joya9 bdt Privacy Policy
At joya9 bdt, the privacy and security of every Bangladesh player's personal data is a fundamental commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your own data when using joya9 bdt.
End-to-End Encryption
All data transmitted between your device and joya9 bdt is protected using SSL (Secure Sockets Layer) encryption. Whether you are logging in, making a deposit via bKash or Nagad, or updating your account details, your information travels through a fully encrypted channel.
No Data Sales
joya9 bdt does not sell, rent, or trade your personal information to any third-party advertiser, data broker, or commercial entity for their own marketing purposes. Your data is used solely for the purposes described in this Privacy Policy.
Your Rights, Respected
You have the right to access the personal data joya9 bdt holds about you, request corrections, ask for deletion where applicable, and opt out of marketing communications at any time. We honour these rights promptly and transparently.
KYC Data Handled Carefully
Identity documents submitted during KYC verification — including Bangladesh National ID cards, passports, and proof of address — are handled with the highest level of care, stored securely, and accessed only by authorised personnel for compliance purposes.
Transparent Cookie Use
joya9 bdt uses cookies and similar tracking technologies to improve platform performance, personalise your experience, and analyse usage patterns. We explain our cookie practices clearly in Section 3 of this Privacy Policy so you can make informed choices.
Marketing Opt-Out
If you have opted in to receive promotional emails or SMS messages from joya9 bdt — including BPL, IPL, and Eid promotional offers — you may opt out at any time by clicking the unsubscribe link in any marketing email or by contacting our support team directly.
1. Data We Collect
1.1 Registration Data
When you create a joya9 bdt account, we collect the personal information you provide during registration. This includes your full legal name, date of birth, residential address (city and division within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and active mobile number. This data is required to open and maintain your account and to comply with our age verification obligations under our responsible gaming policy.
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identity documents to verify your identity before processing withdrawals. Acceptable documents include your Bangladesh National ID card, passport, or birth certificate. We may also request proof of address (utility bill or bank statement dated within three months) and proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account). These documents are securely stored and accessed only by authorised compliance personnel.
1.3 Financial Transaction Data
We collect records of all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method references (mobile wallet numbers for bKash, Nagad, Rocket, and Upay; bank account identifiers for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank), transaction timestamps, and transaction statuses. This data is retained to process payments accurately, investigate disputes, and meet anti-money-laundering (AML) obligations.
1.4 Betting and Gaming Activity Data
joya9 bdt records all betting and gaming activity conducted through your account. This includes the sports markets and cricket fixtures you bet on (BPL, IPL, T20 World Cup, Bangladesh international matches), the casino games you play (live dealer tables, RNG slots, crash games), stake amounts, odds accepted, game round results, session durations, and win/loss records. This data enables accurate bet settlement, dispute resolution, responsible gaming monitoring, and product improvement.
1.5 Technical and Device Data
When you access joya9 bdt via a web browser or mobile device, we automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type (desktop, smartphone, tablet), screen resolution, referring URL, pages visited on joya9 bdt, time and duration of visits, and clickstream data. This data is used for platform security, fraud detection, and performance optimisation.
1.6 Communications Data
If you contact joya9 bdt's support team — whether via email at support at joya9-bdt.com or through any other support channel — we retain records of the correspondence. This includes the content of your messages, attachments, timestamps, and the resolution applied. We use these records to manage your query effectively, maintain quality standards, and resolve any subsequent disputes relating to the same matter.
| Category | Examples |
|---|---|
| Registration | Name, DOB, email, phone |
| KYC / Identity | National ID, passport |
| Financial | bKash, Nagad, bank refs |
| Gaming Activity | Bets, results, sessions |
| Technical | IP, browser, device |
| Communications | Support messages |
2. How We Use Your Data
2.1 Account Management and Platform Operation
The primary purpose for which joya9 bdt processes your personal data is to create, maintain, and operate your player account. This includes verifying your identity at registration, processing your deposits and withdrawals through your chosen payment method, settling your bets and casino game results accurately, and providing you with account statements and transaction histories. Without this processing, joya9 bdt cannot provide you with its core services.
2.2 Legal and Regulatory Compliance
joya9 bdt is required to process certain categories of your personal data in order to comply with applicable legal obligations. These include age verification and KYC checks to prevent underage gambling, anti-money-laundering (AML) screening and transaction monitoring, and the retention of financial records for the periods required by applicable law. Where joya9 bdt is required by a lawful authority to disclose your data, we will do so in accordance with our legal obligations.
