Privacy Policy

1 How We Use Your Personal Data

jya999 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data are as follows:

• Account management: Creating, maintaining, and administering your jya999 player account, including processing your login credentials and account settings.
• Transaction processing: Facilitating deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate financial records for each transaction.
• Identity verification and age checks: Confirming that you meet the 21+ age requirement and verifying your identity before processing significant withdrawals or at any point we are legally required to do so.
• Responsible gaming monitoring: Tracking gaming activity patterns to identify signs of problem gambling and enforcing deposit limits, time-outs, or self-exclusions requested by you or triggered by our responsible gaming systems.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Legal and regulatory compliance: Retaining records to satisfy any applicable legal obligations and responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the design, performance, and game selection of the jya999 platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and event updates relevant to jya999 where you have given consent or where we have a legitimate interest in doing so. You may opt out of these communications at any time.

2 Legal Bases for Processing

jya999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the jya999 Terms & Conditions, including account operation and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering record retention, and responding to lawful authority requests.
• Legitimate interests: Processing carried out to further jya999's legitimate business interests — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain optional features where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

3 How We Share Your Data

jya999 does not sell, rent, or trade your personal data to any third party for their independent commercial use. We may share your data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks such as Visa and Mastercard, solely for the purpose of processing your BDT deposits and withdrawals.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data required to deliver their games within the jya999 environment.
• Identity verification services: Third-party KYC (Know Your Customer) providers who assist with document verification and age checks. These providers act as data processors under our instruction.
• Legal and regulatory authorities: Competent governmental or regulatory bodies in any relevant jurisdiction where we are legally required to disclose data, such as in connection with an anti-money laundering investigation or court order.
• Service providers: Hosting, cloud infrastructure, customer support platform, and analytics vendors engaged by jya999 to operate the platform. All such vendors are bound by data processing agreements that restrict their use of your data to the stated purpose.

Any transfer of personal data to a recipient located outside Bangladesh will be subject to appropriate transfer mechanisms to ensure your data remains adequately protected.

4 Cookies and Tracking Technologies

jya999 uses cookies and similar tracking technologies on its platform to ensure proper functionality, enhance your experience, and gather analytical insights. The types of cookies we use include:

• Essential cookies: Strictly necessary for the platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting core platform functionality.
• Preference cookies: Remember your account settings and personal preferences, such as your preferred language and notification settings, so you do not need to re-configure them on each visit.
• Analytics cookies: Help us understand how players navigate jya999 — which pages are visited most, where sessions begin and end, and how players interact with game categories. This data is aggregated and anonymised.
• Marketing cookies: Used to deliver relevant promotional content within the jya999 platform, based on your gaming preferences and activity. These are only activated where you have provided consent.

You may manage your cookie preferences via your browser settings. Disabling essential cookies will impair the functionality of jya999 and may prevent you from logging in or completing transactions.

5 Data Retention

jya999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are as follows:

• Account data: Retained for the duration of your account with jya999, plus a minimum of five years following account closure to comply with anti-money laundering record-keeping obligations.
• Financial and transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years following account closure or the date of last transaction, whichever is later.
• Support communications: Retained for three years from the date of each communication, unless the subject matter relates to an ongoing legal matter in which case the communication will be retained until the matter is resolved.
• Gaming activity logs: Retained for five years for responsible gaming monitoring and dispute resolution purposes.
• Marketing consent records: Retained for three years from the date consent was given or last confirmed, to demonstrate compliance with consent requirements.

When data is no longer required, jya999 will securely delete or anonymise it so that it can no longer be associated with any individual player.

6 Data Security

jya999 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and jya999 servers.
• One-way hashing of account passwords — jya999 staff cannot access your plaintext password and will never ask you to share it.
• Role-based access controls ensuring that jya999 staff can only access personal data to the extent required by their specific job function.
• Regular security assessments, penetration testing, and vulnerability scanning of the jya999 platform infrastructure.
• Secure, encrypted storage of all identity verification documents and financial records.
• Two-factor authentication options available to players to add an additional layer of security to their accounts.

While jya999 takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

7 Your Privacy Rights

As a registered player on jya999, you hold a number of rights in relation to your personal data. You may exercise any of these rights by contacting us at [email protected]. We will respond to all verifiable requests within 30 days. Your rights include:

• Right of access: You may request a copy of the personal data jya999 holds about you, including a description of how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to erasure: You may request that jya999 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records as described in the Data Retention section above.
• Right to restrict processing: You may request that jya999 suspend the processing of your personal data in certain circumstances, such as while we investigate a dispute about the accuracy of that data.
• Right to data portability: Where technically feasible, you may request a copy of the personal data you have provided to jya999 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where jya999 processes your personal data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before your withdrawal.
• Right to object: You may object to jya999 processing your personal data for direct marketing purposes at any time, with no effect on your account or access to the platform.

8 Children and Underage Players

jya999 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not register an account, provide any personal information to jya999, or use any part of this platform. If jya999 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, any balance will be forfeited, and the personal data will be deleted in accordance with our data retention procedures. If you believe that a minor has registered an account on jya999, please contact us immediately at [email protected].

9 Third-Party Links and Services

The jya999 platform may reference or display content connected to third-party service providers, including game studios and payment partners. This Policy applies exclusively to personal data processed by jya999 in connection with your use of the jya999 platform. jya999 is not responsible for the privacy practices, security measures, or data handling policies of any third-party provider. We encourage you to review the privacy policies of any third party whose services you access in connection with your jya999 account.

10 Changes to This Privacy Policy

jya999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The most current version will always be published at jya999.onl/privacy-policy with the date of last revision shown at the top of the page. Where a change is material — such as a new category of data being collected, a new sharing arrangement with a third party, or a change to your rights — jya999 will notify registered players via the contact details held on their account before the change takes effect. Your continued use of jya999 following any update constitutes acceptance of the revised Policy.

11 Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how jya999 has handled your personal data, please contact our support team directly. All privacy-related enquiries are handled by our support team who are available 24 hours a day, seven days a week at Bangladesh Standard Time (UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Response time: We acknowledge all privacy enquiries within 48 hours and aim to provide a full response within 30 calendar days.
• Right to escalate: If you are not satisfied with our response, you have the right to escalate your concern through the applicable dispute resolution process described in our Terms & Conditions.