joya09 Privacy Policy

joya09 collects personal data through the following channels:

• Direct registration: When you create a joya09 account, you provide your name, mobile number, and chosen credentials directly;
• Identity verification: When you submit KYC documents (national ID, passport, utility bill) to verify your account;
• Payment processing: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or bank card, financial data is collected to process and record the transaction;
• Platform usage: As you navigate joya09.bet, usage data including pages visited, games played, and session metadata is automatically logged by our systems;
• Communications: When you contact joya09 support via live chat or email, the content of those communications is recorded for service quality and dispute resolution purposes;
• Cookies and similar technologies: joya09.bet uses cookies and local storage to maintain your session, remember your preferences, and gather anonymised analytics. See Section 7 for our full cookie policy.

joya09 uses your personal data exclusively for the following purposes:

• Account management: Creating and maintaining your account, verifying your identity, and managing your login credentials;
• Service delivery: Processing bets, managing game sessions, processing deposits and withdrawals, and crediting bonuses;
• Fraud and security: Detecting and preventing account fraud, money laundering, multiple-account registrations, and unauthorised access;
• Responsible gaming: Monitoring gameplay patterns to identify potential signs of problem gambling and applying responsible gaming interventions where necessary;
• Customer support: Resolving complaints, answering queries, and maintaining support records;
• Legal compliance: Complying with applicable legal obligations including anti-money-laundering (AML) due diligence and record-keeping requirements;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and content of joya09.bet.

joya09 does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without human oversight.

joya09 does not sell your personal data. We share data only with the following limited categories of third parties, and only to the extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive transactional data necessary to process your deposits and withdrawals. These providers have their own privacy policies governing their data use;
• Game technology providers: Live game studios (e.g., Evolution Gaming, Pragmatic Play, Ezugi) and RNG game developers may receive anonymised session data for game delivery purposes;
• Identity verification services: Where joya09 uses a third-party KYC provider to verify identity documents, your document data is shared with that provider under strict data processing terms;
• Legal and regulatory bodies: joya09 may share data with law enforcement or regulatory authorities where required by applicable law or court order. joya09 will not disclose more than is legally required in such circumstances.

All third parties who process data on joya09's behalf are required to handle that data securely and in accordance with applicable data protection principles.

joya09 retains personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory, and financial record-keeping obligations. The following retention guidelines apply:

• Account data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with standard financial record-keeping obligations;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• KYC documents: Retained for a minimum of 5 years following account closure or the completion of the verification process;
• Support communications: Retained for 2 years from the date of the interaction, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved;
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual player.

When the applicable retention period expires, joya09 will securely delete or anonymise the relevant data.

As a joya09 player, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data joya09 holds about you at any time;
• Right of rectification: If any of your personal data is inaccurate or incomplete, you may request that it be corrected;
• Right of erasure: You may request deletion of your personal data, subject to joya09's legal retention obligations. Requests for deletion of data that joya09 is legally required to retain will be declined with a written explanation;
• Right to restrict processing: You may request that joya09 restrict processing of your data in certain circumstances, for example while a correction request is being assessed;
• Right to withdraw consent: Where joya09 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact joya09 support via live chat or at [email protected]. All requests will be acknowledged within 48 hours and resolved within 30 days of receipt.

joya09 implements a layered security architecture to protect your personal and financial data. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and joya09 servers;
• Encryption at rest for sensitive stored data including payment account references and identity documents;
• Role-based access control, ensuring that only authorised personnel can access personal data, and only to the extent required by their role;
• Regular security assessments and penetration testing by independent security professionals;
• Automatic session timeout to prevent unauthorised access if a session is left idle;
• Two-factor authentication options for player accounts to provide an additional layer of login security.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that affects player personal data, joya09 will notify affected players promptly and take all reasonable remedial steps to contain and address the breach.

joya09.bet uses cookies and similar browser storage technologies to operate and improve the platform. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. You cannot opt out of essential cookies without ceasing to use the platform;
• Functional cookies: Store your preferences such as language settings and game view options to personalise your experience;
• Analytics cookies: Collect anonymised data on how players navigate joya09.bet. This data is used in aggregate to improve platform performance and content. No individual player is identified through analytics data;
• Security cookies: Help joya09 detect and prevent fraudulent activity and protect account integrity.

joya09 does not use third-party advertising or tracking cookies. Your browsing activity on joya09.bet is not shared with external advertising networks.

Most mobile browsers allow you to manage cookie preferences through the browser's settings menu. Disabling cookies may affect the functionality of some joya09 platform features.

joya09 is operated for and primarily serves players located in Bangladesh. Some data processing activities — particularly those involving third-party game technology providers and payment processors — may involve the transfer of data to servers located outside Bangladesh. Where such transfers occur, joya09 ensures that appropriate data protection safeguards are in place, including contractual obligations on the recipient to maintain data security standards equivalent to those described in this policy.

joya09 does not transfer player data to countries that do not provide an adequate level of data protection without first implementing appropriate safeguards.

joya09 is strictly for adults aged 21 and above. joya09 does not knowingly collect personal data from individuals under the age of 21. If joya09 identifies that a registered account belongs to a person under 21 years of age, the account will be closed immediately, all data associated with that account will be deleted, and any funds held in the account will be returned to the payment method of origin following a mandatory verification review.

If you are a parent or guardian and believe that your child has created an account on joya09.bet, please contact joya09 support immediately via live chat or at [email protected].

joya09 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. The effective date at the top of this page always reflects when the current version came into force.

For material changes that significantly affect how we process your personal data, joya09 will provide advance notice via your registered mobile number or email address before the change takes effect. Continued use of joya09.bet after the effective date of any update constitutes acceptance of the revised Privacy Policy.

We encourage all players to review this page periodically. The current version is always the operative version and supersedes all prior versions.