joya11 Privacy Policy

This Privacy Policy ("Policy") describes how joya11 ("joya11", "we", "us", "our") — the operator of the online casino and sports betting platform accessible at joya11.club — collects, processes, stores, and protects the personal data of individuals who register accounts, access the platform, or otherwise interact with joya11's services ("Players", "you", "your").

joya11 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the personal data that is necessary to deliver our services, comply with legal and regulatory obligations, prevent fraud, and provide a safe and personalised experience for Players across Bangladesh.

By registering an account on joya11 or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read, understood, and agreed to the data practices described herein. This Policy should be read in conjunction with joya11's Terms & Conditions, which are accessible at /terms-conditions.

This Policy applies to all personal data collected through the joya11 website, mobile browser interface, customer support channels, and any other point of interaction between you and joya11. It does not apply to third-party websites or services that may be linked from within the joya11 platform.

joya11 collects personal data that falls into the following categories. The specific data collected will depend on how you interact with the platform and the services you use:

joya11 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data unless this is strictly required by applicable law or expressly requested as part of a mandatory regulatory compliance process. In such cases, you will be notified separately before such data is collected.

joya11 collects personal data through the following channels and mechanisms:

• Direct registration: When you create a joya11 account, you provide identity and contact data directly through the registration form.
• Account activity: As you use the platform — placing bets, playing games, making deposits and withdrawals — usage and financial data is generated and recorded automatically.
• Identity verification submissions: When completing KYC verification, you submit documents and images directly to joya11's compliance team.
• Customer support interactions: When you contact joya11 via live chat or email, the content of those communications is retained as communications data.
• Automated technical collection: Technical data including IP addresses and device information is collected automatically each time you access the joya11 platform, using server logs and cookie-based tracking.
• Payment processors: When you transact via mobile wallet services such as bKash, Nagad, Rocket, or Upay, confirmation and reference data is shared with joya11 by the payment provider to verify and reconcile your transaction.

joya11 uses your personal data for the following specific purposes. We will not use your data for any purpose that is incompatible with the reasons listed below:

• Account creation and management: To register your account, verify your identity, and manage your ongoing relationship with joya11 as a Player.
• Service delivery: To process your deposits and withdrawals, credit winnings to your account, and provide access to the full range of joya11 games and betting markets.
• Legal and regulatory compliance: To fulfil our obligations under anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any other applicable legal obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, duplicate account creation, money laundering, and any other misuse of the joya11 platform.
• Responsible gaming: To monitor gameplay patterns and, where appropriate, identify Players who may benefit from responsible gaming tools or intervention. This includes flagging unusual betting patterns or signs of problem gambling behaviour.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Platform improvement: To analyse aggregated usage data in order to identify bugs, improve platform performance, and enhance the overall Player experience.
• Promotional communications: With your explicit consent where required, to send you information about joya11 promotions, bonuses, and special offers relevant to your preferences. You may opt out of marketing communications at any time by contacting support.

joya11 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and joya11 — that is, to operate your account and deliver the gaming and betting services you have signed up for.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML legislation, KYC requirements, and any reporting obligations imposed by relevant authorities.
• Legitimate interests: Processing is necessary for joya11's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your consent — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

joya11 does not sell your personal data to third parties under any circumstances. We may share your data with the following categories of authorised third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment service providers: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners receive the minimum data necessary to process your financial transactions, verify payment references, and prevent fraud.
• Identity verification services: Third-party KYC and document verification providers may process identity documents on joya11's behalf to streamline the account verification process.
• Game content providers: Game studios and software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session data necessary to deliver their game content. These providers do not receive your identity or financial data.
• Security and fraud prevention services: Third-party security platforms may process technical data such as IP addresses and device fingerprints to identify and block fraudulent activity.
• Legal and regulatory authorities: joya11 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid legal process, or to protect the rights and safety of joya11 or its Players.

All third parties with whom joya11 shares personal data are required to process that data in accordance with applicable data protection standards. joya11 does not permit third parties to use your personal data for their own independent marketing or commercial purposes.

Given that joya11 serves Players primarily across Bangladesh, mobile wallet payments via bKash, Nagad, Rocket, and Upay represent the primary channel for deposits and withdrawals on the platform. The handling of payment-related data deserves specific attention:

• joya11 does not store your full mobile wallet PIN, password, or any authentication credential associated with your mobile wallet account.
• Payment transaction references, wallet account numbers (phone numbers linked to wallets), and transaction amounts are stored by joya11 for the purpose of reconciling your account balance, processing withdrawal requests, and maintaining AML-compliant financial records.
• In the event of a disputed transaction or a withdrawal verification request, joya11 may require you to confirm the mobile wallet number associated with your account. This confirmation process is conducted through our support channels and never requires you to disclose your wallet PIN or password.
• joya11 applies the principle of data minimisation when handling financial data: we retain only what is necessary for the stated purposes and delete financial records that are no longer required, subject to mandatory legal retention periods.

