Your Privacy at jya99

jya99 is an online casino and sports betting platform operated as a safe, reliable entertainment service for adult players across Bangladesh. Our platform offers a wide range of casino games, live dealer tables, and cricket betting markets, all accessible at jya99.bio.

As an operator that handles financial transactions, identity documents, and personal account data on behalf of players throughout Bangladesh — including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — we recognise that the responsible handling of personal information is fundamental to the trust our players place in us.

This Policy applies to all personal data processed in connection with the jya99 platform, whether that data is provided directly by you during registration, collected automatically during your use of the platform, or received from third-party service providers acting on our behalf. It applies to all users of the platform regardless of their location within Bangladesh.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to how we manage your account and safeguard your wellbeing as a player.

jya99 collects personal data across several categories depending on your level of engagement with the platform. The following table summarises the primary data types we process:

We do not collect sensitive personal data (such as health information, religious beliefs, or political opinions) unless it is voluntarily disclosed to us in the context of a responsible gaming request, in which case it is treated with the highest level of confidentiality and used solely to provide the appropriate support.

jya99 collects personal data through the following channels:

• Direct submission: Data you actively provide when completing the registration form, updating your account profile, submitting identity verification documents, initiating a deposit or withdrawal, or contacting our support team.
• Automated technical collection: Data collected automatically when you access the jya99 platform, including IP address, device fingerprint, browser characteristics, and session behaviour, gathered through server logs and first-party cookies.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay following a completed deposit or withdrawal. We receive only the data necessary to reconcile the transaction — we do not receive your full mobile banking credentials.
• Identity verification partners: Where we engage a third-party KYC (Know Your Customer) service to verify identity documents, we may receive a verification outcome and a confidence score from that service. The underlying document images are processed securely and are not retained by jya99 beyond the verification period.
• Fraud prevention services: Technical risk signals (such as device reputation scores and IP risk ratings) received from anti-fraud tools that help us protect the integrity of the platform.

jya99 does not purchase personal data from data brokers or any other third-party data aggregators.

For each category of personal data we process, we rely on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between jya99 and you as a registered player — including account creation, payment processing, game delivery, and withdrawal management. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement bodies.
• Legitimate interests: Processing conducted for purposes that serve the legitimate operational interests of jya99, provided those interests are not overridden by your privacy rights. This includes fraud prevention, platform security monitoring, improving game performance, and responsible gaming analytics.
• Consent: Where we rely on your consent as the legal basis for processing — for example, in relation to optional marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing that took place prior to the withdrawal.

jya99 uses the personal data it collects exclusively for the following defined purposes:

• Account management: Creating and maintaining your jya99 account, authenticating your identity at login, and managing account settings and preferences.
• Age and identity verification: Confirming that all players are aged 21 or above and that account information is accurate, in compliance with our responsible gaming commitments.
• Payment processing: Executing deposit and withdrawal transactions in BDT via bKash, Nagad, Rocket, and Upay, and reconciling your account balance accordingly.
• Game delivery: Enabling access to casino games, live dealer tables, slots, and cricket betting markets, and recording game outcomes to your account history.
• Responsible gaming: Monitoring wagering patterns to identify early indicators of problem gambling behaviour, enforcing self-exclusion requests, and administering deposit and session limits.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited activities as defined in our Terms & Conditions.
• Customer support: Responding to enquiries, processing complaints, and providing technical assistance related to your account or any game.
• Legal compliance: Meeting obligations under applicable laws, including record-keeping for financial transactions and responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to understand player preferences, optimise the platform's performance, and improve the overall user experience.
• Marketing communications (with consent only): Sending promotional offers, bonus announcements, and platform updates to players who have explicitly opted in to receive such communications. You may opt out at any time.

jya99 does not use automated decision-making or profiling in a manner that produces legal effects or similarly significant effects without human oversight, except where such processing is required for fraud prevention or responsible gaming compliance.

jya99 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following strictly defined circumstances:

• Payment processors: We share the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay to execute your deposit and withdrawal instructions. These providers process data solely under our instruction and are bound by their own privacy and data protection obligations.
• Identity verification providers: We may share identity document data with a trusted KYC service provider for the sole purpose of verifying your age and identity. The provider is contractually prohibited from using this data for any other purpose.
• Game software providers: When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain technical session data (such as player session token and bet data) is transmitted to the game server. These providers receive no personally identifiable data beyond what is technically required to run the game session.
• Fraud and security services: Technical risk signals may be shared with anti-fraud platforms to assess the legitimacy of transactions and protect all players on the platform.
• Legal and regulatory authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally compelled to do so, or where we believe disclosure is necessary to prevent fraud, protect the safety of our players, or cooperate with a lawful investigation.
• Business transfers: In the event that jya99 undergoes a business restructuring, merger, or acquisition, personal data held by jya99 may be transferred to the successor entity. Affected players will be notified in advance and given the opportunity to close their accounts if they do not consent to the transfer.

jya99 uses first-party cookies and similar tracking technologies to operate and improve the platform. We do not use third-party advertising cookies or cross-site tracking technologies.

