jpya9 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how jpya9 ("the Platform", "we", "us", "our") collects, processes, stores, shares and protects the personal data of individuals ("you", "your") who access or use the jpya9 website and related services. This Policy applies to all players, registered account holders, and visitors to the jpya9 platform, regardless of whether they have completed the registration process.

By using the jpya9 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data as described herein, you should not use the platform. We encourage you to review this Policy periodically as it may be updated to reflect changes in our data practices or applicable law.

jpya9 collects personal data that is necessary to provide its services, comply with legal obligations, and maintain platform security. The categories of data we collect include:

• Registration data: full name, date of birth, mobile phone number, and any identity verification documents (such as a National ID card) submitted during the KYC process. This information is collected directly from you when you create a jpya9 account.
• Financial data: mobile money account numbers (bKash, Nagad, Rocket) used to process deposits and withdrawals, transaction reference numbers, deposit amounts, and withdrawal records. jpya9 does not store full payment card numbers or bank account details.
• Gameplay and betting data: records of games played, bets placed, sports markets wagered on, game outcomes, session start and end times, and platform features accessed. This data is used for account management, responsible gaming monitoring, and fraud detection.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and session duration. This data is collected automatically when you access the jpya9 platform and is used for security monitoring, platform optimisation, and fraud prevention.
• Communications data: the content and metadata of messages you send to jpya9 support, including support ticket content, timestamps, and resolution notes. This data is retained to maintain a complete record of your support history and to improve our service quality.

jpya9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law or regulatory authority. We collect only the minimum data necessary to fulfil the purposes set out in this Policy.

jpya9 uses the personal data it collects for the following purposes, each of which is supported by a lawful basis for processing as described in Section 3 below:

• Account creation and management: to register your account, verify your identity, maintain your account profile, process your deposits and withdrawals, and communicate account-related updates such as security alerts or balance changes.
• Platform provision and improvement: to deliver the games, sports betting markets and other features of the jpya9 platform, to diagnose and fix technical issues, and to develop new features and service improvements based on aggregated usage data.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent account activity, unauthorised access, money laundering, and other prohibited conduct as defined in our Terms and Conditions. This includes automated fraud scoring and manual review of flagged accounts.
• Responsible gaming compliance: to monitor gameplay patterns that may indicate problem gambling behaviour, to apply deposit limits, session limits, and self-exclusion orders requested by players, and to fulfil our obligations under responsible gaming best practice guidelines.
• Legal and regulatory compliance: to comply with applicable anti-money-laundering (AML) laws, KYC requirements, financial record-keeping obligations, and any lawful requests for information from competent authorities.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates by SMS or in-app notification, where you have not opted out of receiving such communications. You may withdraw your consent to marketing at any time through your account settings.

jpya9 processes personal data only where a lawful basis exists for doing so. The lawful bases we rely on are:

• Contractual necessity: processing required to fulfil our contractual obligations to you under our Terms and Conditions, including account registration, payment processing, and game provision.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML/KYC requirements, financial record-keeping rules, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: processing carried out in pursuit of jpya9's legitimate business interests in fraud prevention, platform security, responsible gaming compliance, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: where we rely on your consent for processing, such as for marketing communications, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

jpya9 does not sell your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: we share your mobile number and transaction data with bKash, Nagad and Rocket solely to process deposits and withdrawals. These providers are contractually bound to process your data securely and only for the purposes we specify.
• Game and technology providers: we share anonymised or aggregated gameplay data with game suppliers such as Pragmatic Play and Evolution Gaming for the purpose of game performance monitoring and RTP verification. We do not share personally identifiable information with game providers beyond what is technically required for game session management.
• Fraud prevention services: we may share account data and transaction patterns with third-party fraud detection services that help us identify and prevent fraudulent activity across the platform.
• Law enforcement and regulatory authorities: we will disclose personal data to law enforcement bodies, financial intelligence units, or other competent authorities where we are required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where we are legally permitted to do so.

All third parties with whom jpya9 shares personal data are required to implement appropriate technical and organisational measures to protect that data. We do not permit our third-party service providers to use your personal data for their own marketing purposes.

jpya9 uses cookies and similar tracking technologies to operate the platform, remember your session state, and analyse usage patterns. Cookies are small text files stored on your device when you visit our website. We use the following categories of cookies: essential cookies (required for the platform to function, including session management and authentication tokens), analytics cookies (used to measure how players interact with the platform, collected in aggregated and anonymised form), and preference cookies (used to remember settings such as your preferred language).

You may disable cookies through your browser settings; however, disabling essential cookies will impair your ability to use the jpya9 platform, including preventing you from logging in or placing bets. jpya9 does not use third-party advertising cookies or cross-site tracking technologies.

jpya9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general: account data is retained for the duration of your account and for a period of up to five years following account closure, to comply with financial record-keeping obligations; transaction records are retained for a minimum of five years in accordance with AML compliance requirements; support communications are retained for three years from the date of the last interaction; and technical log data (IP addresses, session logs) is retained for a maximum of 12 months from the date of collection.

When personal data is no longer required for its original purpose or for legal compliance, jpya9 will securely delete or anonymise it so that it can no longer be linked to an identifiable individual. We review our data holdings periodically and apply retention schedules consistently across all data categories.

As a data subject, you have the following rights with respect to your personal data held by jpya9. To exercise any of these rights, please contact jpya9 support using the contact details provided on this website. We will respond to all verified requests within a reasonable timeframe.

To exercise any of the rights listed above, contact jpya9 support at [email protected]. We may need to verify your identity before processing your request. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee.

jpya9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and the jpya9 platform, encrypted storage of sensitive account data, access controls that restrict data access to authorised personnel only, regular security audits and vulnerability assessments of the platform infrastructure, and staff training on data protection and privacy obligations.

While jpya9 takes reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jpya9 will notify you without undue delay and will take all reasonable steps to contain and remediate the breach.

jpya9 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly for adults aged 21 and above, as stated in our Terms and Conditions. If jpya9 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data from our records. If you believe that a person under the age of 21 has provided personal data to jpya9, please contact our support team immediately at [email protected].

jpya9 reserves the right to update or modify this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players via SMS or in-app notification and update the "Last updated" date at the top of this page. The revised Policy will take effect on the date it is published. Your continued use of the jpya9 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions or concerns about this Privacy Policy or about how jpya9 handles your personal data, please contact our support team at [email protected]. We are committed to addressing your privacy concerns promptly and transparently.