joyo9 Privacy Policy

joyo9 operates joyo9.asia as an online casino and sports betting platform serving players in Bangladesh. joyo9 is committed to protecting the privacy of every player who registers an account, visits the platform, or interacts with joyo9 services. This Privacy Policy sets out in clear terms what personal information joyo9 collects from Bangladesh players, the lawful bases on which joyo9 processes that information, the purposes for which it is used, the circumstances under which it may be disclosed to third parties, the security measures joyo9 applies to protect it, and the rights available to players regarding their personal data. This policy is written in English, which is the operative language of this agreement.

This Privacy Policy applies to all personal data processed by joyo9 in connection with: player account registration and verification; deposits and withdrawals processed via bKash, Nagad, Rocket, Upay, Visa, Mastercard and bank transfer; gameplay activity across all joyo9 casino games, live dealer tables, crash games and sports betting markets; bonus and promotions participation; customer support interactions; and any other service offered on joyo9.asia. This policy should be read together with joyo9's Terms & Conditions and Responsible Gaming Policy.

joyo9 does not collect sensitive personal data beyond what is strictly necessary for player identity verification and AML compliance. joyo9 does not request political opinions, religious beliefs, genetic data, or biometric data from players. Where joyo9 processes data for KYC purposes (such as a photograph of a government-issued ID), that data is processed solely for identity verification and stored securely with access restricted to authorised personnel only.

joyo9 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data-protection safeguards:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard and partner banks) — solely for the purpose of processing your deposit and withdrawal transactions. These providers process your payment data under their own privacy policies and security standards.
• Game technology providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt and Microgaming) — limited technical data necessary for game session management and RNG certification audits. Game providers do not receive your financial or identity data beyond what is required for game session integrity.
• Identity verification and KYC service providers — engaged to assist joyo9 in verifying player identities and documents as part of the account registration and ongoing due diligence process. These providers act as data processors under joyo9's instruction and are contractually prohibited from using your data for any other purpose.
• Competent authorities and law enforcement — where joyo9 is required by applicable law or a valid legal order to disclose player data to a government body, regulator, court or law enforcement agency. joyo9 will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify the relevant player of such disclosure.

joyo9 requires all third-party service providers who process personal data on joyo9's behalf to enter into written data-processing agreements that impose equivalent data protection obligations to those applied by joyo9. joyo9 does not permit its third-party processors to use player personal data for their own purposes beyond the specific service they provide to joyo9.

All data in transit between your device and joyo9.asia is encrypted using TLS (Transport Layer Security). All personal data stored on joyo9 servers is encrypted at rest using AES-256 encryption. Access to player personal data on joyo9's internal systems is restricted on a strict need-to-know basis: only authorised personnel whose job role requires access to specific data categories are granted access, and all access events are logged and audited. joyo9 conducts regular internal security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to player rights and freedoms, joyo9 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. joyo9 maintains a documented data breach response procedure and designated personnel responsible for coordinating the response to security incidents. Players who become aware of any suspected unauthorised access to their joyo9 account should contact joyo9 support immediately at [email protected].

joyo9 will publish the revised Privacy Policy at joyo9.asia/privacy-policy with an updated effective date. Where a revision materially affects the way joyo9 processes player personal data — for example, where a new category of data is collected, a new processing purpose is introduced, or a new category of third-party recipient is added — joyo9 will use reasonable efforts to notify registered players of the change via the contact information held on their account prior to the change taking effect. Players who do not agree with a material revision to this Privacy Policy should contact joyo9 support to close their account before the revised policy takes effect. Continued use of joyo9.asia after the effective date of a revision constitutes the player's acceptance of the revised Privacy Policy.