Data Protection & Privacy Commitment
joy9bd Privacy Policy
Your privacy matters to us. This Privacy Policy explains in plain, formal terms exactly what personal data joy9bd collects from users across Bangladesh, why we collect it, how we store and protect it, and what rights you hold over your own information. We are committed to handling your data with transparency, integrity, and care.
Overview
About This Policy
This Privacy Policy applies to all users who access, register on, or interact with the joy9bd platform — including the website at joy9bd.app, any associated mobile interfaces, and all services provided thereunder. By using joy9bd, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to these practices, please discontinue use of the platform immediately.
joy9bd serves players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We process personal data with care and in accordance with our internal data governance standards, employing industry-standard security measures throughout. The practices described in this policy apply equally regardless of which city or region of Bangladesh you are accessing our platform from.
We may update this Privacy Policy from time to time to reflect changes in our data practices , legal requirements, or the services we offer. When material changes are made, we will notify registered users via the email address associated with their account. The date at the top of this page always reflects the most recent revision. We encourage you to review this policy periodically to stay informed about how joy9bd protects your personal information.
SSL Encryption
All data transmitted between your device and the joy9bd platform is protected by industry-standard SSL/TLS encryption, ensuring your personal and financial information remains private at every step.
Access Controls
Access to your personal data within our systems is restricted to authorised personnel only. Our teams operate on a strict need-to-know basis, with role-based access controls enforced across all internal systems.
No Data Selling
joy9bd does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely to operate, improve, and secure the joy9bd platform and your account.
Minimal Collection
We follow a data minimisation principle — collecting only the information that is genuinely necessary for account operation, identity verification, payment processing, and regulatory compliance.
KYC Compliance
Identity documents collected during the KYC process are stored securely, used exclusively for verification purposes, and handled in accordance with anti-money-laundering compliance requirements.
User Control
You retain meaningful control over your personal data. You may request access, correction, or deletion of your data at any time by contacting our privacy team at [email protected].
Section 1
Data We Collect
Effective: January 2026joy9bd collects personal data from users through several channels: directly when you register an account or complete forms on the platform; automatically as you navigate the site; and occasionally from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described in detail below.
Registration Data. When you create an account on joy9bd, we collect your full legal name, date of birth, gender, email address, mobile phone number, and a username of your choosing. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 18 years.
Identity Verification (KYC) Data. Before processing your first withdrawal, we require completion of our Know Your Customer process. This involves collecting a scanned or photographed copy of a valid government-issued identity document (such as your Bangladesh National ID card, passport, or driving licence) and, where applicable, a selfie or liveness-check image for biometric verification purposes.
Payment Data. When you make a deposit or request a withdrawal, we collect the details of the payment method you use. For bKash, Nagad, Rocket, and Upay transactions, this includes your registered mobile number and transaction reference. For bank transfers via Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions, we collect your account name and bank reference details. We do not store full card numbers or mobile banking PINs.
Transactional Data. We maintain records of all financial transactions associated with your account, including deposit amounts, withdrawal requests, bet placements, game outcomes, bonus claims, and account balance history. These records are maintained for compliance, dispute resolution, and audit purposes.
Technical & Usage Data. When you access the joy9bd platform, our servers automatically record certain technical data, including your IP address, browser type and version, device type, operating system, screen resolution, referring URL, pages visited, time spent on each page, and clickstream data. This information is used to diagnose technical issues, improve platform performance, and detect fraudulent or suspicious activity.
Communications Data. If you contact our customer support team via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages, timestamps, and any resolution actions taken. This data is used for quality assurance and to maintain a history of your support interactions.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, National ID | Account registration, KYC verification, age check |
| Contact Data | Email address, mobile phone number | Account communication, 2FA, support |
| Payment Data | bKash/Nagad number, bank reference | Deposit & withdrawal processing, AML compliance |
| Transactional Data | Bet history, deposit/withdrawal records | Account management, dispute resolution, audit |
| Technical Data | IP address, device type, browser | Security monitoring, fraud detection, performance |
| Communications Data | Support chat logs, email correspondence | Quality assurance, dispute history |
Section 2
How We Use Your Data
joy9bd uses the personal data we collect for specific, legitimate purposes related to operating the platform, protecting our users, and complying with applicable obligations. We do not use your personal data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.
