Last updated: June 2026

Joya9 Privacy Policy — Our firm commitment to protecting your data

This page explains, in plain English, how your personal data is collected at joya9, why it is used, and how it is kept secure. We believe transparency is the strongest form of protection.

🔐
Our Commitment
Your data is never sold
SSL 256-Bit Encryption
No third-party sharing
Right to erasure
GDPR compliant
256-bit SSL Highest-level encryption
No data selling Not to any advertisers
In Your Control Right to delete your data
International Standards GDPR Compliant

6 Core Pillars of Data Protection

How joya9 Protects Your Privacy

🔒
Bank-level encryption

All your data is encrypted with 256-bit SSL — the same standard used by major banks. No third party can access or read your information.

🙅‍♂️
Sale of data is strictly prohibited

Joya9 never sells your personal information to advertisers or data brokers. Your data belongs to you.

🗂️
Minimal data collection

We only collect the information strictly necessary to provide our services. We never ask for data we don't need.

🧹
Right to erasure

You can request deletion of your data at any time. Once your account is closed, all data will be permanently deleted within the designated timeframe.

🔔
Instant alerts on any violation

In the event of any unauthorised access to your data, we will notify you via SMS and email within 72 hours.

🌍
International standard compliance

Joya9 follows European GDPR and international data protection standards — a level of compliance most platforms in Bangladesh do not meet.

1What types of data we collect

Joya9 only collects information that is genuinely necessary to deliver our services properly. We do not chase unnecessary personal data.

Information collected at registration

  • Full Name (as per National ID)
  • Mobile Phone Number
  • Date of birth (for age verification)
  • Email address (optional)
  • Chosen password (stored in encrypted form)

Data Collected During KYC Verification

  • Photo of national ID card or passport
  • Selfie photo (for identity matching)
  • Proof of address (optional, for large withdrawals)

Automatically Collected Data

  • IP address and device type
  • Browser and operating system information
  • Time spent on the site and pages visited
  • Gaming activity and transaction history

Transparency: joya9 does not collect any information from you beyond what is listed above. If any staff member asks for additional information, please notify us immediately.

2Why Your Data Is Collected

Joya9 only collects data for specific, defined purposes. Every piece of information has a clear reason behind it:

Data Type Purpose of use Legal basis
Mobile number Account login, OTP, support Contractual necessity
National ID card Age & Identity Verification (KYC) Legal obligation
IP Address Fraud prevention & security Legitimate interest
Gaming History Service improvement & bonus calculation Contractual necessity
Payment Information Transaction processing Contractual necessity

3Where Your Data Goes — Our Sharing Policy

Joya9 never sells your data to third parties. However, limited information is shared with select trusted partners solely to deliver our services:

Cases Where Your Data Is Shared

  • Payment providers (bKash, Nagad): Only the information necessary to complete a transaction.
  • Game Software Providers: Session tokens for running games, without any name attached.
  • Law enforcement authorities: Only upon a lawful legal order.
  • Security services: IP address and device information for fraud detection.

Cases Where Your Data Is Not Shared

  • Advertisers or marketing companies
  • Data Brokers or Information Buyers
  • Competing gaming platforms
  • No third party without your consent

Our Commitment: All partners with whom data is shared have signed joya9's privacy agreement and are bound to uphold the same standards.

4How Long Your Data Is Stored

Joya9 does not retain data beyond what is necessary. Each category of data has a defined retention period:

  • Account information: For the duration of active account + 5 years after closure (as required by law).
  • Transaction Records: 7 years (as required by financial regulatory authorities).
  • KYC Documents: 5 years after account closure.
  • Gaming logs: 3 years.
  • Customer support conversations: 2 years.
  • Cookie Data: 1–2 years (depending on cookie type).

Good to know: Due to legal obligations, certain data may not be erasable before a specified period has elapsed. In such cases, we will notify you separately.

