joya66 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all users of the joya66 platform accessible at joya66.app, including the website, any associated mobile-optimised interfaces, and any communications sent by joya66 to registered players. joya66 ("we", "us", "our") is committed to protecting the privacy and personal data of every player ("you", "your") who uses our platform. This Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to it. By registering an account on joya66, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions, which govern your use of the joya66 platform more broadly. Where this Policy conflicts with the Terms & Conditions in relation to a privacy matter, this Policy shall prevail.

2. Data Controller

joya66 acts as the data controller for all personal data collected through joya66.app. As data controller, joya66 determines the purposes for which your personal data is processed and the means by which it is processed. For any privacy-related enquiries, including requests to access, correct, or delete your data, please contact us at: [email protected] (plain text — not a clickable link).

3. Data We Collect and How We Collect It

3.1 Registration Data

When you register an account on joya66, we collect your full legal name, date of birth, mobile phone number, and residential address. This data is collected directly from you via the registration form. Providing accurate registration data is a condition of using joya66 — deliberately providing false information constitutes a breach of our Terms & Conditions.

3.2 Identity Verification Data

Before processing withdrawals or where required by our fraud prevention procedures, joya66 may request identity verification documents. These may include a copy of your Bangladesh National Identity Card (NID), birth certificate, or a screenshot of your bKash or Nagad wallet registration screen showing your name and mobile number. This data is collected to verify that you are who you claim to be and to comply with our anti-money laundering obligations.

3.3 Payment Data

When you make a deposit or request a withdrawal, joya66 collects the mobile wallet number associated with your bKash, Nagad, Rocket, or Upay account. joya66 does not store full payment credentials — transactions are processed directly through the respective payment provider's secure API. joya66 retains a record of the transaction amount, date, time, and wallet number for account management and dispute resolution purposes.

3.4 Technical and Device Data

When you access joya66, our servers automatically log certain technical data including your IP address, device type, operating system, browser type, session duration, and pages visited. This data is collected automatically via server logs and cookies. We use this data for security monitoring, duplicate account detection, and platform performance optimisation. We do not use this data to build advertising profiles.

3.5 Gameplay and Transaction Records

joya66 maintains comprehensive records of all gameplay activity associated with your account, including game sessions, bet amounts, game outcomes, bonus activations, and transaction history. These records are necessary for account management, the resolution of disputes, the calculation of wagering requirement progress, and our responsible gaming monitoring programme.

3.6 Communications Data

When you contact joya66 support via email at [email protected], we retain a record of your messages and our responses. This data is used to resolve your query and to maintain a support history for your account. We do not use support correspondence for marketing purposes without your explicit consent.

4. Legal Basis for Processing

joya66 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing your registration data, payment data, and gameplay records is necessary to provide the services you have contracted with joya66 to receive.
• Legal obligation: Age verification and identity verification processing is required to comply with our legal obligations, including anti-money laundering requirements.
• Legitimate interests: Processing technical and device data for fraud prevention, security monitoring, and platform performance is in joya66's legitimate interests as a platform operator, provided these interests are not overridden by your privacy rights.
• Consent: Where we send you promotional communications (such as bonus offers or tournament announcements), we do so on the basis of your consent, which you may withdraw at any time by contacting [email protected].

5. How We Use Your Data

joya66 uses your personal data for the following purposes:

• Creating, managing, and securing your joya66 account.
• Verifying your identity and age (21+ requirement) during registration and before processing withdrawals.
• Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay.
• Calculating and tracking wagering requirement progress for bonuses and promotions.
• Monitoring gameplay activity as part of our responsible gaming programme and detecting problem gambling indicators.
• Detecting and preventing fraud, money laundering, duplicate accounts, and unauthorised account access.
• Responding to support queries, complaints, and dispute resolution requests.
• Sending transactional communications (account confirmations, withdrawal notifications, security alerts) to your registered mobile number or email address.
• Sending promotional communications (bonus offers, tournament announcements) where you have consented to receive them.
• Improving the performance, security, and user experience of the joya66 platform.

