joyaa9 Privacy Policy

joyaa9 ("joyaa9", "we", "us", "our") operates the online casino and sports betting platform accessible at joyaa9.app. In the course of providing our services to players across Bangladesh, we necessarily collect and process certain personal information about you. We take this responsibility seriously.

This Privacy Policy sets out in plain language what personal data joyaa9 collects from players, the purposes for which that data is used, the legal basis on which it is processed, how long it is retained, with whom it may be shared, and what rights you have in relation to your personal information. We encourage you to read this Policy in full before using the joyaa9 platform.

joyaa9 is committed to handling all personal data with care, transparency, and in accordance with internationally recognised data protection principles. We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes under any circumstances.

joyaa9 collects the following categories of personal data from players. The specific data collected at any given time depends on the nature of your interaction with the platform.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — joyaa9 is an 18+ platform).
• Gender (optional, collected during registration for personalisation purposes).
• Residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode.
• Contact mobile number (required for account verification and payment processing via bKash, Nagad, or Rocket).
• Email address (used for account communications, password resets, and promotional notifications where consented).
• Username and encrypted password (your password is never stored in plain text).

2.2 Identity Verification (KYC) Documents

• Scanned or photographed copy of your National Identity Card (NID), passport, or driving licence.
• Proof of address documents such as a utility bill or bank statement issued within the last three months.
• Selfie or live photograph for biometric comparison where enhanced KYC is required.

2.3 Financial & Transaction Data

• Mobile Financial Services (MFS) account numbers associated with bKash, Nagad, Rocket, or Upay transactions.
• Bank account details (account number, bank name, branch) where bank transfer is used.
• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Partial card details (last four digits and card type) where Visa or Mastercard payments are processed.
• Betting history, game session records, win/loss data, and bonus redemption history.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Pages visited, features used, session duration, and clickstream data.
• Login timestamps and session activity logs.
• Crash reports and error logs submitted automatically by the platform.

2.5 Communications Data

• Content of support messages, emails, and chat transcripts exchanged with the joyaa9 support team.
• Survey responses and feedback submitted voluntarily.
• Records of responsible gaming tool activations (deposit limits, self-exclusion requests, cooling-off periods).

joyaa9 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate and interact with the joyaa9 platform.
• From payment providers — bKash, Nagad, Rocket, Upay, and card payment processors share transaction confirmation data and, where required, identity data with joyaa9 to complete payment processing and fraud checks.
• From KYC/identity verification partners — third-party identity verification services may return verification outcomes and document authenticity scores to joyaa9 when you submit KYC documents.
• From fraud prevention services — risk-scoring and device-fingerprinting services may provide signals about suspicious activity associated with your device or IP address.

joyaa9 processes your personal data for the following specific purposes:

joyaa9 processes your personal data on one or more of the following legal bases depending on the purpose of processing:

• Performance of a contract: Processing your registration data, identity verification, and payment transactions is necessary to fulfil the contractual relationship established when you create a joyaa9 account and accept the Terms & Conditions.
• Legitimate interests: joyaa9 has a legitimate interest in preventing fraud, protecting the integrity of its platform, monitoring for responsible gaming concerns, and improving its services — provided that these interests are not overridden by your own rights and interests.
• Legal obligation: Certain processing activities — particularly KYC/AML verification and the retention of financial records — are required by applicable laws and regulations. joyaa9 must comply with these obligations regardless of your consent.
• Consent: Where joyaa9 sends you marketing communications or uses non-essential cookies, we will first obtain your explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your account preferences.

joyaa9 does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. We share your data only in the following controlled circumstances:

6.1 Service Providers & Partners

joyaa9 engages carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways receive the minimum data necessary to authenticate and settle transactions.
• Identity verification (KYC) providers: Third-party verification services process your submitted identity documents to generate a verification outcome. Originals are not permanently retained by the vendor beyond the processing period.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, Spribe, and NetEnt may receive anonymised session data to facilitate game delivery and fairness auditing. They do not receive your full identity details.
• Cloud hosting and infrastructure: joyaa9 uses secure cloud infrastructure to host player data. All hosted data is encrypted at rest and in transit.
• Fraud and risk management services: Specialised services receive technical signals (IP address, device fingerprint) to assess transaction risk without accessing your full personal profile.

