Joy9 Privacy Policy – How We Protect Your Data

1. Introduction

Joy9 ("we", "us", "the platform") is committed to protecting the privacy of every player who uses the Joy9 platform. This Privacy Policy explains how Joy9 collects, uses, stores, and protects your personal data when you register an account, make a deposit, play games, or interact with Joy9 in any way.

Joy9 understands that privacy matters deeply to players in Bangladesh. When you share your personal information with Joy9, you're trusting us to handle it responsibly. Joy9 takes that trust seriously and has put in place clear policies and technical safeguards to ensure your data is handled with care.

This Privacy Policy is written in plain English so that every Joy9 player can understand exactly what happens to their data. If you have any questions after reading this policy, please contact Joy9 support at [email protected].

2. Data We Collect

Joy9 collects the following categories of personal data from players:

Category	Examples	Purpose
Identity Data	Full name, date of birth, national ID number	Account registration and age verification
Contact Data	Mobile number, email address	Account communication and support
Financial Data	bKash/Nagad/Rocket account reference, transaction history	Processing deposits and withdrawals
Technical Data	IP address, device type, browser type, operating system	Platform security and fraud prevention
Usage Data	Games played, bet amounts, session duration, login times	Responsible gaming monitoring and platform improvement
Communications Data	Support chat logs, email correspondence	Customer service and dispute resolution

Joy9 only collects data that is necessary for the purposes described in this Privacy Policy. Joy9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, or health data unless specifically required by law.

3. How We Collect Your Data

Joy9 collects your personal data through the following means:

Direct interactions: When you register an account on Joy9, complete your profile, make a deposit, request a withdrawal, or contact Joy9 support, you provide data directly to Joy9.
Automated technologies: When you use the Joy9 platform, Joy9 automatically collects technical data such as your IP address, device identifiers, and browsing behaviour through cookies and similar tracking technologies.
Third-party sources: Joy9 may receive data about you from identity verification providers, payment processors, and fraud prevention services when you use their services in connection with your Joy9 account.
KYC verification: When Joy9 requests identity verification documents, the data contained in those documents is collected and processed as part of Joy9's Know Your Customer obligations.

Joy9 does not purchase personal data from data brokers or any other commercial data sources. All data Joy9 holds about you comes from your direct interactions with the platform or from service providers acting on Joy9's behalf.

4. How We Use Your Data

Joy9 uses your personal data for the following purposes:

To create and manage your Joy9 account and verify your identity.
To process deposits and withdrawals through bKash, Nagad, and Rocket.
To provide customer support and respond to your enquiries.
To monitor your account for signs of problem gambling and apply responsible gaming tools where necessary.
To detect, investigate, and prevent fraud, money laundering, and other illegal activity on the Joy9 platform.
To comply with legal and regulatory obligations applicable to Joy9.
To send you transactional communications such as deposit confirmations, withdrawal notifications, and account alerts.
To send you marketing communications about Joy9 promotions and offers, where you have opted in to receive them.
To improve the Joy9 platform, games, and user experience based on aggregated usage data.

Joy9 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or having a legitimate legal basis to do so.

Joy9 processes your data on the legal bases of contractual necessity, legitimate interests, legal obligation, and — where required — your explicit consent.

5. Data Sharing

Joy9 does not sell your personal data to any third party. Joy9 may share your data with the following categories of recipients only where necessary and only for the purposes described in this Privacy Policy:

Payment processors: Joy9 shares transaction data with bKash, Nagad, and Rocket to process your deposits and withdrawals.
Identity verification providers: Joy9 uses third-party KYC services to verify your identity and age. These providers process your identity documents on Joy9's behalf.
Fraud prevention services: Joy9 shares technical and behavioural data with fraud detection providers to protect the platform and its players.
Regulatory authorities: Joy9 may be required by law to share your data with regulatory bodies, law enforcement agencies, or courts. Joy9 will comply with all lawful requests for data disclosure.
IT and platform service providers: Joy9 uses third-party hosting, analytics, and infrastructure providers who may process your data on Joy9's behalf under strict data processing agreements.

All third parties who receive your data from Joy9 are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the one for which it was shared.

6. Payment Data

Joy9 takes the security of your financial data very seriously. When you make a deposit or request a withdrawal on Joy9 using bKash, Nagad, or Rocket, your payment credentials are handled through secure, encrypted connections directly with the payment provider.

