joyea9 Privacy Policy

Introduction

joyea9 is an online casino and sports betting platform serving players in Bangladesh. As part of delivering our services, we necessarily process certain personal information about you. We take this responsibility seriously and are committed to handling your data with transparency, integrity, and care.

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the measures we take to keep it secure. It also outlines your rights with respect to your personal data and how you may exercise them.

This Policy applies to all users of the joyea9 website, mobile platform, and any associated services (collectively, the "Platform"). It should be read together with the joyea9 Terms and Conditions and Responsible Gaming Policy, both of which are published on this site.

Data We Collect

joyea9 collects the following categories of personal data, depending on how you interact with the Platform:

How We Collect Your Data

joyea9 collects personal data through the following means:

• Direct Provision: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, through cookies, server logs, and similar tracking technologies. This collection is passive and does not require any action on your part beyond visiting the site.
• Third-Party Sources: Where permitted by law, joyea9 may receive data about you from third parties, including payment processors (bKash, Nagad, Rocket, Upay), identity verification service providers, and fraud detection agencies, for the purpose of verifying your identity and preventing financial crime.
• Device Permissions: If you access joyea9 via a mobile browser and grant relevant permissions, we may collect device-level information such as your general geographic region for security and fraud prevention purposes only. We do not use precise GPS location data.

How We Use Your Data

joyea9 uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your joyea9 account, including processing your registration, managing your profile, and responding to account-related queries.
• Identity Verification (KYC): To verify your identity, age, and eligibility to use the Platform in compliance with anti-money laundering (AML) and responsible gaming obligations. This includes verifying that you are at least 18 years of age.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate financial records of all transactions in BDT.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other illegal or prohibited conduct on the Platform.
• Customer Support: To respond to your support requests, resolve disputes, and improve our support processes based on historical interaction data.
• Platform Improvement: To analyse usage patterns, identify technical issues, test new features, and generally improve the quality and performance of the joyea9 Platform.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to facilitate the use of self-exclusion, deposit limit, and session control tools.
• Marketing Communications: Where you have expressly opted in, to send you promotional offers, bonus notifications, and updates about joyea9. You may opt out of marketing communications at any time by contacting support.

Legal Basis for Processing

joyea9 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform the contract between you and joyea9 — including account creation, payment processing, and providing access to games and betting markets.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML checks, age verification, tax reporting obligations, and responding to lawful regulatory or court requests.
• Legitimate Interests: Processing in pursuit of joyea9's legitimate business interests, where those interests are not overridden by your rights — including fraud detection, platform security, analytics, and service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

joyea9 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and under appropriate contractual protections:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals and to verify payment method ownership.
• Identity Verification Providers: Third-party KYC and AML service providers who assist joyea9 in verifying your identity and screening against sanctions and watchlists. These providers process only the minimum data required for verification and are bound by strict confidentiality obligations.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens) necessary to deliver their games on the joyea9 Platform. They do not receive your full identity profile.
• IT & Infrastructure Providers: Cloud hosting, content delivery network (CDN), and cybersecurity vendors who support the technical operation of the Platform. All such providers are subject to data processing agreements.
• Legal & Regulatory Authorities: Where required by law, court order, or regulatory instruction, joyea9 may disclose your personal data to competent authorities, law enforcement agencies, or financial intelligence units. joyea9 will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of joyea9's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

Cookies & Tracking Technologies

joyea9 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and cookies that store your in-session preferences. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences between sessions, such as language settings and display options. These enhance your experience but are not strictly required for core functionality.
• Analytics Cookies: Used to collect aggregate, anonymised data about how users interact with the Platform — including pages visited, session duration, and features used. This data helps joyea9 identify usability issues and improve the Platform. Analytics data is not linked to your personal identity.
• Security Cookies: Used for fraud detection and prevention purposes, including identifying unusual login patterns or suspicious activity that may indicate an account compromise or bot activity.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into the Platform. joyea9 does not use third-party advertising or behavioural targeting cookies.