- Account Creation and Management. We use your registration data to create and maintain your joy9bd account, authenticate your identity when you log in, and manage your account preferences and settings.
- Identity Verification and Age Compliance. We process KYC data to verify that you are who you claim to be and that you meet the minimum age requirement of 18 years before allowing access to real-money gambling services.
- Payment Processing. We use your payment data to process deposits and withdrawals accurately, match transactions to the correct account, and comply with anti-money-laundering (AML) and Know Your Customer (KYC) obligations.
- Platform Security and Fraud Prevention. Technical and transactional data is analysed by our automated fraud detection systems and security team to identify and prevent unauthorised account access, collusion, bonus abuse, and financial fraud.
- Customer Support. Communications data enables our support team to assist you effectively, maintain continuity across support interactions, and resolve disputes with reference to a full interaction history.
- Responsible Gaming. We may use your account activity data — including session lengths, deposit frequency, and betting patterns — to identify users who may benefit from responsible gaming interventions such as deposit limit reminders or self-exclusion options.
- Service Improvement. Aggregated, anonymised usage data helps us understand how users interact with the platform, identify areas for improvement, and develop new features that better serve our Bangladeshi user base.
- Promotional Communications. Where you have consented to receiving marketing communications, we may use your contact details to send you information about promotions, bonuses, and seasonal offers (such as BPL season promotions or Eid special offers). You may withdraw this consent at any time by updating your notification preferences or contacting support.
joy9bd will never use your personal data to make automated decisions that produce legal or similarly significant effects about you without your knowledge. Any automated processing (such as fraud scoring) is always subject to human review before enforcement action is taken on your account.
Section 3
Data Sharing & Disclosure
joy9bd does not sell your personal data to third parties. We may, however, share your data with a limited set of trusted third parties where doing so is necessary to operate the platform, comply with legal obligations, or protect the interests of our users. All third parties with whom we share data are contractually required to handle it securely and to use it only for the specific purposes for which it was shared.
Payment Service Providers. To process your deposits and withdrawals, we share the minimum necessary payment and identity data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, and supported banking partners such as Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers process your data under their own privacy policies and applicable financial regulations.
Identity Verification Providers. We engage third-party KYC and identity verification service providers to assist with document authentication and biometric checks. These providers access only the identity documents and verification data necessary to complete the verification process and are prohibited from using this data for any other purpose.
Game Technology Providers. The games available on joy9bd are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account identifier and bet data in the course of delivering their games but do not receive your full identity or payment data.
Legal and Regulatory Disclosure. joy9bd may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure to the extent permitted by law.
Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our business assets, your personal data may be transferred to the acquiring entity. We will notify affected users in advance of any such transfer and provide information about any changes to this Privacy Policy that result from it.
No Cross-Border Sale of Data: joy9bd does not transfer or sell your personal data to overseas data brokers, advertising networks, or analytics resellers. Any data sharing with international game technology providers is limited to session and bet data strictly necessary for game functionality, with no personally identifiable financial information included.
Section 5
Data Security & Storage
joy9bd takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your information from unauthorised access, loss, alteration, or disclosure. No method of electronic transmission or storage is 100% secure; however, we apply industry best practices to minimise risk to the greatest extent possible.
Encryption at Rest and in Transit. All personal data stored in our databases is encrypted at rest using AES-256 encryption. All data transmitted between your browser or mobile device and our servers is encrypted in transit via TLS 1.2 or higher. Our SSL certificate is visible in your browser's address bar when accessing joy9bd.app.
Access Management. Internal access to databases containing personal data is controlled through role-based access management. Only authorised personnel with a documented operational need are granted access. All internal access events are logged and subject to periodic audit review.
Two-Factor Authentication. joy9bd offers two-factor authentication (2FA) via SMS OTP for all registered accounts. We strongly encourage all users — particularly those with significant account balances — to enable 2FA to add an additional layer of protection against unauthorised account access.
