joya9 bast Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data joya9 bast collects from players in Bangladesh, the legal basis on which we process it, how we keep it secure, and the rights you hold over your own information. We encourage you to read this document carefully before creating your account.
Privacy Commitments
The cards below summarise joya9 bast's core privacy commitments. Full legal details for each commitment are provided in the numbered sections further down this page.
Every page on joya9 bast is served over HTTPS with SSL/TLS encryption. Your login credentials, payment details, and personal data are encrypted in transit and at rest, preventing interception by unauthorised third parties.
joya9 bast does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data may be shared with carefully vetted service providers only to the extent necessary to operate the platform.
Players have the right to access, correct, restrict, or request deletion of their personal data held by joya9 bast, subject to legal retention obligations. Submit any data request to our support team at [email protected].
joya9 bast uses cookies and similar technologies strictly for platform functionality, fraud prevention, and performance analytics. We do not deploy third-party advertising cookies or cross-site tracking technologies without your awareness.
We retain personal data only for as long as it is necessary for the purposes outlined in this policy or required by applicable law. Account data is typically retained for 5 years following account closure to meet financial record-keeping obligations.
joya9 bast does not knowingly collect or process personal data belonging to individuals under the age of 18. Any account identified as belonging to a minor will be closed immediately and associated data deleted in accordance with our age verification policy.
Data We Collect
When you register an account, use the joya9 bast platform, or interact with our customer support team, we collect certain categories of personal data. This section describes each category in detail so that you understand precisely what information joya9 bast holds about you.
1.1 Registration Data
When you create a joya9 bast account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and the username and password you choose for your account. This data is required to create and manage your account and to verify that you meet our minimum age requirement of 18 years.
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) obligations, joya9 bast may request copies of identity documents from players. Accepted documents include a valid Bangladesh National Identity Card (NID), passport, or other government-issued photo identification. We may also request proof of address, such as a recent utility bill or bank statement issued within the last 90 days. Where payment verification is required, we may request evidence of ownership of the payment method used, such as a screenshot of your bKash or Nagad wallet registration screen.
1.3 Financial Transaction Data
joya9 bast records details of every financial transaction conducted through your account. This includes deposit amounts, withdrawal amounts, payment method identifiers (e.g., your registered bKash number, Nagad number, or masked card number), transaction reference numbers, timestamps, and transaction statuses. Full card numbers and mobile wallet PINs are never stored by joya9 bast — these are handled exclusively by the respective payment processor.
1.4 Gameplay and Betting Data
We maintain records of your gameplay activity on the platform, including the games you play, betting amounts, game outcomes, session durations, and wagering history. This data is used for account management, bonus administration, responsible gaming monitoring, and fraud detection purposes.
1.5 Technical and Device Data
When you access joya9 bast, our servers automatically collect certain technical data about your device and connection. This includes your IP address, device type and model, operating system version, browser type and version, referring URL, and session timestamps. This information is used for security monitoring, fraud prevention, and platform performance optimisation.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, DOB, email, phone, username | Account creation & age verification |
| KYC Documents | NID copy, passport, proof of address | Identity verification & compliance |
| Financial Data | Transaction amounts, payment references | Payment processing & fraud prevention |
| Gameplay Data | Bets placed, game sessions, winnings | Account management & responsible gaming |
| Technical Data | IP address, device type, browser info | Security monitoring & performance |
| Communication Data | Support chat logs, email correspondence | Customer service & dispute resolution |
1.6 Communication Data
If you contact joya9 bast via live chat, email, or any other support channel, we retain records of those communications including the content of your messages, the date and time of contact, and the resolution outcome. This data helps us resolve disputes, train our support team, and improve the overall quality of our customer service.
How We Use Your Data
joya9 bast uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your consent or establishing a separate lawful basis for doing so.
2.1 Account Management
Your registration data is used to create, maintain, and manage your joya9 bast player account. This includes verifying your identity, processing your login sessions, sending you important account notifications (such as password reset requests and security alerts), and maintaining your account preferences and settings.
2.2 Payment Processing
We use your financial transaction data to process deposits and withdrawals via your chosen payment method — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. We share the minimum necessary transaction data with our payment processing partners to complete each transaction and to verify that payments originate from methods registered in your name.
