Privacy
Last Updated: January 2025

Joya Privacy Policy — Your Data, Handled with Care

Joya takes the privacy of every Bangladesh player seriously. This policy explains exactly what data we collect, why we collect it, how we use it, and what rights you have over your own information. No vague language, no hidden practices.

How Joya Protects Your Privacy

Six core commitments that define how joya handles your personal information.

Encrypted at Every Step

All data transmitted between your device and joya's servers is protected by TLS encryption. Your account credentials, payment details, and personal information are never sent or stored in plain text.

No Data Selling

Joya does not sell, rent, or trade your personal data to any third party for marketing purposes. Your information is used only to operate your account and improve your experience on the platform.

Minimal Data Collection

Joya only collects the data that is genuinely necessary to operate your account, process payments, and comply with legal obligations. We do not collect data for the sake of it.

You Control Your Data

Joya gives you meaningful control over your personal data. You can request access to your data, ask for corrections, or request deletion at any time by contacting joya's support team.

Marketing is Optional

Joya will only send you promotional communications if you have opted in to receive them. You can opt out at any time through your account settings, and joya will stop sending marketing messages immediately.

Secure Third-Party Partners

Where joya shares data with third-party service providers — such as payment processors and identity verification services — those partners are contractually required to protect your data to the same standard as joya.

Your privacy matters to joya. This Privacy Policy applies to all personal data collected through the joya platform, including the website, mobile experience, and any communications between you and joya's support team. By using joya, you agree to the practices described in this policy.

1 Overview

Joya is an online betting and gaming platform serving players in Bangladesh. As part of operating the platform, joya collects and processes certain personal data about its players. This Privacy Policy explains what data joya collects, why it is collected, how it is used, and what rights you have in relation to your personal data.

Joya is committed to handling personal data responsibly and transparently. This policy is written in plain language because joya believes every player deserves to understand exactly how their information is being used — not just the players who have time to read through pages of legal text.

If you have questions about anything in this policy, joya's support team is available around the clock and will give you a straight answer. Contact details are at the end of this document.

2 Data We Collect

Joya collects the following categories of personal data from players:

Category Examples Purpose
Identity Data Full name, date of birth, national ID number Account registration and age/identity verification
Contact Data Mobile number, email address Account communication, support, and notifications
Financial Data bKash/Nagad/Rocket account numbers, transaction history Processing deposits and withdrawals
Technical Data IP address, device type, browser, operating system Platform security, fraud prevention, and performance
Usage Data Games played, bets placed, session duration, login times Platform improvement and responsible gaming monitoring
Communications Data Support chat transcripts, email correspondence Customer support and dispute resolution

Joya does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for responsible gaming purposes and with your explicit consent.

3 How We Collect Your Data

Joya collects personal data through the following channels:

  • Direct registration: When you create a joya account, you provide identity and contact data directly through the registration form.
  • Account activity: When you deposit, withdraw, place bets, or interact with games on joya, usage and financial data is recorded automatically.
  • Identity verification: When joya requests verification documents, you provide identity data by uploading the relevant files through your account dashboard.
  • Support interactions: When you contact joya's support team via live chat or email, communications data is collected and stored for quality and dispute resolution purposes.
  • Cookies and tracking: When you browse joya, technical and usage data is collected automatically through cookies and similar technologies. See Section 6 for full details.
  • Third-party verification services: Joya may receive identity and fraud-related data from third-party verification providers as part of the account verification process.

4 How We Use Your Data

Joya uses your personal data for the following purposes:

  • To create and manage your joya account, including verifying your identity and age.
  • To process deposits and withdrawals via bKash, Nagad, and Rocket.
  • To provide customer support and resolve disputes or complaints.
  • To detect and prevent fraud, money laundering, and other prohibited activities.
  • To comply with legal and regulatory obligations applicable to joya's operations.
  • To monitor betting activity for responsible gaming purposes and apply player protection tools where necessary.
  • To improve joya's platform, games, and services based on aggregated usage data.
  • To send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
  • To send promotional communications where you have opted in to receive them.
Legal Basis: Joya processes your personal data on the following legal bases — performance of a contract (operating your account), compliance with legal obligations (KYC and AML requirements), legitimate interests (fraud prevention and platform security), and consent (marketing communications and optional data uses).

Joya does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated systems flag an account for review, a member of joya's team will assess the situation before any action is taken.

5 Data Sharing

Joya does not sell your personal data. Joya may share your data with the following categories of third parties, strictly for the purposes described:

  • Payment processors: bKash, Nagad, and Rocket receive the financial data necessary to process your transactions. These providers operate under their own privacy policies and are responsible for the data they hold.
  • Identity verification providers: Third-party KYC and age verification services receive identity data to confirm your eligibility to use joya.
  • Fraud prevention services: Joya uses third-party fraud detection tools that process technical and usage data to identify suspicious activity.
  • IT and hosting providers: Joya's platform infrastructure is supported by third-party hosting and technology providers who may process data as part of their services.
  • Legal and regulatory authorities: Joya may be required to share data with law enforcement, regulatory bodies, or courts where legally obligated to do so.

