above. joya09 does not knowingly collect, process, or store personal data from any individual under the age of 18. If you are under 18, you are not permitted to access or use the Platform under any circumstances.

If joya09 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated Account will be permanently closed. If you have reason to believe that a minor has registered an Account on joya09, please notify us immediately at [email protected] so that we can take prompt action.

joya09 employs age-verification checks as part of the Account registration process and at the point of first withdrawal to ensure compliance with this requirement. Players may be required to submit documentary proof of age at any time at joya09's discretion.

The joya09 Platform may reference or integrate with third-party services — including payment processors such as bKash and Nagad, and game content delivered by studios such as Pragmatic Play and Evolution Gaming. While these integrations are necessary for Platform functionality, joya09 is not responsible for the privacy practices of third-party organisations.

Each third-party service provider operates under its own privacy policy. joya09 encourages you to review the privacy policies of any external service with which you interact in connection with your use of the Platform. In particular, payment method providers such as bKash and Nagad have their own independent data processing practices that apply to transactions conducted through their systems.

joya09 does not control, and accepts no responsibility for, the content or privacy practices of any third-party website or service that is not directly operated by joya09.

joya09 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the evolution of the Platform's features and services. All amendments will be published on this page with an updated effective date.

Where a proposed amendment is material — meaning it significantly affects your rights or how your personal data is processed — joya09 will endeavour to notify registered players via the email address associated with their Account at least 7 days prior to the change taking effect. It remains your responsibility to review this page periodically to stay informed of any updates.

Continued use of the joya09 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and may request Account closure by contacting support at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way joya09 processes your personal data, please contact our dedicated support team using the details below. All privacy-related enquiries are handled confidentially and with priority.

• Email: [email protected]
• Subject line for data requests: Data Rights Request
• Response time: Within 30 calendar days for formal data rights requests; within 48 hours for general privacy enquiries.
• Live chat: Available within the Platform after logging in to your Account, 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).