jya9 Privacy
Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by jya9 ("jya9", "we", "us", "our") in connection with the operation of the online casino and sports betting platform located at https://jya9.cc (the "Platform"). It covers data collected through our website, mobile interfaces, support channels, and any related communications.

jya9 is the data controller for all personal data processed under this Policy. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of your agreement with jya9.

This Policy is written in English and is directed at players in Bangladesh. By accessing or using the jya9 Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you are not satisfied with how we handle your data, you should discontinue use of the Platform and contact us to arrange account closure.

2 Data We Collect

jya9 collects personal data in two ways: information you provide directly to us, and information collected automatically as you use the Platform. The categories of data we may collect include:

2.1 Data You Provide

• Identity Data: Full name, date of birth, gender, nationality, and copies of identity documents (e.g., National ID card, passport) submitted during the KYC verification process.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postal code within Bangladesh).
• Account Data: Username, encrypted password, security questions, and account preferences.
• Financial Data: bKash, Nagad, Rocket, or Upay mobile wallet details (account numbers only — not PINs or passwords), bank account details where applicable, deposit and withdrawal history, and transaction records.
• Communications Data: Records of correspondence with jya9 support via live chat, email, or WhatsApp, including content of messages and timestamps.

2.2 Data Collected Automatically

• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and time zone.
• Usage Data: Pages visited, games played, betting activity, session duration, click patterns, search queries entered on the Platform, and features accessed.
• Location Data: General geographic location inferred from IP address (country and city level only). jya9 does not collect precise GPS coordinates.
• Cookie and Tracking Data: Information gathered via cookies and similar technologies as described in Section 5 of this Policy.

2.3 Data From Third Parties

jya9 may receive data about you from third-party identity verification providers, fraud prevention services, and payment processors where necessary to verify your identity, comply with anti-money laundering obligations, or process a transaction. Such data is treated with the same level of care as data you provide directly.

3 How We Use Your Data

jya9 uses personal data collected from players only for legitimate, clearly defined purposes. The table below sets out the primary purposes for which your data is used and the category of data involved.

jya9 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or notifying you in advance.

4 Legal Basis for Processing

jya9 processes your personal data on one or more of the following legal grounds, depending on the nature and context of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you have accepted, including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and fraud prevention obligations.
• Legitimate Interests: Processing carried out for jya9's legitimate business interests, such as platform security, fraud detection, responsible gaming monitoring, and service improvement — where such interests do not override your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device when you visit the jya9 Platform. They allow the Platform to recognise your device, remember your preferences, maintain your session, and gather analytics data. jya9 also uses similar tracking technologies including web beacons and local storage objects.

5.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These enable session management, login authentication, and security features. They cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to understand how players interact with the Platform, which pages are most visited, and where players encounter difficulties. This data is aggregated and anonymous.
• Preference Cookies: Store your selected language, game settings, and display preferences so they are remembered on future visits.
• Marketing Cookies: Used with your consent to deliver relevant promotional content and track the effectiveness of marketing campaigns.

5.3 Managing Cookies

You may manage non-essential cookies through your browser settings. Disabling certain cookies may limit some features of the jya9 Platform. Essential cookies cannot be disabled as they are required for basic Platform operations.

6 Third-Party Data Sharing

jya9 does not sell your personal data. We may share your data with carefully selected third parties only in the circumstances described below:

• Game Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical data (such as session tokens) necessary to deliver game sessions. They do not receive your financial or identity data.
• Payment Processors: bKash, Nagad, Rocket, Upay, and any other payment partners receive the minimum financial data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and security standards.
• Identity Verification Providers: Third-party KYC and AML service providers may receive your identity documents and personal details to carry out verification checks as required by law.
• Fraud Prevention Services: jya9 uses specialist fraud detection tools that may process technical and transaction data to identify suspicious activity and protect the integrity of the Platform.
• Legal and Regulatory Authorities: jya9 may be required to disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by applicable law or a valid legal order.

All third-party service providers engaged by jya9 are contractually required to handle your data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared.

7 Data Retention

jya9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention practices are as follows:

• Active Account Data: Retained for the duration of your account's existence plus a minimum of 5 years following account closure, to comply with AML and financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of the last transaction on your account, as required by applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for 2 years from the date of the communication, unless required for longer periods in connection with an ongoing dispute or legal matter.
• Analytics and Usage Data: Aggregated and anonymised data may be retained indefinitely; individually identifiable usage data is deleted or anonymised after 24 months.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Once a retention period expires, jya9 will securely delete or irreversibly anonymise the relevant data in accordance with our internal data lifecycle procedures.

8 Your Rights

As a user of the jya9 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request".

9 Security Measures

jya9 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and jya9 servers.
• Encryption at rest for sensitive data fields including financial records and identity documents.
• Role-based access controls ensuring that jya9 staff can only access data necessary for their specific role.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for administrative access to jya9 systems.
• Automated monitoring systems that detect and alert on suspicious access patterns or data anomalies.
• Documented incident response procedures that ensure prompt action in the event of a data breach.

Despite these measures, no data transmission or storage system is completely immune to security risks. jya9 cannot guarantee absolute security but is committed to maintaining industry-standard protections and to notifying affected players without undue delay in the event of a material data breach.

10 Children & Minors

The jya9 Platform is strictly intended for adults aged 21 and above. jya9 does not knowingly collect personal data from individuals under the age of 21. If jya9 discovers or has reason to believe that a registered user is under the age of 21, the account will be suspended immediately, all data collected will be reviewed, and steps will be taken to delete the data of the minor player in accordance with jya9's responsible gaming and data protection obligations.

If you are a parent or guardian and believe that your child has registered with jya9, please contact us immediately at [email protected] so that we can investigate and take appropriate action as quickly as possible.

11 International Data Transfers

jya9 primarily processes player data within servers that serve the Bangladesh region. However, some of our third-party service providers — including game studios, fraud prevention services, and cloud infrastructure partners — may process data in other countries. Where such transfers occur, jya9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. This may include contractual data protection clauses, standard data protection model clauses, or equivalent transfer mechanisms.

By using the jya9 Platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh in the limited circumstances described above, always subject to the protections set out in this Policy.

12 Changes to This Policy

jya9 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered players by email and/or by posting a prominent notice on the Platform at least 7 days before the changes take effect.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how jya9 handles your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you must discontinue use of the Platform and contact support to arrange account closure.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jya9's data practices, please contact our dedicated privacy support team through the following channels. Note that email addresses and phone numbers are provided as plain text only and are not clickable links.

• Email: [email protected] — subject line: "Privacy Request"
• WhatsApp: +880 1700-000000
• Live Chat: Available 24/7 directly on the jya9 Platform
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. Where a request is complex or involves multiple data subjects, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.