joya88 Privacy Policy

joya88 ("the Platform", "we", "us", "our") operates the online casino and sports betting website located at https://joya88.bid. This Privacy Policy describes how joya88 collects, processes, stores, and protects the personal data of individuals ("you", "the User", "the Player") who visit, register on, or otherwise use the joya88 platform and its associated services.

By accessing the joya88 platform or creating a player account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the joya88 platform immediately.

This Privacy Policy should be read alongside the joya88 Terms & Conditions, which govern your use of the platform. Capitalised terms used in this Privacy Policy but not defined herein carry the meaning assigned to them in the Terms & Conditions.

joya88 collects the following categories of personal data from players and site visitors. We collect only the information that is reasonably necessary to fulfil the purposes described in this Privacy Policy.

joya88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data, except where expressly required by law or where you voluntarily provide such information in a support communication.

joya88 collects personal data through the following channels:

• Direct interactions: Information you provide when creating an account, completing KYC verification, depositing or withdrawing funds, or contacting our support team.
• Automated technologies: Technical data collected automatically when you visit the joya88 platform, including via cookies, server logs, and similar tracking technologies. See Section 7 for full details on our cookie usage.
• Payment service providers: Transactional confirmation data received from mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners when you initiate a deposit or withdrawal.
• Identity verification partners: Where required for KYC compliance, joya88 may use third-party document verification services to confirm the authenticity of identification documents you submit.
• Fraud prevention services: Technical signals and risk scores provided by fraud detection partners to help identify potentially fraudulent account activity.

joya88 uses the personal data it collects for the following specific purposes. We process your data only where we have a valid legal basis for doing so (see Section 5).

• Account management: To create, maintain, and administer your joya88 player account, including verifying your identity and age.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to maintain accurate financial records.
• Platform operation: To provide access to casino games, sports betting markets, live dealer tables, and all other joya88 services.
• Customer support: To respond to your enquiries, resolve disputes, and manage complaints submitted through our support channels.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Legal compliance: To comply with applicable legal and regulatory obligations, including Know Your Customer (KYC) requirements and anti-money laundering (AML) checks.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to apply responsible gaming tools such as deposit limits or self-exclusion where requested or required.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse aggregate usage data, identify technical issues, and improve the features, performance, and security of the joya88 platform.

joya88 processes your personal data only where a valid legal basis exists. The primary legal bases on which joya88 relies are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and joya88 — specifically, to operate your account, process transactions, and deliver platform services.
• Legal obligation: Processing is required to comply with applicable laws, including KYC/AML obligations and any lawful request from a competent authority.
• Legitimate interests: Processing is necessary for joya88's legitimate business interests, including fraud detection, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — specifically, the sending of marketing communications — joya88 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

joya88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with the following categories of recipients where necessary and proportionate:

• Payment service providers: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners receive only the transactional data necessary to process your deposit or withdrawal.
• Identity verification and KYC partners: Third-party document verification services that assist joya88 in confirming player identity and age for compliance purposes.
• Fraud prevention and security services: Specialist providers that analyse transaction patterns and technical signals to identify and prevent fraudulent activity on the platform.
• Game software providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised or pseudonymised session data to operate their games and resolve disputes, but do not receive your full identity profile.
• Professional advisers: Legal counsel, accountants, and auditors who require access to certain data in the course of providing professional services to joya88, subject to strict confidentiality obligations.
• Competent authorities: Law enforcement agencies, regulatory bodies, or courts where joya88 is legally required to disclose personal data in response to a lawful request, court order, or legal process.

All third-party recipients of your personal data are required by contract to maintain appropriate technical and organisational security measures and to process your data only for the specified purposes for which it was shared.

joya88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, and gather analytics data that helps us improve the service. A cookie is a small text file placed on your device by your web browser when you visit a website.

joya88 uses the following types of cookies:

• Essential cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and your most recently played games to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how visitors use the platform — such as which pages are most visited and how long sessions last. This data helps us identify areas for improvement.
• Performance cookies: Monitor platform load times, error rates, and technical performance metrics to support our infrastructure team in maintaining service quality.

