Your Privacy Matters at j0y9

j0y9 collects personal data from players and visitors through several channels, including account registration, identity verification (KYC), payment processing, platform usage, and direct communications with our support team. The categories of personal data we collect include:

Identity Data: Full legal name, date of birth, gender, and government-issued identification details (National Identity Card number, passport number, or driving licence number) provided during registration or KYC verification.

Contact Data: Bangladesh mobile number (required for account registration and two-factor authentication), email address, and, where applicable, residential address in Bangladesh (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).

Financial Data: Mobile wallet account identifiers (bKash number, Nagad number, Rocket number, Upay number) and bank account details (for players using bank transfer via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank). j0y9 does not store full card numbers or mobile wallet PINs; payment credential validation is handled by the respective payment providers.

Transaction Data: Records of all deposits, withdrawals, bonuses claimed, bets placed, and game outcomes associated with your j0y9 account, including timestamps and transaction reference numbers.

Technical Data: IP address, browser type and version, device type (mobile or desktop), operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and session duration data collected automatically when you access the j0y9 platform.

Behavioural Data: Game preferences, betting patterns, session frequency, in-platform navigation paths, and feature usage metrics collected to improve the j0y9 product and personalise your experience.

Communications Data: The content of messages you send to the j0y9 support team via email ([email protected]) or live chat, including complaint submissions, bonus queries, and account-related requests.

Responsible Gaming Data: Self-exclusion elections, deposit limit configurations, time-out requests, and any responsible gaming assessments conducted by j0y9's player welfare team.

j0y9 processes personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties for their own marketing purposes under any circumstances. The primary purposes for which j0y9 processes your data are as follows:

Where j0y9 relies on your consent as the lawful basis for processing (for example, to send you promotional emails about BPL cricket offers or Eid bonus campaigns), you have the right to withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

j0y9 shares personal data only where strictly necessary to deliver the platform, comply with legal obligations, or protect the safety and integrity of the service. The categories of third parties to whom j0y9 may disclose your personal data are set out below.

Payment Service Providers: To process your deposits and withdrawals, j0y9 shares the minimum necessary financial identifiers with your selected payment provider (bKash, Nagad, Rocket, Upay, or participating Bangladeshi banks). These providers process your payment data as independent data controllers under their own privacy policies and are subject to Bangladesh Bank's guidelines on mobile financial services.

KYC and Identity Verification Partners: j0y9 may engage third-party identity verification services to validate NID documents, passport scans, and other KYC submissions. These partners are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of j0y9.

Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and session token to enable game delivery and RNG certification. These studios do not receive your full name, NID details, or financial account information.

Fraud Prevention and AML Services: j0y9 may share transaction pattern data and device fingerprint data with specialist anti-fraud and anti-money-laundering analytics providers to detect and prevent financial crime. All data shared for this purpose is subject to strict contractual confidentiality obligations.

Legal and Regulatory Authorities: j0y9 will disclose personal data to competent Bangladeshi authorities (including law enforcement agencies, courts of competent jurisdiction, or financial intelligence units) where required to do so by law, court order, or regulatory directive. j0y9 will, where legally permissible, notify you of such a disclosure.

No Sale of Personal Data: j0y9 does not sell, rent, trade, or otherwise transfer your personal data to any third party for commercial gain. Any data sharing arrangement with service providers is governed by a data processing agreement that restricts the provider to processing your data solely on j0y9's documented instructions.

j0y9 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies used by j0y9 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable session management, account authentication, and fraud detection. These cookies cannot be disabled without impairing your ability to use the j0y9 platform.
• Functional Cookies: These cookies remember your preferences, such as your selected language setting (English), your preferred payment method (for example, bKash), and your last-viewed game category. They improve your experience but are not required for basic platform operation.
• Analytics Cookies: j0y9 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical issues are most frequently encountered. This data is aggregated and does not identify you individually.
• Marketing Cookies: If you have consented to receive personalised promotions, j0y9 may use cookies to tailor bonus offers and promotional messages to your betting behaviour and game preferences. You may withdraw this consent at any time via your account settings.

