Privacy Policy — joya 9bd

When you register for an account, use the joya 9bd platform, or interact with our customer support team, we collect certain categories of personal data. The information we collect falls into two broad categories: data you provide to us directly, and data we collect automatically through your use of the platform.

Data You Provide Directly:

• Registration Data: Your full legal name, date of birth, mobile phone number, and any other information required to create and verify your joya 9bd account.
• Identity Verification Documents: Where required for Know Your Customer (KYC) compliance, copies of government-issued identification such as a National ID card or passport may be requested. These documents are used solely for identity verification purposes.
• Payment Information: Details associated with your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank). Note that full payment credentials are processed by our verified payment gateway partners — joya 9bd does not store raw card numbers or mobile banking PINs on our servers.
• Support Communications: Records of any communications you send to our support team via email or live chat, including the content of queries and any attachments you provide.
• Responsible Gaming Requests: Where you activate deposit limits, cool-off periods, or self-exclusion tools, we record those preferences to ensure they are enforced correctly across your account.

Data Collected Automatically:

• Device and Technical Data: Your IP address, device type, operating system, browser type and version, screen resolution, and language settings collected at each session.
• Usage and Behavioural Data: Pages viewed, games played, bet amounts placed, session duration, click patterns, and navigation paths within the joya 9bd platform. This data helps us improve the user experience and detect unusual account activity.
• Geolocation Data: Approximate geographic location derived from your IP address. We use this to apply appropriate regional settings and to detect access from restricted jurisdictions.
• Cookie and Tracking Data: Information collected via cookies, session tokens, and similar technologies as described in the Cookies section of this policy.

joya 9bd uses the personal data we collect for specific, legitimate purposes directly related to the operation of our platform and the services we provide to registered players in Bangladesh. We do not use your data for purposes that are incompatible with the reasons it was originally collected.

Purpose	Data Used	Legal Basis
Account registration and management	Name, date of birth, mobile number	Contractual necessity
Identity and age verification (18+)	ID documents, date of birth	Legal obligation
Processing deposits and withdrawals	Payment method details	Contractual necessity
Fraud prevention and security monitoring	IP address, device data, usage patterns	Legitimate interest
Responsible gaming tool enforcement	Deposit limits, session data, exclusion records	Legal obligation / player safety
Customer support and dispute resolution	Support communications, account history	Contractual necessity
Platform analytics and improvement	Usage data, anonymised behavioural data	Legitimate interest
Promotional communications (where consented)	Mobile number, communication preferences	Consent

Where joya 9bd relies on your consent as the legal basis for processing — for example, sending you promotional messages about new games, bonuses, or seasonal offers — you retain the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing that was carried out prior to withdrawal.

We may also use aggregated, anonymised data (data from which individual identities cannot be derived) for internal reporting, product development, and platform performance analysis. This anonymised data is not subject to the same restrictions as personal data and may be used or shared more broadly for analytical purposes.

joya 9bd does not sell your personal data to third parties. However, in order to operate the platform effectively and fulfil our legal obligations, we may share certain data with trusted categories of third-party partners. Any such sharing is governed by strict contractual arrangements that require those partners to handle your data securely and only for the purposes for which it was shared.

The categories of third parties with whom we may share your data include:

• Payment Gateway Providers: bKash, Nagad, Rocket, Upay, and banking partners require transaction data (amount, account reference, timestamp) to process deposits and withdrawals on your behalf. These providers operate under their own privacy policies and security standards.
• Game Studio Providers: When you play a live dealer table or slot game streamed by a third-party studio (such as Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, or Microgaming), your session identifier and game activity may be shared with that studio to facilitate gameplay and resolve disputes. Studios do not receive your full personal profile.
• Identity Verification Services: Where KYC verification is required, we may share identity document images with a third-party verification service. These services are bound by strict confidentiality obligations and data retention limits.
• Analytics and Performance Providers: Anonymised, aggregated usage data may be shared with analytics platforms to help us understand how the platform is used and where improvements should be made. Raw personal data is not shared with analytics providers.
• Legal and Regulatory Authorities: We may be required by law to disclose personal data to government bodies, law enforcement agencies, or regulatory authorities. joya 9bd will comply with valid legal requests but will not disclose data beyond what is strictly required by the applicable legal instrument.

joya 9bd uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how the site is used. A cookie is a small text file placed on your device by your web browser when you visit our platform. Cookies do not contain executable code and cannot be used to access other files on your device.

