jayu9 Privacy Policy — Your Data, Protected

1. Introduction and Scope

This Privacy Policy ("Policy") describes how jayu9 ("we", "us", "the Platform") collects, processes, stores, discloses, and protects personal data relating to individuals ("Players", "Users", "you") who access or use the jayu9 website at jayu9.org, including all associated services, features, games, betting markets, and payment functions. This Policy applies to all jayu9 Players located in Bangladesh and is written in compliance with general data protection principles applicable to online gaming platforms operating in the Bangladesh market.

By creating a jayu9 account or using any part of the jayu9 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not use jayu9. This Policy should be read alongside jayu9's Terms & Conditions, which govern the overall use of the platform.

2. Personal Data We Collect

jayu9 collects personal data from three primary sources: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information obtained from third-party payment processors and identity verification providers where required for KYC compliance. The categories of data collected are as follows:

Registration Data (provided by you)

• Full legal name, date of birth, and gender as provided during account registration.
• Bangladesh mobile phone number used as your primary account identifier and for SMS verification.
• Email address, if provided, used for account notifications and support correspondence.
• Username and password (password stored as an irreversible cryptographic hash — never in plain text).

Technical and Usage Data (generated automatically)

• IP address, device type, operating system version, and browser type collected at each login session for fraud prevention and security monitoring purposes.
• Session timestamps, pages visited within jayu9, game play history (games launched, bet amounts, outcomes), and betting market interactions — used for platform improvement and responsible gaming monitoring.
• Cookie identifiers and similar tracking technologies — see Section 8 (Cookies) for full details.

KYC and Payment Data (from third-party providers)

• Government-issued photo ID details (National ID card, passport) submitted for identity verification — stored in encrypted form and retained only for the period required by our compliance obligations.
• bKash, Nagad, Rocket, or Upay mobile number associated with your payment transactions — used solely for processing deposits and withdrawals and for payment method verification.
• Transaction reference numbers and payment confirmation records — retained for accounting, dispute resolution, and anti-money laundering compliance purposes.

3. How We Use Your Personal Data

jayu9 uses personal data collected from Players strictly for the following lawful purposes. We do not use your data for any purpose that is incompatible with the reasons it was originally collected:

• Account creation and management: to create, verify, maintain, and close your jayu9 account, including identity verification (KYC) as required by our compliance programme.
• Transaction processing: to process deposits, withdrawals, and bonus credits to and from your jayu9 wallet via bKash, Nagad, Rocket, Upay, and bank card payment methods.
• Platform delivery and improvement: to operate, maintain, and improve the games, betting markets, and technical features available on jayu9, including analysis of aggregate (anonymised) usage data to identify areas for platform enhancement.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, and other prohibited activities using automated monitoring systems and manual review.
• Responsible gaming: to monitor Player activity for signs of problem gambling, deliver self-imposed limit reminders and cool-off period enforcements, and respond to self-exclusion requests in accordance with our Responsible Gaming policy.

Customer support: to respond to support queries, account complaints, withdrawal disputes, and verification requests submitted to [email protected]. Support correspondence is retained for a minimum of 12 months for quality assurance and dispute resolution purposes.

4. Data Sharing and Third Parties

jayu9 does not sell, rent, or trade your personal data to any third party for commercial, marketing, or advertising purposes. We share personal data with third parties only where strictly necessary to deliver the jayu9 service, comply with legal obligations, or protect the security of the platform and its users. Third-party recipients of your personal data and the basis for each sharing arrangement are as follows:

Payment Processors

• bKash, Nagad, Rocket, and Upay mobile money operators receive your registered mobile number and transaction amount solely for the purpose of processing deposits and withdrawals. These operators are subject to their own privacy policies and Bangladesh Bank regulations.
• Visa and Mastercard card payment processors receive your card details and billing name for the purpose of bank card transaction authorisation. Card data is processed in accordance with PCI-DSS standards and is never stored on jayu9 servers.
• Identity verification (KYC) service providers receive a copy of your submitted government-issued ID for the purpose of age and identity verification. These providers are contractually bound to process your data solely for KYC purposes and to delete it after the verification process is complete.

Legal and Regulatory Authorities

• jayu9 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, legal process, or in response to a lawful request from a competent authority. In all such cases, jayu9 will disclose the minimum amount of data necessary to comply with the legal obligation.
• In the event of a business transfer or acquisition involving jayu9, personal data held by jayu9 may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained by the acquirer.

Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive a session token and anonymised player identifier for the purpose of delivering game content and maintaining game session continuity. These providers do not receive your name, contact details, or payment information.

