joya90 Privacy Policy

This Privacy Policy ("Policy") describes how joya90 ("joya90", "we", "us", or "our") collects, processes, stores, and protects personal data in connection with the operation of the joya90 platform at https://joya90.app, including all associated services such as sports betting, online casino games, crash games, and customer support.

By creating an account on joya90 or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the joya90 platform.

joya90 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We collect only the data we genuinely need to operate the platform safely, process payments, prevent fraud, and provide you with the best possible experience as a Bangladeshi player.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, which together form the full set of agreements governing your use of joya90.

joya90 collects personal data in several ways: directly from you when you register, deposit, or contact support; automatically through your use of the platform; and, in limited circumstances, from third-party identity verification and fraud-prevention providers.

The categories of personal data we may collect include:

joya90 processes your personal data only for legitimate, specified purposes. We do not sell your data to third parties for marketing purposes. The primary purposes for which we use your data are:

• Account management: To create, maintain, and secure your joya90 account, including verifying your identity and age at registration and during ongoing KYC reviews.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate financial records of all transactions.
• Platform delivery: To provide you with access to sports betting, casino games, crash games, and all other joya90 features in a technically reliable manner.
• Customer support: To respond to your enquiries, process complaints, and resolve account disputes efficiently and fairly.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, collusion, bonus abuse, and other prohibited activity that could harm you or other users.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) requirements, record-keeping obligations, and any lawful requests from competent authorities.
• Responsible gaming: To monitor account activity for signs of problem gambling and to administer self-exclusion, deposit limits, and cooling-off periods when requested or where our responsible gaming obligations require intervention.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve game selection, site performance, and the overall user experience on joya90.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games or features — but only where you have opted in to receive such communications and subject to your right to opt out at any time.

joya90 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, remember your session state, detect fraud, and understand how users interact with the site. Cookies are small text files stored on your device and do not contain executable code.

The types of cookies used on joya90 include:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in between pages. These cookies cannot be disabled without breaking the platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate joya90. This data helps us identify performance issues and improve the platform. No personally identifiable information is included in analytics reports.
• Fraud-prevention cookies: Used to assign a device fingerprint that helps our systems identify unusual activity patterns associated with bonus abuse or account takeover attempts.
• Preference cookies: Store non-sensitive user preferences such as your last-visited game category, to improve the experience on subsequent visits.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your joya90 account or using core platform features.

joya90 may share your personal data with the following categories of third parties, subject to strict data processing agreements that require them to protect your data to the same standard as joya90:

• Payment processors: Mobile wallet providers including bKash, Nagad, Rocket, and Upay receive only the transaction data necessary to process your deposits and withdrawals. These providers operate under their own published privacy policies.
• Identity verification providers: Third-party KYC and AML service providers may process your identity documents for age and identity verification. These providers are contractually bound to use your data only for verification purposes.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data necessary to deliver their games. These providers do not receive your full name, mobile number, or payment details.
• IT and platform service providers: Cloud hosting, server infrastructure, and cybersecurity providers who support the technical operation of joya90 may process data on our behalf under strict contractual controls.
• Legal and regulatory authorities: We may be required to disclose personal data to competent authorities in response to a lawful request, court order, or to comply with applicable anti-money laundering regulations. We will notify you of any such disclosure where legally permitted to do so.

joya90 does not transfer personal data to countries outside the jurisdiction of your data being processed without implementing appropriate safeguards. Where international data transfers occur, we ensure equivalent levels of data protection are maintained.

joya90 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our general retention periods are as follows:

• Active account data: Retained for the duration of your account's activity on joya90.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the transaction to satisfy financial record-keeping and AML compliance requirements.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of your last transaction, whichever is later.
• Support correspondence: Retained for three (3) years from the date of the relevant interaction.
• Marketing preferences and consent records: Retained until you withdraw consent or request deletion, after which we will delete or anonymise the data within thirty (30) days.

When your data is no longer required, joya90 will securely delete or irreversibly anonymise it so that it can no longer be linked back to you as an individual.

As a joya90 user, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data joya90 holds about you at any time.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 7.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while you contest the accuracy of data we hold about you.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may opt out of marketing emails by following the unsubscribe link in any promotional email we send you.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

joya90 takes its age-restriction obligations seriously. The platform is designed exclusively for adults aged 21 and above, and we employ age-verification procedures during registration to enforce this requirement. If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account and delete the associated data.

If you are a parent or guardian and believe that a minor has registered an account on joya90, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

joya90 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive stored data including identity documents and financial records.
• Role-based access controls ensuring only authorised personnel can access personal account data.
• Continuous monitoring of our systems for unusual or potentially malicious activity patterns.
• Regular security audits and vulnerability assessments conducted by our technical team.
• Two-factor authentication options available to all registered users.

While joya90 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — use a strong, unique password, do not share your login credentials, and contact us immediately if you notice any suspicious activity on your account.

joya90 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notice.

We encourage you to review this Policy periodically to stay informed about how joya90 is protecting your personal data. Your continued use of the platform following the publication of any amendment constitutes your acceptance of the revised Policy.

This Policy is written in English. In the event of any inconsistency between the English version and any translated version, the English version shall prevail.

Email: [email protected] — please include "Privacy Policy Enquiry" or "Data Rights Request" in your subject line, along with your registered username and a clear description of your query. This address is for written correspondence only; it is not a clickable link.