joiya9 Privacy Policy

Your privacy matters to us. This Privacy Policy explains exactly what personal data joiya9 collects, why we collect it, how it is stored and protected, and the rights you have over your own information as a player in Bangladesh.

Effective: January 2026 SSL Encrypted No Third-Party Sale
Last updated: 1 January 2026

1. Introduction

Our Privacy Principles

Data Minimisation

We collect only the data we genuinely need to operate your account and comply with anti-fraud obligations. Nothing more .

No Data Selling

Your personal information is never sold to advertisers, data brokers, or any third party for commercial gain.

SSL Encryption

All data transmitted between your device and the joiya9 Platform is protected by industry-standard SSL/TLS encryption at all times.

Access Control

Access to your personal data within joiya9 is restricted to authorised personnel who need it to perform their role.

Retention Limits

We retain your data only for as long as required to fulfil the purposes outlined in this Policy or as required by law.

Your Rights

You have the right to access, correct, or request deletion of your personal data. Contact our support team to exercise these rights.

Full Privacy Policy

joiya9 collects personal data in the following categories:

Registration Data: When you create a joiya9 account, we collect your mobile phone number, date of birth, chosen username, and password (stored in encrypted form). You may also be asked to provide your full legal name at the point of registration or during identity verification.

Identity Verification (KYC) Data: To comply with anti-money-laundering obligations and to verify that you meet the 21+ age requirement, we may request copies of identity documents such as your National Identity Card (NID), passport, or driver's licence. We may also request a selfie or proof-of-address document (e.g., a utility bill or bank statement issued within the last three months).

Financial Data: We collect records of your deposits, withdrawal requests, and transaction history in BDT. We record the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard) and associated transaction reference numbers. We do not store full card numbers or mobile banking PINs — these are handled by your payment provider's own secure systems.

Usage and Device Data: We automatically collect data about how you use the Platform, including: IP address, device type and operating system, browser type and version, pages visited, games played, session duration, and clickstream data. This data helps us maintain platform security and improve the user experience.

Communications Data: If you contact joiya9 support via email or any messaging channel, we retain records of those communications, including your contact details and the content of your messages, to resolve your query and to improve our service quality.

Responsible Gaming Data: Where you set deposit limits, session time reminders, or self-exclusion periods through the Platform's responsible gaming tools, we retain records of those preferences and their effective dates.

joiya9 processes your personal data for the following purposes:

  • Account Management: To create, maintain, and administer your joiya9 player account, including verifying your identity and processing login requests.
  • Service Delivery: To provide you with access to casino games, sports betting markets, live dealer tables, and other Platform features.
  • Payment Processing: To process deposits, withdrawals, and refunds via bKash, Nagad, Rocket, Upay, and bank card channels in BDT.
  • Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, unauthorised account access, and other prohibited conduct.
  • Age and Identity Verification: To confirm that all players meet the mandatory 21+ age requirement before allowing real-money play.
  • Responsible Gaming: To apply and enforce deposit limits, self-exclusion periods, and other player-protection tools you have activated.
  • Legal Compliance: To meet our obligations under applicable law, including responding to lawful requests from competent authorities.
  • Customer Support: To respond to your enquiries, resolve disputes, and improve our service based on feedback.
  • Platform Improvement: To analyse aggregated usage data in order to improve game selection, site performance, and user experience. This analysis uses anonymised or pseudonymised data wherever possible.
  • Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (e.g., Eid offers, BPL cricket specials) where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting support.
Legal basis: joiya9 processes your data on the basis of contractual necessity (to perform the service you have requested), legitimate interests (fraud prevention, platform security), legal obligation (KYC and AML compliance), and consent (marketing communications).

joiya9 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

Cookie Type Purpose Can Be Disabled?
Essential Keep you logged in, maintain session state, prevent CSRF attacks No — required for the Platform to function
Functional Remember your language preference, responsible gaming settings, and display preferences Yes — disabling may affect personalisation
Analytics Track page views, game popularity, and session durations using anonymised data to improve the Platform Yes — via your browser cookie settings
Security Detect suspicious login attempts, flag unusual device fingerprints, and support fraud prevention No — required for account safety