Joy9 does not store your full mobile banking PIN, password, or account credentials on its servers. Joy9 retains only the minimum payment reference data necessary to process transactions, reconcile accounts, and comply with anti-money laundering obligations.

All payment transactions on Joy9 are encrypted in transit using TLS/SSL protocols.
Joy9 stores only tokenised payment references, not full account credentials.
Payment data is retained for the period required by applicable financial regulations.
Joy9 monitors all transactions for signs of fraudulent activity or money laundering.

7. Cookies and Tracking Technologies

Joy9 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players use Joy9. Cookies are small text files stored on your device when you visit the Joy9 website or use the Joy9 app.

Joy9 uses the following types of cookies:

Essential cookies: These are required for the Joy9 platform to function. They enable you to log in, maintain your session, and use core platform features. These cookies cannot be disabled.
Analytics cookies: Joy9 uses analytics cookies to understand how players navigate the platform, which games are most popular, and where players encounter difficulties. This data is used in aggregated, anonymised form.
Preference cookies: These cookies remember your settings and preferences on Joy9, such as your language preference and display settings.
Security cookies: Joy9 uses security cookies to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect your experience on the Joy9 platform. Disabling essential cookies will prevent you from using Joy9.

8. Data Security

Joy9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

256-bit SSL/TLS encryption for all data transmitted between your device and Joy9's servers.
Encrypted storage of sensitive personal data at rest on Joy9's servers.
Strict access controls ensuring that only authorised Joy9 personnel can access player data, and only on a need-to-know basis.
Continuous security monitoring and intrusion detection systems on Joy9's infrastructure.
Regular security audits and penetration testing of the Joy9 platform.
Two-factor authentication options for player accounts to prevent unauthorised access.

While Joy9 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. If Joy9 becomes aware of a data breach that affects your personal data, Joy9 will notify you and the relevant authorities as required by applicable law.

You also play a role in keeping your Joy9 account secure. Use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone.

9. Data Retention

Joy9 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Account data: Retained for the duration of your Joy9 account and for a period of up to 5 years after account closure, as required by anti-money laundering regulations.
Transaction data: Retained for up to 7 years to comply with financial record-keeping obligations.
KYC documents: Retained for the period required by applicable identity verification and anti-money laundering laws.
Support communications: Retained for up to 3 years after the resolution of the relevant support case.
Marketing preferences: Retained until you withdraw your consent or close your Joy9 account.

When data is no longer required, Joy9 securely deletes or anonymises it so that it can no longer be linked to you as an individual.

10. Your Data Rights

As a Joy9 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact Joy9 support at [email protected].

Right of Access

Request a copy of the personal data Joy9 holds about you.

Right to Rectification

Ask Joy9 to correct any inaccurate or incomplete data about you.

Right to Erasure

Request deletion of your personal data where Joy9 no longer has a legal basis to retain it.

Right to Restriction

Ask Joy9 to restrict processing of your data in certain circumstances.

Right to Portability

Request your data in a structured, machine-readable format.

Right to Object

Object to Joy9 processing your data for direct marketing purposes at any time.

Joy9 will respond to all data rights requests within 30 days. In complex cases, Joy9 may extend this period by a further 30 days and will notify you of the extension. Joy9 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

11. Minors and Under-18 Players

Joy9 does not knowingly collect personal data from anyone under the age of 18. The Joy9 platform is strictly for adult players. If Joy9 discovers that it has inadvertently collected data from a minor, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered on Joy9, please contact Joy9 support at [email protected] immediately. Joy9 will investigate and take appropriate action without delay.

12. Changes to This Privacy Policy

Joy9 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When Joy9 makes changes to this Privacy Policy, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how Joy9 uses your personal data, Joy9 will notify you via email or an in-platform notification before the changes take effect. Your continued use of Joy9 after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Joy9 encourages you to review this Privacy Policy periodically to stay informed about how your data is being handled.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or Joy9's handling of your personal data, please contact the Joy9 support team. Joy9 is committed to resolving all privacy-related enquiries promptly and transparently.

Email: [email protected]

Joy9 aims to respond to all privacy enquiries within 5 business days. For data rights requests, Joy9 will respond within 30 days as described in Section 10 above.

For information about Joy9's rules and gameplay policies, please review our Terms and Conditions. For information about responsible gaming tools available on Joy9, please visit our Responsible Gaming page.

Joy9 takes all privacy complaints seriously. If you are not satisfied with Joy9's response to your privacy concern, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.