joay9 Privacy Policy — How We Handle Your Personal Data

joay9 ("we", "us", "our") operates an online casino and sports betting platform at https://joay9.ws, serving adult players in Bangladesh and other permitted jurisdictions. In providing these services, joay9 necessarily collects and processes personal data relating to registered users ("you", "player", "account holder").

This Privacy Policy sets out, in clear and formal terms, the categories of personal data joay9 collects, the purposes for which that data is processed, the legal bases relied upon for processing, the parties with whom data may be shared, the period for which data is retained, and the rights you hold in respect of your personal data.

This policy applies to all personal data collected through the joay9 website, mobile platform, customer support channels, and any other joay9 touchpoint. It does not apply to third-party websites or services linked to or from the joay9 platform, including game studio portals or payment provider interfaces — those are governed by the respective third party's own privacy policy.

joay9 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection principles. We treat the protection of player data as a core operational obligation, not merely a legal formality. If you have any questions about this policy or about how joay9 handles your data, please contact us at [email protected].

joay9 collects personal data across several categories depending on how you interact with the platform. The table below summarises the main categories of data collected, the specific data points within each category, and the primary collection method.

joay9 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health records, or biometric data beyond what is inherent in identity verification documents. If any such data is incidentally included in a document you submit for KYC purposes, it is processed only to the extent strictly necessary for verification and is not used for any other purpose.

joay9 does not collect data from or about persons under the age of 21. If we become aware that data relating to a person under 21 has been collected, we will delete it immediately and close the associated account. See Section 11 (Children & Minors) for more detail.

joay9 uses the personal data it collects for the following purposes. For each purpose, the relevant category of data used is indicated in parentheses:

• Account creation and management — to create, maintain, and administer your joay9 account, including authentication on login. (Identity Data, Contact Data, Technical Data)
• Identity and age verification (KYC) — to confirm that you are who you say you are, that you are at least 21 years of age, and that you are eligible to use the joay9 platform. (Identity Data, Verification Documents)
• Processing deposits and withdrawals — to facilitate financial transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard in Bangladeshi Taka (৳ BDT). (Financial Data, Identity Data)
• Providing and improving gaming services — to deliver the games, cricket betting markets, and live casino products you access on joay9, and to improve platform performance and content. (Account Activity Data, Technical Data)
• Fraud detection and platform security — to identify and prevent fraudulent activity, multiple-account creation, bonus abuse, money laundering, and other prohibited conduct. (Identity Data, Financial Data, Technical Data, Account Activity Data)
• Responsible gaming compliance — to monitor gameplay for signs of problem gambling and to enforce deposit limits, session reminders, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming policy. (Account Activity Data, Financial Data)
• Customer support — to respond to your enquiries, resolve disputes, and improve the quality of our English-language support service. (Communications Data, Identity Data)
• Marketing and promotions — to send you information about joay9 bonuses, promotions, seasonal offers (e.g., Eid, BPL season, Pohela Boishakh), and platform updates by email or in-platform notification, where you have not opted out of such communications. (Contact Data, Account Activity Data)
• Legal and regulatory compliance — to comply with applicable legal obligations, respond to lawful requests from authorities, and enforce our Terms & Conditions. (All categories as relevant)

joay9 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you, except for automated fraud and prohibited-conduct detection systems. Where such automated systems generate an action that significantly affects your account (e.g., temporary suspension pending review), you may contact [email protected] to request human review of the decision.

joay9 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and joay9 — specifically, to provide you with access to the platform, process your transactions, and administer your account.
• Legal obligation: Processing that is required to comply with applicable legal requirements, including anti-money-laundering obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of joay9's legitimate business interests, including fraud prevention, platform security, improving our services, and responsible gaming monitoring — provided those interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — in particular, sending you marketing communications about joay9 bonuses and promotions. You may withdraw your consent to marketing at any time by contacting [email protected] or by using the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

Where joay9 relies on legitimate interests as a legal basis, we have conducted a balancing assessment and are satisfied that our legitimate interests are proportionate and do not unduly override your privacy rights. If you wish to obtain more information about our legitimate interests assessments, please contact us at [email protected].