All third-party service providers who process data on joya's behalf are required to implement appropriate technical and organisational security measures and to use the data only for the specific purpose for which it was shared.

International Transfers: Some of joya's third-party service providers may be located outside Bangladesh. Where data is transferred internationally, joya ensures that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection standards.

6 Cookies and Tracking Technologies

Joya uses cookies and similar tracking technologies to operate the platform, improve performance, and understand how players use the site. A cookie is a small text file stored on your device when you visit joya.

Joya uses the following types of cookies:

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
  • Performance cookies: Collect anonymised data about how players navigate joya, which pages are visited most, and where errors occur. This data helps joya improve the platform experience.
  • Functional cookies: Remember your preferences such as language settings and display options so you do not have to reconfigure them on each visit.
  • Analytics cookies: Used to understand aggregate player behaviour and measure the effectiveness of platform features. Data collected through analytics cookies is anonymised before analysis.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using joya, but some features may not function as intended. Note that clearing cookies will log you out of your joya account.

7 Data Retention

Joya retains your personal data for as long as your account is active and for a period after account closure as required by legal and regulatory obligations. The specific retention periods that apply to different categories of data are as follows:

  • Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure, in line with anti-money laundering regulations.
  • Financial transaction data: Retained for a minimum of five years from the date of each transaction.
  • Support communications: Retained for three years from the date of the interaction.
  • Technical and usage data: Retained for up to 24 months, after which it is anonymised or deleted.
  • Marketing preferences: Retained until you withdraw consent or close your account.

When personal data is no longer required, joya securely deletes or anonymises it. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for analytical purposes.

8 Security

Joya implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

  • TLS encryption for all data transmitted between your device and joya's servers.
  • Encrypted storage of sensitive data including passwords and payment information.
  • Two-factor authentication available for all player accounts.
  • Regular security audits and penetration testing of joya's platform infrastructure.
  • Strict access controls ensuring that only authorised joya staff can access personal data, and only to the extent necessary for their role.
  • Continuous monitoring of joya's systems for suspicious activity and potential security incidents.

While joya takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. If you suspect that your joya account has been compromised, contact the support team immediately so the account can be secured.

Data Breach Response: In the event of a data breach that poses a risk to your rights and freedoms, joya will notify affected players as quickly as possible and take immediate steps to contain the breach and prevent further exposure.

9 Your Privacy Rights

As a joya player, you have the following rights in relation to your personal data. To exercise any of these rights, contact joya's support team with your request and joya will respond within a reasonable timeframe.

Right of Access Request a copy of the personal data joya holds about you.
Right to Rectification Ask joya to correct any inaccurate or incomplete personal data.
Right to Erasure Request deletion of your personal data where joya no longer has a legal basis to retain it.
Right to Restriction Ask joya to restrict processing of your data in certain circumstances.
Right to Portability Request your data in a structured, machine-readable format.
Right to Object Object to processing of your data for direct marketing or legitimate interest purposes.

Please note that some rights are subject to limitations. For example, joya cannot delete data that it is legally required to retain under anti-money laundering regulations. Where a request cannot be fulfilled in full, joya will explain the reason clearly.

To withdraw consent for marketing communications specifically, you can do so directly through your account settings without needing to contact support.

10 Children's Privacy

Joya's platform is strictly for adults aged 18 and over. Joya does not knowingly collect personal data from anyone under the age of 18. If joya becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be closed.

If you believe that a person under 18 has registered on joya, please contact the support team immediately so the matter can be investigated and resolved without delay.

11 Changes to This Policy

Joya may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or joya's data practices. When changes are made, the updated policy will be published on this page with a revised effective date.

For significant changes that materially affect how joya uses your personal data, joya will notify you via email or an in-platform notification before the changes take effect. Continued use of joya after a policy update constitutes acceptance of the revised Privacy Policy.

Joya encourages you to review this policy periodically so you are always aware of how your data is being handled. If you disagree with any changes, you have the right to close your account and request deletion of your data as described in Section 9.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or joya's handling of your personal data, please get in touch with the support team:

Joya aims to respond to all privacy-related requests within 72 hours. For urgent matters involving account security or suspected data breaches, live chat is the fastest way to reach the team.

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe joya has not handled your personal data in accordance with applicable law.

Safe and Transparent

Your Privacy is Protected. Ready to Play?

Joya is built on trust. Now that you know exactly how your data is handled, join thousands of Bangladesh players who bet with confidence on joya every day.

Data encrypted No data selling You control your data 24/7 support