Privacy Policy of
joya9 loging

1 Data We Collect

When you register for an account, make deposits or withdrawals, place bets, or interact with joya9 loging in any other way, we collect personal data. The categories of data we collect and the specific circumstances in which each category arises are described below.

2 How We Use Your Data

joya9 loging processes personal data only where a clear and legitimate purpose exists. The primary purposes for which we use your data are set out below, together with the legal basis on which each processing activity rests.

• Account creation and management: We use your identity and contact data to create and maintain your registered account, verify your identity, and ensure the security of your login credentials. This processing is necessary to fulfil the contract between you and joya9 loging.
• Payment processing: Financial data is used to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. This processing is necessary for the performance of our services.
• KYC and fraud prevention: Identity documents and financial data are used to comply with know-your-customer obligations, detect fraudulent activity, and prevent money laundering. This processing is carried out on the basis of legal obligation and our legitimate interest in maintaining Platform integrity.
• Platform personalisation: Behavioural data is used to personalise the games and markets displayed to you, including recommending cricket fixtures, slot titles, and casino tables that match your play history. This processing is based on our legitimate interest in improving user experience.
• Marketing communications: With your explicit consent, we may use your contact data to send you promotional offers, bonus notifications, and seasonal promotions relating to events such as BPL, Eid, and T20 World Cup. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.
• Customer support: Communications data, including live chat transcripts and email exchanges, is used to resolve queries, process complaints, and improve our support processes.
• Legal compliance: We may process and retain personal data where required by applicable law or where directed to do so by a competent authority.

joya9 loging does not use automated decision-making processes that produce legally significant outcomes for players without human review. Where automated tools are used to flag potentially problematic activity (such as suspected fraud or underage access), a member of the compliance team reviews the flagged case before any account action is taken.

3 Data Sharing and Disclosure

joya9 loging does not sell your personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment partners: Financial data necessary to process a specific transaction is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank — on a transaction-by-transaction basis. These providers process data solely to execute the requested payment and are bound by their own privacy and security obligations.
• Game technology providers: Technical session data and game outcome records may be shared with our game studio partners — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — where this is required for game integrity auditing or technical support. These providers do not receive your identity or financial data.
• Identity verification services: During KYC processing, identity document images may be shared with regulated third-party verification service providers. These providers operate under strict data handling agreements and are not permitted to use your data for any purpose beyond the verification task.
• Legal and regulatory authorities: joya9 loging may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by applicable law, court order, or regulatory direction.
• Business transfers: In the event that joya9 loging undergoes a merger, acquisition, or sale of assets, personal data held on the Platform may be transferred to the relevant successor entity. Affected players will be notified in advance where technically and legally practicable.

4 Cookies and Tracking

joya9 loging uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, remember your preferences, and understand how players interact with different areas of the site. The cookies we use fall into the following categories.

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your authenticated session, remember your selected currency (BDT), and enable core navigation. Disabling these cookies will prevent the Platform from working correctly and cannot be turned off from within our cookie settings.
• Functional cookies: These cookies remember your preferences such as language setting, preferred game category, and notification choices. They enable a more personalised experience each time you return to joya9 loging.
• Analytical cookies: We use first-party analytical cookies to collect aggregated, anonymised data on how players navigate the Platform — which pages attract the most visits, where sessions end, and how different features are used. This data informs Platform improvements and does not identify individual players.
• Session-duration cookies: These cookies track the duration of your current play session to support the responsible gaming tools available in your account settings, including session-time reminders and reality checks.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use certain features of joya9 loging, including the login process and in-play betting functionality. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5 Data Security

Protecting the personal data of our players is a core operational responsibility at joya9 loging. We have implemented a layered set of technical and organisational security measures designed to prevent unauthorised access, accidental loss, destruction, or disclosure of your data.

