joya9win
Privacy Policy

1 Data We Collect

When you interact with joya9win — whether by browsing the site, registering an account, making a deposit, placing a bet, or contacting our support team — we may collect certain categories of personal information. The nature and volume of data collected depends on the type of interaction and the services you access.

The following table summarises the main categories of personal data we collect and the primary purpose for which each category is gathered:

We collect this information through the following channels: directly from you when you complete registration forms or contact support; automatically through cookies and similar tracking technologies when you browse joya9win; and from third-party verification providers during KYC checks. We do not collect sensitive data such as biometric information, religious beliefs, or political opinions.

2 How We Use Your Data

joya9win processes your personal data only where we have a lawful basis for doing so. The primary bases on which we rely are: (a) performance of a contract — processing is necessary to provide you with the services you have requested; (b) compliance with a legal obligation — we are required to verify your identity and report certain activities under applicable anti-money-laundering frameworks; (c) legitimate interests — we process certain data to protect the integrity of our platform and improve the player experience; and (d) your consent — where you have expressly opted in to a specific use, such as receiving promotional communications.

Specifically, we use the data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and provide you with access to all platform features.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests to your verified payment method in Bangladeshi Taka (৳).
• Bonus and promotion administration: To credit eligible bonuses such as the 200% welcome bonus up to ৳20,000, track wagering progress, and administer time-limited promotional campaigns.
• Customer support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance and compliance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct that could harm you or the platform.
• Responsible gaming monitoring: To identify patterns of play that may indicate problematic gambling behaviour and to enforce any self-exclusion or deposit limit requests you have made.
• Platform analytics and improvement: To understand how players use joya9win, identify technical issues, and make data-driven improvements to our products and services.
• Marketing communications (with consent): To send you promotional emails, offers, and updates about joya9win. You may opt out of marketing communications at any time by contacting support or using the unsubscribe mechanism in any email.
• Legal and regulatory compliance: To satisfy our obligations under applicable laws, respond to lawful requests from competent authorities, and maintain records required for audit purposes.

We will not use your personal data for purposes incompatible with those described above without first obtaining your explicit consent or establishing a new lawful basis for the intended processing.

3 Data Sharing & Disclosure

joya9win does not sell your personal data to third parties. However, in order to deliver our services effectively and comply with our legal obligations, we may share certain personal data with a limited set of trusted third parties and service providers. All such parties are contractually required to handle your data in accordance with applicable data protection standards and to use it only for the specific purposes for which it was shared.

The categories of third parties with whom we may share your data include:

• Payment service providers: Including bKash, Nagad, Rocket, Upay, and international card networks (Visa, Mastercard), solely to process financial transactions initiated by you.
• Identity verification and KYC providers: Third-party agencies that assist us in verifying your identity and age in compliance with our Know Your Customer obligations.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver their games and resolve technical disputes.
• IT infrastructure and hosting providers: Companies that provide secure server infrastructure, cloud storage, and database management services on which joya9win's platform operates.
• Analytics and security providers: Services that help us monitor platform performance, detect fraud, and analyse aggregated usage data to improve the user experience.
• Legal and regulatory authorities: Where required by law or a binding court order, we may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies in Bangladesh or applicable international jurisdictions.

In the event that joya9win undergoes a merger, acquisition, or sale of business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such a circumstance, we will take reasonable steps to notify you and to ensure that your data continues to be protected under terms at least as stringent as those described in this Privacy Policy.

4 Cookies & Tracking Technologies

joya9win uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate the platform, remember your preferences, and gather anonymised usage analytics. A cookie is a small text file placed on your device when you visit a website. It allows the site to recognise your device on return visits and to maintain session continuity.

We use the following categories of cookies on joya9win:

You can control or delete cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies via the Privacy or Security section of the browser's settings menu. Please note that disabling strictly necessary cookies may prevent joya9win from functioning correctly and could result in your inability to log in or complete transactions.

We do not use cookies to serve third-party advertisements or to track your activity across unrelated external websites. Our tracking technologies are used exclusively in connection with the joya9win platform itself.

5 Data Security

The security of your personal data is a core operational priority at joya9win. We implement a multi-layered security framework designed to protect your information against unauthorised access, accidental loss, disclosure, alteration, and destruction. Our security measures include both technical safeguards and organisational policies applied across all aspects of our operations.