The following categories of cookies are in use on the jya99 platform:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without disrupting your ability to use the platform.
• Functional cookies: Used to remember your preferences such as language settings and display preferences. These cookies improve your experience but are not essential to core functionality.
• Analytics cookies: First-party analytics cookies that help us understand how players navigate the platform, which pages are most visited, and where technical issues occur. All data collected through analytics cookies is aggregated and anonymised before analysis.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection, session hijacking prevention, and unusual login pattern detection.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the platform and may prevent you from accessing your account.

jya99 retains personal data for the minimum period necessary to fulfil the purposes outlined in this Policy, subject to any longer retention periods required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where anonymised data is retained for statistical or analytical purposes, it is no longer considered personal data and is not subject to this Policy.

As a registered player on the jya99 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 5 business days of receiving a valid, verified request.

• Right of access: You have the right to request a copy of the personal data that jya99 holds about you, along with information about how it is being used and shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please include the specific data point and the correct value in your request.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the processing is unlawful. Note that we may be required to retain certain data to comply with legal obligations even after a deletion request, as set out in the retention schedule in Section 8.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including any profiling carried out for responsible gaming purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will not charge a fee for responding to a rights request unless the request is manifestly unfounded, excessive, or repetitive. In such cases, we may charge a reasonable administrative fee or decline to act, and we will notify you accordingly.

The jya99 platform is an adult entertainment service. Access is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21.

If you believe that a minor has registered on the jya99 platform or has otherwise provided personal data to us, please contact [email protected] immediately. Upon verification, we will promptly close the account, delete all associated personal data, and reverse any transactions associated with the underage account to the extent practicable.

jya99 employs age verification procedures during the registration process and reserves the right to request identity documents at any time to confirm that a player meets the minimum age requirement. Any account found to belong to a person under the age of 21 will be permanently closed without exception.

jya99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and jya99's servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• AES-256 encryption at rest for all sensitive personal data stored in our databases, including identity documents, financial records, and authentication credentials.
• Password hashing: User passwords are never stored in plain text. We apply a modern, salted cryptographic hashing algorithm to ensure that even in the event of a data breach, stored password hashes cannot be trivially reversed.
• Access controls: Access to personal data within jya99's systems is restricted on a strict need-to-know basis. Support staff can access only the data necessary to resolve your enquiry; full account data is accessible only to senior compliance and security personnel.
• Regular security audits: Our platform undergoes periodic independent security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection: Automated systems monitor network traffic and server activity in real time to detect and respond to suspicious activity, including brute-force login attempts, SQL injection attempts, and unusual data access patterns.
• Incident response plan: jya99 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, affected individuals will be notified within 72 hours of our becoming aware of the incident, where technically feasible.

While jya99 takes every reasonable measure to protect your data, no digital system can guarantee absolute security. You also play an important role in keeping your account secure — please refer to the security guidance in our Terms & Conditions for best practices around password management and account access.

The jya99 platform may contain references to or integrations with third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these providers' game engines are embedded within the jya99 platform, they operate under their own privacy frameworks and data handling practices.

jya99 is not responsible for the privacy practices of any third-party entity, including game studios, payment processors, or any other external service whose interface may be accessible from within the jya99 platform. We encourage you to review the privacy policies of any third-party service you interact with.

Within the jya99 platform itself, we do not embed third-party advertising networks, social media tracking pixels, or external analytics services that would share your behavioural data with parties outside of jya99's direct control. All analytics conducted on player behaviour is carried out using first-party tools under jya99's exclusive management.

jya99 reserves the right to update or amend this Privacy Policy at any time. The most current version of the Policy will always be accessible at jya99.bio/privacy-policy, and the effective date at the top of the document will be updated accordingly.

Where changes to this Policy are material — for example, where we introduce a new category of data collection, change the legal basis for processing, or modify our data sharing practices — we will provide advance notice via email to your registered address or via a prominent on-site notification, no less than 7 days before the changes take effect.

Your continued use of the jya99 platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the platform and contact [email protected] to arrange account closure and data deletion where applicable.

We encourage you to review this Policy periodically, even in the absence of a formal notification, to stay informed about how jya99 is protecting your personal data.

If you have any questions, concerns, or complaints about how jya99 handles your personal data, or if you wish to exercise any of the rights described in Section 9, please contact our data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "PRIVACY REQUEST" or "DATA COMPLAINT" in your subject line so your message is routed to the appropriate team member without delay.
• Response time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 5 business days. Complex requests involving large data volumes may require up to 30 days; we will inform you if this is the case.
• Verification: To protect your privacy, we will verify your identity before processing any rights request. Please be prepared to confirm your registered username, email address, and one additional piece of identifying information.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to a senior member of our compliance team by responding to our initial reply and requesting escalation. jya99 treats all privacy complaints with the utmost seriousness and will provide a formal written response to all escalated matters within 10 business days.