joya88 Privacy Policy

How We Use Your Personal Data

joya88 uses the personal data we collect for the following purposes, each grounded in a lawful basis for processing:

1.1 Account Registration and Management

We use your identity and contact data to create and maintain your joya88 account, verify your age and identity (confirming you are aged 21 or above), and keep your account records accurate and up to date. The lawful basis is the performance of a contract with you.

1.2 Payment Processing

Financial data is used solely to process deposits and withdrawals via your chosen Bangladesh payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to reconcile transactions, and to investigate any disputed or suspicious transactions. The lawful basis is the performance of a contract and our legitimate interest in preventing financial fraud.

1.3 Identity Verification and Fraud Prevention

We process identity data, technical data, and financial data to verify that you are who you claim to be, to detect and prevent fraudulent activity, money laundering, and duplicate account creation. The lawful basis is our legal obligation and legitimate interests in operating a secure platform.

1.4 Customer Support

Communications data and account data are used to respond to your enquiries, resolve complaints, and improve the quality of our support service. The lawful basis is the performance of a contract and our legitimate interest in providing effective customer service.

1.5 Responsible Gaming Compliance

Gaming data and account data are used to monitor for signs of problem gambling behaviour, to enforce any responsible gaming limits or self-exclusion periods you have requested, and to comply with our responsible gaming obligations. The lawful basis is your consent (where you have activated these tools) and our legitimate interest in player welfare.

1.6 Marketing and Promotions

Where you have explicitly opted in to receive marketing communications, we use your contact data and gaming data to send you personalised promotional offers, bonus updates, and information about new games on joya88. You may opt out of marketing communications at any time by contacting [email protected]. The lawful basis is your consent.

1.7 Platform Improvement and Analytics

Aggregated and anonymised usage data and technical data are used to analyse how players use joya88, identify areas for platform improvement, and measure the effectiveness of promotional campaigns. This processing uses data in a form that cannot identify you personally. The lawful basis is our legitimate interest in improving our product.

Cookies and Tracking Technologies

joya88 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences, such as your preferred game category or responsible gaming settings, to provide a more personalised experience on subsequent visits.
• Analytics Cookies: Collect anonymised data about how players navigate the joya88 platform, which pages are most visited, and where users encounter difficulties. This data is used solely to improve the platform.
• Fraud Detection Cookies: Help joya88 identify suspicious or anomalous behaviour patterns, including bot activity and attempts to create multiple accounts from the same device.

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the performance or personalisation features of the joya88 platform but will not prevent you from accessing core services.

Sharing Your Personal Data

joya88 does not sell or rent your personal data to any third party. We may share personal data with the following categories of recipients only as necessary to operate the platform:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, solely to process your financial transactions.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios, to the extent necessary to resolve game disputes or verify game outcomes.
• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers engaged to assist with age and identity verification.
• Fraud Prevention Services: Third-party risk management and anti-fraud platforms used to detect and prevent fraudulent activity on joya88.
• Legal and Regulatory Authorities: Government bodies, law enforcement agencies, or courts where joya88 is required by law to disclose your data.
• Professional Advisers: Legal counsel, auditors, and consultants under strict confidentiality obligations, where access to personal data is necessary for their professional services.

All third-party service providers with whom joya88 shares personal data are required to process that data only for the specified purpose and in accordance with joya88's instructions. They are not permitted to use your data for their own independent purposes.

Data Retention

joya88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data is retained for the duration of your account's active life and for a period of 5 years following permanent account closure.
• Transaction records (deposit and withdrawal history) are retained for a minimum of 7 years for financial audit and anti-money laundering compliance purposes.
• Identity verification documents are retained for 5 years from the date of verification or account closure, whichever is later.
• Customer support communications are retained for 3 years from the date of the interaction.
• Marketing consent records are retained until consent is withdrawn plus 2 years, to evidence the original consent.
• Self-exclusion records are retained indefinitely to prevent re-registration by excluded players.

When personal data is no longer required and its retention period has expired, joya88 securely deletes or anonymises the data so that it can no longer be associated with you as an individual.

Your Privacy Rights

As a joya88 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account username and a description of your request. We will respond within 14 calendar days.

• Right of Access: You may request a copy of all personal data that joya88 holds about you, together with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to Erasure: In certain circumstances, you may request that joya88 delete your personal data. Note that this right may be limited where retention is required by law (e.g., financial records).
• Right to Restriction: You may request that joya88 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that joya88 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to joya88's assessment of whether compelling grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Data Security Measures

joya88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and joya88 servers.
• Encrypted storage of sensitive data fields including passwords (stored as salted hashes only — plaintext passwords are never retained) and identity document references.
• Role-based access controls ensuring that only authorised joya88 personnel can access personal data, and only to the extent required for their job function.
• Regular penetration testing and vulnerability assessments of the joya88 platform infrastructure.
• Automated fraud detection systems monitoring account activity in real time for anomalous patterns indicative of unauthorised access or account takeover attempts.
• Secure, access-controlled data centres with physical security measures including CCTV, biometric access, and 24-hour monitoring.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, joya88 will notify affected players as promptly as practicable, consistent with our legal obligations.

Children and Minors

The joya88 platform is strictly intended for adults aged 21 and above. joya88 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed at the point of registration, and accounts found to belong to individuals under 21 will be closed immediately and all associated data deleted, except where retention is required for legal compliance purposes.

If you believe that joya88 has inadvertently collected personal data from a minor, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Third-Party Links and Game Providers

The joya88 platform integrates games and content supplied by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play games supplied by these providers, certain technical data (such as your session token, game round ID, and bet amounts) is transmitted to the relevant game provider's systems to enable gameplay. This data sharing is governed by data processing agreements between joya88 and each game provider and is limited to what is strictly necessary for game operation and dispute resolution.

joya88 is not responsible for the privacy practices of third-party game providers beyond the contractual obligations we impose on them. We recommend reviewing the privacy policies of individual game providers if you have specific concerns about how they handle gameplay data.

Changes to This Privacy Policy

joya88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the updated policy will be published on this page with a revised effective date. For significant changes that affect how we process your personal data in ways that require fresh consent, we will notify you directly via the email address registered on your account.

Your continued use of the joya88 platform following notification of changes to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

Contact and Privacy Enquiries

All privacy-related requests, data access enquiries, correction requests, deletion requests, and complaints about how joya88 handles personal data should be directed to our support team. Please include your registered account username and a clear description of your request to enable prompt handling.

joya88 privacy contact: [email protected] (plain text — not a clickable link).

We aim to acknowledge all privacy-related requests within 2 business days and to resolve them within 14 calendar days. Response times may be extended during Bangladesh public holidays including Eid, Victory Day (16 December), and Independence Day (26 March), in which case we will notify you of the expected response timeline.