• Encryption in transit: All data exchanged between your device and joya9 loging servers is encrypted using TLS 1.2 or higher (commonly referred to as 256-bit SSL encryption). This applies to account logins, payment flows, support communications, and all other Platform interactions.
• Encryption at rest: Sensitive data stored in our databases, including identity documents, financial records, and password hashes, is encrypted at rest using industry-standard algorithms. Plain-text passwords are never stored.
• Access controls: Access to personal data within joya9 loging is restricted on a strict need-to-know basis. Employees and contractors who require access to player data for their role are granted the minimum level of access necessary and are bound by confidentiality obligations.
• Intrusion monitoring: Our systems are monitored continuously for unusual access patterns, potential intrusion attempts, and security anomalies. Alerts are reviewed by our security team in real time during business hours and by automated systems outside of those hours.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected players, joya9 loging will take immediate steps to contain the breach, notify affected players as soon as reasonably practicable, and review our security controls to prevent recurrence.

6 Data Retention

joya9 loging retains personal data only for as long as it is needed for the purpose for which it was collected, or for as long as we are required to retain it under applicable regulatory or legal obligations. The following retention periods apply to the main categories of data we hold.

• Account and identity data: Retained for the duration of your active account, plus a minimum of five years following account closure. This retention period reflects standard financial record-keeping requirements applicable to online payment platforms operating in Bangladesh.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction. This includes deposit records, withdrawal records, and bet settlement history, in accordance with financial record-keeping best practice.
• KYC documentation: Copies of identity documents submitted for KYC verification are retained for the duration of your account plus five years following closure or the date of the last transaction, whichever is later.
• Support communications: Live chat transcripts and email exchanges with our support team are retained for two years from the date of the interaction. After this period, records are anonymised or deleted.
• Technical and log data: Server logs and session data are retained for up to 12 months, after which they are deleted or aggregated into anonymised analytics data that no longer identifies individual players.
• Marketing consent records: Records of your marketing consent status and any withdrawal of consent are retained indefinitely as a compliance record, even if you withdraw consent and no further marketing is sent.

At the end of each applicable retention period, data is either securely deleted from our systems or, where deletion is not technically feasible in the short term, anonymised such that it can no longer be associated with any identifiable individual. You may request early deletion of certain categories of data subject to the rights described in the section below.

7 Your Rights Over Your Data

joya9 loging respects the rights of all players over their personal data. The following rights are available to you and may be exercised at any time by contacting our support team via live chat or at [email protected].

• Right of access: You may request a copy of the personal data we hold about you. We will respond to verified access requests within 30 days. The response will include a summary of the data categories held, the purposes for which they are processed, and the retention periods that apply.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data categories such as your registered mobile number or email address, you may be able to update these directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that this right is subject to overriding legal obligations — for example, we cannot delete financial transaction records that we are required to retain under applicable regulations.
• Right to object to marketing: You may withdraw your consent to receive marketing communications from joya9 loging at any time. Requests to opt out of marketing will be actioned within 48 hours. Please note that withdrawing marketing consent does not affect the processing of your data for account management, payment processing, or legal compliance purposes.
• Right to data portability: You may request a copy of the personal data you have provided to joya9 loging in a structured, commonly used, machine-readable format. This right applies to data that is processed on the basis of your consent or the performance of a contract with you.
• Right to restrict processing: In certain circumstances — for example, while a rectification request is being assessed — you may request that we limit the processing of your personal data to storage only, pending resolution of the relevant query.

8 Contact for Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way joya9 loging handles your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related queries within 48 hours (Bangladesh Standard Time, UTC+6).

• Live chat: Available 24 hours a day, 7 days a week directly on the joya9 loging Platform. Live chat is the fastest way to raise an urgent privacy concern or account security issue.
• Email: [email protected] — please use the subject line "Privacy Query" to ensure your message is routed to the correct team. Do not send sensitive documents such as identity copies via email unless requested by our team as part of a verified KYC process.
• Response time: We aim to acknowledge all privacy-related queries within 2 hours and to provide a substantive response within 48 hours during normal operating periods. During peak periods such as major cricket tournaments (BPL, T20 World Cup) or Eid, response times may be slightly extended, but we will always acknowledge receipt promptly.

joya9 loging reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable regulations. Material changes will be communicated to registered players via their registered email address or via a prominent notice on the Platform prior to the changes taking effect. The effective date at the top of this document will be updated with each revision. Your continued use of joya9 loging following notification of a policy update constitutes your acceptance of the revised Privacy Policy.