Our data security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols, indicated by the HTTPS prefix in your browser.
• Encrypted data storage: Sensitive data fields — including payment information, identity documents, and account credentials — are stored in encrypted form in our databases. Encryption keys are managed separately from the data they protect.
• Access controls: Internal access to personal data is governed by a least-privilege policy. Only staff members with a specific operational need are granted access to identifiable player records, and all such access is logged and audited.
• Password hashing: Account passwords are never stored in plain text. We apply a strong one-way cryptographic hashing algorithm with salting to protect all user credentials at rest.
• Intrusion detection: We deploy real-time network monitoring and automated intrusion detection systems to identify and respond to suspicious activity across our infrastructure.
• Security reviews: joya9win conducts regular internal security audits and vulnerability assessments to identify and remediate weaknesses in our systems before they can be exploited.
• Staff training: All personnel with access to player data receive mandatory training on data protection obligations and security best practices. Data handling procedures are reviewed and updated regularly.

Despite our best efforts, no digital system can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, joya9win will notify affected players without undue delay and take all appropriate steps to contain and mitigate the breach. We will also report notifiable breaches to relevant authorities in accordance with applicable requirements.

6 Data Retention

joya9win retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or audit obligations. Retention periods vary depending on the category of data and the reason it was processed.

The following general retention periods apply to key data categories:

• Account and identity data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping best practices.
• KYC verification documents: Retained for the period of account activity plus five (5) years. Copies of identity documents are deleted securely once the retention period expires.
• Gaming activity logs: Retained for up to three (3) years from the date of the activity, or longer where required for an ongoing investigation or dispute.
• Support communications: Retained for up to two (2) years from the date of the interaction, unless the matter relates to an unresolved dispute or regulatory investigation.
• Cookie and analytics data: Anonymised analytics data may be retained for up to twelve (12) months. Session-level cookie data expires as described in the Cookies section above.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter to demonstrate compliance.

When personal data reaches the end of its applicable retention period and no longer serves a lawful purpose, joya9win will securely delete or anonymise it in a manner that makes re-identification impossible. We do not archive personal data indefinitely as a precaution or for speculative future use.

7 Your Privacy Rights

As a player on joya9win, you have a range of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team via live chat or at the email address provided on this website, with sufficient detail to identify your account and the specific right you wish to exercise.

We will acknowledge your request within 48 hours and aim to provide a full response within 30 calendar days. In complex or high-volume cases, we may extend this period by a further 30 days, in which case we will notify you of the extension in advance.

Please note that some rights are not absolute and may be subject to limitations where overriding legal obligations apply. Where we are unable to fully honour a request, we will explain our reasons clearly in writing. We will never charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive in scope.

8 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way joya9win processes your personal data, we encourage you to contact us directly. Our support team is available 24 hours a day, seven days a week, via the live chat function in your account dashboard. You may also reach our privacy team by email — contact details are provided in the footer of this page.

If you believe that your privacy rights have been violated or that joya9win has handled your personal data in a manner inconsistent with this Privacy Policy, you may submit a formal complaint using the following process:

1. Step 1 — Direct contact: Write to our support team clearly describing the nature of your complaint, the data involved, and the outcome you are seeking. We will acknowledge receipt within 48 hours.
2. Step 2 — Internal review: Our privacy team will investigate your complaint thoroughly and provide a written response within 30 calendar days. Where the matter is complex, we may extend this period and will inform you accordingly.
3. Step 3 — Escalation: If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority or competent regulatory body in your jurisdiction. We will cooperate fully with any such authority in the course of its investigation.

joya9win takes all privacy complaints seriously. We view each complaint as an opportunity to review and improve our data handling practices. No player will be penalised or treated less favourably for raising a legitimate privacy concern in good faith.

This Privacy Policy was last reviewed and updated on 1 January 2026. We reserve the right to amend this policy at any time to reflect changes in our services, applicable law, or best-practice standards. When material changes are made, we will notify registered players by email or via a prominent notice on the joya9win platform. Your continued use of the platform after the effective date of any updated policy constitutes your acceptance of the revised terms. We encourage you to revisit this page periodically to stay informed of how we protect your information.