joya99 Privacy Policy

1 About This Policy

This Privacy Policy describes how joya99 ("we", "us", or "our"), the operator of the online casino and sports betting platform available at joya99.bio, collects, uses, stores, and protects the personal information of players and visitors based primarily in Bangladesh and other locations where the platform is accessible.

joya99 is committed to handling personal data with transparency, integrity, and in accordance with applicable data protection principles. This policy applies to all personal data collected through the joya99 website, mobile-optimised interface, customer support channels, and any other interaction you have with the joya99 platform.

This Privacy Policy should be read alongside the joya99 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this policy and the Terms & Conditions on a matter relating specifically to personal data, this Privacy Policy shall prevail.

We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational factors. The "Last Reviewed" date at the top of this page will be updated accordingly. Continued use of the joya99 platform after any such update constitutes acceptance of the revised policy.

2 Data We Collect

joya99 collects personal data in the following categories, depending on how you interact with the platform:

joya99 does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data except where it is strictly necessary for age and identity verification purposes, in which case it is processed securely and retained only for the duration required.

Where you provide personal data relating to a third party (for example, a next-of-kin contact), you are responsible for ensuring that the third party has been informed of and consents to joya99 processing their information in accordance with this policy.

3 How We Use Your Data

joya99 uses the personal data it collects for specific, legitimate purposes. The primary purposes for which we process your data are set out below:

• Account Management: To create, maintain, and administer your joya99 account, including verifying your identity and age at registration and during ongoing compliance checks.
• Service Delivery: To provide you with access to joya99 casino games, sports betting, live dealer tables, and all other platform features you have requested.
• Payment Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and local banking partners, and to maintain accurate financial records of all transactions.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account compromise, money laundering, and other prohibited activities on the platform.
• Regulatory Compliance: To satisfy our obligations under applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and record-keeping requirements.
• Customer Support: To respond to your enquiries, complaints, and requests submitted through our support channels, and to maintain records of those interactions.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, to enforce self-exclusion requests, and to administer deposit limit and session time tools you have activated.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how the joya99 platform is used, identify technical issues, and develop new features and improvements.
• Direct Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about joya99 offers and events.

joya99 will not use your personal data for any purpose that is materially different from those listed above without first notifying you and, where required, obtaining your consent.

4 Legal Basis for Processing

joya99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is required to perform the contract between you and joya99, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing that is necessary to comply with a legal requirement applicable to joya99, including AML obligations, age verification requirements, and tax record-keeping.
• Legitimate Interests: Processing that is necessary for joya99's legitimate business interests, including fraud prevention, platform security, and the improvement of services, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing that is based on your explicit, freely given, and informed consent, such as receiving promotional communications from joya99. You may withdraw consent at any time by contacting [email protected], though withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

Where joya99 relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that our interests do not inappropriately override your rights. You may request details of any such assessment by contacting our support team.

5 Sharing Your Data

joya99 does not sell, rent, or otherwise disclose your personal data to unaffiliated third parties for their own commercial purposes. We may, however, share your personal data with the following categories of recipients where it is necessary to operate the platform and fulfil our obligations to you:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other payment partners involved in processing your BDT transactions. These providers receive only the financial data necessary to process the specific transaction.
• Identity Verification Partners: Third-party KYC and age verification service providers engaged by joya99 to validate identity documents and confirm eligibility of registered players.
• Game Software Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session and game data necessary to deliver their games on the joya99 platform. These providers do not receive your full identity or financial data.
• IT and Infrastructure Providers: Cloud hosting, server management, and cybersecurity partners who process data on joya99's behalf under strict data processing agreements that prohibit use of data for any purpose other than service delivery.
• Legal and Regulatory Authorities: Where joya99 is required by law, court order, or regulatory direction to disclose personal data to a competent authority, we will comply with that obligation and, where permitted, will notify you of such disclosure.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by joya99, subject to professional confidentiality obligations.

Any third party that receives personal data from joya99 is required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection requirements. joya99 does not transfer personal data internationally to countries with materially lower data protection standards without implementing appropriate safeguards.

6 Cookies & Tracking Technologies

joya99 uses cookies and similar technologies (including local storage, session storage, and pixel tags) on joya99.bio to provide a functional, personalised, and secure platform experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the operation of the joya99 platform. They enable core functionality such as maintaining your login session, remembering your language preference, and ensuring the secure transmission of data. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies allow joya99 to remember choices you have made (such as your preferred game category or display settings) and provide a more personalised experience. They do not track your browsing activity on other websites.
• Analytics Cookies: joya99 uses first-party analytics tools to collect aggregated, anonymised data about how visitors use the platform — for example, which pages are visited most frequently and where users encounter difficulties. This data is used solely to improve the joya99 platform and is never used to identify individual users.

joya99 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. No data collected via cookies on joya99.bio is shared with advertising networks or social media platforms.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the joya99 platform, including your account login. Instructions for managing cookies are available in the help documentation of your browser.