joya11 uses cookies and similar tracking technologies to operate the platform, maintain your session, and collect usage data. A cookie is a small text file placed on your device when you visit the joya11 website. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as maintaining your login session, remembering your language preferences, and preventing cross-site request forgery. These cannot be disabled without impacting the basic functionality of joya11.
• Performance and analytics cookies: These cookies collect anonymised information about how Players use the platform — for example, which pages are visited most frequently and whether error messages are displayed. This data helps joya11 improve the platform experience.
• Functionality cookies: These cookies remember choices you have made on the platform, such as preferred game categories or display settings, to provide a more personalised experience.
• Security cookies: These cookies support joya11's fraud detection and account security systems by identifying unusual device behaviour or login patterns.

You can manage cookie preferences through your browser settings. Blocking all cookies may affect your ability to use certain features of the joya11 platform. joya11 does not use advertising or third-party retargeting cookies.

joya11 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the joya11 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Secure data storage: Personal data is stored on secure servers with restricted access controls. Access to personal data is limited to joya11 personnel and authorised service providers who require it to perform their functions.
• Access logging and monitoring: All access to systems containing personal data is logged and subject to ongoing monitoring. Suspicious activity triggers automatic alerts and investigation.
• Password security: Account passwords are stored in hashed form and are never accessible in plaintext, even to joya11 staff.
• Periodic security reviews: joya11 conducts regular reviews of its security infrastructure to identify vulnerabilities and ensure that protections remain effective against evolving threats.

While joya11 employs robust security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their joya11 accounts and to enable any available two-factor authentication options. If you believe your account has been compromised, contact the joya11 support team at [email protected] immediately.

joya11 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active accounts: Personal data associated with an active joya11 account is retained for the duration of the account's active status and for a reasonable period thereafter to accommodate any pending transactions, disputes, or regulatory requirements.
• Closed accounts: Following the closure of a joya11 account — whether at the Player's request or by joya11 — personal data is retained for a minimum period required by applicable AML and financial record-keeping obligations. This period is typically five years from the date of account closure, unless a longer retention period is mandated by law.
• KYC documents: Identity verification documents are retained for the period required by regulatory compliance obligations. Once this period has elapsed, documents are securely destroyed.
• Support communications: Customer support correspondence is retained for a period of three years from the date of the last interaction, to facilitate dispute resolution and quality assurance.
• Technical and usage data: Anonymised aggregated usage data may be retained indefinitely for analytics and platform improvement purposes, as it no longer constitutes personal data once anonymised.

As a Player on the joya11 platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact joya11 at [email protected] with a clear description of your request and your registered account details:

• Right of access: You have the right to request a copy of the personal data joya11 holds about you and to receive information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by joya11 be corrected or updated without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to joya11's legal and regulatory retention obligations.
• Right to restriction of processing: You have the right to request that joya11 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on joya11's legitimate interests, including direct marketing.
• Right to withdraw consent: Where joya11 processes your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

joya11 aims to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to a further 60 days, in which case you will be notified of the extension and the reasons for it.

joya11 is strictly an adults-only platform. Our services are not directed at, and are not intended for use by, any person under the age of 18. joya11 does not knowingly collect personal data from individuals under 18 years of age.

If joya11 discovers or has reason to believe that a registered account belongs to a person under the age of 18, the account will be immediately suspended, all personal data associated with the account will be reviewed, and appropriate action will be taken in accordance with our Terms & Conditions and applicable law. Any funds deposited by a minor will be returned to the payment source used, and no winnings will be paid out.

If you are a parent or guardian and believe that a minor in your care has registered a joya11 account or submitted personal data to our platform, please contact us immediately at [email protected] so that we can take prompt corrective action.

joya11 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the effective date at the top of this document will be updated. Where changes are significant and affect how we process your personal data in a manner that requires your renewed consent or awareness, joya11 will notify registered Players via email or a prominent in-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how joya11 handles your personal data. Your continued use of the joya11 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of those changes. If you do not agree with any update to this Policy, you should discontinue use of the platform and contact support to arrange account closure.

For any questions, concerns, or requests related to this Privacy Policy or the personal data joya11 holds about you, please contact the joya11 data team using the details below. All data-related enquiries are handled with strict confidentiality:

• Email: [email protected]
• Subject line for data requests: Please use "Privacy Request – [Your Username]" to ensure your enquiry is routed to the correct team.
• Live Chat: Available 24/7 through the joya11 platform for general privacy queries
• Response time: joya11 aims to acknowledge all privacy-related requests within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 days.

When submitting a data request, please include your registered username, the email address or mobile number associated with your account, and a clear description of your request. For identity verification purposes, joya11 may ask you to confirm additional account details before processing certain types of data requests.