5Cookie Policy — Why we use cookies

The joya9 website uses cookies — small text files stored in your browser that help make your experience smoother and more personalised.

Cookie Controls: You can disable optional cookies at any time through your browser settings. Disabling essential cookies will prevent you from logging in to the site.

6Your Rights Over Your Data

Every joya9 member has full control over their own data. You may exercise any of the following rights at any time:

Right to Access

The right to see what information joya9 holds about you.

Right to Rectification

The right to request correction of any inaccurate or outdated information.

Right to erasure

The right to request permanent deletion of your data under certain circumstances.

Right to restrict processing

The right to request that your data no longer be used for a specific purpose.

Right to data portability

The right to download your data in a readable format.

Right to object

The right to object to your data being used for marketing or analytics purposes.

How to Exercise Your Rights: Contact our support team and let us know which right you wish to exercise. We will resolve your request within 30 days.

7Security Measures — How Your Data Is Protected

Joya9 employs multiple layers of security to keep your data protected:

  • TLS 1.3 / SSL 256-bit: All data transmissions are encrypted.
  • Two-factor authentication (2FA): An OTP is required at every login.
  • AI-powered fraud detection: Suspicious login attempts are blocked immediately.
  • Password hashing: We cannot read your password — only the encrypted version is stored.
  • Regular Security Audits: Independent third-party experts conduct reviews annually.
  • Data centre security: Data is stored on ISO 27001-certified servers.

Your Role: No matter how strong joya9's security is, keeping your password and OTP confidential is your responsibility. joya9 staff will never ask for your password or OTP.

8Protection of Children's Data

Joya9 is strictly for users aged 18 and above. We never knowingly collect data from any minor.

If a parent or guardian believes their child has created an account on joya9, please contact our support team immediately. We will close the account and permanently delete all associated data within 24 hours.

Zero tolerance: Keeping minors away from gaming is our social responsibility — and one we take without compromise.

9Changes to the Privacy Policy

Joya9 may update this Privacy Policy from time to time. When changes are made, we follow the process outlined below:

  • You will receive an SMS notification at least 14 days before any significant changes take effect.
  • The date of the most recent update will always be displayed at the top of this page.
  • Continuing to use the platform after any changes are made constitutes your acceptance of the updated policy.
  • If you do not agree to the changes, you may close your account — with no penalty.

10Contact — How to reach us with your questions

For any questions or complaints regarding our Privacy Policy, please reach out to us directly:

  • Email: privacy@joya9-baji.com
  • Live Chat: Chat button at the bottom-right corner of the site (24/7, in Bangla)
  • Response time: Typically within 24–48 hours

Data Protection Officer: joya9 has a dedicated Data Protection Officer (DPO) who handles privacy-related concerns exclusively. Your complaint will be directed to them directly.

Privacy FAQs

Quick answers to the most frequently asked questions

No. joya9 uses your phone number solely for sending OTPs, important account-related notifications, and customer support. Your number is never shared with advertisers or any third party. If you wish to opt out of promotional SMS, you can disable this in your settings.

Your KYC documents are stored on ISO 27001-certified, encrypted cloud servers. Only authorised personnel directly involved in the verification process can access this data. It is permanently deleted five years after your account is closed.

Absolutely. It is your legal right. Send us a message via support saying "I'd like to see my data." We will send you a complete list of all information we hold about you within 30 days.

Most of your data will be deleted. However, certain information (such as transaction records and KYC documents) must be retained for a specified period due to legal requirements. After that period, everything will be permanently deleted. You can request full details on what is retained after account closure and for how long.

No. Your gaming history is completely confidential. It may only be used under a lawful order from a court or law enforcement authority, or as anonymised data for responsible gaming programmes. It is never disclosed to any other party.
🔐

Play in a Safe & Trusted Environment

Your data is 100% secure at joya9. Join now and enjoy the safest gaming experience in Bangladesh.

SSL Secured No data selling In Your Control GDPR Standards
বাংলা