joya77 Privacy Policy

joya77 collects and processes personal data only for specific, lawful purposes. We will not use your data in any manner that is incompatible with the purposes for which it was originally collected. The primary purposes for which joya77 uses personal data include:

• Account management: To create, maintain, verify, and administer your joya77 account, including processing registration, identity verification, and account recovery requests.
• Service delivery: To provide access to our full suite of online gaming services, process bets and wagers, calculate and credit winnings, and deliver customer support.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions in BDT.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion requests, manage deposit limits, and fulfil our obligations in relation to player protection and problem gambling prevention.
• Legal and regulatory compliance: To meet our obligations under applicable laws, respond to lawful requests from authorities, and maintain records as required.
• Platform improvement: To analyse usage patterns, conduct testing, and improve the features, performance, and security of the joya77 platform.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates where you have given your explicit consent. You may withdraw consent at any time.

joya77 processes personal data on the lawful bases of contractual necessity (to deliver the services you have requested), legitimate interests (fraud prevention and platform security), legal obligation (compliance with applicable laws), and consent (marketing communications).

joya77 uses cookies and similar tracking technologies to enhance your experience on our platform and to collect technical information about how our services are used. A cookie is a small text file stored on your device by your web browser.

We use the following categories of cookies on joya77.asia:

• Essential cookies: Strictly necessary for the Platform to function. These enable core features such as session authentication, security controls, and navigation. They cannot be disabled without impairing the service.
• Functional cookies: Allow the Platform to remember your preferences, such as language settings, preferred payment method, and display options, to provide a more personalised experience.
• Analytics cookies: Help us understand how users interact with joya77 by collecting anonymised aggregate data on page views, session durations, and navigation paths. This data is used solely to improve the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot behaviour, and other security threats on the Platform.

You may configure your browser to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of joya77.asia and may prevent you from accessing all features of the Platform, including your account and gaming services.

joya77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may, however, share your personal data with the following categories of recipients where necessary to deliver our services or meet our legal obligations:

• Payment service providers: We share necessary payment and identity data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other payment processor used to facilitate your transactions. These providers process your data solely for the purpose of executing payments.
• Identity verification partners: Third-party KYC and age-verification providers who assist joya77 in confirming the identity and eligibility of users. These providers are contractually required to process your data only for verification purposes.
• Game content providers: Where you play games hosted by third-party studios (such as Pragmatic Play, Evolution Gaming, or Spribe), your gaming session data may be processed by those providers for the purpose of delivering gameplay. Their data handling is governed by their own privacy policies.
• IT and security service providers: Companies that provide infrastructure, hosting, cybersecurity, and technical support services to joya77, under strict confidentiality and data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a government authority, joya77 may disclose personal data without prior notice to you.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of joya77's assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

All third parties with whom joya77 shares personal data are required, by contract, to process that data only for the specified purpose and to implement appropriate technical and organisational security measures.

joya77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with our legal and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum period of five years following account closure, to meet anti-money-laundering (AML) record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction, in accordance with applicable financial record-keeping regulations.
• KYC and identity verification documents: Retained for the period required by applicable law following the end of the business relationship, typically five years.
• Gaming activity logs: Retained for the duration of the account and for up to two years following account closure, to support dispute resolution, responsible gaming monitoring, and fraud prevention.
• Communications and support records: Retained for up to three years from the date of the last interaction, to maintain continuity of customer support and for dispute resolution purposes.
• Marketing consent records: Retained for as long as you remain opted in and for a reasonable period thereafter as evidence of consent.

When personal data is no longer required, joya77 will securely delete or anonymise it in accordance with our data disposal procedures.

joya77 respects your right to control your personal information. You may exercise any of the following rights by submitting a written request to [email protected]:

• Right of access: You may request a copy of all personal data that joya77 holds about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to our legal retention obligations — we may be required to retain certain data even after an erasure request.
• Right to restriction of processing: You may request that joya77 limit the processing of your personal data in certain situations, for example while a rectification request is under review.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing of your personal data where joya77 relies on legitimate interests as the lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

joya77 will respond to all verified rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, and you will be notified of the extension within the initial 30-day period. To protect your privacy, we will verify your identity before processing any rights request.

joya77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 128-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and joya77.asia.
• Encrypted storage of sensitive personal and financial data at rest on secured servers.
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required to perform their responsibilities.
• Regular internal and third-party security audits, vulnerability assessments, and penetration testing of the Platform and its infrastructure.
• Intrusion detection and monitoring systems that operate continuously to identify and respond to potential security threats in real time.
• Staff training on data protection obligations and secure data handling practices.

Despite these measures, no data transmission over the internet or method of electronic storage is completely secure. joya77 cannot guarantee the absolute security of your data. You use the Platform at your own risk in this regard and are responsible for keeping your login credentials confidential. If you suspect a security incident affecting your account, contact [email protected] immediately.

joya77 is strictly an adults-only platform. Our services are available only to individuals who are 21 years of age or older. We do not knowingly collect or process personal data from anyone under the age of 21.

If joya77 becomes aware that personal data has been submitted by, or on behalf of, an individual under the age of 21, we will take prompt steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on joya77, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Age verification checks are conducted as part of the KYC process for all accounts. Any account that cannot be verified as belonging to a person aged 21 or above will be suspended pending resolution.

joya77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes to the Policy, we will notify registered users by posting a prominent notice on the Platform or by sending a notification to your registered contact details. The updated Policy will take effect from the date specified in the notice.

Your continued use of the joya77 Platform following the effective date of any changes to this Policy constitutes your acknowledgement of those changes. We encourage you to review this Policy periodically. The "Last updated" date at the top of this page indicates when the Policy was most recently revised.

If you have any questions or concerns about this Privacy Policy or about how joya77 handles your personal data, please contact our support team at [email protected]. We aim to respond to all privacy-related enquiries within two business days (Bangladesh Standard Time, UTC+6).

If you wish to exercise any of your privacy rights, lodge a complaint, or ask a question about this Policy or joya77's data practices, please reach out to us using the contact details below. All correspondence must be in English to ensure accurate and timely handling.

Email: [email protected] (plain text — not a clickable link)

Response time: joya77 aims to acknowledge all privacy-related enquiries within 24 hours and to resolve them fully within 30 days, in accordance with applicable data protection standards. For complex requests, the resolution period may be extended up to 90 days with prior notification.

We take all privacy complaints seriously. If you are not satisfied with our response, you retain the right to escalate the matter through any applicable legal or regulatory channel available to you in Bangladesh.