2.3 Responsible Gaming Monitoring
joya9 bast takes its responsible gaming obligations seriously. We analyse your gameplay activity, session duration, deposit frequency, and betting patterns to identify indicators of potentially harmful gambling behaviour. Where such indicators are detected, our responsible gaming team may reach out to offer support resources or implement protective account measures in accordance with our Responsible Gaming Policy.
2.4 Fraud Prevention and Security
Technical and transaction data is used by joya9 bast's security team to detect, investigate, and prevent fraudulent activity, including account takeover attempts, payment fraud, bonus abuse, and the use of prohibited automated betting software. We may share data with fraud prevention services where necessary to investigate specific incidents.
2.5 Promotional Communications
With your consent, joya9 bast may use your email address and mobile number to send you promotional communications about bonuses, seasonal offers (such as those tied to Eid, Pohela Boishakh, and BPL season), and platform updates. You may withdraw your consent to receive marketing communications at any time by updating your account communication preferences or by contacting our support team.
2.6 Legal and Compliance Obligations
joya9 bast may be required to process and disclose certain player data in order to comply with applicable legal obligations, including responding to lawfully issued court orders, regulatory requests, or law enforcement enquiries. We will only disclose data to authorities where we are legally required or compelled to do so.
Legal Basis for Processing
joya9 bast processes your personal data on one or more of the following lawful bases, depending on the specific purpose and category of data involved:
- Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to operate your player account, process your transactions, and deliver the gaming services you have requested. Without this processing, we cannot provide the platform to you.
- Legal Obligation: Processing that is required for joya9 bast to comply with applicable law, including age verification requirements, financial record-keeping obligations, anti-money laundering (AML) screening, and responses to lawfully issued legal orders.
- Legitimate Interests: Processing carried out on the basis of joya9 bast's legitimate business interests, provided those interests are not overridden by your own privacy rights. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics used to improve the platform experience.
- Consent: Where no other lawful basis applies — most notably in the context of sending you optional marketing communications — joya9 bast will process your data only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing & Disclosure
joya9 bast does not sell your personal data to any third party. We share your data only in the circumstances described below, and only to the extent strictly necessary for each stated purpose.
4.1 Payment Processing Partners
To process deposits and withdrawals, joya9 bast shares the minimum necessary transaction data with our authorised payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and the relevant card networks (Visa and Mastercard). These partners process your payment data under their own privacy policies and security standards and are not permitted to use your data for any purpose beyond completing the specific transaction.
4.2 Game Software Providers
Games on the joya9 bast platform are supplied by certified third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session and gameplay data necessary to deliver and audit their game products on our platform. They operate under strict data processing agreements with joya9 bast and may not use player data for their own independent commercial purposes.
4.3 Identity Verification Services
joya9 bast may use third-party identity verification services to assist with KYC compliance. Where such services are used, your submitted identity documents and personal details may be shared with the verification provider for the sole purpose of confirming your identity and age. All such providers are contractually bound to maintain the confidentiality and security of your data.
4.4 Legal and Regulatory Disclosure
joya9 bast may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, where disclosure is necessary to protect the rights or safety of joya9 bast, its players, or the public, or where disclosure is required in connection with legal proceedings.
4.5 Business Transfers
In the event that joya9 bast undergoes a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer via the platform or via their registered email address prior to the transfer taking effect, where practicable.
Data Retention
joya9 bast retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The table below summarises our standard retention periods for each major category of player data.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Legal & financial record-keeping obligations |
| KYC Documents | Duration of account + 5 years post-closure | AML compliance & regulatory requirements |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping & dispute resolution |
| Gameplay & Betting History | Duration of account + 2 years post-closure | Responsible gaming monitoring & dispute evidence |
| Technical & Device Logs | 13 months from collection | Security monitoring & fraud investigation |
| Customer Support Records | 3 years from last interaction | Quality assurance & dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Demonstrating lawful basis for communications |
Upon expiry of the applicable retention period, joya9 bast will securely delete or anonymise your personal data so that it can no longer be linked to your identity. Where anonymisation is not technically feasible, data will be deleted using industry-standard secure deletion methods.
Your Privacy Rights
As a player on joya9 bast, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at with your account details and a clear description of your request. We will acknowledge all rights requests within two BST business days and provide a substantive response within thirty days.
7.1 Right of Access
You have the right to request a copy of all personal data that joya9 bast holds about you. This is commonly referred to as a Subject Access Request (SAR). We will provide your data in a structured, commonly used, machine-readable format wherever technically feasible.
