joya99 Privacy Policy

1 Who We Are

joya99 is an online casino and sports betting platform operating at joya99.onl and serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. For the purposes of this Policy, joya99 is the data controller responsible for the personal data collected through the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our data protection team at: [email protected] (plain text — not a clickable link).

2 Data We Collect

joya99 collects personal data from you in the following categories, depending on how you interact with our platform:

• Identity Data: Full name, date of birth, gender, nationality, and a copy of a valid government-issued identity document (national ID card, passport, or driving licence) collected during account registration and identity verification.
• Contact Data: Email address, mobile phone number, and residential address (including city and postcode within Bangladesh).
• Financial Data: Payment method details (e.g., bKash mobile number, Nagad account, Rocket account, Upay account, bank account details, Visa or Mastercard details), transaction history, deposit amounts, and withdrawal records. Full card numbers are never stored by joya99; payment data is tokenised by our payment processors.
• Account & Activity Data: Username, account ID, login timestamps, session durations, game play history, betting records, bonus redemption history, and responsible gaming settings you have configured.
• Technical Data: IP address, device type and model, operating system, browser type and version, mobile network operator, and approximate geographic location derived from IP address.
• Communications Data: Records of your correspondence with our customer support team, including live chat transcripts, email exchanges, and support ticket histories.
• Marketing Preferences: Your stated preferences for receiving promotional communications from joya99, including email newsletters, SMS notifications, and in-app promotions.

joya99 does not knowingly collect sensitive personal data such as health information, biometric data, or political or religious opinions, except where such data is voluntarily provided in the context of a responsible gaming self-exclusion request or similar welfare-related communication.

3 How We Collect Your Data

We collect personal data through the following methods:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or updating your account preferences.
• Automated technologies: Technical data collected automatically when you access the joya99 platform, including through cookies, server logs, and similar tracking technologies. See Section 9 (Cookies) for full details.
• Third-party sources: Identity verification data from document authentication service providers; fraud and risk signals from payment processors and anti-fraud networks; and, where applicable, publicly available data used to verify your identity or assess fraud risk.

4 How We Use Your Data

joya99 uses your personal data for the following purposes, each supported by an appropriate legal basis:

• Account creation and management: To register and maintain your player account, verify your identity, and manage your account preferences and settings. (Legal basis: contract performance.)
• Transaction processing: To process deposits, withdrawals, and bonus transactions in Bangladeshi Taka (BDT / ৳) through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard). (Legal basis: contract performance.)
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, multi-accounting, and other prohibited activities. (Legal basis: legitimate interests / legal obligation.)
• Responsible gaming compliance: To enforce age restrictions (21+ only), apply self-exclusion restrictions you have activated, and monitor gameplay patterns that may indicate problem gambling behaviour. (Legal basis: legal obligation / legitimate interests.)
• Customer support: To respond to your enquiries, resolve disputes, and improve our support services. (Legal basis: contract performance / legitimate interests.)
• Marketing and promotions: To send you promotional offers, seasonal bonus communications (e.g., Eid offers, BPL promotions, Pohela Boishakh specials, IPL betting promotions), and platform updates, where you have consented to receive such communications. (Legal basis: consent.)
• Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and content of the joya99 platform. (Legal basis: legitimate interests.)
• Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities. (Legal basis: legal obligation.)

5 Sharing Your Data

joya99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, for the purpose of processing financial transactions on your account.
• Identity verification providers: Third-party document authentication and KYC (Know Your Customer) service providers used to verify the identity of players during account registration and withdrawal requests.
• Fraud prevention networks: Anti-fraud and risk management service providers who help joya99 detect and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform.
• IT and infrastructure providers: Cloud hosting, server infrastructure, and cybersecurity service providers who process data on behalf of joya99 under strict data processing agreements.
• Legal and regulatory bodies: Competent authorities, law enforcement agencies, or regulatory bodies where joya99 is legally required to disclose data in response to a lawful request, court order, or regulatory investigation.
• Game content providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical session data necessary to deliver their game content to you. These providers do not receive your full personal profile.

All third-party service providers are required to handle your data in accordance with applicable data protection standards and are prohibited from using your data for any purpose other than the specific service they provide to joya99.

6 Data Retention

joya99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your active account and for up to 5 years following account closure.
• Financial transaction records: Retained for a minimum of 7 years to satisfy financial record-keeping obligations.
• Identity verification documents: Retained for the period of your active account plus up to 5 years post-closure, or longer where required by applicable law.
• Customer support communications: Retained for up to 3 years following the closure of the relevant support case.
• Marketing consent records: Retained for the duration of your active account or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

7 Your Data Rights

As a data subject, you hold the following rights in relation to your personal data held by joya99. You may exercise any of these rights at any time by contacting us at [email protected]:

joya99 aims to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. Please note that certain rights may be limited where joya99 is required to retain or process your data to comply with a legal obligation or to defend a legal claim.

8 Data Security

joya99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and payment records.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific job function.
• Regular security assessments, penetration testing, and vulnerability scanning of our platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Secure data disposal procedures ensuring that personal data is irretrievably destroyed or anonymised at the end of the applicable retention period.

While joya99 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a data security incident that poses a high risk to your rights and freedoms, joya99 will notify you without undue delay and provide details of the nature of the incident and the steps we are taking to address it.

9 Cookies & Tracking Technologies

joya99 uses cookies and similar tracking technologies to deliver and improve our platform services. Cookies are small text files placed on your device when you visit joya99.onl. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the platform, including maintaining your logged-in session, remembering your language preference, and enabling secure payment processing. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the joya99 platform, including which pages are visited most frequently and how users navigate between sections. This data is used solely to improve platform performance.
• Functional cookies: Used to remember your preferences and personalise your experience on the platform, such as your preferred game category or deposit method.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of our marketing campaigns. These cookies are only placed where you have provided consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the joya99 platform. Your cookie preferences can be updated at any time.

10 Marketing Communications

Where you have provided consent during registration or through your account settings, joya99 may send you promotional communications including bonus offers, tournament announcements, new game launches, and seasonal promotions. You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your joya99 account settings panel.
• Clicking the "unsubscribe" link included in any promotional email sent by joya99.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Please allow up to 7 business days for your opt-out request to take effect across all communication channels. Withdrawal of marketing consent does not affect your ability to continue using the joya99 platform or receive essential account-related communications (such as transaction confirmations, security alerts, or policy update notices).

11 Children & Minors

joya99 is strictly an adults-only platform. Our services are intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. If joya99 becomes aware that personal data has been collected from a player who is under 21 years of age, we will immediately close the associated account, return any deposited funds to the payment source, and permanently delete all associated personal data.

If you have reason to believe that a minor has registered an account on joya99, please notify our support team immediately at [email protected] so that we can take prompt action.

12 Changes to This Policy

joya99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email and post a prominent notice on the joya99 platform prior to the changes taking effect.

The "Last Updated" date at the top of this document always reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the joya99 platform following notification of any changes constitutes your acceptance of the updated Policy.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the joya99 data protection team. We are available 24 hours a day, 7 days a week.

Contact email (plain text — not a clickable link): [email protected]

All privacy-related enquiries and data rights requests will be acknowledged within 3 business days of receipt, and we aim to provide a full response within 30 days. Where a request is particularly complex, we will inform you if additional time is required.