Privacy Policy — How jyo9 Collects, Uses, and Protects Your Data

Information We Collect

jyo9 collects personal information through a number of channels: directly from you when you register or interact with the platform, automatically through cookies and tracking technologies when you browse the site, and from third-party service providers involved in payment processing and identity verification.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address, email address, and Bangladeshi mobile number provided when creating a jyo9 account.
• Identity verification documents: Copies of government-issued photo identification (National Identity Card, passport, or driver's licence) and a selfie submitted during KYC verification.
• Financial information: Mobile financial service account details (bKash, Nagad, Rocket numbers), bank account details, or card information provided for the purpose of deposits and withdrawals. Full payment card numbers are processed by our PCI-DSS-compliant payment partners and are not stored on jyo9 servers.
• Communications data: Messages, emails, and live chat transcripts exchanged with jyo9 customer support, including any attachments you send in connection with a support request.
• Responsible gaming data: Deposit limits, session time-out preferences, self-exclusion requests, and any other responsible gaming tool settings you configure on your account.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, click-stream data, and navigation paths within the jyo9 platform.
• Geolocation data: Approximate location derived from your IP address, used to apply jurisdiction-based access controls and detect potentially fraudulent logins from unusual locations.
• Cookie and tracking data: Preferences, session tokens, and analytics identifiers stored via cookies and similar technologies. See the Cookies section below for full details.

How We Use Your Data

jyo9 uses the personal information it collects strictly for the purposes described below. We do not process personal data for any purpose that is incompatible with those stated here without first obtaining your explicit consent.

Where jyo9 relies on your consent as the legal basis for processing — for example, to send promotional emails or SMS notifications about bonuses, BPL cricket betting offers, and seasonal promotions such as Eid or Pohela Boishakh campaigns — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal.

Data Sharing & Disclosure

jyo9 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal information only where strictly necessary and only with the categories of recipients described below.

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network processors (Visa, Mastercard) receive the minimum financial data required to authorise and complete your transactions. These providers operate under their own privacy policies and are bound by applicable financial-services regulations.
• Identity verification partners: Third-party KYC and anti-money-laundering (AML) service providers may receive copies of your identity documents and biometric data (selfie) for the purpose of completing verification checks. These partners are contractually bound to process your data solely for verification purposes.
• Game software providers: Studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player ID to facilitate gameplay. They do not receive your full name, address, or payment details.
• IT infrastructure and hosting providers: Cloud hosting and server management partners who process data on jyo9's behalf under strict data processing agreements that prohibit any independent use of the data.
• Analytics providers: Anonymised and aggregated usage data may be shared with analytics platforms to help jyo9 understand platform performance and improve the player experience. No personally identifiable information is included in these analytics data sets.
• Legal and regulatory authorities: jyo9 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, court order, or in connection with an investigation into suspected fraud, money laundering, or other illegal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of jyo9's business assets, player data may be transferred to the acquiring entity. Players would be notified of any such transfer and any material change to data processing arrangements.

In all cases where jyo9 shares data with third-party processors, we require those parties to implement appropriate technical and organisational security measures and to process data only on jyo9's documented instructions.

Cookies & Tracking Technologies

jyo9 uses cookies and similar tracking technologies to deliver the platform's core functionality, remember your preferences, maintain your login session, detect fraud, and analyse how the site is used. The following categories of cookies are in use on jyo9.net:

To manage your cookie preferences, you can adjust your browser settings at any time. Most modern browsers allow you to block or delete cookies through the settings or preferences menu. Note that disabling strictly necessary cookies will prevent you from logging in to your jyo9 account and accessing real-money games. jyo9 does not currently respond to browser Do Not Track (DNT) signals, as there is no consistent industry standard for interpreting them.

Data Retention

jyo9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following permanent account closure, in line with standard AML record-keeping requirements.
• Transaction records: Financial transaction history, including all deposit and withdrawal records, is retained for a minimum of seven years to satisfy financial reporting and AML compliance obligations.
• KYC documents: Identity verification documents are retained for a minimum of five years following account closure. Extended retention may apply where legally mandated or where an investigation is ongoing.
• Customer support records: Communications with customer support are retained for three years from the date of the last interaction, unless the subject matter requires a longer retention period.
• Marketing data: If you have opted in to marketing communications, your contact details are retained for this purpose until you withdraw consent, at which point they are removed from active marketing lists within 30 days.
• Self-exclusion records: Where a player has voluntarily self-excluded, a record of that exclusion is retained indefinitely to prevent re-registration during the exclusion period and to support responsible gaming obligations.
• Analytics and log data: Anonymised or aggregated analytics data may be retained indefinitely, as it cannot be used to identify individual players.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

Data Security

jyo9 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to the following:

• Encryption in transit: All data transmitted between your browser and jyo9 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The jyo9 platform is served exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on jyo9 databases — including identity documents and financial details — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to jyo9 staff and authorised contractors who have a legitimate operational need to access it. All access is logged and subject to periodic audit.
• Two-factor authentication (2FA): Internal systems handling player data require 2FA for all staff access. Players are also strongly encouraged to enable 2FA on their jyo9 accounts.
• Penetration testing: jyo9 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in its platform infrastructure before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to player privacy, jyo9 will notify affected players and relevant authorities within 72 hours of becoming aware of the incident, in line with applicable data protection obligations.

While jyo9 employs robust security measures, no internet-based platform can guarantee absolute security. Players are advised to use a strong, unique password for their jyo9 account, enable 2FA, and avoid accessing their account over unsecured public Wi-Fi networks.

Your Privacy Rights

As a player on jyo9, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact jyo9 at [email protected] with the subject line "Privacy Rights Request". We will respond within 10 business days.

• Right of access: You have the right to request a copy of the personal data jyo9 holds about you and to receive information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update most account details directly from your account settings page.
• Right to erasure: In certain circumstances, you have the right to request that jyo9 delete your personal data. This right is subject to limitations where retention is required by law — for example, transaction records subject to AML retention obligations cannot be deleted on request.
• Right to restrict processing: You may request that jyo9 limit the way it processes your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You have the right to object to the processing of your personal data where jyo9 relies on legitimate interests as the legal basis, including processing for direct marketing purposes.

Please note that jyo9 may need to verify your identity before processing a data rights request to ensure that data is not disclosed to an unauthorised person. Requests that cannot be fulfilled for legal or regulatory reasons will be accompanied by a clear explanation of the grounds for refusal.

Policy Updates & Contact

jyo9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, jyo9 will update the "Last updated" date at the top of this page and, where the changes are significant, will notify registered players via email or a prominent in-platform notice.

Players are encouraged to revisit this page periodically. Continued use of the jyo9 platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

For any privacy-related queries, data rights requests, or concerns about how jyo9 handles your personal information, please reach out directly:

• Email: [email protected] (subject line: "Privacy Rights Request" or "Privacy Enquiry")
• Response time: Within 2 business days for acknowledgement; within 10 business days for substantive responses
• Operating hours: Support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)