jyaa9 Privacy Policy — How We Protect Your Data

jyaa9 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every person who uses our online casino and sports betting services. This Privacy Policy sets out in clear, plain terms what data we collect from you, the legal basis on which we process it, how long we keep it, who we share it with, and what rights you have in relation to your personal information. We take privacy seriously — not merely as a compliance obligation but as a core component of the trust that players place in jyaa9 when they register an account, make a deposit via bKash or Nagad, or place a bet on a Bangladesh Tigers match.

This policy covers the jyaa9 website accessible at https://jyaa9.org and any associated mobile-optimised versions of the Platform. It does not cover third-party websites or services that may be linked to or from the Platform — those third parties operate under their own privacy policies. We encourage you to review the privacy practices of any third party before sharing your personal information with them. jyaa9 processes personal data in accordance with applicable data protection law and industry best practices for online gaming platforms serving the Bangladesh market.

jyaa9 collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically when you browse or use the Platform; and from third-party service providers such as payment processors and identity verification services. The categories of data we collect are summarised below:

jyaa9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data for identification purposes. The only exception is that we may collect age verification documents (national ID or passport) as part of our mandatory KYC process — this is required by our responsible gaming obligations and is handled under strict security controls. We do not collect data from persons under the age of 21. If we become aware that personal data has been submitted by a person under 21, that data will be deleted immediately and the associated account closed.

jyaa9 uses the personal data it collects only for the purposes described below. We do not use your data for automated decision-making that produces legal effects or significantly affects you without your prior knowledge. The specific purposes for which we process your personal data are:

• Account creation and management: to register your account, authenticate your identity, and manage your account settings, preferences, and deposit balance.
• Service delivery: to process your deposits and withdrawals via bKash, Nagad, Rocket, or bank transfer; to settle bets and credit winnings; and to provide access to games and betting markets.
• Identity verification and fraud prevention: to conduct KYC checks required by responsible gaming standards; to detect, investigate, and prevent fraudulent transactions, collusion, money laundering, and other prohibited conduct described in our Terms and Conditions.
• Customer support: to respond to your support requests, complaints, and account queries via live chat and email; to maintain records of communications for quality assurance and dispute resolution purposes.
• Platform improvement: to analyse anonymised usage patterns and identify how jyaa9 can be improved — for example, by identifying pages that load slowly on 3G connections or game categories that are popular among players in Dhaka and Chittagong.
• Responsible gaming compliance: to monitor betting patterns for signs of problem gambling; to process self-exclusion requests; to enforce deposit limits and cooling-off periods; and to enforce the mandatory 21+ age restriction.

jyaa9 does not use your personal data to serve targeted third-party advertising. Any promotional communications from jyaa9 itself (for example, a notification about a new BPL betting market or an Eid bonus offer) are sent only to players who have not opted out of marketing communications. You can opt out of marketing communications at any time by contacting [email protected].

jyaa9 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contract performance: processing that is necessary to fulfil our contractual obligations to you as a registered player — for example, processing deposits, settling bets, and providing access to games.
• Legal obligation: processing that is necessary for jyaa9 to comply with applicable law, including KYC and anti-money laundering requirements and the mandatory retention of financial transaction records.
• Legitimate interests: processing that is necessary for jyaa9's legitimate business interests, provided those interests are not overridden by your rights and freedoms — for example, fraud detection, platform security, and improving the overall quality of the jyaa9 service.
• Consent: where jyaa9 relies on your consent as the legal basis for processing — for example, for sending you optional promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing that occurred before withdrawal.

jyaa9 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specific purpose:

• Payment service providers: your mobile number and transaction details are shared with bKash, Nagad, Rocket, Upay, or your selected Bangladeshi bank solely to process your deposit or withdrawal instruction. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification partners: during KYC, your identity documents and personal details may be shared with our identity verification service provider for the sole purpose of verifying that you are who you say you are and that you meet the age eligibility requirement.
• Game and platform technology providers: anonymised or pseudonymised usage data may be shared with our game providers (such as Pragmatic Play, Evolution Gaming, or Spribe) and platform technology partners to ensure proper game functioning and to resolve technical disputes.
• Law enforcement and regulatory authorities: where jyaa9 is required by applicable law, court order, or legitimate regulatory request to disclose personal data, we will comply with that requirement. We will notify you of any such disclosure where we are legally permitted to do so.

All third parties with whom jyaa9 shares personal data are required to handle that data securely, to use it only for the specific purpose for which it was shared, and to maintain confidentiality. jyaa9 does not transfer personal data to countries outside Bangladesh unless appropriate safeguards are in place. Where a third-party processor is located outside Bangladesh, we ensure that equivalent data protection standards apply.

jyaa9 takes particular care with financial and identity data. All payment transactions — whether via bKash, Nagad, Rocket, or bank transfer — are processed over encrypted connections. jyaa9 does not store complete payment credentials on its servers. When you make a deposit using bKash, for example, jyaa9 receives a transaction confirmation reference from bKash — it does not receive or store your bKash PIN. Similarly, where bank account details are provided, only the account reference required to process the payment is retained; full account numbers are not stored.

