jaoya9 Privacy Policy

01 Introduction

jaoya9 is committed to protecting the privacy and personal data of all players who use our platform. This Privacy Policy sets out in clear, plain English how jaoya9 collects, uses, stores, and safeguards the personal information you provide when you register an account, deposit funds, place wagers, or otherwise interact with the jaoya9 platform.

This policy is designed to give you complete transparency about our data practices. We believe you have a fundamental right to understand what happens to your personal information, and we take that responsibility seriously. jaoya9 does not engage in obscure or undisclosed data practices — everything we do with your personal data is described in this document.

If you have any questions about this Privacy Policy that are not answered here, please contact our Data Protection team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

02 Data We Collect

jaoya9 collects personal data across several categories. The table below provides a comprehensive overview of each category, the specific data points collected within it, and the primary purpose for which that category is gathered.

jaoya9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity verification photos required for KYC), or health data, except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request.

03 How We Collect Your Data

jaoya9 collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or respond to a promotion.
• Automatically from your device: When you access the jaoya9 platform, our servers automatically log technical data including your IP address, device identifiers, browser type, and session activity. This is standard practice for all web-based platforms and is used primarily for security and fraud prevention purposes.
• From cookies and similar technologies: The jaoya9 platform uses cookies and local browser storage to maintain session state, remember your preferences, and collect aggregate analytics data. See Section 07 for full details on our cookie practices.
• From payment providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank partner, the payment provider may share transaction confirmation data with jaoya9 to allow us to credit your account and maintain accurate financial records.
• From identity verification services: Where jaoya9 uses a third-party KYC verification provider to assist with document checking, that provider may share a verification outcome (pass/fail) and associated data with jaoya9.

04 Legal Basis for Processing

Every instance of personal data processing at jaoya9 is grounded in one of the following legal bases. We do not process data without a legitimate legal justification:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account creation, deposits, withdrawals, game participation, and customer support.
• Legal obligation: Processing required to comply with applicable laws — including age verification (18+), anti-money-laundering (AML) checks, Know Your Customer (KYC) obligations, and financial record-keeping requirements.
• Legitimate interests: Processing carried out in the legitimate operational interests of jaoya9 — including fraud detection, platform security, abuse prevention, responsible gaming monitoring, and service improvement analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing for which you have given specific, informed, and freely revocable consent — including sending you promotional communications and optional personalisation features. You may withdraw consent at any time by updating your communication preferences in your Account settings or by contacting support.

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are proportionate and do not unduly impact your fundamental rights. You may request a summary of our legitimate interests assessment by contacting [email protected].

05 How We Use Your Data

jaoya9 uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and secure your jaoya9 account, process your login credentials, and send you account-related notifications such as deposit confirmations and withdrawal status updates.
• Identity and age verification: To confirm that you are at least 18 years of age and that the identity information you have provided is genuine. This is a legal obligation and cannot be waived.
• Payment processing: To process deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to reconcile transactions, and to maintain accurate financial records.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse, and unauthorised account access.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour and to enforce any deposit limits, cooling-off periods, or self-exclusions that you have set or that jaoya9 has applied.
• Customer support: To respond to your support requests, resolve disputes, and improve the quality of our support services based on historical interaction records.
• Platform improvement: To analyse aggregate, anonymised behavioural data to improve game selection, user interface design, and platform performance. Individual player data used for this purpose is anonymised before analysis.
• Marketing communications: Where you have opted in, to send you information about jaoya9 promotions, bonuses, seasonal offers (such as Eid, BPL, or IPL campaigns), and platform updates. You may opt out at any time.

06 Data Sharing & Third Parties

jaoya9 does not sell your personal data. We share personal data with third parties only in the following tightly controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other listed payment partners receive the minimum transaction data required to process your deposit or withdrawal. These providers operate under their own privacy policies and data protection obligations.
• KYC and identity verification providers: Third-party KYC providers receive your identity documents and verification data solely for the purpose of conducting age and identity checks. They are contractually prohibited from using your data for any other purpose.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and session data necessary to deliver game content and calculate results. These providers do not receive your name, contact details, or financial information.
• IT infrastructure and hosting providers: jaoya9 uses cloud infrastructure and hosting partners to operate the platform. These providers act as data processors under contractual data processing agreements and may not use your data for their own purposes.
• Legal and regulatory authorities: jaoya9 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by law, court order, or to prevent serious harm. We will notify you of any such disclosure where we are legally permitted to do so.

