joya Privacy Policy

This privacy policy ("Policy") applies between joya betting and casino platform and its users. When you use joya's website or services, you are considered to have accepted the terms of this Policy. joya collects only the information that is necessary for the proper operation of the platform, ensuring security, and providing users with quality service. Our Terms and Conditions should be read alongside this Policy.

This Policy is drawn up in accordance with applicable data protection regulations in Bangladesh and may be updated from time to time. Any changes will be notified on the website and the date of the revised Policy will be stated.

1.1 Information provided at registration

When you create an account on joya, the following information is collected:

• Full name
• Date of birth (for age verification — all members must be at least 21 years old)
• Email address
• Mobile number
• Username and password chosen by the user

1.2 Identity verification information

During the account verification (KYC) process, joya may request the following documents or information:

• Copy of national ID card or passport
• Proof of current address
• Proof of ownership of payment method (e.g. bKash or Nagad account details)

1.3 Transaction and usage information

The following information is automatically recorded while using the platform:

• Deposit and withdrawal history
• Betting and game logs
• IP address and device information
• Browser type and operating system
• Session duration and page visit patterns

1.4 Cookies and tracking technologies

The joya website uses cookies and similar technologies that are stored in your browser. This information is used to improve website functionality, keep your login session active, and analyse site usage. You can disable cookies from your browser settings, though this may limit the functionality of some services.

joya uses your information only for the following purposes:

2.1 Account management

Information is needed to create, verify, and keep your account secure at all times. SSL encryption is used to keep the login process secure and to prevent unauthorised access.

2.2 Processing financial transactions

Your payment information is required for deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer. All financial transactions are carried out through secure channels, and transaction records are retained to prevent fraud.

2.3 Customer service

Your account information is used to help joya's 24/7 live chat and email support team resolve your issues. Records of support conversations help improve service quality. You can visit our FAQ page for answers to common questions.

2.4 Ensuring responsible gaming

By analysing your playing patterns, joya may send cautionary messages when needed and help activate self-control features. User wellbeing is among our priorities.

2.5 Meeting legal obligations

Certain information may need to be retained or disclosed in order to comply with lawful requests from authorities, fraud investigations, or anti-money laundering (AML) regulations.

joya does not sell your personal information to any third party. However, specific information may be shared in the following limited circumstances:

3.1 Payment processors

Mobile banking providers such as bKash, Nagad, Rocket, and Upay, as well as major banks in Bangladesh (including Dutch-Bangla Bank, BRAC Bank, and Islami Bank), receive the necessary information for deposits and withdrawals. This information is used solely to complete transactions.

3.2 Technology and security partners

Technology providers used for website operation, cybersecurity, and fraud detection may receive the minimum information necessary. All such partners are required to work in compliance with joya's privacy standards.

3.3 Law enforcement agencies

Information may be disclosed in compliance with applicable law upon a valid court order or request from a government authority. In such circumstances, joya will provide only the information specified in the request.

3.4 Business restructuring

User information may be transferred in the event of a business merger or acquisition. In that case, users will be notified in advance and the protections in this Policy will remain in place.

4.1 Retention period

Information is retained for as long as your account remains active. Even after an account is closed, financial transaction records and identity verification documents are retained for a specified period as required by applicable law.

4.2 Technical security

joya uses industry-standard security technologies to protect your information, including:

• SSL/TLS encryption — on all data transfers
• Encrypted database storage
• Two-factor authentication (OTP-based)
• Regular security audits
• Automatic alerts on suspicious login attempts

4.3 User responsibilities

It is your responsibility to keep your account password confidential and not to share it with others. If you notice any suspicious activity, notify joya's support team immediately.

Every registered member of the joya platform has the following rights regarding their information:

5.1 Right to access information

You may request a copy of your personal information stored with joya at any time. This request can be made through customer service channels.

5.2 Right to correct information

If any information held in your account is incorrect or out of date, you may request a correction. For identity verification documents, an updated copy must be submitted.

5.3 Request to delete information

You may request the deletion of your personal information in addition to closing your account. However, information that must be retained due to legal obligations — such as financial transaction records — will be kept for the specified period.

5.4 Right to object to processing

If you do not wish to receive marketing messages or promotional communications, you may unsubscribe at any time. This preference can be changed through your account settings or via the support team.

All joya services are intended solely for persons aged 21 or older. The platform does not knowingly collect any information from persons under the age of 21. Age is verified at the time of registration, and if any inconsistency is found in the verified information, the account will be suspended.

If a parent or legal guardian believes that their child has created an account on joya, they are requested to notify our support team immediately. Such accounts will be closed promptly and the related information will be deleted. You can find more details in our responsible gaming guidelines.

Part of joya's technology infrastructure may be operated on servers located in various countries. In such cases, your information may be transferred outside Bangladesh. However, such transfers are always made through secure encryption and the protection of information at the destination is ensured.

It is joya's responsibility to ensure that countries to which data may be transferred have data protection regulations equivalent to or of a higher standard than those of Bangladesh.

joya reserves the right to amend this privacy policy as needed. If any significant changes are made:

1. A clear notice will be posted on the website.
2. The "Last updated" date at the top of the Policy will be changed.
3. Registered members will be informed by email or in-app message.

Continued use of the platform after the revised Policy is published will be considered acceptance of the new Policy. If you do not agree to the changes, you may request to close your account.

If you have any questions, concerns, or requests regarding this privacy policy, please contact joya through the following:

This Policy is drawn up in Bengali and will be interpreted in accordance with applicable laws of Bangladesh. In the event of any dispute, the jurisdiction of the courts of Bangladesh will apply.