joay9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your personal data may be shared with the following categories of third parties only where necessary and only to the extent required for the stated purpose:

• Payment processors and banking partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, to the extent necessary to process your deposits and withdrawals in BDT. These providers have their own privacy policies governing their use of your financial data.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios whose games are available on joay9. These providers may receive technical data (e.g., session tokens, device identifiers) necessary to deliver their games within the joay9 environment.
• Identity verification (KYC) service providers: Third-party KYC and age-verification vendors who assist joay9 in confirming player identity and age. These providers are contractually bound to process verification data solely for verification purposes.
• IT infrastructure and security providers: Cloud hosting providers, CDN providers, cybersecurity vendors, and data analytics tools used to operate and secure the joay9 platform. These providers act as data processors under joay9's instruction and are bound by data processing agreements.
• Customer support platforms: Third-party live chat and support ticket systems used to deliver joay9's English-language 24/7 customer support. Support interactions including your communications data may be stored within these systems.
• Competent authorities: Law enforcement agencies, regulatory bodies, courts, and other public authorities, where joay9 is legally required or compelled to disclose data by applicable law or by a lawful order.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of joay9's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

In all cases where data is shared with third-party processors, joay9 ensures that appropriate contractual protections are in place requiring those processors to handle data securely and to use it only for the specified purpose.

joay9 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit joay9. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without disrupting platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred language settings and responsible gaming configurations — so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the joay9 platform — for example, which pages are visited most frequently, typical session durations, and common navigation paths. This information helps joay9 improve the platform. Analytics data is not linked back to individual players in reports.
• Fraud and security cookies: Used by joay9's fraud detection systems to identify unusual patterns of platform access that may indicate account compromise, automated bot activity, or multi-accounting. These cookies collect technical identifiers including device fingerprint components.

Most web browsers allow you to control cookie behaviour via browser settings — you can typically set your browser to refuse some or all cookies, or to alert you when cookies are being set. However, disabling strictly necessary cookies will affect your ability to use the joay9 platform, including your ability to log in and maintain a session. joay9 does not use third-party advertising or retargeting cookies.

joay9 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal obligations that require data to be retained for a specified minimum period. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial, activity): Retained for the lifetime of your joay9 account and for a period of 5 years following permanent account closure, to support any post-closure dispute resolution, audit, or legal obligation.
• KYC and verification documents: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in line with anti-money-laundering record-keeping requirements.
• Transaction records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of 7 years from the date of the transaction to satisfy financial record-keeping obligations.
• Customer support communications: Support tickets, live chat logs, and email correspondence are retained for 3 years from the date of the interaction.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of the account relationship plus 2 years, to demonstrate compliance if required.
• Technical / server logs: Server-side access logs and security event logs are retained for up to 12 months, after which they are deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond standard periods due to an active legal dispute, regulatory investigation, or court order, it will be retained until that matter is fully resolved.

joay9 recognises and respects your rights as a data subject. You may exercise any of the following rights in relation to your personal data by contacting us at [email protected]:

• Right of access: You have the right to request a copy of the personal data joay9 holds about you, along with information about how it is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update basic contact details directly via your joay9 account settings; for other corrections, please contact support.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to joay9's overriding legal obligations to retain certain data (e.g., financial transaction records under anti-money-laundering requirements).
• Right to restriction of processing: You have the right to request that joay9 restricts processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing your objection.
• Right to data portability: You have the right to receive personal data that you have provided to joay9 in a structured, commonly used, machine-readable format and to request that it be transmitted to another data controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data that is based on joay9's legitimate interests. joay9 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

joay9 will respond to all data rights requests within a reasonable timeframe and at no cost to you. We may need to verify your identity before processing a request to ensure we do not disclose data to an unauthorised person. If your request is complex or numerous, we may extend our response period by a further reasonable time, in which case we will notify you of the extension and the reason for it.

