joya9ba Privacy Policy

joya9ba collects personal data through several distinct channels: directly from you when you register or interact with the platform, automatically through your use of our website, and from third-party sources where necessary for identity verification and payment processing. The categories of personal data we collect are described in full below.

Registration and Identity Data

When you create a joya9ba account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, email address, mobile phone number (registered in Bangladesh), chosen username, and residential address. This data is essential for establishing your account, verifying your age (18+ requirement), and fulfilling our Know Your Customer (KYC) obligations. Failure to provide this information means we cannot create an account for you.

Identity Verification Documents

To comply with anti-money laundering (AML) and responsible gaming obligations, joya9ba may request documentary proof of your identity and address. Acceptable documents include a valid National Identity Card (NID) issued by the Government of Bangladesh, a valid passport, a government-issued driving licence, or a recent utility bill or bank statement confirming your residential address. Copies of these documents are stored securely and used solely for verification purposes.

Financial and Transaction Data

We record the details of all financial transactions conducted through your joya9ba account. This includes deposit amounts, withdrawal requests, payment method identifiers (such as your registered bKash or Nagad mobile number), transaction timestamps, and account balance history. We do not store full payment card numbers on our servers; card transactions are handled by PCI-DSS compliant third-party payment processors who supply us with a tokenised reference only.

Gaming and Betting Activity Data

joya9ba maintains a complete record of your betting and gaming activity on the platform. This includes the games played, sports markets wagered on, bet amounts, odds accepted, session durations, and outcomes. This data is used for account management, responsible gaming monitoring, dispute resolution, and the improvement of game and odds offerings on the platform.

Automatically Collected Technical Data

When you visit joya9ba.net, our servers and analytics systems automatically collect the following technical information:

• IP address and approximate geographic location (city/district level, not precise GPS coordinates)
• Device type, operating system, and browser type and version
• Pages visited, time spent on each page, click paths, and referral source
• Session identifiers and login timestamps
• Error logs and performance diagnostics

This technical data is collected for the purposes of platform security, fraud detection, performance optimisation, and aggregate analytics. It is not used to build personal marketing profiles.

Communications Data

If you contact joya9ba's support team by email or through any on-platform messaging feature, we retain a record of that correspondence, including the content of your message, the date and time of contact, and any resolution steps taken. This data is used to handle your query effectively and to improve our customer service quality.

The personal data collected by joya9ba is used exclusively to operate the platform, comply with legal obligations, protect the integrity of the gaming environment, and deliver a high-quality, personalised experience to players based in Bangladesh. The specific purposes for which we use each category of data are set out below.

Account Management and Service Delivery

Your registration and identity data is used to create and maintain your joya9ba account, authenticate your login sessions, process deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment methods, and communicate important account-related information to you (such as transaction confirmations, security alerts, and policy updates).

Age Verification and KYC Compliance

joya9ba is committed to preventing underage gambling. Your date of birth and KYC documents are used to verify that you are 18 years of age or older before you are permitted to place real-money bets. We may repeat KYC verification checks at the time of your first withdrawal request or at any point where joya9ba has reason to question the accuracy of the information on file.

Fraud Prevention and Security

Transaction data, technical data, and gaming activity records are analysed — both by automated systems and by our security team — to detect and prevent fraud, money laundering, account takeover, bonus abuse, and other forms of prohibited conduct as defined in our Terms & Conditions. Where suspicious activity is identified, joya9ba may suspend the account pending investigation and, where required by law, report the matter to the relevant authorities in Bangladesh.

Responsible Gaming Monitoring

joya9ba uses gaming activity data — including session frequency, session duration, wagering volumes, and deposit patterns — to monitor for signs of problem gambling. Where our responsible gaming algorithms identify behaviour consistent with compulsive or disordered gambling, joya9ba may proactively contact the player to offer support resources, apply cooling-off periods, or trigger a review of the player's self-imposed deposit limits. Full details of our responsible gaming tools are available on the Responsible Gaming page.

Customer Support

Communications data (support emails and chat transcripts) is used to handle your queries, resolve disputes, and improve the quality of our customer service. Support records are retained for a period of five years following the date of the interaction, consistent with our general data retention policy.

Platform Improvement and Analytics

Aggregated and anonymised technical data and gaming activity data are used to analyse platform performance, identify popular games and betting markets, optimise page load times, and plan product development priorities. This analysis is conducted on aggregate datasets and does not involve decisions made about you as an individual based solely on automated processing.

