1. Who We Are
JAYA9 operates jaya-9.io and is the controller of personal data collected through it. Data protection enquiries go to [email protected].
2. What We Collect
- Identity — name, date of birth, and the ID document you upload for verification.
- Contact — mobile number, email address, and postal address if provided.
- Financial — payment method details, transaction history, deposit and withdrawal records. Full card numbers are not stored; tokens are.
- Gameplay — bets, stakes, outcomes, bonuses and session times.
- Technical — IP address, device and browser details, and approximate location derived from IP.
- Communications — support chats, emails and call recordings where applicable.
3. Why We Use It
- To operate your account, process bets and settle payments — performance of our contract with you.
- To verify identity and age, and to meet anti-money-laundering obligations — legal obligation.
- To detect fraud, bonus abuse and multiple accounts — legitimate interests.
- To identify signs of gambling harm and offer responsible gaming tools — legal obligation and legitimate interests.
- To send marketing about offers — consent, which you can withdraw at any time.
- To improve the site and troubleshoot faults — legitimate interests.
4. Sharing
We share personal data with payment processors, identity verification providers, game studios (limited to what a game session requires), fraud-prevention services, cloud hosting providers, and regulators or law enforcement where legally required. We do not sell personal data.
5. International Transfers
Our suppliers operate in several countries, so data may be processed outside Bangladesh. Where that happens we rely on contractual safeguards requiring an equivalent standard of protection.
6. Retention
Account, transaction and verification records are kept for a minimum of five years after account closure, as anti-money-laundering rules require. Marketing preferences are kept until you withdraw consent. Support chats are kept for 24 months. Self-exclusion records are kept permanently, because their purpose is to prevent a new account being opened.
7. Your Rights
Subject to the law that applies to you, you can ask for a copy of your data, correction of inaccurate data, deletion where we have no overriding obligation to keep it, restriction of processing, a portable copy, and withdrawal of marketing consent. Write to [email protected] and we will respond within 30 days. Note that anti-money-laundering retention obligations override a deletion request for transaction and verification records.
8. Cookies
We use strictly necessary cookies to keep you logged in and secure the session; functional cookies to remember preferences such as odds format; analytics cookies to understand how the site is used; and advertising cookies to measure campaigns. You can manage non-essential cookies through the banner or your browser settings — blocking strictly necessary cookies will prevent login from working.
9. Security
Traffic is encrypted with TLS. Payment data is tokenised. Access to personal data inside the company is restricted by role and logged. Two-factor authentication is available on every account and we recommend enabling it. No system is perfectly secure, and we will notify you and the relevant authority without undue delay if a breach affects your data.
10. Children
The service is for adults only. We do not knowingly collect data from anyone under 18, and any account found to belong to a minor is closed with deposits returned.
11. Changes
We will post any change to this policy on this page and, where the change is material, notify you by email.