j0y9 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how j0y9 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your", "the Player") who access or use the j0y9 website at j0y9.io, its mobile interface, casino games, sports betting services, and any other features or products made available through the platform.

By registering a player account, making a deposit, placing a bet, or otherwise using any part of the j0y9 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the j0y9 platform.

This Policy should be read alongside j0y9's Terms & Conditions and Responsible Gaming Policy. Together, these documents constitute the full agreement that governs your relationship with j0y9. In the event of any conflict between this Policy and any jurisdiction-specific data protection requirement applicable to you, the more protective standard shall apply where j0y9 has the ability to comply.

j0y9 is committed to handling personal data with integrity, transparency, and care. We recognise that privacy is a fundamental right and we treat the personal information of our players — across Bangladesh, from Dhaka and Chittagong to Sylhet, Rajshahi, Khulna, and beyond — with the same respect we would wish for ourselves.

Data We Collect

j0y9 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and in limited cases from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

When you create a j0y9 account, we collect the following information:

• Full legal name
• Date of birth (to verify that you are aged 21 or over)
• Gender (optional, for personalisation)
• Residential address including city, district, and postcode
• Email address
• Mobile phone number
• Username and encrypted password
• National ID number or passport number (collected during KYC verification)

2.2 Payment & Financial Data

To process deposits and withdrawals, j0y9 collects the following financial information:

• Mobile financial service account details (bKash, Nagad, Rocket, or Upay account number registered in your name)
• Bank account details (where bank transfer is the chosen deposit or withdrawal method — e.g., Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
• Source of funds documentation (where requested as part of an enhanced due diligence review)

2.3 Identity Verification (KYC) Data

As part of the Know Your Customer process, j0y9 may collect:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)
• Selfie photographs or video verification footage where required by the KYC process
• Any additional documentation reasonably requested to confirm identity, age, or source of funds

2.4 Usage & Technical Data

When you use the j0y9 platform, we automatically collect certain technical information, including:

2.5 Responsible Gaming Data

Where you use j0y9's responsible gaming tools — such as deposit limits, loss limits, session time alerts, or self-exclusion — we record the settings you apply and any changes you make to them. This data is used exclusively to enforce the protections you have requested and to support our responsible gaming obligations. It is treated with the highest level of sensitivity.

How We Use Your Data

j0y9 uses personal data collected from players for specific, defined purposes. We do not use your data for any purpose incompatible with those for which it was collected without first obtaining your consent or having a separate legal basis to do so. The primary purposes for which j0y9 processes personal data are:

• Account management: Creating, maintaining, and administering your j0y9 player account, including processing login authentication and account recovery requests.
• Identity verification: Conducting Know Your Customer (KYC) checks to verify your identity, age (21+), and address as part of our platform integrity and responsible gaming obligations.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks. Verifying that payment methods are registered in your name.
• Game delivery: Making casino games, sports betting markets, live dealer tables, and other platform features available to you and tracking game history for dispute resolution purposes.
• Responsible gaming: Monitoring account activity for indicators of problem gambling, enforcing the player protection limits you have set, and administering self-exclusion where requested.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
• Customer support: Responding to your enquiries, complaints, and disputes. Maintaining records of support interactions for quality assurance and dispute resolution.
• Legal compliance: Meeting our obligations under applicable anti-money laundering, responsible gaming, data protection, and financial regulations.
• Platform improvement: Analysing aggregated usage data to improve the j0y9 platform, fix bugs, optimise performance, and develop new features.
• Marketing communications: Sending you promotional offers, bonus notifications, and relevant platform updates — but only where you have given consent or where we have a legitimate interest and you have not opted out. You may unsubscribe from marketing communications at any time via your account settings or by emailing [email protected].

Legal Basis for Processing

j0y9 processes personal data on the following legal bases, depending on the purpose of processing:

Where j0y9 relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your fundamental rights and freedoms, taking into account the context of the processing and the reasonable expectations of players on an online gaming platform.

Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. j0y9 uses cookies and similar tracking technologies (such as local storage, session storage, and web beacons) to operate the platform correctly, remember your preferences, and gather analytics data about how the platform is used.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can control cookies through your browser settings. Most modern browsers allow you to block or delete cookies. However, please be aware that disabling strictly necessary cookies will prevent the j0y9 platform from functioning correctly — you may be unable to log in, maintain a session, or complete transactions.

Third-Party Sharing

j0y9 does not sell your personal data to third parties. We share personal data with third parties only where it is strictly necessary to deliver our services to you, comply with legal obligations, or protect the integrity of the platform. The categories of third parties with whom j0y9 may share your data are:

6.1 Payment Processors

To process your deposits and withdrawals, j0y9 shares the minimum necessary payment information with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank. These partners receive only the data required to execute the specific transaction and are contractually bound to use it for no other purpose.

6.2 Game Providers

To deliver casino games and sports betting markets, j0y9 shares limited player session and account data with our game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. This data includes a player identifier and session token sufficient for the game to function. No more than the minimum necessary data is shared. All game providers operate under contractual data protection obligations.

6.3 Identity Verification Services

j0y9 may use third-party identity verification (KYC) service providers to assist with document verification and age confirmation. These providers process your submitted identification documents and return a verification result. They are prohibited from retaining your documents for any purpose beyond verification.

6.4 Fraud Prevention and Security Partners

j0y9 works with specialist fraud prevention and cybersecurity providers who analyse technical data (IP addresses, device fingerprints, behavioural patterns) to detect and prevent fraudulent activity. Data shared with these providers is used solely for fraud and security purposes.

6.5 Legal and Regulatory Disclosures

j0y9 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law, court order, or where j0y9 has reasonable grounds to believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. j0y9 will, where legally permitted, notify affected players of such disclosures.