Marketing Communications

With your explicit consent, joya9ba may use your email address and mobile phone number to send you promotional communications about new games, seasonal offers (such as Eid or BPL cricket season promotions), and exclusive player bonuses. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by updating your notification preferences in your account settings. Withdrawing marketing consent does not affect your ability to use the platform or receive essential account communications.

joya9ba uses cookies and similar browser-based tracking technologies (including local storage and session storage) to operate the platform correctly, maintain your login session securely, and collect aggregate analytics data. This section describes the types of cookies we deploy and the purpose of each.

Essential Cookies

Essential cookies are strictly necessary for the platform to function. They maintain your authenticated login session, remember your preferred language settings, and preserve items in your bet slip between page loads. Without essential cookies, you would be required to log in afresh on every page you visit, and core betting functionality would be unavailable. Essential cookies cannot be disabled without fundamentally impairing your ability to use joya9ba.net.

Analytics Cookies

Analytics cookies allow joya9ba to understand how players interact with the platform in aggregate. We use analytics data to identify which games are most popular, which pages load most slowly, and where players most frequently abandon a process (such as a deposit flow). This insight is used exclusively for internal product improvement. Analytics data is anonymised — it does not identify you personally.

Security Cookies

joya9ba deploys security cookies and tokens to protect against Cross-Site Request Forgery (CSRF) attacks, session hijacking, and other common web security threats. These cookies are essential components of our platform security architecture and are active during all authenticated sessions.

Preference Cookies

Preference cookies remember choices you make on the platform — such as your preferred game display settings or notification preferences — so that you do not need to reconfigure them on each visit. These cookies are non-essential and can be disabled without affecting core betting functionality, though your personalisation settings will not be retained between sessions.

What We Do Not Use

joya9ba does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any tracking technology that follows your browsing activity across websites unrelated to joya9ba.net. We do not use cookies to build profiles for sale to third-party advertisers.

joya9ba does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. However, to deliver the services described in this Privacy Policy, joya9ba shares certain categories of personal data with carefully selected third-party partners and service providers. All third parties with whom joya9ba shares personal data are required to process that data in accordance with instructions from joya9ba and to maintain appropriate technical and organisational security measures.

Payment Processors

To process your deposits and withdrawals, joya9ba shares the minimum necessary transaction data with our payment processing partners, which include the operators of bKash, Nagad, Rocket, Upay, and our card payment gateway providers. The data shared with payment processors is limited to your registered payment method identifier (e.g., your bKash mobile number), the transaction amount in BDT, and a transaction reference number. Payment processors are contractually prohibited from using this data for any purpose other than completing the transaction.

Identity Verification Services

Where automated or third-party-assisted KYC verification is required, joya9ba may share your name, date of birth, and documentary evidence with identity verification service providers. These providers check the authenticity of documents and confirm that the details provided match official records. All KYC providers used by joya9ba are bound by strict data processing agreements.

Game Software Providers

joya9ba's platform hosts games and live casino products supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game supplied by one of these studios, the studio's software running within the joya9ba platform may receive a pseudonymised player identifier and relevant game session data (such as bet amount and outcome). Game studios do not receive your name, mobile number, or payment details.

Legal and Regulatory Disclosure

joya9ba may disclose personal data to law enforcement authorities, regulatory bodies, or other official agencies where required to do so by applicable law, by a valid court order, or where joya9ba has a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, joya9ba will disclose only the minimum personal data necessary to comply with the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of joya9ba's assets, personal data held by joya9ba may be transferred to the acquiring entity as part of that transaction. In such circumstances, joya9ba will notify affected players via email prior to the transfer and will ensure that the acquiring entity is bound by privacy commitments no less protective than those set out in this Policy.

joya9ba retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal, regulatory, and anti-money laundering obligations. When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual. The specific retention periods applicable to each category of data are set out below.

Dormant Accounts

An account that has had no login activity for a continuous period of 12 months may be classified as dormant. joya9ba will send a notification to the registered email address before classifying an account as dormant. Dormant account data is retained in accordance with the standard retention periods above and is not deleted solely due to inactivity. Players may reactivate a dormant account by logging in and completing any updated KYC requirements.

Deletion Requests

Where a player submits a valid data deletion request (as described in Section 6), joya9ba will delete or anonymise the personal data that is not subject to a legal retention obligation. Data that is required to be retained for AML, financial record-keeping, or dispute resolution purposes cannot be deleted in response to a deletion request, but will be restricted from further active processing and will be deleted upon the expiry of the applicable retention period.

As a player registered with joya9ba, you hold specific rights in relation to the personal data we hold about you. joya9ba is committed to facilitating the exercise of these rights promptly and without undue obstacle. To submit a data rights request of any kind, please contact our support team at [email protected], including your registered account username and a clear description of the right you wish to exercise.