Data Security

joyea9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data exchanged between your browser or mobile device and the joyea9 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This prevents interception by third parties during transmission.
• Encryption at Rest: Sensitive data stored on joyea9 servers — including identity documents, financial records, and account credentials — is encrypted using industry-standard symmetric encryption algorithms.
• Access Controls: Access to personal data within joyea9's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum data access required to perform their specific role. All access is logged and audited.
• Two-Factor Authentication: Internal joyea9 systems that store or process personal data require multi-factor authentication for staff login. Players are also encouraged to enable two-factor authentication on their own accounts.
• Penetration Testing: joyea9 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the Platform before they can be exploited.
• Incident Response: joyea9 maintains a documented data breach response procedure. In the event of a breach that is likely to result in risk to your rights, joyea9 will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

Data Retention

joyea9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with joyea9, plus any legally mandated post-closure retention period.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC / Identity Verification Documents: Retained for a minimum of 5 years from the date of account closure or the completion of the last transaction, as required under AML obligations.
• Customer Support Communications: Retained for up to 3 years from the date of last interaction, to assist with ongoing and future disputes and for quality assurance purposes.
• Technical & Usage Logs: Retained for up to 12 months in identifiable form, after which they are either deleted or fully anonymised.
• Marketing Consent Records: Retained until you withdraw consent, plus a short period thereafter to evidence the consent and its withdrawal.

When the applicable retention period expires, joyea9 will securely delete or irreversibly anonymise the relevant data so that it can no longer be associated with any individual.

Your Rights

As a joyea9 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact joyea9 support via live chat or email:

• Right of Access: You may request a copy of the personal data joyea9 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your joyea9 account. Many details can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to joyea9's legal retention obligations. Erasure requests cannot be fulfilled where data must be retained under applicable law (e.g., AML transaction records).
• Right to Restrict Processing: You may request that joyea9 restrict the processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that joyea9 provide your personal data to you in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where joyea9 relies on legitimate interests as the legal basis, including objecting to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

joyea9 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by an additional 30 days, and you will be notified accordingly. There is no charge for exercising your rights in ordinary circumstances.

Children's Privacy

The joyea9 Platform is strictly intended for adults aged 18 and over. joyea9 does not knowingly collect or process personal data relating to children or minors. If joyea9 becomes aware that personal data has been submitted by a person under the age of 18, that account will be immediately suspended, the data will be deleted as soon as practicable, and any funds associated with the account will be handled in accordance with applicable legal requirements.

Parents and guardians who believe that a minor may have accessed or registered on the joyea9 Platform are encouraged to contact support immediately via live chat so that the matter can be investigated and resolved without delay.

International Data Transfers

joyea9 primarily stores and processes your personal data within the region. However, some of our third-party service providers — including cloud infrastructure partners, game software providers such as Pragmatic Play, Evolution Gaming, and NetEnt, and certain KYC verification tools — may process data in jurisdictions outside of Bangladesh.

Where personal data is transferred internationally, joyea9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards include contractual clauses requiring the recipient to protect your data, and selecting service providers that maintain internationally recognised security certifications.

By using the joyea9 Platform, you acknowledge that your data may be transferred to and processed in countries other than your own, and you consent to such transfers where they are carried out under the safeguards described above.

Third-Party Links

The joyea9 Platform may contain references to third-party game providers and payment services. joyea9 is not responsible for the privacy practices of any third-party service, and this Privacy Policy applies exclusively to the joyea9 Platform. We encourage you to review the privacy policies of any third-party service you interact with independently of joyea9.

Updates to This Policy

joyea9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, joyea9 will notify registered users via email or an on-Platform notification prior to the changes taking effect. The effective date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the joyea9 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with the revised Policy, you must stop using the Platform and contact support to request account closure.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way joyea9 handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly on the joyea9 Platform
• Response Time: joyea9 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days (Bangladesh Standard Time, UTC+6)

When submitting a data rights request, please include your registered username and a clear description of your request to allow our team to locate your records and respond efficiently. You may be asked to verify your identity before we action any request that involves accessing, modifying, or deleting your personal data.