Data Retention

j0y9 retains personal data for only as long as is necessary for the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes without restriction.

Data Security

j0y9 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• SSL/TLS encryption: All data transmitted between your device and j0y9 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. You can verify this by the padlock icon in your browser's address bar when visiting j0y9.io.
• Data encryption at rest: Sensitive personal data stored on j0y9's servers — including identity documents and financial data — is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data within j0y9 is restricted to employees and contractors who need it to perform their job functions. All staff with data access are subject to confidentiality obligations and receive data protection training.
• Two-factor authentication: j0y9 supports two-factor authentication (2FA) for player accounts and requires it for staff accessing internal systems that hold personal data.
• Penetration testing and security audits: j0y9 conducts periodic security assessments to identify and remediate vulnerabilities in its systems before they can be exploited.
• Intrusion detection systems: Automated monitoring systems are in place to detect and alert the security team to unusual access patterns or potential breaches in real time.
• Data breach response plan: In the event of a confirmed personal data breach that poses a risk to your rights, j0y9 will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

Your Rights

As a user of the j0y9 platform, you hold the following rights in respect of the personal data we hold about you. j0y9 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access: You have the right to request a copy of the personal data j0y9 holds about you. We will provide this in a commonly used, machine-readable format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic account information (email address, phone number, address) directly from your account settings at any time.
• Right to Erasure ("Right to be Forgotten"): You may request that j0y9 delete your personal data. We will honour this request where there is no overriding legal obligation to retain the data (for example, anti-money laundering rules may require us to retain certain transaction records for a prescribed period even after account closure).
• Right to Restriction of Processing: In certain circumstances, you may request that j0y9 restrict the processing of your data — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another provider.
• Right to Object: You have the right to object to j0y9 processing your personal data on the basis of legitimate interests, including profiling. You also have the right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to Human Review of Automated Decisions: Where j0y9 uses automated analysis to make or influence decisions that significantly affect your account, you have the right to request that a human member of staff review that decision.

j0y9 may need to verify your identity before actioning a data rights request to ensure that data is not disclosed to, amended by, or deleted on behalf of an unauthorised person. Verification will typically involve confirming details already associated with your account. This process is in place to protect you.

Children & Minors

j0y9 operates an online gambling platform that is strictly for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. The j0y9 platform is not directed at, designed for, or marketed towards individuals under 21.

During account registration, we require users to confirm their date of birth and may request documentary proof of age as part of the KYC process. If j0y9 discovers or is notified that a person under the age of 21 has submitted personal data and created an account, we will immediately:

• Suspend the account pending investigation.
• Permanently close the account once underage use is confirmed.
• Delete all personal data submitted by the underage individual to the extent permitted by law.
• Void all transactions and activities carried out during the period of underage use.

International Data Transfers

j0y9 is an online platform serving players primarily in Bangladesh. Some of the third-party service providers we work with — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe, as well as certain technical infrastructure providers — may be based outside Bangladesh and may process your personal data in other countries.

Where personal data is transferred to a third party located in a country that may not offer the same level of data protection as Bangladesh, j0y9 takes appropriate steps to ensure that adequate safeguards are in place. These safeguards may include:

• Contractual data protection clauses that bind the receiving party to process your data only in accordance with j0y9's instructions and this Policy.
• Requiring that third-party recipients implement technical and organisational security measures equivalent to those j0y9 applies to its own data processing.
• Limiting the scope of data transferred to the minimum strictly necessary for the specific service being provided.

By using the j0y9 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh. j0y9 will always ensure that any such transfer is conducted securely and in accordance with the principles set out in this Policy.

Changes to This Privacy Policy

j0y9 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this Policy and in the page hero section.
• Display a prominent notice on the j0y9 platform informing players that the Privacy Policy has been updated.
• Where the changes are significant and affect how we process your data in a material way, send a notification to the email address registered on your account, giving you reasonable advance notice before the changes take effect.

Your continued use of the j0y9 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and may request closure of your account by contacting our support team.

We encourage you to review this Privacy Policy periodically so that you remain informed about how j0y9 handles your personal data. Previous versions of this Policy are available on request by emailing [email protected].

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way j0y9 processes your personal data, please contact our dedicated privacy and data support team using the details below.

13.1 How to Contact Us

• Email: [email protected] — please use the subject line "Privacy Enquiry" for privacy-related correspondence.
• Live Chat: Our customer support team is available 24 hours a day, 7 days a week via the live chat widget on the j0y9 platform. For complex privacy matters, email is preferred so that a full written response can be provided.
• Response Time: j0y9 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days. Complex requests involving data subject rights (such as access requests or erasure requests) will be addressed within 30 days, with an extension of up to a further 60 days in cases of particular complexity.

13.2 Submitting a Formal Privacy Complaint

If you are not satisfied with j0y9's response to a privacy-related enquiry, you have the right to submit a formal complaint. To do so, please email [email protected] with the subject line "Formal Privacy Complaint" and include:

• Your registered j0y9 username.
• A clear description of the privacy concern or the data processing activity you are complaining about.
• Details of any previous communications with j0y9 on this matter, including dates and reference numbers if available.
• The outcome you are seeking (for example, access to your data, correction of inaccurate data, deletion of data, or an explanation of a specific processing activity).

j0y9 commits to acknowledging all formal privacy complaints within 48 hours and providing a full written response within 14 business days. If the matter requires additional investigation, we will inform you of the extended timeline and keep you updated on progress.

13.3 Responsible Gaming and Privacy

If your privacy enquiry relates specifically to responsible gaming data — such as self-exclusion records, deposit limit settings, or session time data — please refer to our Responsible Gaming page for further guidance, or include "Responsible Gaming Data" in the subject line of your email to [email protected]. Responsible gaming data is treated with the highest level of sensitivity and is handled by a dedicated team.