Most web browsers are configured to accept cookies by default. You may adjust your browser settings to refuse cookies or to alert you when cookies are being set; however, disabling strictly necessary cookies will affect your ability to log in and use the j0y9 platform. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Samsung Internet, or Opera Mini — the most commonly used browsers among Bangladeshi mobile users).

j0y9 does not use cross-site tracking technologies to monitor your activity on websites other than j0y9.app.

j0y9 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and the j0y9 platform is encrypted using TLS 1.2 or higher. The j0y9 website is served exclusively over HTTPS.
• Encrypted Data Storage: Sensitive personal data (including NID details, financial identifiers, and passwords) is stored in encrypted form using industry-standard encryption algorithms. Passwords are hashed using a one-way cryptographic function and are never stored in plain text.
• Two-Factor Authentication: j0y9 offers SMS OTP-based two-factor authentication to all registered players. We strongly recommend enabling 2FA using your Bangladesh mobile number to protect your account against unauthorised login.
• Access Controls: Access to player personal data within j0y9's internal systems is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Penetration Testing and Security Audits: j0y9's platform undergoes periodic security assessments by qualified third-party cybersecurity professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights, j0y9 will notify affected players without undue delay at the email address or mobile number registered to their account, and will take all necessary steps to contain and remediate the breach.

While j0y9 employs robust security measures, no online platform can guarantee absolute security against all possible threats. You are encouraged to use a strong, unique password for your j0y9 account, to enable 2FA, and to contact [email protected] immediately if you suspect any unauthorised access to your account.

j0y9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The key retention periods applied by j0y9 are summarised below:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes.

If you request the closure of your j0y9 account, your active account data will be deactivated promptly; however, certain categories of data (particularly KYC records and transaction histories) will be retained for the periods stated above in compliance with applicable legal obligations. Account closure does not constitute a request for erasure of all personal data.

As a player whose personal data is processed by j0y9, you have the following rights with respect to your personal information. j0y9 is committed to honouring these rights in a timely and transparent manner.

• Right of Access: You have the right to request a copy of the personal data that j0y9 holds about you, along with information about how that data is used, where it is stored, and with whom it is shared. Access requests will be fulfilled within 30 days of receipt.
• Right to Rectification: If any personal data held by j0y9 is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly via your account settings; for changes to identity data, please contact [email protected].
• Right to Erasure: In certain circumstances, you have the right to request that j0y9 delete your personal data. This right is subject to limitations — for example, j0y9 is not able to erase data that must be retained to comply with KYC, AML, or financial record-keeping obligations.
• Right to Restrict Processing: You have the right to request that j0y9 restricts the processing of your personal data in specific circumstances, for example while the accuracy of the data is being contested or while an objection to processing is being assessed.
• Right to Object: Where j0y9 processes your personal data on the basis of legitimate interest, you have the right to object to that processing. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where j0y9 relies on your consent to process your personal data (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected] from the email address registered to your j0y9 account. Please include your registered Bangladesh mobile number and a clear description of the right you wish to exercise. j0y9 will respond within 30 days. In some cases, we may need to verify your identity before processing your request.

j0y9 takes data protection seriously as a core operational responsibility. If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which j0y9 handles your personal data, please contact the j0y9 Data Protection team using the details below.

Data Protection Contact: [email protected]

Please use the subject line "Privacy / Data Protection Request" when contacting us about a data protection matter to ensure your message is routed to the appropriate team. We aim to acknowledge all privacy-related enquiries within one business day (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.

Policy Updates: j0y9 reviews and updates this Privacy Policy periodically to reflect changes in operational practices, applicable legal requirements, or the range of services offered on the platform. When material changes are made, we will notify registered players by email and update the "Last Updated" date at the top of this page. Continued use of the j0y9 platform after the publication of an updated Privacy Policy constitutes acceptance of the revised terms.

This Privacy Policy was last updated on 1 January 2026 and applies to all personal data collected via the j0y9.app platform from that date.