joja9 Privacy Policy

1 Data Controller Information

1.1  joja9 is the data controller responsible for the personal data collected through the joja9 platform accessible at joja9.io. As data controller, joja9 determines the purposes and means by which personal data is processed.

1.2  If you have any questions about how your personal data is handled, or wish to exercise any of your data rights described in Section 10, you may contact us using the details set out in Section 13 of this Policy.

1.3  This Privacy Policy applies to all players located in Bangladesh and all other jurisdictions from which the joja9 platform may be lawfully accessed. The English-language version of this Policy is the authoritative governing version.

2 Personal Data We Collect

2.1  joja9 collects the following categories of personal data in connection with the operation of the platform:

2.2  joja9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where age-related health documentation is required for responsible gaming interventions at a player's own request.

3 How We Collect Your Data

3.1  joja9 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the platform, including through cookies, server logs, device fingerprinting and session tracking tools.
• Third-party sources: Data received from payment processors (such as bKash, Nagad, Rocket and Upay), identity verification providers, and fraud prevention services, for the purpose of verifying your identity and processing transactions.
• Game providers: Aggregated gameplay data received from certified game studios (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming and Ezugi) to support responsible gaming monitoring and dispute resolution.

3.2  Where data is received from third-party sources, joja9 ensures that those sources have a lawful basis for sharing such data with us.

4 Legal Basis for Processing

4.1  joja9 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including identity verification (KYC), anti-money laundering (AML) obligations, and financial record-keeping requirements.
• Legitimate interests: Processing carried out for purposes such as fraud prevention, platform security, responsible gaming monitoring, service improvement, and the detection of prohibited conduct, provided that those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, such as receiving promotional communications from joja9. You may withdraw consent at any time by contacting support or adjusting your account notification settings.

5 How We Use Your Data

5.1  joja9 uses the personal data we collect for the following purposes:

• To create, verify and manage your player account.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa and Mastercard.
• To conduct age verification and identity checks in compliance with our 21+ policy.
• To monitor gameplay activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling.
• To detect, investigate and prevent fraud, money laundering, collusion, bonus abuse and other prohibited conduct.
• To provide customer support and resolve disputes.
• To send you transactional communications such as deposit confirmations, withdrawal notifications and security alerts.
• To send you promotional communications about joja9 offers and new games, where you have consented to receive such communications.
• To improve the joja9 platform through analytics, A/B testing and user experience research.
• To comply with applicable legal and regulatory obligations.

6 Sharing Your Data with Third Parties

6.1  joja9 does not sell, rent or trade your personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay and banking partners receive financial data necessary to process your transactions. These providers operate under their own privacy policies and are subject to applicable financial regulations in Bangladesh.
• Identity verification providers: Third-party KYC services may receive your identity documents and personal details to verify your age and identity in compliance with our 21+ policy and AML obligations.
• Game studios and content providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming and Ezugi receive a player session token and relevant game parameters to deliver their certified game content. These providers do not receive your full identity data.
• IT and infrastructure providers: Hosting, security, and analytics service providers who support the operation of the joja9 platform. All such providers are bound by data processing agreements that restrict them from using your data for any purpose beyond the contracted service.
• Law enforcement and regulatory authorities: joja9 may disclose personal data to competent authorities where required by law, court order, or where disclosure is necessary to prevent fraud, money laundering or other serious criminal activity.

6.2  Any third party that receives personal data from joja9 is required to handle that data in a manner consistent with this Privacy Policy and applicable data protection principles.

7 Cookies and Tracking Technologies

7.1  joja9 uses cookies and similar technologies (including local storage and session storage) to operate and improve the platform. The types of cookies we use are described below:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without affecting your ability to use the platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the platform — for example, which pages are visited most frequently and where errors occur. This data is used solely to improve platform performance.
• Preference cookies: Used to remember your settings and preferences across sessions, such as your chosen language or display preferences.
• Security and fraud-prevention cookies: Used to identify and block suspicious activity, including detection of automated bots and multiple accounts sharing the same device.

7.2  Most web browsers allow you to manage cookie settings through the browser's privacy or settings menu. Disabling strictly necessary cookies may impair the functionality of the joja9 platform. Disabling analytics or preference cookies will not affect your ability to place wagers or access your account.

7.3  joja9 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of behavioural advertising.

8 Data Retention

8.1  joja9 retains personal data for the period necessary to fulfil the purpose for which it was collected, and in accordance with the following general guidelines:

• Account data: Retained for the duration of your active account relationship with joja9, plus a period of up to five years following account closure, to comply with financial and anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction, as required by applicable financial regulations.
• Identity verification documents: Retained for the duration of your account and for up to five years following closure. Copies of identity documents are stored using encrypted storage.
• Support communications: Retained for up to three years from the date of the last interaction, to support dispute resolution and service quality review.
• Technical and usage data: Aggregated analytics data may be retained indefinitely in anonymised form. Raw technical logs are typically retained for 12 months.

8.2  When personal data is no longer required for any lawful purpose, joja9 will securely delete or anonymise it in a manner that prevents reconstruction of the original data.

9 Data Security

9.1  joja9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the joja9 platform.
• AES-256 encryption for personal data stored on our servers.
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments of our infrastructure.
• Two-factor authentication options available to all registered players.
• Automated fraud detection and anomaly monitoring systems.

9.2  While joja9 takes all reasonable steps to protect your data, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, joja9 will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

10 Your Data Rights

10.1  As a joja9 player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data that joja9 holds about you.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete.
• Right to erasure: You may request that joja9 delete your personal data, subject to our legal obligations to retain certain records. For example, transaction records required for AML compliance cannot be deleted on request.
• Right to restriction: You may request that joja9 restrict the processing of your personal data in certain circumstances, for example while a rectification request is pending.
• Right to data portability: You may request that joja9 provide your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.

10.2  To exercise any of the above rights, please contact joja9 support using the details in Section 13. We will verify your identity before processing any data request and will respond within a reasonable period. We reserve the right to refuse requests that are manifestly unfounded, repetitive or disproportionate.

11 Children and Minors

11.1  The joja9 platform is strictly intended for individuals aged 21 years and above. joja9 does not knowingly collect personal data from persons under the age of 21.

11.2  If joja9 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately and all associated data will be deleted, with the exception of any records that must be retained for legal compliance purposes.

11.3  Parents and guardians are encouraged to use parental control software and to monitor the online activities of minors to prevent underage access to gambling platforms.

12 Changes to This Privacy Policy

12.1  joja9 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify registered players by email or via a prominent notice on the platform prior to the changes taking effect.

12.2  The effective date at the top of this Policy indicates when it was last revised. Continued use of the joja9 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

12.3  We encourage you to review this Privacy Policy periodically to stay informed about how joja9 protects your personal data.

13 Contact and Data Requests

13.1  For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact the joja9 data team using the following details:

• Email: support at joja9.io
• Subject Line: Please use "Privacy Request — [Your Username]" for all data-related enquiries so we can route your message to the appropriate team promptly.
• Response Time: We aim to acknowledge all privacy requests within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days.
• Identity Verification: To protect your personal data, we will verify your identity before acting on any access, rectification, erasure or portability request. You may be asked to provide your registered email address and a copy of your identity document.