KYC verification is mandatory for all players before a withdrawal can be processed. The identity documents you submit during KYC (such as your National Identity Card or passport) are handled under strict access controls, stored in encrypted form, and retained only for as long as required by applicable law and our responsible gaming obligations. Access to KYC documents is restricted to a small number of jyaa9 compliance staff on a need-to-know basis. KYC documents are never shared with third parties except where required by law or where you have explicitly consented to such sharing for the purpose of identity verification.

jyaa9 uses cookies and similar tracking technologies to operate the Platform and to improve your experience. Cookies are small text files placed on your device when you visit the Platform. jyaa9 uses the following categories of cookies:

• Essential cookies: strictly necessary for the Platform to function — for example, maintaining your login session, remembering your language preference, and securing your account. These cannot be disabled.
• Analytics cookies: used to collect anonymised data about how players use the Platform — which games are most popular, which pages generate the most drop-off, and how long sessions typically last. This data is used solely to improve jyaa9 and is never linked back to an individual player's identity.
• Functional cookies: used to remember your preferences and settings — for example, your preferred deposit method or your favourite game category — so that jyaa9 can provide a more personalised experience on your next visit.

jyaa9 does not use advertising or tracking cookies that follow you across other websites. You can manage your cookie preferences through your mobile browser settings. Please note that disabling essential cookies will prevent the Platform from functioning correctly — you will not be able to log in or place bets if essential cookies are blocked.

jyaa9 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply: account data and transaction history are retained for a minimum of 5 years from the date of the last transaction or account closure, in line with financial record-keeping requirements; KYC documents are retained for 5 years from account closure; customer support communications are retained for 2 years; analytics data (anonymised) is retained indefinitely in aggregate form only. Where a player requests account deletion, jyaa9 will delete or anonymise personal data that is not subject to a mandatory retention obligation within 30 days of the request.

When personal data is no longer required and there is no legal obligation to retain it, jyaa9 will securely delete or irreversibly anonymise that data. Anonymised data — data from which all identifiers have been removed and from which re-identification is not possible — may be retained indefinitely for statistical and analytical purposes. jyaa9 conducts periodic data audits to ensure that personal data is not retained beyond its designated retention period.

As a user of jyaa9, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". jyaa9 will acknowledge your request within 5 business days and respond in full within 30 days. In some cases, jyaa9 may need to verify your identity before processing your request:

• Right of access: you may request a copy of the personal data jyaa9 holds about you, along with information about how it is being used.
• Right to rectification: you may request that jyaa9 corrects any inaccurate or incomplete personal data held about you.
• Right to erasure: in certain circumstances, you may request that jyaa9 deletes your personal data. This right is subject to exceptions — for example, jyaa9 cannot delete data that it is legally required to retain.
• Right to restrict processing: you may request that jyaa9 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to object: where jyaa9 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. jyaa9 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

jyaa9 will not charge a fee for processing a reasonable data rights request. If a request is manifestly unfounded or excessive, jyaa9 reserves the right to charge a reasonable administrative fee or to refuse to act on the request, in which case jyaa9 will explain its reasons in writing.

jyaa9 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your device and the jyaa9 Platform; encryption of sensitive data at rest (including KYC documents and financial records); strict access controls limiting who within jyaa9 can access personal data; regular security testing and vulnerability assessments; and staff training on data protection obligations.

Despite these measures, no data transmission over the internet or storage system is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jyaa9 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. You can help protect your account by using a strong, unique password; not sharing your login credentials with anyone; logging out of your account when using a shared device; and contacting jyaa9 support immediately at [email protected] if you suspect your account has been compromised.

jyaa9 is strictly an adult platform. Players must be 21 years of age or older to register and use the Platform. jyaa9 does not knowingly collect personal data from individuals under the age of 21. If jyaa9 becomes aware or has reason to believe that personal data has been submitted by a person under 21, that data will be deleted immediately, the associated account will be closed, and any deposits or winnings held in that account will be forfeited. If you are a parent or guardian and believe that your child has registered an account with jyaa9, please contact [email protected] immediately and we will take swift action.

jyaa9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. When a material change is made, jyaa9 will post a notice on the Platform and update the "Last updated" date at the top of this page. Where changes are significant, jyaa9 will also send a notification to registered players via their registered mobile number or email address. The revised Privacy Policy will take effect from the date specified in the notice.

Continued use of the Platform following the effective date of any revision to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you must cease using the Platform and contact jyaa9 support to request account closure. We encourage you to review this Privacy Policy periodically so that you remain informed about how jyaa9 protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the jyaa9 privacy team. All privacy-related communications should be sent to: [email protected] (plain text only — do not include sensitive personal information such as passwords or full payment details in your email). Use the subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal data subject access, rectification, erasure, or objection requests. jyaa9 aims to acknowledge all privacy enquiries within 5 business days and to provide a full response within 30 days. For urgent matters — for example, a suspected account compromise or an urgent erasure request relating to a minor — please indicate "URGENT" in your subject line.