joya 77 Privacy Policy

1. Data We Collect

joya 77 collects personal data from you in three primary ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information we receive from trusted third-party sources such as payment processors and identity verification services.

1.1 Information You Provide Directly

When you register for a joya 77 account or interact with our services, we may collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and National ID or passport number (required for KYC verification).
• Contact data: Mobile phone number, email address, and residential address (including city and district within Bangladesh, such as Dhaka, Chittagong, Sylhet, or Khulna).
• Account credentials: Username and hashed password. We never store your password in plaintext.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, transaction history, and deposit and withdrawal records denominated in BDT.
• Verification documents: Copies of government-issued photo ID, proof of address documents, and payment method screenshots submitted during KYC verification.
• Communication records: Messages, emails, and chat transcripts exchanged with our customer support team.

1.2 Information Collected Automatically

When you visit or use the joya 77 platform, certain technical data is collected automatically through our servers, cookies, and analytics tools:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile carrier (where applicable).
• Usage data: Pages viewed, game sessions played, betting activity logs, session duration, click paths, and features accessed within the platform.
• Location data: Approximate geographic location derived from your IP address. We do not collect precise GPS-level location data.
• Cookie and tracking data: Session identifiers, preference tokens, and analytics identifiers. See Section 4 for full details.

1.3 Information from Third Parties

We may receive personal data about you from third-party sources in connection with the operation of your joya 77 account, including identity verification providers, fraud detection services, and payment processors such as bKash, Nagad, and Rocket. Data received from these sources is handled in accordance with this Privacy Policy and is used only for the purpose for which it was shared.

2. How We Use Your Data

joya 77 processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are: performance of a contract (operating your account), compliance with legal obligations (KYC and anti-money laundering requirements), legitimate interests (platform security and fraud prevention), and your consent (for optional communications).

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contract performance
Processing deposits and withdrawals	Financial data, identity data	Contract performance
KYC identity verification	Identity documents, financial data	Legal obligation
Fraud detection and platform security	Device data, usage data, IP address	Legitimate interest
Customer support communications	Contact data, communication records	Contract performance
Platform analytics and improvement	Usage data, cookie data	Legitimate interest
Responsible gaming monitoring	Usage data, betting activity logs	Legal obligation / legitimate interest
Promotional communications (optional)	Contact data, preferences	Consent

We do not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated tools are used to flag accounts for fraud or responsible gaming review, the final decision involving account action is reviewed by a member of the joya 77 team.

3. Data Sharing & Disclosure

joya 77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Payment Processors

To facilitate deposits and withdrawals in BDT, we share necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These processors receive only the data required to complete the transaction and are independently subject to their own privacy and security obligations.

3.2 Identity Verification Providers

To comply with Know Your Customer (KYC) obligations, we may share identity documents and personal details with third-party verification service providers. These providers are contractually obligated to handle your data confidentially and to use it solely for the purpose of verifying your identity on our behalf.

3.3 Legal and Regulatory Disclosure

We may disclose your personal data to government authorities, law enforcement agencies, or financial intelligence units — including the Bangladesh Financial Intelligence Unit (BFIU) — where we are required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.

3.4 Business Operations

We use a limited number of trusted third-party service providers to support platform operations, including hosting infrastructure, email delivery, and analytics. These providers act as data processors under contract with joya 77 and are permitted to use your data only for the specific services they provide to us. They are not permitted to use it for their own commercial purposes.

3.5 No Cross-Border Transfers Without Safeguards

Where personal data is transferred to or processed by service providers located outside Bangladesh, joya 77 ensures that appropriate contractual safeguards are in place to protect the data to a standard at least equivalent to the protections provided under this Privacy Policy.

4. Cookies & Tracking Technologies

joya 77 uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. We use four categories of cookies, described below.

4.1 Strictly Necessary Cookies

These cookies are required for the platform to function and cannot be disabled. They include session authentication tokens that keep you logged in to your joya 77 account, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure platform stability. No personal data is shared with third parties through these cookies.

4.2 Functional Cookies

Functional cookies remember your preferences and settings, such as your preferred language, display settings, and notification preferences. These cookies improve your experience on joya 77 but are not essential for core functionality. You may disable them without losing access to the platform, although some features may not behave as expected.