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the joya88 platform and may prevent you from accessing certain features.

joya88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation.

• Active account data: Retained for the duration of your registered account and for a minimum period of five years following account closure, in accordance with standard financial record-keeping and AML compliance obligations.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven years to satisfy audit and regulatory requirements.
• KYC documentation: Identity verification documents (copies of ID, proof of address) are retained for the duration of your account and for five years following closure.
• Support communications: Customer support ticket records and email correspondence are retained for three years from the date of last interaction.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for a minimum of three years from the date of the relevant action.
• Technical/log data: Server logs and technical access records are retained for up to 12 months for security and debugging purposes.

Once the applicable retention period expires, joya88 will securely delete or anonymise your personal data so that it can no longer be associated with you.

joya88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport encryption: All data transmitted between your device and the joya88 platform is encrypted using 256-bit SSL/TLS protocols.
• Password hashing: Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. joya88 staff cannot view your password in plain text.
• Access controls: Access to personal data within the joya88 organisation is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations.
• Server security: Platform infrastructure is hosted on secured servers protected by firewalls, intrusion detection systems, and regular vulnerability assessments.
• Session timeouts: Inactive user sessions are automatically terminated after a period of inactivity to reduce the risk of unauthorised access from shared or unattended devices.
• Incident response: joya88 maintains a data breach response procedure. In the event of a security incident that is likely to result in significant risk to affected individuals, joya88 will notify the affected players in a timely manner.

As a joya88 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within a reasonable timeframe, and in any event no later than 30 days from receipt.

• Right of access: You have the right to request a copy of the personal data joya88 holds about you and to receive information about how it is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to joya88's legal obligations to retain certain records for regulatory compliance purposes.
• Right to restrict processing: You may request that joya88 restrict the processing of your personal data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where joya88 processes your data on the basis of consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to the processing of your personal data where joya88 relies on legitimate interests as its legal basis, subject to joya88's overriding legitimate grounds.

Please note that exercising certain rights — such as the right to erasure — may result in the closure of your joya88 account if it is no longer possible to operate it without the data in question.

The joya88 platform is strictly intended for adults aged 18 years and above. joya88 does not knowingly collect or process personal data from individuals under the age of 18. If you are under 18, you must not access or use the joya88 platform.

If joya88 becomes aware that personal data has been collected from a person under the age of 18 without parental consent, it will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered an account on the joya88 platform, please notify us immediately at [email protected].

Parents and guardians who are concerned about underage access to online gambling platforms are encouraged to use parental control software to restrict access to gambling-related websites. joya88 supports responsible internet use and the protection of minors.

The joya88 platform may contain references to third-party services such as payment gateways and game studios. joya88 is not responsible for the privacy practices of these third parties. Once you navigate away from the joya88 platform to a third-party service, this Privacy Policy no longer applies and you are subject to the privacy policy of the relevant third party.

joya88 recommends that you review the privacy policy of any third-party service you use in connection with your joya88 account, particularly those of your chosen payment method provider (bKash, Nagad, Rocket, or your bank), before submitting personal or financial information to those services.

joya88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, the updated Privacy Policy will be published at https://joya88.bid/privacy-policy with a revised "Last Updated" date prominently displayed at the top of the document.

Where changes are significant, joya88 will endeavour to notify registered players by email or by a prominent notice on the platform. Your continued use of the joya88 platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised Privacy Policy, you should discontinue use of the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way joya88 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, operating in Bangladesh Standard Time (UTC+6).

Email: [email protected]

Please include your registered username and a clear description of your query or request. For data rights requests (Section 10), please use the subject line "Data Rights Request" to ensure your message is directed to the appropriate team member promptly.