joay9 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• Transport-layer encryption: All data transmitted between your device and the joay9 platform is encrypted using TLS 1.2 or higher (SSL). This applies to all platform interactions including login, deposits, withdrawals, and customer support communications.
• Password security: Account passwords are stored using strong one-way cryptographic hashing algorithms. joay9 staff cannot retrieve or read your plaintext password. You are encouraged to use a strong, unique password for your joay9 account.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. joay9 staff who do not require access to personal data to perform their role are denied access by default. Access rights are reviewed regularly.
• Infrastructure security: The joay9 platform is hosted on secure cloud infrastructure with regular security patching, intrusion detection systems, and distributed denial-of-service (DDoS) protection.
• Fraud monitoring: Automated systems continuously monitor platform activity for patterns indicative of account compromise, unauthorised access, or fraudulent behaviour, enabling rapid response to security incidents.
• Data minimisation: joay9 collects only the personal data that is genuinely necessary for the purposes described in this policy. We do not collect or retain data speculatively.

While joay9 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, joay9 will notify affected players promptly and will take all reasonable steps to contain and remediate the breach. If you suspect that your joay9 account has been compromised, please contact us immediately at [email protected].

The joay9 platform integrates with a number of third-party services to deliver its core functionality. When you interact with these integrated services, some of your data may be processed directly by the third party in accordance with their own privacy policies. joay9 has no control over third-party data practices beyond the contractual protections we put in place.

Key third-party integrations on the joay9 platform include:

• Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Game content is delivered via embedded iframes or API integrations. Session data is shared with game providers to enable authenticated gameplay and to record game outcomes accurately.
• Payment gateways (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard): Financial transaction data is shared with these providers to process deposits and withdrawals in BDT. Each payment provider operates under its own data protection framework.
• Analytics tools: joay9 uses anonymised analytics to understand platform usage patterns. Raw analytics data is aggregated and does not identify individual players in reports accessible to joay9 staff.

joay9 is not responsible for the privacy practices of any third-party website or service that is linked to from the joay9 platform. If you follow a link to a third-party site, we encourage you to read that site's privacy policy before providing any personal data.

joay9 is a strictly 21+ platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process requires all users to declare their date of birth, and age verification via KYC documents is conducted for all accounts before withdrawals are permitted and may be conducted at any time at joay9's discretion.

If joay9 discovers or has reasonable grounds to suspect that a registered account is being operated by a person under the age of 21, we will:

• Immediately suspend the account and freeze any associated balance pending investigation.
• Conduct an expedited age verification review.
• Where confirmed underage access is found: permanently close the account, void all bets and game activity conducted under the account, return any net deposits (after deducting any fraudulently obtained winnings), and delete the personal data of the minor to the extent legally permissible.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on joay9, please contact us immediately at [email protected]. We take reports of underage account access very seriously and will investigate and act promptly.

We strongly encourage parents and guardians in Bangladesh to use parental control software to restrict access to online gambling platforms on shared or family devices. joay9 supports all efforts to prevent underage access to gambling content.

joay9 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our platform and services. When material changes are made to this policy, we will notify registered players by email (to the address on your account) and/or by a prominent notice on the joay9 platform.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Non-material updates — such as clarifications that do not change the substantive meaning of any provision, or correction of typographical errors — may be made without individual notification.

Your continued use of the joay9 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must cease using the platform and may close your account by contacting us at [email protected]. The current version of this Privacy Policy is always available at https://joay9.ws/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how joay9 handles your personal data, please contact our support team. All privacy-related enquiries are handled in English and will receive a substantive response within a reasonable timeframe.

joay9 is committed to resolving all privacy-related complaints fairly and promptly. If you submit a complaint, we will acknowledge receipt within 2 business days and provide a full response within 14 calendar days. Where a complaint is complex and requires additional time to investigate, we will notify you of the extended timeline and the reason for it.

If you are not satisfied with joay9's response to your privacy complaint, you may have the right under applicable law to escalate the matter to a relevant data protection authority or supervisory body. joay9 will cooperate fully with any such authority in the investigation of a complaint.