Privacy Policy — joya 99

Data We Collect

When you register for or use joya 99, we collect personal data in several ways — directly from you during registration and account activity, automatically through your use of the platform, and occasionally from third-party service providers who help us verify your identity or process your payments.

Information You Provide Directly

The following categories of personal data are collected when you register an account, complete identity verification, or contact us for support:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification (such as a National Identity Card, passport, or driving licence).
• Contact Data: Email address and mobile phone number registered in your name.
• Financial Data: Payment method details used for deposits and withdrawals, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank account information where applicable. We do not store full card numbers — payment data is tokenised and handled by our certified payment processors.
• Account Credentials: Username and encrypted password. Passwords are stored using industry-standard one-way hashing and are never accessible in plain text by joya 99 staff.
• Support Communications: Records of any messages, emails, or chat conversations you have with the joya 99 support team.

Information Collected Automatically

When you access the joya 99 platform, certain technical data is collected automatically by our systems:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings.
• Usage Data: Pages visited, games played, bet history, session duration, click patterns, and navigation paths within the platform.
• Location Data: General geographic location derived from your IP address (country and city level only). joya 99 does not collect precise GPS location data.
• Cookie Data: Session cookies, preference cookies, and analytics cookies as described in the Cookies section of this policy.

How We Use Your Data

joya 99 uses your personal data only for the purposes set out in this Privacy Policy. We process your data on the following legal bases: performance of our contract with you, compliance with legal obligations, our legitimate business interests, and — where required — your explicit consent.

Marketing Communications

If you have opted in to receive promotional communications from joya 99, we may send you emails or SMS messages about new games, bonuses, seasonal promotions (such as BPL season offers, Eid specials, or T20 World Cup promotions), and platform updates. You can withdraw your consent to receive marketing communications at any time by contacting our support team or by following the unsubscribe instructions included in every promotional message. Withdrawing marketing consent does not affect your ability to use joya 99 or your entitlement to service-related communications.

Data Sharing & Third Parties

joya 99 does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who have agreed to handle it in accordance with applicable data protection standards.

Categories of Recipients

• Payment Processors: We share necessary financial and identity data with licensed payment service providers — including bKash, Nagad, Rocket, Upay, and our card processing partners — to facilitate secure deposits and withdrawals. These providers are certified under applicable financial regulations and maintain their own data security standards.
• Identity Verification Providers: We may use third-party Know Your Customer (KYC) services to verify the identity and age of players. These providers process your identity documents under strict contractual data protection obligations.
• Game Content Providers: Our casino and sports betting games are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data to deliver and certify game outcomes but do not receive personally identifiable information unless required for dispute resolution.
• Analytics & Performance Tools: We use platform analytics services to understand how joya 99 is used and to improve the player experience. Analytics data is aggregated and anonymised wherever possible.
• Legal & Regulatory Authorities: Where required by law or by a binding order from a competent authority, joya 99 will disclose personal data to regulatory bodies, law enforcement agencies, or courts. joya 99 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of joya 99's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is handled.

Cookies & Tracking Technologies

joya 99 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and understand how players interact with our games and features. This section explains the types of cookies we use and how you can manage them.

Types of Cookies Used by joya 99

What We Do Not Use

joya 99 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies that follow you to websites unrelated to joya 99. We do not participate in programmatic advertising networks that rely on behavioural profiling derived from your activity on other websites.

Managing Cookies

You can control which cookies are stored on your device through your browser settings. Most browsers allow you to block or delete cookies, or to be notified before a new cookie is placed. Please note that disabling strictly necessary cookies will affect your ability to stay logged in and use core platform features. Disabling analytics cookies will not affect your ability to play games or make transactions on joya 99.

Data Retention

joya 99 retains your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as we are required to do so under applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the duration of your account's active status, plus a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction.
• Identity Verification Documents: Copies of KYC documents (NID, passport, utility bills) are retained for five years from the date of verification or the date of account closure, whichever is later.
• Support Communications: Records of customer support interactions are retained for three years from the date of the last interaction.
• Marketing Preferences: Records of consent (or withdrawal of consent) for marketing communications are retained for the duration of your account plus three years, to evidence compliance.
• Usage & Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data once de-identified.

When personal data is no longer required and no legal obligation to retain it exists, joya 99 will securely delete or anonymise it. Secure deletion means that the data cannot be reconstructed or recovered following the deletion process.

Data Security

joya 99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.

Technical Safeguards

• TLS/SSL Encryption: All data in transit between your browser or app and joya 99's servers is encrypted using Transport Layer Security (TLS). Our certificates are maintained and renewed to ensure continuous protection.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm with salting. Staff cannot read or retrieve your password in plain text.
• Access Controls: Access to systems that hold personal data is restricted on a need-to-know basis. Staff members are assigned the minimum permissions required to perform their role.
• Intrusion Detection: Our systems are monitored continuously for suspicious activity, including failed login attempts, unusual account behaviour, and potential data exfiltration attempts.
• Data Minimisation: Payment card data is tokenised rather than stored directly. Full card numbers and CVV codes are never stored on joya 99 systems.

Organisational Safeguards

• All staff with access to personal data are subject to confidentiality obligations as a condition of employment or contract.
• Third-party service providers are vetted for their security practices before being granted access to any personal data, and are bound by contractual data processing agreements.
• joya 99 maintains an incident response plan to manage and mitigate the impact of any data security incident.

Your Privacy Rights

As a joya 99 player, you hold a number of rights in relation to the personal data we process about you. joya 99 is committed to respecting and facilitating these rights in a timely and transparent manner.

Rights You Hold

• Right of Access: You may request a copy of the personal data joya 99 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your name or contact information, you may be able to update these directly within your account profile.
• Right to Erasure: You may request that joya 99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that legal retention obligations may prevent full erasure in some cases — joya 99 will explain what data must be retained and why.
• Right to Restrict Processing: In certain circumstances, you may request that joya 99 limit how it uses your personal data while a dispute or verification request is resolved.
• Right to Object: You have the right to object to joya 99 processing your personal data on the basis of legitimate interests, including profiling for responsible gaming monitoring. You also have the absolute right to object to processing for direct marketing purposes.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that joya 99 provide your personal data in a machine-readable format so that you can transfer it to another service provider.
• Right Not to Be Subject to Solely Automated Decisions: Where a significant decision about your account is made solely by automated means, you have the right to request human review of that decision.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact the joya 99 support team at [email protected] (plain text — not a link) with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We will respond within a reasonable period and may need to verify your identity before processing the request.

Policy Updates & Contact

joya 99 reviews this Privacy Policy periodically to ensure it remains accurate, complete, and reflective of our current data practices. Where material changes are made — for example, changes to what data we collect, how we use it, or who we share it with — we will notify registered players by email or through a prominent notice on the platform prior to the changes taking effect.

Minor changes (such as wording clarifications that do not alter the substance of the policy) may be made without individual notification, and the revised policy will be posted on this page with an updated effective date. We encourage you to review this page periodically.

Your continued use of joya 99 following notification of a material policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you should close your account before the change takes effect.

Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to how joya 99 handles your personal data, please contact us using the details below:

• Support Email: [email protected] (plain text — not a link)
• Subject Line: "Privacy Enquiry" or "Privacy Rights Request"
• Response Time: We aim to respond to all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6).

For account-specific concerns such as data access requests or erasure requests, please include your registered username and the email address associated with your joya 99 account in your message so that we can identify and verify your account promptly.