joy9 Privacy Policy — How We Protect Your Personal Data

1 Who We Are

joy9 ("we", "us", "our") operates the online betting and casino platform accessible at https://joy9.bar. joy9 functions as an internationally licensed offshore betting platform and is the data controller responsible for the personal data of all registered players and website visitors in Bangladesh and other permitted markets.

This Privacy Policy applies to all personal data collected through the joy9 website, mobile-optimised platform, customer support channels, and any associated promotional communications. By registering an account or continuing to use the joy9 platform, you acknowledge that you have read and understood this Privacy Policy in full.

For all privacy-related inquiries, corrections, or requests, please contact our dedicated data protection team at: [email protected]

2 Data We Collect

The following table summarises the categories of personal data joy9 collects, the source of each category, and the primary purpose for which it is collected.

3 How We Use Your Data

joy9 uses the personal data it collects for the following clearly defined purposes:

• Account registration and management: Creating, maintaining, and securing your joy9 player account, including processing login requests and account recovery.
• Identity and age verification: Confirming that all players are aged 21 or above and that registration information is accurate and authentic, in compliance with our responsible gaming obligations.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or participating Bangladeshi banks) and maintaining an accurate record of all financial transactions on your account.
• Fraud prevention and platform security: Detecting and investigating suspicious activity, multiple account registrations, bonus abuse, money laundering, and other prohibited conduct using automated monitoring tools and manual review.
• Responsible gaming compliance: Monitoring betting patterns and account activity to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and fulfilling obligations under our Responsible Gaming Policy.
• Customer support: Responding to inquiries, resolving disputes, investigating complaints, and improving the quality of our support services based on feedback and communication records.
• Legal and regulatory compliance: Retaining records as required by applicable laws and our platform's licensing obligations, and responding to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with joy9 and to improve game selection, platform performance, and user experience.
• Marketing communications: Sending you promotions, bonus offers, and platform updates by email or SMS where you have opted in to receive such communications. You may opt out at any time by contacting support.

4 Legal Basis for Processing

joy9 processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:

• Contractual necessity: Processing required to perform our obligations under the player account agreement — including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, identity verification requirements, and the retention of financial transaction records.
• Legitimate interests: Processing carried out to pursue joy9's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, informed, and specific consent — principally in the context of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing and Disclosure

joy9 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

We share relevant financial data with bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks solely to process your deposit and withdrawal transactions. These providers process your data under their own privacy policies and are subject to applicable financial services regulations.

Where required for KYC (Know Your Customer) compliance, we may share identity documents with authorised third-party verification services. These partners are contractually prohibited from using your data for any purpose other than the specific verification service requested.

Game studios and live casino operators such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical and session data to deliver their games within the joy9 platform. No personally identifiable financial data is shared with game providers.

Cloud hosting, data storage, cybersecurity, and platform infrastructure providers may process technical and operational data on joy9's behalf. All such providers are bound by strict data processing agreements limiting their use of the data to the provision of the contracted service.

joy9 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or in connection with the prevention, detection, or prosecution of fraud, money laundering, or other criminal activity. We will notify you of any such disclosure unless legally prohibited from doing so.

6 Cookies and Tracking Technologies

joy9 uses cookies and similar tracking technologies to operate the platform, improve performance, and where you have consented, to deliver relevant content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for platform functionality — login session management, security tokens, and navigation preferences. These cannot be disabled without impacting platform functionality.
• Performance Cookies: Used to collect anonymised data about how visitors navigate the joy9 platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve platform performance.
• Functional Cookies: Used to remember your platform preferences such as language settings, last visited game categories, and display configurations, to provide a more personalised experience.
• Analytics Cookies: Used to generate aggregated, anonymised reports about platform usage. Individual player data is not shared with analytics service providers in a form that identifies you personally.

You can manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect your experience on the joy9 platform. Strictly necessary cookies cannot be disabled as they are required for core platform operation.

7 Data Retention

joy9 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data that can no longer be linked to an individual may be retained for statistical and research purposes without a time limit.

8 Your Rights

As a joy9 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your account details and a clear description of your request. We will respond within a reasonable timeframe.

• Right of Access: You may request a copy of all personal data joy9 holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. Some corrections may require supporting documentation for verification purposes.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Note that certain data must be retained to fulfil legal obligations and cannot be deleted on request.
• Right to Restriction: You may request that joy9 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes, where you believe your individual circumstances override joy9's legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: Where technically feasible and applicable, you may request that joy9 provide your personal data in a structured, machine-readable format for transfer to another service provider.

9 Data Security

joy9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end SSL/TLS encryption for all data transmitted between your device and the joy9 platform.
• Encryption at rest for all sensitive personal data stored within joy9's systems.
• Role-based access controls ensuring that only authorised joy9 personnel with a documented business need can access personal data.
• Regular independent security audits and penetration testing of the joy9 platform infrastructure.
• Automated intrusion detection systems monitoring for unusual access patterns or potential data breach activity.
• Secure, audited processes for the deletion and destruction of data that has reached the end of its retention period.

While joy9 takes every reasonable precaution to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, joy9 will notify affected players without undue delay and will take immediate steps to contain the breach and prevent recurrence.

10 Children and Minors

joy9 employs age verification checks at the point of registration and during the KYC process to prevent under-age individuals from accessing the platform. If joy9 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data collected, and return any deposits in accordance with our responsible gaming obligations.

If you believe that an under-age individual has registered on the joy9 platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11 Changes to This Policy

joy9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material, joy9 will notify registered players via the email address associated with their account or via a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how joy9 protects your personal data. Your continued use of the joy9 platform following any update constitutes your acknowledgment of the revised Privacy Policy.

12 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data joy9 holds about you, please contact our data protection team using the details below. We aim to acknowledge all privacy-related requests within 3 business days and to provide a full response within 15 business days.

joy9 Data Protection Team
Support email: [email protected]
Platform: https://joy9.bar
Business hours: Monday to Friday, 09:00 – 18:00 Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to a privacy request, you have the right to escalate the matter through appropriate legal channels in your jurisdiction.