7 Data Security

joya99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Industry-standard SSL/TLS encryption applied to all data transmitted between your device and joya99 servers.
• Encrypted storage of sensitive data fields, including passwords (which are hashed and salted and never stored in plain text), identity document data, and financial reference information.
• Access controls that restrict internal access to personal data to only those joya99 staff and contractors who require it to perform their job functions, subject to confidentiality obligations.
• Regular security assessments and penetration testing of the joya99 platform infrastructure.
• Intrusion detection and real-time monitoring systems to identify and respond to potential security incidents promptly.
• Two-factor authentication options available to registered players to strengthen account access security.

While joya99 takes all commercially reasonable steps to protect your personal data, no system of data transmission or storage over the internet can be guaranteed as completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, joya99 will notify affected individuals without undue delay and take all necessary remediation steps.

You also play an important role in keeping your data secure. You should maintain a strong, unique password for your joya99 account, never share your login credentials with any third party, and contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.

8 Data Retention

joya99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, and to comply with applicable legal, regulatory, and accounting obligations. The general retention periods applied by joya99 are as follows:

• Active account data (identity, contact, and financial data): Retained for the lifetime of your joya99 account and for a period of up to five (5) years following permanent account closure, in order to satisfy AML record-keeping obligations and to resolve any post-closure disputes.
• Transaction records (deposit and withdrawal history): Retained for a minimum of five (5) years from the date of the transaction in accordance with applicable financial record-keeping requirements.
• KYC and identity verification documents: Retained for the duration of your account and for five (5) years following account closure, in accordance with AML compliance requirements.
• Customer support communications: Retained for up to three (3) years from the date of the interaction, to allow joya99 to respond to follow-up queries and maintain a record of support provided.
• Technical and usage logs: Retained for up to twelve (12) months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for two (2) years following withdrawal of consent, to demonstrate compliance with consent-based processing obligations.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. If you request early deletion of your data, joya99 will process that request subject to any overriding legal obligation to retain the data for a longer period.

9 Your Privacy Rights

As a registered joya99 player, you hold the following rights in relation to the personal data that joya99 processes about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". joya99 will respond to all verified requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data joya99 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request that joya99 correct any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly from within your joya99 account settings.
• Right to Erasure: You have the right to request that joya99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to any overriding legal obligation to retain data.
• Right to Restriction: You have the right to request that joya99 restrict the processing of your data in certain circumstances, for example while the accuracy of data is being contested or a legitimate interests objection is being assessed.
• Right to Object: You have the right to object at any time to joya99 processing your data on the basis of legitimate interests. You also have an unconditional right to object to your data being used for direct marketing purposes.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where joya99 processes your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

joya99 will not charge a fee for handling legitimate privacy rights requests unless the request is manifestly unfounded or excessive. In such cases, joya99 may charge a reasonable administrative fee or decline to act on the request, and will explain the reasons for doing so in writing.

10 Children & Minors

The joya99 platform is strictly intended for adults aged 18 years and above. joya99 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the joya99 account registration process, and joya99 reserves the right to request additional proof of age documentation at any time.

If joya99 discovers or is notified that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. Any funds held in an account found to belong to a minor will be handled in accordance with applicable procedures.

If you are a parent or guardian and believe that a minor in your care has registered a joya99 account or accessed the platform, please contact our support team immediately at [email protected]. We will investigate and act promptly on all such reports. We also recommend that adults supervise minors' internet usage and implement appropriate parental controls on shared devices to prevent access to gambling platforms.

11 Third-Party Links

The joya99 platform may from time to time contain references to or integrations with third-party services, such as game providers and payment processors. While joya99 takes care to work only with reputable partners, we do not control the privacy practices of third-party services and are not responsible for the content or privacy policies of any third-party platform.

This Privacy Policy applies solely to personal data collected and processed by joya99 through joya99.bio. If you interact with a third-party service provider in the course of using joya99 (for example, completing a payment through bKash or Nagad), your interaction with that provider is governed by their own privacy policy. joya99 encourages you to review the privacy policies of any third-party services you use in connection with the joya99 platform.

12 Policy Updates

joya99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, applicable legal requirements, or other operational considerations. When we make changes to this policy, we will update the "Last Reviewed" date displayed at the top of this page.

For material changes — that is, changes that significantly affect how joya99 processes your personal data or that alter your privacy rights — joya99 will provide additional notice to registered players via the email address associated with their account or through a prominent notice displayed upon login to the platform.

Your continued use of the joya99 platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, you should stop using the joya99 platform and may request closure of your account by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how joya99 is protecting your personal information. All previous versions of this policy are available on request by contacting our support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or joya99's handling of your personal data, please contact our support team using the details below. All privacy-related enquiries and rights requests should be submitted in English to ensure they are handled efficiently.

• Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Rights Request"
• Subject Line for Data Breach Reports: "Data Security Concern"
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Response Time: joya99 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days of receipt

joya99 takes all privacy-related concerns seriously. Where you are not satisfied with the response you receive from our support team, you retain the right to escalate your concern to the relevant data protection authority or seek other legal remedies available under applicable law.