Privacy Policy — How Joya9 Com Protects Your Data

1Who We Are

joya9 com is an online gaming platform operated for players in Bangladesh. When this privacy policy refers to "joya9 com", "we", "us", or "our", it means the operator of the joya9 com platform accessible at joya9-com.app.

joya9 com is the data controller for the personal information you provide when registering and using the platform. This means we are responsible for deciding how and why your data is collected and processed. If you have any questions about how joya9 com handles your data, you can reach us at [email protected].

This privacy policy applies to all users of joya9 com, including registered players, visitors who browse the platform without registering, and anyone who contacts our support team. By using joya9 com, you acknowledge that you have read and understood this policy.

2Data We Collect

joya9 com collects personal data in several ways — directly from you when you register or use the platform, automatically through your use of the site, and from third parties where necessary for verification purposes. Here is a breakdown of the categories of data we collect:

joya9 com does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or regulation.

3How We Use Your Data

Every piece of data joya9 com holds about you is used for a specific, legitimate purpose. We do not use your data in ways that are incompatible with the reasons it was originally collected. The main purposes for which joya9 com uses your personal data are:

• Account management: To create, maintain, and manage your joya9 com account, including processing your registration and verifying your identity.
• Transaction processing: To process deposits, withdrawals, and bonus payments accurately and securely.
• Customer support: To respond to your queries, resolve disputes, and provide assistance when you contact the joya9 com support team.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
• Legal compliance: To comply with applicable laws, regulations, and licensing requirements, including anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Platform improvement: To analyse usage patterns and improve the joya9 com platform, fix bugs, and develop new features.
• Responsible gaming: To monitor gameplay patterns and identify players who may need responsible gaming support or intervention.
• Communications: To send you important account notifications, security alerts, and — where you have opted in — promotional offers from joya9 com.

4Legal Basis for Processing

joya9 com processes your personal data on the following legal grounds:

• Contract performance: Processing your data is necessary to provide the joya9 com service you have signed up for, including managing your account and processing transactions.
• Legal obligation: joya9 com is required by law to collect and retain certain data, particularly for KYC, AML, and regulatory reporting purposes.
• Legitimate interests: joya9 com has a legitimate interest in preventing fraud, maintaining platform security, and improving the service — provided these interests do not override your rights.
• Consent: For optional activities such as marketing communications, joya9 com relies on your explicit consent, which you can withdraw at any time.

Where joya9 com relies on legitimate interests as the legal basis for processing, we always balance those interests against your rights and freedoms. If you have concerns about how we process your data, you have the right to object — see Section 8 for details.

5Data Sharing

joya9 com does not sell your personal data. We share your data only in the following limited circumstances, and only with parties who are bound by appropriate data protection obligations:

• Payment processors: bKash, Nagad, and other payment service providers receive the financial data necessary to process your transactions. They are not permitted to use this data for any other purpose.
• Identity verification providers: Third-party KYC services receive identity documents and verification data to confirm your identity as required by law.
• Fraud prevention services: We may share data with fraud detection and prevention services to protect joya9 com and its players from financial crime.
• Regulatory authorities: joya9 com may be required to share data with government agencies, law enforcement, or regulatory bodies where required by law or court order.
• Technology providers: Hosting, infrastructure, and analytics providers who process data on our behalf under strict data processing agreements.

6Cookies and Tracking

joya9 com uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. Here is what we use and why:

• Essential cookies: These are required for joya9 com to function. They keep you logged in, remember your session, and enable core platform features. You cannot opt out of essential cookies without stopping use of the platform.
• Analytics cookies: These help joya9 com understand how players navigate the site — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised.
• Preference cookies: These remember your settings and preferences, such as language and display options, so you do not have to set them every time you visit joya9 com.
• Security cookies: These help joya9 com detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of joya9 com. We do not use third-party advertising cookies or tracking pixels that share your data with advertisers.

7Data Retention

joya9 com retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal and regulatory obligations. The general retention periods we apply are:

• Active account data: Retained for the full duration of your account being open on joya9 com, plus a minimum of five years after account closure to meet regulatory requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction, as required by financial regulations.
• KYC and verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three years from the date of the last communication, unless the matter relates to an ongoing dispute or legal proceeding.
• Technical and usage data: Typically retained for 12 to 24 months in identifiable form, after which it may be anonymised and retained for analytical purposes.

When data is no longer required, joya9 com securely deletes or anonymises it. If you request deletion of your data and there is no legal obligation to retain it, we will process your request within 30 days.

8Your Rights

As a user of joya9 com, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected].

joya9 com will respond to all data rights requests within 30 days. In complex cases, we may extend this by a further 60 days, in which case we will notify you of the extension and the reason for it. We will never charge a fee for handling a data rights request unless it is manifestly unfounded or excessive.

9Data Security

joya9 com takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration:

• TLS encryption: All data in transit between your device and joya9 com is encrypted using Transport Layer Security (TLS).
• Encrypted storage: Sensitive data, including financial information and identity documents, is encrypted at rest in our secure data stores.
• Access controls: Access to personal data within joya9 com is restricted on a need-to-know basis. All staff access is logged and audited.
• Two-factor authentication: joya9 com supports two-factor authentication (2FA) for player accounts to add an extra layer of protection against unauthorised login.
• Regular security reviews: Our systems and processes are reviewed regularly to identify and address potential vulnerabilities.
• Incident response: joya9 com has a documented incident response plan. In the event of a data breach, we will act quickly to contain it and notify affected players without undue delay.

While joya9 com takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password and enable 2FA on your joya9 com account.

10Children's Privacy

joya9 com is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps to prevent underage users from creating accounts.

If joya9 com becomes aware that personal data has been collected from a person under 18, we will immediately close the account, delete the data, and — where applicable — report the matter to relevant authorities. If you believe a minor has registered on joya9 com, please contact us immediately at [email protected].

11Changes to This Policy

joya9 com may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date.

For significant changes that materially affect how we use your data, joya9 com will notify registered players via email or an in-platform notification before the changes take effect. We encourage you to review this policy periodically to stay informed about how joya9 com protects your privacy.

Continued use of joya9 com after a revised privacy policy is published constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using joya9 com and contact support to close your account and request deletion of your data.

12Contact Us

If you have any questions, concerns, or requests relating to this privacy policy or how joya9 com handles your personal data, please get in touch with us. Our team is available 24 hours a day, 7 days a week.

• Email: [email protected] — for privacy-related queries, data rights requests, and data breach reports.
• Live chat: Available directly within the joya9 com platform for fast responses to general queries.
• FAQ: Common questions about your account and our policies are answered on our FAQ page.

When submitting a data rights request by email, please include your registered account username and a brief description of your request. This helps us locate your data and respond as quickly as possible. We aim to acknowledge all privacy-related emails within 24 hours.