07 Cookies & Tracking Technologies

The jaoya9 platform uses cookies and similar client-side storage technologies to provide core functionality and to improve the player experience. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and preference cookies that remember your language and display settings. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate and use the platform. This helps jaoya9 identify usability issues and improve the overall experience. No individually identifiable data is retained in analytics reports.
• Functional cookies: Used to remember your account preferences such as your last-used payment method, preferred game category, and notification settings. These are optional but enhance the convenience of using jaoya9.

jaoya9 does not use third-party advertising cookies or behavioural tracking technologies that build cross-site advertising profiles. We do not participate in any advertising network that would allow other companies to place tracking cookies on your device via the jaoya9 platform.

You may manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will prevent you from logging into your account and using core platform features.

08 Data Security

jaoya9 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. Our key security measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and jaoya9 servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• AES-256 encryption at rest: All personal data stored on jaoya9 servers is encrypted using AES-256 symmetric encryption. Database backups are also encrypted.
• Access controls: Access to personal data is restricted to jaoya9 staff members who have a documented need to access it as part of their job function. All staff access is logged and audited regularly.
• Two-factor authentication (2FA): jaoya9 supports 2FA for player accounts and requires it for all internal staff who access systems containing personal data.
• Penetration testing: The jaoya9 platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident response: jaoya9 maintains a documented data breach response procedure. In the event of a breach that poses a risk to players, we will notify affected individuals promptly and take immediate steps to contain the incident.

09 Data Retention

jaoya9 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

At the end of any applicable retention period, jaoya9 will securely delete or irreversibly anonymise the relevant data. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

10 Your Privacy Rights

As a player on the jaoya9 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and your registered account email address.

• Right of access: You have the right to request a copy of all personal data that jaoya9 holds about you. We will provide this in a structured, readable format within 30 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for its original purpose, where you have withdrawn consent, or where you object to processing. Note that this right is subject to our legal obligations to retain certain data (see Section 09).
• Right to data portability: You may request that we provide your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to restrict processing: You may request that jaoya9 temporarily suspend processing of your data — for example, while you contest the accuracy of the data or while a complaint is being investigated.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

jaoya9 will respond to all privacy rights requests within 30 calendar days. In cases of complex or multiple requests, we may extend this period by a further 30 days and will notify you accordingly. All responses are provided free of charge.

11 Children & Minors

jaoya9 takes the protection of minors extremely seriously. As part of our registration and KYC process, we verify the age of all players before allowing withdrawals and may conduct age verification checks at account registration. If jaoya9 discovers or is notified that an account holder is under 18 years of age, we will:

• Immediately suspend the account;
• Void all wagers placed on the account;
• Return any real-money deposits to the payment source used, less any winnings already withdrawn;
• Permanently delete all personal data associated with the account, subject to any legal retention obligations;
• Report the incident in accordance with any applicable child protection reporting obligations.

If you believe a minor has registered on the jaoya9 platform, please notify us immediately at [email protected]. We will investigate and take appropriate action without delay.

12 Third-Party Links

The jaoya9 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with these third-party services — for example, when you initiate a bKash payment — you will be subject to the privacy policy of that third-party provider, not the jaoya9 Privacy Policy.

jaoya9 is not responsible for the privacy practices of third-party providers. We recommend that you review the privacy policies of any third-party service you interact with through or in connection with the jaoya9 platform. If you have concerns about how a third-party provider handles your data, please contact that provider directly.

jaoya9 does not maintain hyperlinks to external websites outside of the operational requirements of the platform itself (such as payment redirects). This Privacy Policy applies only to data processed by jaoya9 directly.

13 Updates to This Policy

jaoya9 reserves the right to update this Privacy Policy at any time. When material changes are made — changes that significantly affect how we collect, use, or share your personal data — we will:

• Update the "Effective Date" at the top of this document;
• Send a notification to your registered email address describing the key changes, at least 7 days before the revised policy takes effect;
• Display an in-platform notification when you next log in, summarising the changes and linking to the updated policy.

For minor, non-material changes (such as clarifying existing language without changing our substantive practices), we will update the document without individual notification, though the Effective Date will always be updated.

Continued use of the jaoya9 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you may request account closure and withdrawal of your real-money balance prior to the effective date.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jaoya9 holds about you, please reach out through the following channels:

• Email: [email protected] — Please use the subject line "Privacy Enquiry" for fastest routing to our data protection team.
• Live Chat: Available 24/7 from your account dashboard. For general privacy questions, live chat is the fastest way to get a response.
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).