5. Data Security

jayu9 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and jayu9 servers, ensuring that login credentials, payment data, and personal information cannot be intercepted in transit.
• Passwords stored exclusively as salted cryptographic hashes using industry-standard algorithms. jayu9 support staff cannot view or recover your password — if you lose access, a secure password reset process is available.
• Access controls restricting employee access to personal data on a strict need-to-know basis. Customer data is never accessible to staff whose roles do not require it.
• Regular security assessments and vulnerability testing of jayu9's platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and interests, jayu9 will notify affected Players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

6. Data Retention

jayu9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or compliance obligations. The following retention periods apply:

• Active account data (registration details, KYC documents, transaction records): retained for the lifetime of the account and for a minimum of 5 years following permanent account closure, to comply with anti-money laundering and financial record-keeping obligations.
• Support correspondence and dispute records: retained for a minimum of 12 months from the date the query or dispute was resolved, to enable quality assurance reviews and to support any follow-up investigations.
• Technical and usage logs (IP addresses, session logs, device identifiers): retained for up to 90 days for fraud detection and security monitoring purposes, after which they are automatically deleted or anonymised.
• Marketing and promotional communication preferences: retained for the duration of your account and deleted upon request or account closure, whichever comes first.
• Self-exclusion records: retained permanently, even after account closure, to prevent re-registration attempts by self-excluded Players in accordance with our Responsible Gaming obligations.

When personal data is no longer required for any retention purpose, jayu9 securely deletes or anonymises it using industry-standard data destruction methods. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for platform analytics and improvement purposes.

7. Your Rights Over Your Personal Data

As a jayu9 Player, you have the following rights with respect to the personal data we hold about you. To exercise any of the rights listed below, submit a written request to [email protected] from the email address or mobile number registered on your jayu9 account. jayu9 will respond to all verified data rights requests within 30 calendar days:

• Right of access: you may request a copy of all personal data that jayu9 holds about you, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right of rectification: if any personal data jayu9 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Account details such as your registered name and date of birth can only be corrected upon submission of supporting identity documentation.
• Right of erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent is the legal basis for processing). This right is subject to jayu9's legal obligations to retain certain data for compliance purposes.
• Right to restrict processing: you may request that jayu9 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to object: you may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, in which case jayu9 will assess whether its interests override your rights in the specific circumstances.
• Right to data portability: you may request that jayu9 provides you with a copy of your personal data in a structured, commonly used, machine-readable format (CSV or JSON), covering registration data and transaction history.

jayu9 will not charge a fee for processing data rights requests in the majority of cases. Where a request is manifestly unfounded or excessive (for example, due to its repetitive nature), jayu9 reserves the right to charge a reasonable administrative fee or to decline the request, with written reasons provided.

8. Cookies and Tracking Technologies

jayu9 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, detect fraud, and analyse platform usage. The following categories of cookies are used on jayu9:

• Strictly necessary cookies: these are essential for the platform to function. They maintain your login session, store your language preference, and carry your session security token. Without these cookies, jayu9 cannot operate. They cannot be disabled.
• Functional cookies: these remember your platform preferences (such as notification settings and last-visited game category) to provide a more personalised experience on return visits. These cookies can be disabled via your device browser settings, though doing so may affect your experience on the platform.
• Analytics cookies: jayu9 uses anonymised analytics data (page views, session duration, feature usage rates) to understand how Players use the platform and to identify opportunities for improvement. Analytics data is processed in aggregate and cannot be used to identify individual Players.

jayu9 does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the jayu9 website. Your browsing behaviour on jayu9 is not used to serve targeted advertisements on other websites.

9. Children's Privacy

jayu9 is strictly an adult platform. Players must be 21 years of age or older to register and use jayu9 in Bangladesh. jayu9 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted during the account registration process, and jayu9 reserves the right to request documentary proof of age from any Player at any time.

If jayu9 discovers that personal data has been collected from a person under the age of 21, it will immediately close the relevant account, delete all associated personal data, and — where deposits were made — return any verified deposited funds to the originating payment method. If you believe that a person under the age of 21 has created a jayu9 account, please notify us immediately at [email protected].

10. Changes to This Privacy Policy

jayu9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make a material change to this Policy, we will update the revision date shown at the top of this page and will, where reasonably practicable, notify active Players via their registered contact details. The following types of changes may trigger a Policy update:

• Introduction of new data collection practices or processing purposes not covered by the current Policy.
• Changes to the categories of third parties with whom jayu9 shares personal data, including new payment provider integrations or KYC partner changes.
• Significant changes to data retention periods or security measures that materially affect how long your data is kept or how it is protected.

Your continued use of jayu9 after any Privacy Policy update constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of any changes. The most recent version of this Policy is always available at jayu9.org/privacy-policy.

11. Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy concern regarding jayu9's handling of your personal data, please contact jayu9's data support team in writing at [email protected]. Include your registered account mobile number or email address in your message so we can verify your identity before processing your request.

jayu9 will acknowledge all data rights requests within 5 business days and will provide a full response within 30 calendar days of receiving a verified request. In complex cases where additional time is required, jayu9 will notify you of the extension and the expected response date within the initial 30-day period. All privacy queries are handled in confidence and are not shared with any third party except where required to process your request.