6.2 Legal & Regulatory Disclosure

joyaa9 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are required to do so by applicable law, court order, or regulatory direction. Such disclosures will be limited to the minimum data required to satisfy the legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of joyaa9's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled as a result.

joyaa9 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and — where you have consented — to deliver personalised content and measure marketing effectiveness.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load-balancing cookies. No consent is required for these.
• Functional cookies: Remember your language preference, currency display (BDT / ৳), and layout choices to improve your experience. These are enabled by default but can be disabled without affecting core functionality.
• Analytics cookies: Collect anonymised, aggregated data about how players use the joyaa9 platform (pages visited, features used, session duration). Used to identify performance issues and improve UX. Enabled only with your consent.
• Marketing cookies: Used to identify your return visits and measure the effectiveness of promotional campaigns. Enabled only with your explicit consent and can be withdrawn at any time.

7.2 Managing Cookie Preferences

You may review and manage your cookie preferences via your browser settings at any time. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your joyaa9 account. For any cookie-related enquiries, contact [email protected].

joyaa9 implements a multi-layered security architecture to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and joyaa9's servers.
• AES-256 encryption at rest for all sensitive data stored in joyaa9's databases, including identity documents and financial records.
• Two-factor authentication (2FA) available for all player accounts and mandatory for all joyaa9 administrative access.
• Role-based access controls (RBAC) ensuring that joyaa9 staff can access only the data necessary for their specific role. No single employee has unrestricted access to the full player data set.
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems (IDS) that monitor joyaa9's infrastructure for unusual access patterns or data exfiltration attempts in real time.
• Secure development practices — all joyaa9 platform code undergoes security review before deployment, and third-party dependencies are regularly audited for known vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, joyaa9 will notify affected players as promptly as possible and take all reasonable steps to contain and remediate the breach.

joyaa9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active lifetime on joyaa9.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering (AML) record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, as required by financial record-keeping regulations.
• Support communications: Retained for three (3) years following the resolution of the support case, or longer where the communication is relevant to an ongoing legal or regulatory matter.
• Marketing preferences and consent records: Retained for as long as you maintain an account, plus a reasonable period thereafter to demonstrate compliance with consent obligations.
• Technical and usage logs: Typically retained for twelve (12) months in rolling logs, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, joyaa9 will securely delete or irreversibly anonymise your personal data. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and research purposes without further restriction.

As a player on the joyaa9 platform, you have the following rights in relation to your personal data. joyaa9 is committed to honouring these rights in a timely and transparent manner. Requests should be submitted to [email protected] with the subject line "Privacy Rights Request".

• Right of access: You may request a copy of the personal data joyaa9 holds about you, along with an explanation of how it is used. We will respond within 30 days of receiving a valid request.
• Right to rectification: If any personal data joyaa9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., phone number updates) can be made directly via your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no overriding legal basis exists. Please note that we may be required to retain certain data (particularly KYC and financial records) for legal compliance purposes even after an erasure request.
• Right to restriction of processing: You may request that joyaa9 restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that joyaa9 provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. joyaa9 will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

The joyaa9 platform is strictly intended for adults aged 18 and above. joyaa9 does not knowingly collect, use, or store personal data belonging to any person under the age of 18. All registrations are subject to age verification checks, and joyaa9 employs automated screening to detect potential underage registrations.

If joyaa9 discovers or is notified that personal data has been collected from an individual who is under 18 years of age, that account will be immediately and permanently closed, all associated data will be deleted to the extent permitted by law, and the matter will be escalated to our compliance team. Any funds deposited by an underage player will be handled in accordance with our legal obligations and our Terms & Conditions.

Parents and guardians who believe that their child may have registered on joyaa9 are encouraged to contact us immediately at [email protected] so that we can take prompt action.

The joyaa9 platform may from time to time contain references to third-party services, game providers, or payment partners. Where such links exist, they are provided for informational convenience only. joyaa9 has no control over the content, privacy practices, or data handling of any third-party website or service, and this Privacy Policy does not apply to those third parties.

We recommend that you review the privacy policy of any third-party service you interact with independently of joyaa9. joyaa9 accepts no responsibility for the privacy practices of any external service provider, payment network, or game studio.

joyaa9 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — such as a new category of data being collected, a new purpose for processing, or a new third-party sharing arrangement — joyaa9 will notify active players via an in-platform notification displayed upon their next login.

The "Last Updated" date shown at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how joyaa9 is protecting your personal information. The current version of this Policy is always available at joyaa9.app/privacy-policy.

Your continued use of the joyaa9 platform following publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any material change to this Policy, you should cease using the platform and contact us to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the joyaa9 privacy team using the details below. All privacy communications must be in English to ensure accurate and timely handling.

• Email: [email protected]
• Subject Line: Please include "Privacy Policy Enquiry" or "Privacy Rights Request" in your subject line.
• Response Time: Within 30 calendar days for privacy rights requests; within 48 hours for general privacy enquiries.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).

If you are not satisfied with joyaa9's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. joyaa9 will cooperate fully with any such authority investigation.