6. Sharing of Personal Data

6.1 Payment Providers

In order to process your deposits and withdrawals, joya66 shares the minimum necessary payment data with our payment processing partners, including bKash, Nagad, Rocket, and Upay. These providers process your transaction data in accordance with their own privacy policies and security standards. joya66 does not share more data than is strictly necessary to complete each transaction.

6.2 Game Providers

joya66's casino games are provided by licensed third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier when you launch a game. They do not receive your full name, mobile number, or payment details.

6.3 Fraud Prevention and Security Services

joya66 may share technical data (such as IP addresses and device fingerprints) with third-party fraud detection and security services for the purpose of detecting and preventing fraudulent activity. These service providers are bound by strict data processing agreements and may only use the data for the purpose for which it was shared.

6.4 Legal and Regulatory Disclosures

joya66 may disclose your personal data to law enforcement authorities, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or legal process. In such cases, joya66 will disclose only the minimum data required by the relevant legal obligation.

6.5 No Sale of Data

joya66 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. This commitment is unconditional and applies regardless of any future changes to our business structure.

7. Data Retention

joya66 retains your personal data for as long as your account is active and for a period after account closure as required by our legal and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of account activity plus 5 years after account closure.
• Transaction and payment records: Retained for 7 years from the date of each transaction, consistent with financial record-keeping obligations.
• Gameplay records: Retained for 3 years from the date of each session.
• Identity verification documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of last contact.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Cookies and Tracking Technologies

joya66 uses cookies and similar tracking technologies on joya66.app to maintain your login session, remember your preferences, and analyse platform usage patterns. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how players navigate and use joya66.app, helping us identify areas for improvement. Analytics data is aggregated and anonymised.
• Security cookies: Used to detect and prevent fraudulent login attempts and bot traffic.

joya66 does not use advertising cookies or third-party retargeting cookies. You may manage cookie preferences through your browser settings, but disabling essential cookies may affect your ability to use the platform.

9. Your Data Rights

As a joya66 player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data joya66 holds about you. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Update requests can be submitted via [email protected].
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations that prevent us from deleting it.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to withdraw consent: Where processing is based on your consent (such as promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to complain: If you believe joya66 has handled your personal data unlawfully, you have the right to lodge a complaint with the relevant data protection authority.

To exercise any of the above rights, please contact our support team at [email protected] (plain text — not a clickable link), including your registered account username and a clear description of your request.

10. Children and Minors

joya66 is strictly an adults-only platform. We do not knowingly collect personal data from persons under the age of 21. If we discover that an account has been registered by a person under 21, we will immediately close the account, delete all associated personal data to the extent permitted by our legal obligations, and return any deposited funds to the source payment method. If you believe a minor has registered on joya66, please notify us immediately at [email protected].

11. Data Security

joya66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers.
• Encryption of all personal data stored in our databases at rest.
• Salted cryptographic hashing of all account passwords — passwords are never stored in plain text.
• OTP two-factor authentication for all account logins and withdrawal requests.
• Automated monitoring systems that detect and alert on unusual login activity, rapid location changes, and suspicious transaction patterns.
• Strict access controls limiting staff access to personal data on a need-to-know basis.

Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights or freedoms, joya66 will notify affected players without undue delay.

12. International Data Transfers

Some of joya66's game providers and technical service partners operate infrastructure outside of Bangladesh. Where your personal data is transferred internationally (for example, when a game session token is processed by a game provider's servers), joya66 ensures that appropriate data transfer safeguards are in place, including contractual data processing agreements that bind recipients to data protection standards equivalent to those applied by joya66 itself.

13. Changes to This Privacy Policy

joya66 reserves the right to update this Privacy Policy at any time. When we make material changes, the updated Policy will be published on joya66.app with a revised "Last Updated" date. Where changes are significant, we will notify active players via their registered mobile number or email address. Continued use of joya66 following publication of an updated Policy constitutes your acceptance of the revised terms.

14. Contact Us

For all privacy-related enquiries, data access requests, or complaints, please contact the joya66 data protection team. Email: [email protected] (plain text — not a clickable link). Please include your registered account username, the nature of your request, and any relevant reference details. We aim to respond to all privacy-related requests within 10 business days.