4.3 Analytics Cookies

We use analytics cookies to understand how players navigate and use the joya 77 platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised where possible and is used solely to improve platform performance and user experience. We do not use analytics data to build individual profiles for advertising purposes.

4.4 Managing Your Cookie Preferences

You can control cookie settings through your browser. Most modern browsers allow you to block or delete cookies via their privacy settings. Please note that blocking strictly necessary cookies will prevent you from logging in to your joya 77 account. For mobile users in Bangladesh, this setting is typically found under your browser's "Privacy" or "Site Settings" menu. Clearing cookies will log you out of any active joya 77 session.

5. Data Security

joya 77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security practices include but are not limited to the following:

• TLS/SSL encryption on all data transmitted between your device and the joya 77 platform.
• Encrypted password storage using industry-standard hashing algorithms. Your plaintext password is never stored or accessible by joya 77 staff.
• Access controls ensuring that only authorised personnel with a legitimate business need can access personal data. All access is logged and audited.
• Regular security reviews of our platform infrastructure, including vulnerability assessments and patch management.
• Intrusion detection systems monitoring for suspicious activity patterns, including unusual login attempts and abnormal transaction behaviour.
• Staff training on data protection obligations and security protocols, conducted on a regular basis.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights of affected players, joya 77 will notify affected individuals promptly and take immediate steps to contain and remediate the breach.

6. Data Retention

joya 77 retains your personal data for as long as your account is active and for a defined period after account closure, as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal and regulatory compliance
KYC identity documents	Duration of account + 5 years post-closure	Anti-money laundering obligations
Transaction and financial records	Duration of account + 7 years post-closure	Financial record-keeping requirements
Customer support communications	3 years from date of last interaction	Dispute resolution and service quality
Analytics and usage data	24 months, then anonymised or deleted	Platform improvement (legitimate interest)
Marketing preferences	Until consent withdrawn or account closed	Consent-based processing

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting aggregated dataset no longer constitutes personal data and may be retained indefinitely for statistical analysis.

7. Your Privacy Rights

As a joya 77 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request within 3 business days and aim to resolve it fully within 30 days, subject to complexity and legal constraints.

7.1 Right of Access

You have the right to request a copy of the personal data that joya 77 holds about you. We will provide this in a clear, readable format. We may ask you to verify your identity before fulfilling an access request to ensure the data is not disclosed to an unauthorised party.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For straightforward corrections such as updating your contact number or email address, you may also do this directly through your joya 77 account settings.

7.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and we have no overriding legitimate grounds to continue. Please note that we are not able to delete data that we are required to retain for legal or regulatory reasons, such as KYC records and transaction histories during the applicable retention period.

7.4 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. You also have the absolute right to opt out of direct marketing communications at any time. To unsubscribe from promotional emails or SMS notifications from joya 77, reply "STOP" to any promotional message or email us at [email protected].

7.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.

7.6 Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces significant legal effects concerning you. As stated in Section 2, where automated tools are used to flag accounts, a human review is conducted before any significant account action is taken.

8. Policy Updates & Contact Information

8.1 Updates to This Policy

joya 77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players by email at least 14 days before the changes take effect. The updated policy will also be published at joya-77.com/privacy-policy with a revised effective date at the top of the document. Your continued use of joya 77 after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

8.2 Children's Privacy

joya 77 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we discover that personal data belonging to an underage individual has been collected, we will delete it immediately and close the associated account. If you believe that an underage person has registered on joya 77, please notify us at [email protected].

8.3 Links to Other Sites

The joya 77 platform does not include links to third-party websites. This Privacy Policy applies solely to data collected through joya-77.com and our associated mobile platform. joya 77 is not responsible for the privacy practices of any external websites.

8.4 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact the joya 77 data team at: [email protected]. We are available during Bangladesh Standard Time (BST, UTC+6) business hours and aim to respond to all privacy-related enquiries within two business days.

For full details of your rights regarding responsible gaming and self-exclusion, please visit our Responsible Gaming page. For the full contractual terms governing your use of joya 77, please read our Terms & Conditions.