Privacy Policy

This Privacy Policy ("Policy") is issued by joyo9 ("we", "us", "our", or "the Platform") and applies to all personal data collected from individuals ("you", "the Player", or "the User") who access or use the joyo9 website at joyo9.ws and all associated services, including sports betting, live casino, slot games, account management, customer support, and payment processing.

This Policy is intended to provide you with a clear and comprehensive account of our data handling practices. It should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. By registering an account or continuing to use the joyo9 Platform, you acknowledge that you have read and understood this Policy.

joyo9 is committed to handling all personal data with integrity, transparency, and appropriate security measures. We do not sell your personal data. We do not use it for purposes beyond those described in this Policy without first obtaining your consent.

joyo9 collects only the personal data that is necessary for the operation of the Platform, the fulfilment of our contractual obligations to you, and compliance with applicable legal and regulatory requirements. The categories of personal data we collect are set out below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data (beyond identity photographs where required for KYC), or health information. If any such data is voluntarily disclosed to us — for example, in a support communication — it will be handled with the highest level of confidentiality and will not be processed beyond the immediate support context.

joyo9 collects personal data through the following channels:

• Direct registration: When you create an account, you provide your name, date of birth, mobile number, and email address directly through the registration form.
• KYC submissions: When you undergo identity verification, you upload copies of your National ID, proof of address, and/or payment method documentation.
• Payment transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, transaction metadata is captured by our payment processing systems.
• Platform interaction: Your betting activity, game history, login events, and use of responsible gaming tools are automatically recorded in our system logs.
• Support interactions: When you contact our support team via email or live chat, the content of that communication and your account details are recorded for case management purposes.
• Cookies and tracking technologies: Our website uses cookies, local storage, and similar technologies to collect technical and behavioural data passively as you browse. See Section 7 for full details.
• Third-party providers: KYC verification partners and fraud screening services may provide us with supplementary data about you as part of their checks. This data is used solely for the stated verification or security purpose.

joyo9 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to fulfil our contract with you — opening your account, processing deposits, settling bets, and paying out winnings.
• Legal obligation: We are required to collect and retain certain data in order to meet anti-money-laundering (AML) obligations, fraud prevention duties, and responsible gaming requirements, including mandatory age verification for all players under our strict 21+ policy.
• Legitimate interests: We process technical and behavioural data on the basis of our legitimate interests in maintaining the security of the Platform, preventing fraud, improving our products and services, and ensuring responsible gaming practices are upheld effectively.
• Consent: Where we send you marketing communications (promotional offers, bonus notifications, seasonal campaign alerts), we do so on the basis of your consent. You may withdraw this consent at any time by contacting support or updating your account preferences.

joyo9 uses personal data for the following specific purposes:

• Account management: Creating and maintaining your player account, authenticating your logins, and managing your account settings and preferences.
• Payment processing: Verifying and executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer in BDT.
• Age and identity verification: Confirming that you are at least 21 years of age and that the identity information you have provided is accurate and current, in accordance with our 21+ policy.
• Fraud and security monitoring: Detecting, investigating, and preventing suspicious account activity, unauthorised access, money laundering, and multi-account fraud.
• Responsible gaming: Monitoring your betting behaviour to identify signs of problem gambling and to enforce deposit limits, cooling-off periods, or self-exclusion requests that you have submitted.
• Customer support: Handling your queries, complaints, and disputes in a timely and effective manner, and maintaining records of support interactions for quality assurance.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about joyo9 events — including BPL season promotions, Eid offers, and Pohela Boishakh bonuses — where you have consented to receive such communications.
• Platform improvement: Analysing aggregated usage patterns to improve the joyo9 interface, game selection, payment flow, and customer experience.
• Legal compliance: Retaining records to satisfy our obligations under applicable anti-money-laundering, counter-terrorism financing, and data protection requirements.

joyo9 does not sell, rent, or lease your personal data to any third party for their own commercial use. We may share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processors (Visa/Mastercard networks) receive the transaction data strictly necessary to process your deposits and withdrawals. These partners are subject to their own data protection obligations.
• KYC and identity verification providers: Third-party KYC verification services receive the identity documents you submit during account verification. These providers operate under binding data processing agreements and may not use your data for any purpose other than verification.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Habanero, Spribe, and Ezugi may receive your Player ID and session data to deliver game content. They do not receive your financial or full identity data.
• Fraud prevention and security services: We may share technical data (IP addresses, device fingerprints) with specialised fraud detection partners to protect the integrity of the Platform.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required by a valid legal order, warrant, or where we have a good-faith belief that disclosure is necessary to comply with our legal obligations or to protect the safety of any person.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the joyo9 business, your personal data may be transferred to the acquiring entity. You will be notified by email prior to any such transfer, and this Policy will continue to govern your data unless a revised policy is provided.

joyo9 uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and analyse usage patterns. The types of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, remember your language and currency preferences, and enable core features such as the bet slip and cashier. These cookies cannot be disabled without breaking core functionality.
• Security cookies: These help us detect and prevent fraudulent login attempts, identify suspicious session activity, and protect your account from unauthorised access. They are set automatically and are not optional.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the Platform — which pages receive the most visits, which games are most popular, where players encounter friction. This data is aggregated and does not identify you personally.
• Preference cookies: These remember your in-platform settings, such as your chosen odds format, notification preferences, and responsible gaming limits you have set.

