Joya Baji Privacy Policy

1 Introduction

This Privacy Policy explains how joya baji ("we", "us", "the Platform") collects, uses, stores, and protects the personal data of players who register and use the joya baji website at joya-baji.org and any associated mobile applications.

Joya baji is committed to protecting the privacy of every player on our platform. We understand that when you share your personal information with us, you're trusting us to handle it responsibly. That trust is something we take seriously, and this policy is our commitment to being transparent about exactly what we do with your data.

By registering an account on joya baji, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with this policy, please do not register or use the joya baji platform.

2 Data We Collect

Joya baji collects personal data in several ways — directly from you when you register or use the platform, automatically through your use of the site, and from third parties where necessary for verification or payment processing.

Data you provide directly to joya baji:

• Full name, date of birth, and gender
• Email address and phone number
• Residential address
• Username and password (stored in encrypted form)
• Payment method details (bKash number, Nagad number, bank account details)
• Identity documents submitted for KYC verification (national ID, passport)
• Communications you send to joya baji support, including live chat transcripts and emails

Data collected automatically when you use joya baji:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Betting and gaming activity, including stakes, game selections, and session duration
• Login timestamps and frequency of access
• Cookie and tracking data (see Section 6 for full details)

Data received from third parties:

• Identity verification results from licensed KYC providers
• Payment confirmation data from bKash, Nagad, Rocket, and banking partners
• Fraud screening results from our security partners

3 How We Use Your Data

Joya baji uses your personal data only for legitimate purposes directly related to operating the platform and providing our services to you. We do not use your data for purposes that are incompatible with those stated here.

• Account management: Creating and maintaining your joya baji account, verifying your identity, and managing your login credentials.
• Processing transactions: Handling deposits, withdrawals, and bonus credits to and from your joya baji account.
• Customer support: Responding to your queries, resolving disputes, and providing assistance through live chat and email.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to joya baji accounts.
• Legal compliance: Meeting our obligations under applicable laws, including anti-money laundering regulations and responsible gaming requirements.
• Platform improvement: Analysing usage patterns to improve the joya baji website, app, and overall player experience.
• Responsible gaming: Monitoring player activity to identify signs of problem gambling and applying appropriate safeguards where necessary.
• Communications: Sending you important account notifications, security alerts, and — where you have opted in — promotional offers from joya baji.

4 Legal Basis for Processing

Joya baji processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract performance: Processing is necessary to fulfil our obligations to you under the joya baji Terms and Conditions — for example, processing your deposits and withdrawals.
• Legal obligation: Processing is required to comply with applicable laws, such as anti-money laundering regulations that require us to verify your identity.
• Legitimate interests: Processing is necessary for joya baji's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, to send you marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing

Joya baji does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually required to protect it.

• Payment processors: bKash, Nagad, Rocket, and banking partners receive the minimum data necessary to process your transactions.
• Identity verification providers: Licensed KYC providers receive your identity documents to verify your age and identity as required by our compliance obligations.
• Fraud prevention services: Our security partners may receive technical data such as IP addresses and device fingerprints to help detect and prevent fraudulent activity on joya baji.
• Legal authorities: Joya baji will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of joya baji's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

6 Cookies and Tracking

Joya baji uses cookies and similar tracking technologies to make the platform work properly, to remember your preferences, and to understand how players use our site so we can keep improving it.

Types of cookies used by joya baji:

• Essential cookies: Required for the joya baji platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of these.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your joya baji experience.
• Analytics cookies: Help joya baji understand how players navigate the site — which pages are most visited, where players drop off, and how long sessions last. This data is aggregated and anonymised.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious betting behaviour.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of the joya baji platform and may prevent you from logging in or completing transactions.

7 Data Retention

Joya baji retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

• Active accounts: Personal data is retained for the duration of your joya baji account and for a period of 5 years after account closure, as required by anti-money laundering regulations.
• Transaction records: Financial transaction data is retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Identity verification documents are retained for 5 years after account closure or the last transaction, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction.
• Marketing data: If you have opted in to marketing communications, your contact details are retained until you opt out or request deletion.

When data is no longer required, joya baji securely deletes or anonymises it so that it can no longer be linked to you as an individual.

8 Data Security

Joya baji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration.

• Encryption: All data transmitted between your device and joya baji is encrypted using TLS (Transport Layer Security). Sensitive data stored on our servers is encrypted at rest.
• Access controls: Access to personal data within joya baji is restricted to staff who need it to perform their job functions. All access is logged and audited.
• Two-factor authentication: Joya baji supports two-factor authentication for player accounts to add an extra layer of protection against unauthorised access.
• Regular security audits: Our platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities.
• Incident response: Joya baji has a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and relevant authorities as required by law.

9 Your Privacy Rights

As a joya baji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request".

Joya baji will respond to all privacy requests within 30 days. In complex cases, we may extend this by a further 60 days, in which case we will notify you of the extension and the reason for it.

Please note that some rights are subject to limitations — for example, we cannot delete data that we are legally required to retain under anti-money laundering regulations.

10 Children's Privacy

Joya baji is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register on joya baji or provide any personal information to us.

If joya baji becomes aware that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you believe a minor has registered on joya baji, please contact us at [email protected] so we can investigate and take appropriate action.

11 International Data Transfers

Joya baji primarily processes and stores player data within secure data centres. In some cases, data may be transferred to or accessed from locations outside Bangladesh — for example, when using cloud-based infrastructure or third-party service providers based in other countries.

Where such transfers occur, joya baji ensures that appropriate safeguards are in place to protect your data to the same standard as described in this policy. This includes contractual clauses with third-party providers that require them to maintain equivalent data protection standards.

By using joya baji, you consent to the transfer of your personal data as described in this section, subject to the protections outlined above.

12 Updates to This Policy

Joya baji may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify registered players via email or an in-platform notification before the changes take effect.

The date at the top of this page always reflects when the policy was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how joya baji protects your data.

Continued use of the joya baji platform after any update to this policy constitutes your acceptance of the revised terms.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how joya baji handles your personal information, please get in touch:

• Email: [email protected] (subject: "Privacy Request")
• Live Chat: Available 24/7 from your joya baji account dashboard
• FAQ: Visit our FAQ page for answers to common privacy questions

We aim to respond to all privacy-related enquiries within 5 business days. For formal data subject requests, our response time is up to 30 days as described in Section 9.