2.3 Responsible Gaming and Player Protection
joya9 bdt uses your gaming activity data — including session lengths, deposit frequency, wagering patterns, and win/loss records — to monitor for signs of problem gambling behaviour. Where our responsible gaming monitoring identifies patterns of concern, our team may make proactive contact with you to offer support, provide information about self-exclusion tools, or apply protective account limits in your interest. This processing is carried out with your welfare as the primary consideration.
2.4 Fraud Prevention and Security
Your technical and device data — including IP addresses, login timestamps, and device fingerprints — is used by joya9 bdt to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, duplicate account creation, and money laundering. Where fraud is detected or suspected, joya9 bdt may suspend your account pending investigation and share relevant data with appropriate authorities as required by law.
2.5 Marketing Communications
With your explicit consent at registration, joya9 bdt may use your email address and mobile number to send you promotional communications. These may include bonus offers, cricket betting promotions timed around BPL, IPL, and T20 World Cup fixtures, seasonal campaigns around Eid or Pohela Boishakh, and news about new games and features on joya9 bdt. You may withdraw your marketing consent at any time with immediate effect by unsubscribing from any marketing message or contacting support.
2.6 Platform Improvement and Analytics
Aggregated and anonymised usage data is analysed by joya9 bdt to understand how players interact with the platform, identify popular game categories, optimise page load speeds, and improve the overall user experience for Bangladesh players. Where analytics data is used in this way, it is processed in a form that does not identify individual players.
Legal BasisContract performance — necessary to provide the joya9 bdt service you have agreed to.
Legal BasisLegal obligation — AML, KYC, and age verification requirements.
Legal BasisLegitimate interests — fraud prevention, security monitoring, and responsible gaming.
Legal BasisConsent — marketing communications, where separately obtained at registration.
4. Data Sharing & Third Parties
4.1 Payment Processors
In order to process your deposits and withdrawals, joya9 bdt shares the minimum necessary financial data with payment processing partners. For mobile financial services — bKash, Nagad, Rocket, and Upay — this means sharing transaction identifiers and mobile wallet references. For bank transfer transactions via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank, relevant account references are shared with the receiving institution only. All payment partners are required to handle your data in accordance with applicable financial data protection standards.
4.2 Game Software Providers
joya9 bdt's casino and sports betting products are powered by third-party game software providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as session tokens and game round identifiers) necessary for game delivery and result verification. Game providers do not receive your full personal profile, payment details, or KYC documentation.
4.3 Legal and Regulatory Disclosure
joya9 bdt may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we receive a lawful request or where we determine in good faith that disclosure is necessary to prevent fraud, money laundering, or other illegal activity. In all such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.
4.4 Business Transfers
In the event that joya9 bdt undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to a successor entity as part of that transaction. In such circumstances, joya9 bdt will take reasonable steps to ensure that the successor entity applies data protection standards that are at least equivalent to those described in this Privacy Policy, and will notify affected players of any material change in data controller as soon as practicable.
4.5 No Sale of Personal Data
joya9 bdt does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own independent commercial purposes. Any sharing of data with third parties is strictly limited to the purposes described in this Section 4 and is subject to contractual data protection obligations where applicable.
5. Data Retention
5.1 Retention Periods
joya9 bdt retains your personal data for as long as your account remains active, and for a defined period after account closure or termination, as required by applicable legal and regulatory obligations. The following retention principles apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation, dispute resolution |
| KYC identity documents | Duration of account + 5 years post-closure | AML compliance |
| Financial transaction records | Duration of account + 7 years post-closure | Financial record-keeping law |
| Betting and gaming logs | Duration of account + 3 years post-closure | Dispute resolution, responsible gaming |
| Technical / device logs | 12 months rolling | Security monitoring, fraud detection |
| Support communications | 3 years from last interaction | Quality assurance, dispute records |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of consent |
5.2 Deletion After Retention Period
Upon expiry of the applicable retention period, joya9 bdt will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, the anonymised records may be retained indefinitely for statistical and research purposes without identifying you personally.
5.3 Self-Exclusion Records
Where a player has requested permanent self-exclusion, joya9 bdt retains the minimum data necessary to honour that self-exclusion — specifically, your name, email address, mobile number, and date of birth — for as long as the self-exclusion remains in effect. This is necessary to prevent the same individual from re-registering under a new account. This data is held separately from standard account data and is not used for any other purpose.