The following categories of cookies are used on the joya 9bd platform:

Cookie Type	Purpose	Duration
Essential Cookies	Session management, login state, security tokens. Required for the platform to function. Cannot be disabled.	Session / up to 24 hours
Preference Cookies	Remembers your language settings, display preferences, and game lobby filters.	Up to 90 days
Analytics Cookies	Collects anonymised data on page views, session duration, and navigation paths to help improve the platform.	Up to 12 months
Security Cookies	Detects unusual login activity, prevents cross-site request forgery (CSRF), and supports fraud detection.	Session

Most web browsers allow you to control cookie settings through the browser's preferences menu. You can typically choose to block all cookies, block third-party cookies only, or clear cookies that have already been stored on your device. Please note that disabling essential cookies will prevent you from logging in to your joya 9bd account and using core platform features.

joya 9bd does not use advertising cookies, retargeting pixels, or social media tracking scripts that follow you across third-party websites after you leave our platform.

joya 9bd retains your personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When data is no longer required, it is securely deleted or anonymised in accordance with our internal data lifecycle policy.

The general retention periods applicable to different categories of data are as follows:

• Account Registration Data: Retained for the duration of your active account, plus a period of up to five (5) years following account closure, to satisfy anti-money laundering (AML) record-keeping obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following each transaction date to comply with financial record-keeping requirements.
• Identity Verification Documents: KYC documents are retained for the duration of the account relationship and up to five (5) years following account closure or the date of last transaction, whichever is later.
• Support Communications: Records of customer support interactions are retained for up to three (3) years following the resolution of the relevant query or dispute.
• Responsible Gaming Records: Self-exclusion records and deposit limit settings are retained indefinitely while the restriction is active, and for a minimum of three (3) years after the restriction expires, to prevent circumvention.
• Analytics and Usage Data: Anonymised and aggregated usage data may be retained indefinitely for statistical purposes, as it contains no personally identifiable information.

If you wish to request deletion of your personal data before the end of the applicable retention period, you may submit a request to [email protected]. Please note that where retention is mandated by law (such as AML record-keeping requirements), we are unable to fulfil deletion requests for data that falls within those legally required retention periods. We will inform you of the outcome of your request within 30 days.

joya 9bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure is designed to meet internationally recognised standards for data protection in the online gaming industry.

Key security measures we maintain include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using industry-standard Transport Layer Security. Look for the padlock icon in your browser address bar as confirmation that your connection is secure.
• Encrypted Data Storage: Sensitive personal data stored on our servers — including identity verification records and payment reference data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement can access player data, and all such access is logged and audited.
• Intrusion Detection Systems: Our infrastructure is monitored continuously for suspicious access patterns, unauthorised login attempts, and anomalous data transfers. Automated alerts trigger immediate investigation of potential security incidents.
• Regular Security Audits: joya 9bd conducts periodic internal security reviews and engages third-party security professionals to conduct penetration testing and vulnerability assessments of our platform and data infrastructure.
• Staff Training: All personnel with access to player data receive regular training on data protection best practices and the specific requirements of handling sensitive personal information in the online gaming context.

Despite these measures, no digital platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, joya 9bd will notify affected players as promptly as possible and take all reasonable steps to contain and remediate the incident.

As a registered player on joya 9bd, you hold a number of rights with respect to the personal data we hold about you. joya 9bd is committed to respecting and facilitating the exercise of these rights in a timely and transparent manner.

Your rights include:

• Right of Access: You have the right to request a copy of all personal data that joya 9bd holds about you. We will provide this information in a structured, commonly used, and machine-readable format upon request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You can update basic account information directly through your account settings, or contact our support team for assistance.
• Right to Erasure: Also known as the "right to be forgotten", you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations as described in the Data Retention section of this policy.
• Right to Restriction of Processing: You may request that we restrict our processing of your data in certain circumstances — for example, while the accuracy of the data is being disputed, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where we process your data on the basis of your consent or contractual necessity, and processing is carried out by automated means, you have the right to receive your data in a portable format and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object at any time to processing of your personal data where we rely on legitimate interest as our legal basis. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please submit your request in writing to [email protected]. Include your full name, registered mobile number, and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

joya 9bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will make reasonable efforts to notify registered players via their registered mobile number or email address before the changes take effect.

The effective date at the top of this document will always reflect the date on which the current version of the Privacy Policy came into force. We encourage you to review this page periodically to stay informed of how joya 9bd handles your personal data. Your continued use of the platform following the publication of any amendment constitutes your acceptance of the updated Privacy Policy.

Previous versions of this Privacy Policy are available upon request by contacting our support team. Where a dispute arises regarding which version of the Privacy Policy applied at a specific point in time, the version in force on the date of the relevant event will govern.

If you have any questions, concerns, or complaints about this Privacy Policy, the way joya 9bd handles your personal data, or the exercise of your privacy rights, please contact us using the details below. We take all privacy-related enquiries seriously and will respond within a reasonable timeframe.

• Support Email: [email protected] (plain text — not a clickable link)
• Response Time Target: Within 5 business days for general privacy enquiries; within 30 days for formal data subject rights requests
• Platform: joya-9bd.net
• Market: Bangladesh (Bangladesh Standard Time, UTC+6)