Most browsers allow you to refuse or delete cookies through their settings. Please note that disabling strictly necessary or security cookies will affect your ability to use the joyo9 Platform normally. Disabling analytics or preference cookies will not prevent you from using the Platform but may result in a less personalised experience.

joyo9 does not use cookies to track your activity on third-party websites. Our tracking is limited strictly to activity within the joyo9.ws domain.

joyo9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and joyo9 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon visible in your browser confirms this encryption is active.
• Password hashing: Your account password is stored as a one-way cryptographic hash using a modern hashing algorithm. joyo9 staff cannot read your password in plain text under any circumstances.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who handle your data are bound by confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: Our infrastructure is protected by real-time intrusion detection systems and continuous security monitoring. Anomalous access patterns trigger automated alerts and investigative procedures.
• Secure data centres: Player data is stored on servers in secure, access-controlled data facilities with appropriate physical security, power redundancy, and disaster recovery capabilities.
• Payment data security: Card payment data handled through our payment gateway partners is processed in accordance with applicable payment card industry security standards. joyo9 does not store full card numbers on its own servers.

While joyo9 takes every reasonable precaution to secure your data, no system connected to the internet is completely immune to risk. In the event of a security breach that is likely to affect your rights or interests, we will notify you promptly through your registered contact details and take all appropriate remedial action.

joyo9 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account relationship with joyo9, plus a minimum of five (5) years following account closure, to meet our anti-money-laundering and legal compliance obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Transaction records: All deposit and withdrawal transaction records are retained for a minimum of five (5) years to satisfy financial record-keeping obligations.
• Support communications: Retained for three (3) years from the date of the interaction, except where the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved plus one (1) year thereafter.
• Marketing consent records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance with consent obligations.
• Technical logs and cookies: Session cookies are deleted when you close your browser. Persistent cookies expire on the schedule noted in their individual settings. Server-side technical logs are retained for up to 12 months for security analysis purposes, after which they are anonymised or deleted.

When personal data is no longer required, joyo9 will either delete it securely or anonymise it such that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for aggregate statistical and analytical purposes.

As a joyo9 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: You may request a copy of all personal data that joyo9 holds about you. We will respond to verified access requests within a reasonable timeframe.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For core account details such as your legal name or date of birth, we may require supporting documentation before making changes.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot erase data that we are legally required to retain.
• Right to restriction: You may request that we temporarily restrict the processing of your data while a rectification or objection request is being assessed.
• Right to data portability: Where processing is based on your consent or a contract with you, you may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw marketing consent: You may withdraw your consent to receive marketing communications at any time. This does not affect processing carried out before withdrawal.

joyo9 operates a strict 21+ age policy. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. All players are required to verify their age during the registration and KYC process.

If joyo9 becomes aware that personal data has been collected from a person under the age of 21 — whether through a registration, a support interaction, or any other channel — we will immediately suspend the relevant account, delete or securely isolate the data collected, and conduct a review of the circumstances under which the data was submitted.

If you are a parent or guardian and you believe that a minor in your care has registered on the joyo9 Platform, please contact us immediately at [email protected]. We take underage access extremely seriously and will act on all such reports without delay.

The joyo9 Platform may contain references to or integrations with third-party services, including payment gateways (bKash, Nagad, Rocket) and game studio interfaces (Evolution Gaming, Pragmatic Play, and others). When you interact with these third-party services, you are subject to their own privacy policies, which may differ from this Policy.

joyo9 is not responsible for the privacy practices or content of any third-party service. We recommend that you review the privacy policies of any third-party service you use in connection with the joyo9 Platform. Our inclusion of a third-party integration does not constitute an endorsement of that party's privacy practices.

joyo9 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or data handling practices. When material changes are made, we will notify registered players by email to the address on file and will update the effective date at the top of this document.

We encourage you to review this Policy periodically. Your continued use of the joyo9 Platform following the publication of a revised Policy constitutes your acceptance of the changes. If you do not agree with any update, you should cease using the Platform and contact support to arrange account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way joyo9 handles your personal data, our dedicated support team is available 24 hours a day, 7 days a week — including during Eid, Pohela Boishakh, Victory Day, and all public holidays in Bangladesh.

Data privacy contact: [email protected]

Please include your registered username, the nature of your request (e.g., data access, erasure, rectification), and any relevant details that will help us locate your records. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve them within 30 days of receipt.

All correspondence related to data rights and privacy matters will be handled in strict confidence and only by staff who have received appropriate data protection training.