Right of Access

You have the right to request a copy of the personal data that joya9ba holds about you. Upon receiving a verified access request, joya9ba will provide you with a structured summary of the data we hold, the purposes for which it is processed, the categories of third parties with whom it is shared, and the retention period applicable to each data category. We will provide this information within 30 calendar days of receiving your verified request.

Right to Rectification

If you believe that any personal data joya9ba holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For standard account details (such as email address or mobile number), you may update the information directly through your account settings. For identity-related data (such as your name or date of birth as recorded in our KYC records), corrections require the submission of updated documentary evidence and will be processed by our compliance team.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and there is no other lawful basis for continued processing. As noted in Section 5, joya9ba cannot delete data that is subject to a legal retention obligation (such as AML financial records), but will restrict such data from active processing and delete it upon the expiry of the applicable retention period.

Right to Restrict Processing

You may request that joya9ba restricts the processing of your personal data — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interest and your objection is pending verification. During a period of restricted processing, joya9ba will continue to store your data but will not actively use it for any purpose other than storage and compliance.

Right to Object to Marketing

You have the right to object at any time to the use of your personal data for direct marketing purposes. To withdraw marketing consent, contact [email protected] or update your notification preferences in your account settings. joya9ba will process your objection within five business days, after which no further marketing communications will be sent to you.

Right to Data Portability

Where joya9ba processes your personal data on the basis of your consent or on the basis of contractual necessity, and the processing is carried out by automated means, you have the right to receive the personal data you have provided to joya9ba in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that joya9ba transmit this data directly to another data controller where technically feasible.

joya9ba takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. No digital platform can guarantee absolute security, but joya9ba maintains industry-standard protections and continuously reviews and updates its security posture.

Encryption in Transit and at Rest

All data transmitted between your device and joya9ba.net is encrypted using Transport Layer Security (TLS) with a minimum of TLS 1.2. Sensitive data stored on joya9ba's servers — including passwords, payment identifiers, and KYC documents — is encrypted at rest using AES-256 or equivalent standard encryption algorithms. Passwords are never stored in plain text; they are hashed and salted using a one-way cryptographic function before storage.

Access Controls

Access to personal data within joya9ba's internal systems is restricted on a strict need-to-know basis. Only personnel whose job function requires access to a specific category of data are granted that access. All internal access to personal data is logged and subject to periodic review by joya9ba's security team. Access privileges are revoked immediately upon a change in an employee's role or upon separation from the organisation.

Account Security Measures

joya9ba implements several player-facing security features to protect your account from unauthorised access. These include rate-limiting on login attempts, automatic session expiry after a period of inactivity, and alerts sent to your registered email address upon detection of a login from an unrecognised device or IP address. Players are strongly encouraged to choose a unique, strong password for their joya9ba account and to avoid reusing passwords from other services.

Incident Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, joya9ba will notify affected players via their registered email address within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the measures joya9ba has taken or intends to take to address the breach and mitigate its effects.

Your Responsibility

While joya9ba takes extensive measures to protect your data, the security of your account also depends on your own actions. You are responsible for maintaining the confidentiality of your joya9ba username and password. You must not share your login credentials with any other person. If you believe your account has been accessed without your authorisation, you must contact joya9ba's support team immediately at [email protected] so that appropriate action can be taken without delay.

Updates to This Privacy Policy

joya9ba reserves the right to update or amend this Privacy Policy at any time. Changes may be necessary to reflect updates to our platform features, changes in applicable law, or feedback from our player community. When we make material changes — for example, changes that affect how we share data with third parties or that introduce new categories of data collection — we will notify registered players via email to their registered address at least seven days before the changes take effect. For minor or administrative changes (such as corrections to contact details or clarifications that do not alter the substance of the policy), we may update the policy without advance notice.

The effective date displayed at the top of this Privacy Policy indicates the date on which the current version took effect. Your continued use of joya9ba.net following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you must cease using the platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

Children and Minors

joya9ba is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If joya9ba discovers that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe that a minor has registered an account with joya9ba, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Links to Third-Party Websites

joya9ba.net may, in limited contexts, reference the names of third-party services such as bKash, Nagad, or game studio providers. This Privacy Policy applies solely to data processed by joya9ba on joya9ba.net. joya9ba is not responsible for the privacy practices of third-party organisations, and players who interact with third-party payment processors or game platforms are encouraged to review the privacy policies of those organisations independently.

Governing Language

This Privacy Policy is published in English. In the event of any inconsistency between the English version and any translated summary that joya9ba may publish for informational purposes, the English version shall take precedence.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 6, or wish to raise a concern about how joya9ba handles your personal data, please contact our support team using the details below. joya9ba aims to respond to all privacy-related enquiries within five business days of receipt.