Joya 999 Privacy Policy

Joya 999 operates the online gaming platform accessible at joya-999.club. In this Privacy Policy, "Joya 999", "we", "us", and "our" refer to the platform operator. "You" and "your" refer to any person who visits, registers on, or uses the Joya 999 platform in any capacity.

Joya 999 is the data controller for all personal information collected through the platform. This means we are responsible for deciding how and why your personal data is processed. If you have any questions about how your data is handled, you can contact us directly using the details in Section 13.

Joya 999 collects personal data in several categories depending on how you interact with the platform. The table below summarises the main categories of data we collect and what each category includes.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless it is directly relevant to a responsible gaming assessment and you have provided it voluntarily.

Joya 999 collects your personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or filling in any form on the platform.
• Automated collection: Technical and usage data collected automatically when you visit the platform, including through cookies, server logs, and analytics tools. See Section 7 for full details on cookies.
• Third-party sources: Identity and fraud-check data received from verification service providers when you complete the KYC process. Payment data received from payment processors when you make a transaction.
• Publicly available sources: In limited circumstances, we may verify information against publicly available records to comply with anti-money laundering obligations.

Joya 999 uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The main purposes for which we process your data are:

• Account creation and management: To register your account, verify your identity and age, and maintain your account in good standing.
• Payment processing: To process deposits and withdrawals securely and to maintain accurate financial records.
• Legal and regulatory compliance: To meet our obligations under anti-money laundering laws, fraud prevention requirements, and responsible gaming regulations.
• Platform security: To detect and prevent fraud, cheating, account sharing, and other prohibited conduct described in our Terms and Conditions.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support service.
• Platform improvement: To analyse how players use the platform so we can fix issues, improve features, and develop new games and services.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, so we can offer appropriate support tools.
• Marketing communications: To send you promotional offers, bonus notifications, and news about Joya 999 — but only where you have opted in to receive them.

Every time Joya 999 processes your personal data, we do so on one of the following legal grounds:

• Contract performance: Processing that is necessary to provide the services you have signed up for — including account management, payment processing, and gameplay.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing carried out for purposes such as fraud prevention, platform security, and service improvement, where our interests do not override your rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given us clear, informed consent. You can withdraw consent at any time.

Joya 999 does not sell your personal data. We share data only with trusted third parties who need it to help us operate the platform, and only to the extent necessary for that purpose. The categories of recipients are:

• Payment processors: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, and bank transfer services. These providers receive only the transaction data needed to process your payment.
• Identity verification providers: To verify your identity and age during the KYC process. These providers process your ID documents and biometric data under strict data processing agreements.
• Fraud prevention services: To screen transactions and account activity against known fraud patterns and sanctions lists.
• IT and hosting providers: To store and process platform data securely on servers that meet industry-standard security requirements.
• Analytics providers: To help us understand how the platform is used. Analytics data is aggregated and anonymised wherever possible.
• Regulatory authorities: Where required by law, we may share data with financial intelligence units, law enforcement agencies, or gaming regulators.

All third parties who process data on behalf of Joya 999 are bound by data processing agreements that require them to handle your data securely, use it only for the specified purpose, and not share it further without our authorisation.

Joya 999 uses cookies and similar tracking technologies to make the platform work correctly, to remember your preferences, and to understand how players use the site. A cookie is a small text file stored on your device when you visit a website.

The types of cookies we use are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how you navigate the platform so we can identify and fix usability issues.
• Marketing cookies: Used only where you have consented, to track which promotions you have seen and to avoid showing you the same offer repeatedly.

Joya 999 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention periods we apply are:

• Account data: Retained for the duration of your account and for 5 years after account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Retained for 7 years from the date of the transaction to meet financial record-keeping obligations.
• Identity verification documents: Retained for 5 years after account closure or the completion of the last transaction, whichever is later.
• Support communications: Retained for 3 years from the date of the last communication.
• Analytics data: Aggregated and anonymised after 13 months. Anonymised data may be retained indefinitely as it can no longer be linked to an individual.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years after opt-out to demonstrate compliance.

When data is no longer required, it is securely deleted or anonymised. We do not retain personal data indefinitely or for speculative future purposes.

As a Joya 999 player, you have the following rights over your personal data. To exercise any of these rights, contact us using the details in Section 13. We will respond within 30 days of receiving your request.

• Right of access: Request a copy of all personal data we hold about you, along with information about how it is used.
• Right to rectification: Ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to restrict processing: Ask us to pause processing of your data while a dispute about its accuracy or our right to use it is resolved.
• Right to data portability: Receive a copy of the data you provided to us in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including profiling for responsible gaming purposes.
• Right to withdraw consent: Withdraw consent for any processing based on consent, such as marketing communications, at any time.

Joya 999 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data including payment details and identity documents.
• Role-based access controls ensuring that staff can only access data relevant to their specific job function.
• Regular security audits and penetration testing of the platform infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Incident response procedures to detect, contain, and report data breaches promptly.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, Joya 999 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

The Joya 999 platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step during the registration process, and accounts that cannot confirm the player's age will not be permitted to deposit or play for real money.

If we become aware that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you believe a minor has registered on the Joya 999 platform, please contact us immediately using the details in Section 13.

Joya 999 reviews this Privacy Policy regularly and updates it whenever our data practices change or when required by changes in applicable law. The "Last Updated" date at the top of this page reflects when the most recent changes were made.

When we make material changes to this Privacy Policy — changes that significantly affect how we use your data or your rights — we will notify you by email to your registered address and by displaying a prominent notice on the platform before the changes take effect. Continued use of the platform after the effective date of any update constitutes your acknowledgement of the revised policy.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how Joya 999 handles your personal data, please get in touch with our team:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available from the platform after login, 24 hours a day.
• FAQ: Visit our FAQ page for answers to common privacy questions.

We aim to respond to all privacy-related requests within 30 days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.