Incident Response. In the event of a confirmed data security incident that may affect your personal data, joy9bd will notify affected users via their registered email address within a reasonable timeframe. We maintain a documented incident response plan and conduct regular security assessments to identify and address potential vulnerabilities proactively.
- Payment credentials such as bKash PINs, Nagad PINs, or bank passwords are never stored by joy9bd — these remain solely within your payment provider's systems.
- Our servers are hosted in secure, access-controlled data centre environments with physical security measures in place.
- Regular penetration testing and vulnerability assessments are performed to identify and remediate security weaknesses.
- All staff with access to personal data undergo mandatory data security training as part of onboarding and annual refresher cycles.
Section 6
Your Privacy Rights
As a user of the joy9bd platform, you hold a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our privacy team at [email protected] with the subject line "Privacy Request — [Right Name]".
Right of Access
You have the right to request a copy of all personal data joy9bd holds about you. We will provide this in a structured, readable format within 30 days of a verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Corrections to identity data may require re-verification.
Right to Erasure
You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purpose it was collected. Note that we are required to retain certain data for regulatory and legal compliance periods.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have contested is being verified.
Right to Data Portability
Where technically feasible, you may request that we provide your personal data in a machine-readable format suitable for transfer to another service provider.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in specific circumstances.
All verified privacy rights requests will be acknowledged within 5 business days and fully responded to within 30 calendar days of receipt. If your request is complex or involves a large volume of data, we may extend this period by up to an additional 30 days and will notify you accordingly. There is no charge for submitting a privacy rights request.
Section 7
Data Retention Policy
joy9bd retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The retention periods set out below represent our standard practice; actual retention may be extended where there is an ongoing legal obligation, an unresolved dispute, or a compliance investigation in progress.
| Data Type | Retention Period | Basis for Retention |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | KYC compliance, legal obligation |
| Payment & Transaction Records | 7 years from transaction date | AML compliance, financial audit requirements |
| KYC Documents | 5 years post-account closure | Regulatory compliance, fraud prevention |
| Support Communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical & Log Data | 12 months | Security monitoring, performance analysis |
| Analytics Data (anonymised) | 26 months (aggregated only) | Platform improvement, usage trend analysis |
After the applicable retention period expires and no legal hold or ongoing obligation applies, personal data is securely deleted or anonymised using methods designed to render it irreversible. Anonymised or aggregated data that cannot be used to identify an individual may be retained indefinitely for analytical purposes.
Section 8
Contact & Privacy Requests
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about how joy9bd handles your personal data, please contact our privacy and compliance team using the details below. All privacy-related correspondence is handled confidentially and is given priority processing.
Privacy Contact Email: All privacy requests, data subject access requests, and formal data protection concerns should be directed to [email protected] with the subject line clearly indicating the nature of your request (e.g., "Data Access Request", "Data Deletion Request", "Privacy Policy Query").
Response Timeframe: Our privacy team acknowledges all requests within 5 business days and provides a full response within 30 calendar days. For complex requests involving large volumes of data, we may require up to 60 days and will notify you of any extension within the initial 30-day window.
Identity Verification for Requests. To protect your privacy, we will verify your identity before processing any data subject rights request. Verification typically involves confirming your registered email address, phone number, and — for sensitive requests such as full data export or erasure — one piece of identity documentation. This step ensures that personal data is not disclosed to or deleted on behalf of unauthorised individuals.
Complaints. If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint through appropriate legal channels in your jurisdiction. joy9bd takes all privacy complaints seriously and is committed to reaching a fair resolution in every case.
For general account support, payment queries, or responsible gaming assistance, our 24/7 support team is available via live chat on the platform or by email at [email protected]. Support hours cover Bangladesh Standard Time (BST, UTC+6) around the clock, every day of the year.
Continue Exploring joy9bd
Your Data Is Safe — Now Let's Play
You've reviewed how joy9bd protects your personal information. Now explore Bangladesh's most trusted betting platform — cricket betting, live casino tables, Plinko, European Blackjack, and hundreds of slots. All in Bangladeshi Taka with bKash and Nagad. 18+ only. Please play responsibly.