7.2 Right to Rectification
If any personal data held by joya9 bast is inaccurate or incomplete, you have the right to request that we correct it. For basic account details such as your email address or phone number, you may be able to update these directly from your account settings page without contacting support.
7.3 Right to Erasure
You have the right to request that joya9 bast delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other lawful basis applies, or where the data has been processed unlawfully. This right is subject to our legal obligations to retain certain data categories for regulatory compliance purposes as described in Section 6.
7.4 Right to Restrict Processing
In certain circumstances, you have the right to request that joya9 bast restricts the processing of your personal data — for example, while we investigate a dispute about the accuracy of your data, or where you have objected to processing based on legitimate interests while we assess your objection.
7.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that we transmit it directly to another data controller where technically feasible.
7.6 Right to Object
You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling based on those interests. You also have an absolute right to object to the use of your data for direct marketing purposes, and joya9 bast will honour such objections without requiring you to provide any justification.
7.7 Right to Withdraw Consent
Where joya9 bast processes your data on the basis of consent — primarily for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Data Security
joya9 bast implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The security framework applied to the joya9 bast platform includes the following key controls:
- SSL/TLS Encryption: All data transmitted between your device and the joya9 bast platform is encrypted using industry-standard SSL/TLS protocols. This applies to every page on the platform, not only login or payment pages.
- Encrypted Data Storage: Sensitive personal data — including identity documents, payment references, and account credentials — is stored in encrypted form in our secured database infrastructure. Encryption keys are managed separately from the encrypted data.
- Access Controls: Access to player personal data within joya9 bast's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal data access is logged and audited.
- Two-Factor Authentication (2FA): joya9 bast strongly encourages all players to enable 2FA on their accounts. This provides an additional layer of protection against unauthorised account access even in the event that your password is compromised.
- Fraud Detection Systems: Our automated security systems continuously monitor login activity, transaction patterns, and gameplay behaviour for indicators of account compromise or fraudulent activity. Suspicious activity triggers immediate alerts to our security team.
- Regular Security Reviews: joya9 bast conducts periodic reviews of our security policies, infrastructure, and procedures to ensure they remain effective against evolving threats. Our third-party game providers are also required to maintain their own security certifications.
8.1 Data Breach Response
In the unlikely event of a personal data breach affecting joya9 bast players, our security team will take immediate steps to contain the breach and assess its scope and impact. Affected players will be notified via their registered email address as promptly as practicable, with clear information about what data was involved, what steps joya9 bast has taken in response, and what actions we recommend you take to protect yourself.
8.2 Player Security Responsibilities
While joya9 bast takes extensive measures to protect your data on our side, you also play an important role in keeping your account secure. You should use a strong, unique password for your joya9 bast account, never share your login credentials with any other person, ensure that you log out of your account when using a shared or public device, and contact our support team immediately if you suspect that your account has been accessed without your authorisation.
8.3 Contact for Privacy Enquiries
If you have any questions, concerns, or complaints about how joya9 bast handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact our dedicated privacy support team at . We aim to acknowledge all privacy-related enquiries within two BST business days and to resolve them fully within thirty calendar days.
Changes to This Privacy Policy
joya9 bast reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, changes to our data processing practices, or improvements to our platform. When we make material changes to this policy, we will notify registered players via their registered email address and by displaying a prominent notice on the platform for a period of at least fourteen days before the changes take effect.
The effective date at the top of this document will always reflect the date on which the most recent version of this policy came into force. We encourage you to review this Privacy Policy periodically to stay informed about how joya9 bast protects your personal data. Your continued use of the joya9 bast platform following the effective date of any revised policy constitutes your acknowledgement of the updated terms.
Archived versions of previous Privacy Policy documents are available on request by contacting our support team. If any amendment reduces your privacy protections in a material way and you do not wish to accept the updated terms, you have the right to close your account prior to the effective date of the change. Please refer to our Terms & Conditions for the account closure procedure.
Explore joya9 bast Responsibly
Now that you understand how joya9 bast protects your personal data, you can enjoy our full range of games with confidence. Dive into cricket betting, live casino tables, slots, and more — all secured with SSL encryption and fair play certification.
18+ For adults aged 18 and above only. Play responsibly. joya9 bast is committed to safe and fair gaming for all eligible players in Bangladesh.