You can manage or delete cookies through your browser's settings. Please note that disabling essential or security cookies may prevent you from accessing certain features of the joiya9 Platform. joiya9 does not use cookies to serve third-party advertising on your device.

joiya9 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

  • Payment Processors: We share transaction data with payment service providers (including bKash, Nagad, Rocket, Upay, and card networks Visa and Mastercard) solely to process your deposits and withdrawals. These providers process your data under their own privacy policies and are bound by contractual data protection obligations.
  • Game Providers: Live casino and RNG game providers (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming) may receive technical session data (e.g., player ID, bet amounts) to deliver the game and resolve disputes. These providers do not receive your full identity details.
  • Identity Verification Services: Where automated KYC checks are used, we may share document images and personal details with a trusted third-party verification provider bound by strict data processing agreements.
  • Legal and Regulatory Authorities: We will disclose personal data to competent courts, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a valid court order or where we have a good-faith belief that disclosure is necessary to prevent fraud or serious harm.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or part of the joiya9 business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
Important: joiya9 will never share your personal data with third-party marketers, data brokers, or social media platforms without your explicit, prior consent.

joiya9 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

  • SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard SSL/TLS protocols.
  • Password Hashing: Account passwords are never stored in plain text. They are salted and hashed using a strong cryptographic algorithm.
  • Access Controls: Access to production systems and player databases is restricted to authorised personnel on a need-to-know basis, enforced via role-based access controls and multi-factor authentication.
  • Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity, with automated alerts and incident response procedures in place.
  • Regular Audits: Security practices and data handling procedures are reviewed on a regular basis to ensure they remain effective and up to date.

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or interests, joiya9 will notify affected players without undue delay.

joiya9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active player account, and to comply with our legal and regulatory obligations. Specific retention periods include:

  • Active Account Data: Retained for the duration of your account's active status, plus a period of up to five years following account closure, to comply with anti-money-laundering record-keeping requirements.
  • KYC Documents: Retained for a minimum of five years from the date of verification, in accordance with standard AML compliance practice.
  • Transaction Records: Retained for a minimum of five years from the date of each transaction.
  • Support Communications: Retained for up to three years from the date of resolution, to support quality assurance and dispute resolution.
  • Marketing Consent Records: Retained for the duration of your consent plus one year, as evidence of your opt-in.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a joiya9 player, you have the following rights in respect of your personal data:

  • Right of Access: You may request a copy of the personal data joiya9 holds about you at any time.
  • Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct it.
  • Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are required by law to retain (e.g., KYC and transaction records).
  • Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, for example while a correction request is being assessed.
  • Right to Object: You may object to the processing of your data for direct marketing purposes at any time. We will stop sending marketing communications promptly upon receiving your objection.
  • Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible.

To exercise any of the above rights, please contact our support team at [email protected] (plain text — not a clickable link). We will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and we will notify you of any such extension.

The joiya9 Platform is strictly intended for adults aged 21 and over. joiya9 does not knowingly collect personal data from any person under the age of 21. Age verification checks are conducted during account registration and, where necessary, at the point of withdrawal.

If joiya9 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted promptly and the associated account will be closed immediately. Any funds deposited by a minor will be handled in accordance with applicable law.

If you have reason to believe that a minor has opened a joiya9 account, please notify us immediately at [email protected] (plain text — not a clickable link). We take underage gambling seriously and will investigate all such reports without delay.

joiya9 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players by posting a prominent notice on the Platform and/or by sending a notification to your registered contact details. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically. Your continued use of the joiya9 Platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should stop using the Platform and contact support to close your account.

The current version of this Privacy Policy is always accessible at https://joiya9.bio/privacy-policy. Previous versions are available on request by contacting our support team.

Contact our Privacy Team: For any data protection queries, rights requests, or concerns about how joiya9 handles your personal information, reach out to us at [email protected] (plain text — not a clickable link). We operate on Bangladesh Standard Time (BST, UTC+6) and aim to respond to all privacy enquiries within one business day.

Explore joiya9 with Confidence

Your data is safe with us. Now enjoy live casino games, cricket betting, and the best slots in Bangladesh — all in BDT via bKash and Nagad. 21+ only.

Explore joiya9 Casino Responsible Gaming