Privacy Policy — joya9 com

1 Data We Collect

When you use joya9 com, we collect personal data in three broad ways: information you provide directly, information generated automatically by your use of the platform, and information we receive from third-party service providers such as payment processors and game studios.

1.1 Information You Provide Directly

The following categories of data are collected when you register an account, complete identity verification, make a deposit or withdrawal, or contact our support team:

1.2 Information Collected Automatically

When you access the joya9 com platform, certain technical and behavioural data is collected automatically through our systems and cookies. This includes:

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution.
• Session data: Login timestamps, session duration, pages visited, features accessed, and navigation patterns.
• Geolocation data: Approximate geographic location derived from your IP address (used for fraud prevention and responsible gaming compliance — we do not use GPS-level precision).
• Betting and gaming activity: Game history, wager amounts, win/loss records, bonus usage, and responsible gaming tool settings.

1.3 Information from Third Parties

joya9 com may receive limited personal data from trusted third-party partners in the following circumstances:

• Payment processors (such as bKash, Nagad, Rocket, and Upay) may confirm transaction status, reference numbers, and account holder names for the purpose of verifying deposits and processing withdrawals.
• Game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may share game session identifiers and RNG certification data necessary to resolve game disputes.
• Identity verification service providers may return a pass/fail determination and a confidence score based on the documents you submit, without sharing the underlying document images with joya9 com's operational teams beyond what is required for manual review.

2 How We Use Your Data

joya9 com processes your personal data only for specific, legitimate purposes. The table below sets out each processing purpose together with its legal basis and the data categories involved.

Where joya9 com relies on legitimate interest as a legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms, in particular your right to privacy. You may object to processing based on legitimate interest at any time by contacting our support team.

3 Data Sharing & Disclosure

joya9 com does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay — to process deposits and withdrawals in BDT.
• Identity verification providers: To conduct automated and manual KYC checks on submitted documents.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — to deliver game content and resolve session disputes.
• Cloud hosting and infrastructure providers: To securely store platform data and ensure service availability.
• Customer support platform providers: To manage live chat and email correspondence.

All service providers are bound by contractual data processing agreements that require them to protect your data, use it only for the specified purpose, and delete it when the engagement ends.

3.2 Legal and Regulatory Disclosure

joya9 com may disclose personal data to competent authorities, courts, or regulators where we are required to do so by applicable law, court order, or in connection with the prevention, detection, or prosecution of fraud, money laundering, or other illegal activity. We will notify affected players of such disclosures where legally permitted to do so.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of joya9 com's assets, your personal data may be transferred to the successor entity. We will provide advance notice of any such transfer and ensure that the recipient is bound by privacy obligations no less protective than those described in this Policy.

4 Cookies & Tracking

joya9 com uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse usage patterns. A cookie is a small text file stored on your device when you visit a website.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

You can manage non-essential cookie categories through the privacy settings in your joya9 com account dashboard. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to log in and use the platform. Please consult your browser's help documentation for instructions on managing cookie settings.

joya9 com does not use cross-site tracking cookies or participate in any third-party advertising network that tracks your activity across the wider internet based on your joya9 com usage.

5 Data Security

joya9 com implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption at rest for all sensitive personal data stored in our databases, including identity documents and financial records.
• Access controls: Personal data is accessible only to joya9 com staff and contractors who require it to perform their specific role. All access is logged and audited.
• Two-factor authentication (2FA) is available for all player accounts and is mandatory for all joya9 com staff accounts with access to player data.
• Regular security assessments: Our platform and infrastructure undergo periodic penetration testing and vulnerability assessments conducted by independent security professionals.
• Incident response: joya9 com maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.

6 Data Retention

joya9 com retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.

Where you request account closure for responsible gaming reasons (self-exclusion), your identity data is retained for the full statutory period to prevent re-registration during your self-exclusion period and to comply with applicable legal obligations.

7 Your Rights

As a joya9 com player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and aim to resolve it within 30 calendar days.

• Right of access: You may request a copy of the personal data joya9 com holds about you, including information about how it is being used.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You can also update basic account information directly from your account dashboard.
• Right to erasure: In certain circumstances, you may request that joya9 com delete your personal data. This right does not apply where retention is required by law (for example, financial transaction records subject to anti-money laundering obligations).
• Right to restrict processing: You may request that joya9 com pause the processing of your data while a rectification request is under review, or where you have objected to processing and we are assessing whether our legitimate interest overrides your rights.
• Right to object: You have the right to object at any time to the processing of your personal data where joya9 com relies on legitimate interest as its legal basis. You may also unsubscribe from marketing communications at any time by following the unsubscribe link in any email we send, or by updating your notification preferences in your account dashboard.
• Right to data portability: Where joya9 com processes your data on the basis of consent or contract performance using automated means, you may request that we provide your data in a structured, machine-readable format.

8 Policy Updates & Contact

8.1 Changes to This Policy

joya9 com may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material — for example, if we begin processing a new category of data or change the purpose for which existing data is used — we will notify active players via email and display a prominent notice on the platform at least 14 days before the changes take effect.

Minor changes (such as typographical corrections, clarifications that do not affect your rights, or updated contact details) may be made without advance notice. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this page periodically to stay informed about how joya9 com protects your privacy.

Continued use of the joya9 com platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the platform and may request account closure by contacting support.

8.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or joya9 com's data practices, please reach out to our dedicated privacy team using the following contact details:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: We aim to respond to all privacy-related enquiries within 48 hours during Bangladesh Standard Time (BST, UTC+6) business hours.
• Postal contact: Available on request for formal legal correspondence.

For urgent concerns such as a suspected account breach or unauthorised access to your data, please mark your email as "URGENT — Security" and our team will prioritise your case immediately, regardless of the time of day.