6. Your Privacy Rights
6.1 Right to Access
You have the right to request a copy of the personal data that joya9 bdt holds about you. To make a Subject Access Request (SAR), please contact our support team at support at joya9-bdt.com with the subject line "Data Access Request" and your registered account username. We will respond within 30 days of receiving your request and will provide the data in a clear, readable format.
6.2 Right to Rectification
If any personal data that joya9 bdt holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your email address or contact number) directly through your joya9 bdt account settings. For changes to registered name or date of birth, please contact the support team and provide the relevant supporting documentation.
6.3 Right to Erasure
You may request that joya9 bdt delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that joya9 bdt may be unable to comply with an erasure request where retention is required by applicable law (e.g., financial records subject to a statutory retention period) or where the data is necessary to honour a self-exclusion request.
6.4 Right to Restrict Processing
You may ask joya9 bdt to restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data and we are in the process of verifying it, or where you have objected to processing and we are assessing whether our legitimate interests override your objection. During any restriction period, we will continue to store your data but will not process it further except as permitted by law.
6.5 Right to Withdraw Marketing Consent
Where joya9 bdt processes your personal data for marketing purposes on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal. To opt out of marketing communications, use the unsubscribe link in any joya9 bdt promotional email or contact our support team directly.
- Access — Request a copy of your data
- Rectification — Correct inaccurate data
- Erasure — Request deletion where applicable
- Restriction — Limit how your data is used
- Opt-Out — Withdraw marketing consent
7. Data Security
7.1 Technical Security Measures
joya9 bdt implements a range of technical security controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include SSL/TLS encryption for all data transmitted between your device and our servers, encryption of sensitive data fields at rest (including payment references and KYC document files), firewall protection, intrusion detection systems, and regular security vulnerability assessments. Our server infrastructure is hosted in secure data centres with restricted physical access.
7.2 Organisational Security Measures
Access to your personal data within joya9 bdt is restricted on a strict need-to-know basis. Only personnel whose role requires access to specific categories of data — for example, the compliance team for KYC documents, or the payments team for transaction records — are granted the relevant access permissions. All personnel with access to personal data are trained in data protection obligations and are bound by confidentiality commitments.
7.3 Account Security — Your Responsibilities
While joya9 bdt takes extensive measures to protect your data on our systems, you also play a critical role in maintaining the security of your account. You should choose a strong, unique password for your joya9 bdt account that you do not use on any other platform. Never share your login credentials with another person. Log out of your account when using a shared or public device. If you believe your account has been accessed without your authorisation, contact joya9 bdt support immediately at support at joya9-bdt.com.
7.4 Data Breach Response
In the unlikely event of a data breach that poses a risk to your personal data, joya9 bdt has an incident response procedure in place. We will assess the nature and scope of the breach, take immediate steps to contain it, and notify affected players without undue delay where the breach is likely to result in a high risk to their rights and interests. Notifications will be sent to the email address registered on your joya9 bdt account and will include a description of the breach, the data affected, the likely consequences, and the steps we have taken or propose to take to address it.
8. Policy Updates & Contact
8.1 Changes to This Privacy Policy
joya9 bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the platform. When we make material changes to this Privacy Policy, we will notify registered players by email to the address on file and by displaying a prominent notice on the joya9 bdt website for a period of at least 14 days prior to the changes taking effect.
The date at the top of this Privacy Policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically so that you remain informed about how joya9 bdt protects your personal data. Your continued use of joya9 bdt following notification of any changes constitutes your acceptance of the revised Privacy Policy.
8.2 Contacting Us About Privacy
If you have any questions, concerns, or complaints about how joya9 bdt handles your personal data, or if you wish to exercise any of the privacy rights described in Section 6 of this Privacy Policy, please contact our support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.
Email: support at joya9-bdt.com
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Response time: Within 48 hours (acknowledgement) and 30 days (full response)
Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
8.3 Governing Language
This Privacy Policy is written in English, which is the governing language of this document. In the event of any inconsistency between this English-language Privacy Policy and any translated or summarised version, the English version shall prevail. This Privacy Policy is intended for players based in Bangladesh and is written with the Bangladesh market in mind.
- Effective Date: January 2026
- Jurisdiction: Bangladesh
- Governing Language: English
- Data Controller: joya9 bdt
- Contact: support at joya9-bdt.com
Explore joya9 bdt With Confidence
Your privacy is protected every step of the way. Ready to place your cricket bets or spin the reels? joya9 bdt is here for Bangladesh players around the clock.