Privacy Policy — How jyo9 Collects, Uses, and Protects Your Data

1 Introduction

jyo9 is an online sports betting and live casino platform serving players in Bangladesh. As a platform that handles real-money transactions and identity-sensitive processes such as Know Your Customer (KYC) verification, jyo9 necessarily collects and processes certain categories of personal data in the ordinary course of operating the service.

We are committed to handling that data responsibly, transparently, and in a manner consistent with accepted data protection principles. This Policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the jyo9 platform. If at any point you have questions that this Policy does not answer, you are encouraged to contact our support team directly.

This Policy should be read alongside the jyo9 Terms & Conditions, which form the broader contractual framework governing your use of the platform.

2 Data We Collect

jyo9 collects personal data in three primary ways: data you provide directly to us, data generated automatically through your use of the platform, and data we receive from third-party service providers. The categories of data we may collect include:

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and any other information submitted when creating a jyo9 account.
• Identity verification (KYC) data: Copies of government-issued identification documents such as a National Identity Card (NID) or passport, and proof of address documentation where required.
• Payment data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank account references, and transaction records associated with deposits and withdrawals.
• Communications data: Messages, enquiries, and complaint records submitted to jyo9's customer support team.
• Responsible gaming data: Self-exclusion requests, deposit limit preferences, and cooling-off period instructions submitted through your account settings or support channels.

2.2 Data Generated Automatically

• Technical data: IP address, device type, operating system, browser type and version, and screen resolution collected when you access jyo9.
• Usage data: Pages visited, games accessed, bet history, session duration, click patterns, and other interaction data generated through your use of the platform.
• Cookie data: Session identifiers and preference data stored via cookies and similar technologies as described in Section 6 of this Policy.
• Log data: Server-side logs recording access timestamps, error events, and platform activity associated with your account.

2.3 Data from Third Parties

• Payment verification data: Transaction status and identity confirmation signals returned by bKash, Nagad, Rocket, Upay, and connected bank partners when processing deposits or withdrawals.
• Fraud and risk data: Risk signals and fraud indicators from third-party fraud prevention tools used to protect the integrity of the platform.
• Game provider data: Game session records and outcome data supplied by third-party game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe in connection with casino and live casino products.

3 How We Use Your Data

jyo9 uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Creating and managing your jyo9 account	Registration data, technical data
Verifying your identity (KYC) before processing withdrawals or large transactions	KYC data, registration data
Processing deposits and withdrawals via supported payment methods	Payment data, payment verification data
Providing customer support and resolving complaints	Communications data, registration data, usage data
Delivering and improving platform features, games, and betting markets	Usage data, game provider data, cookie data
Detecting, investigating, and preventing fraud, money laundering, and prohibited conduct	Technical data, usage data, fraud and risk data, payment data
Sending account-related communications (transaction confirmations, security alerts, policy updates)	Registration data, communications data
Administering responsible gaming tools and self-exclusion requests	Responsible gaming data, registration data
Complying with applicable legal and regulatory obligations	All applicable data categories as required

jyo9 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review.

4 Legal Basis for Processing

jyo9 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and jyo9 — including account creation, transaction processing, and customer support — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legitimate interests: jyo9 processes certain data categories (including usage data and fraud risk data) to pursue legitimate business interests such as platform security, fraud prevention, and service improvement, where those interests are not overridden by your rights and interests.
• Legal obligation: Certain processing activities, including KYC verification and transaction record-keeping, are carried out to comply with applicable legal and regulatory obligations.
• Consent: Where jyo9 seeks to use your data for purposes not covered by the above bases — such as sending optional marketing communications — we will seek your explicit consent in advance. You may withdraw consent at any time by contacting our support team.

5 Data Sharing and Disclosure

jyo9 does not sell your personal data. We do not share your data with third parties for their own independent marketing purposes. However, in order to operate the platform, we share data with the following categories of recipients on a limited, need-to-know basis:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank receive transaction data necessary to process deposits and withdrawals on your behalf.
• Game content providers: Third-party game studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) receive session identifiers and game interaction data necessary to deliver their games and maintain game integrity.
• Identity verification and fraud prevention services: Third-party KYC and fraud risk partners may process identity document data and risk signals on jyo9's behalf for the purpose of account verification and fraud detection.
• Technology and infrastructure providers: Cloud hosting providers, database services, and platform infrastructure partners that store and process data on jyo9's behalf under data processing agreements that require them to maintain the security and confidentiality of that data.
• Legal and regulatory authorities: jyo9 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities when required to do so by applicable law, court order, or regulatory direction, or where jyo9 reasonably believes disclosure is necessary to protect the safety of the platform or its users.

6 Cookies and Tracking Technologies

jyo9 uses cookies and similar technologies (including local storage and session storage) to provide and improve the platform. The following categories of cookies are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They enable core features such as user authentication, session management, and security token validation. The platform cannot operate correctly without these cookies, and they cannot be disabled.

6.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language and display settings — so that the platform behaves consistently between sessions. Disabling these cookies may result in a degraded user experience.

6.3 Analytics Cookies

jyo9 uses anonymous analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. This data is aggregated and does not identify individual users. It helps jyo9 make informed decisions about platform improvements.

You can manage cookie preferences through your browser settings. Note that blocking all cookies may impair your ability to log in or use core jyo9 platform features.

7 Data Retention

jyo9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's activity on the jyo9 platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in accordance with standard financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Customer support communications: Retained for up to three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing consent records: Retained until consent is withdrawn, and for a reasonable period thereafter as evidence of the consent history.
• Closed or suspended accounts: Core account data and transaction records are retained following account closure for the minimum periods described above, after which data is securely deleted or anonymised.

8 Data Security

jyo9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jyo9's servers.
• Encryption at rest for sensitive data stored in jyo9's databases, including identity documents and payment references.
• Role-based access controls that restrict internal access to personal data to only those employees and contractors who require it to perform their job functions.
• Regular internal security reviews and vulnerability assessments of platform infrastructure.
• Incident response procedures to detect, contain, and address data security incidents in a timely manner.

While jyo9 employs robust security practices, no online platform can guarantee absolute security. You are responsible for protecting your own account credentials and for notifying jyo9 immediately at [email protected] if you suspect any unauthorised access to your account.

9 Your Rights

As a jyo9 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account details and a clear description of your request. jyo9 will respond within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data jyo9 holds about you and information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held on your account.
• Right to erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, subject to jyo9's legal and regulatory retention obligations.
• Right to restrict processing: You may request that jyo9 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where technically feasible and legally applicable, you may request that jyo9 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where jyo9 relies on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to jyo9's processing of your personal data where that processing is based on legitimate interests, including objecting to direct marketing communications.

10 Children and Minors

The jyo9 platform is strictly intended for adults aged 21 years and above. jyo9 does not knowingly collect personal data from individuals under the age of 21. If jyo9 becomes aware that personal data has been collected from an individual who is under the minimum age, that data will be deleted promptly and the associated account will be closed.

If you believe that a minor has registered an account on jyo9 or has provided personal data to the platform without appropriate authorisation, please notify us immediately at [email protected] so that we can take appropriate action.

11 Changes to This Privacy Policy

jyo9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, jyo9 will notify registered players via the email address associated with their account or through a prominent notice on the platform prior to the changes taking effect.

Your continued use of the jyo9 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how jyo9 protects your personal data.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jyo9's data practices, please contact our support team using the details below. We are available 24 hours a day, 7 days a week, aligned with Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected]
• Platform: jyo9.io
• Operating Hours: 24/7, Bangladesh Standard Time (UTC+6)