Privacy Policy for joyabaj
At joyabaj, protecting your personal data is a core commitment. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and secured, and what rights you hold as a player on our Bangladesh online casino platform.
How joyabaj Protects Your Privacy
SSL Encryption
All data transmitted between your browser and joyabaj is protected by industry-standard SSL (Secure Socket Layer) encryption, ensuring that your personal and financial details cannot be intercepted in transit.
Minimal Data Collection
joyabaj collects only the data that is strictly necessary to operate your account, process transactions, and comply with applicable regulations. We do not collect data beyond what is required for these core purposes.
No Selling of Data
joyabaj does not sell, rent, or trade your personal data to any third party for marketing purposes. Your information is used solely to deliver and improve the services you have signed up to receive.
Secure Storage
All personal data held by joyabaj is stored on secure, access-controlled servers. Access to stored personal data is restricted to authorised personnel who require it to carry out their specific job responsibilities.
Your Data Rights
You retain full rights over your personal data, including the right to access, correct, or request deletion of your information at any time by contacting the joyabaj support team via live chat on the platform.
Transparent Cookie Use
joyabaj uses cookies solely to maintain your session, remember your language and display preferences, and to analyse aggregate platform traffic. We do not use cookies to build personal advertising profiles.
Data We Collect
joyabaj collects personal data from you in several ways: directly when you register an account, make a deposit or withdrawal, contact our support team, or participate in a promotion; automatically when you use the platform through cookies and server logs; and from third-party identity verification and payment service providers as part of our Know Your Customer (KYC) obligations.
Registration Data
When you create a joyabaj account, we collect the following information: your full legal name, date of birth, Bangladesh mobile phone number, email address, residential address (including district and division), and the payment method details you register at the time of account creation (such as your bKash or Nagad mobile wallet number).
Identity Verification Data
To comply with our age-verification and anti-money-laundering obligations, joyabaj may request copies of identity documents at any point during the life of your account. Documents we may collect include your National Identity Card (NID), passport, birth certificate, driving licence, and a recent utility bill or bank statement as proof of residential address. These documents are used solely for identity verification purposes and are not used for any other purpose without your explicit consent.
Transaction Data
We retain records of all financial transactions conducted through your joyabaj account, including deposits made via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank; all withdrawals processed to your registered payment method; and all bonus credits and deductions. Transaction records include the amount in BDT (৳), the date and time of the transaction in Bangladesh Standard Time (BST, UTC+6), the payment method used, and the transaction reference number.
Usage and Technical Data
When you access joyabaj, our servers automatically record certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, the pages you visit within the platform, the games you play, the time and duration of your sessions, and any error messages you encounter. This data is used in aggregate for platform performance monitoring and security purposes.
Summary of Data Categories
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Account creation, KYC verification |
| Contact Data | Mobile number, email address, residential address | Account communication, support |
| Financial Data | bKash/Nagad wallet number, bank account details, transaction history | Payment processing, fraud prevention |
| Technical Data | IP address, device type, browser, session logs | Security, platform performance |
| Usage Data | Games played, betting history, session duration | Responsible gaming monitoring, personalisation |
| Document Data | Copies of NID, passport, utility bills | Age verification, anti-money laundering |
How We Use Your Data
joyabaj processes your personal data only for lawful, specified, and legitimate purposes. We do not process your data in any manner that is incompatible with the purpose for which it was originally collected. The following describes the primary purposes for which we use your data and the legal basis on which that processing rests.
Account Management
Your registration and identity data is used to create and maintain your joyabaj account, authenticate your identity on each login, process your deposits and withdrawals, and communicate with you about account-related matters such as security alerts, verification requests, and transaction confirmations. This processing is necessary for the performance of the contract between you and joyabaj.
Legal and Regulatory Compliance
joyabaj is required to verify the age and identity of all account holders and to retain financial transaction records for regulatory and audit purposes. Your identity documents and transaction history may be reviewed internally or shared with relevant authorities if required by law. This processing is necessary for compliance with applicable legal obligations.
Fraud Prevention and Security
Technical and usage data — including IP address logs, device fingerprints, and session behaviour — is analysed to detect and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other security threats. This processing is carried out in the legitimate interests of joyabaj and its player community.
Responsible Gaming Monitoring
joyabaj monitors player activity data — including deposit frequency, session duration, betting patterns, and loss thresholds — to identify players who may be exhibiting signs of problem gambling. Where our responsible gaming systems flag a concern, a member of our support team may contact you to offer information about self-exclusion tools and external support resources. This processing is carried out in the legitimate interests of player welfare.
Marketing Communications
With your explicit consent at the point of registration or subsequently via your account settings, joyabaj may send you promotional communications about bonuses, new games, and seasonal offers relevant to players in Bangladesh — for example, special promotions around Eid, Pohela Boishakh, or the Bangladesh Premier League (BPL) cricket season. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team.
Platform Improvement
Aggregated, anonymised usage data is used to understand how players interact with the joyabaj platform, identify areas for improvement, optimise game loading performance, and inform decisions about new features and content. No individually identifiable data is used for this purpose.
Data Sharing & Third Parties
joyabaj does not sell, rent, or trade your personal data to third parties for any commercial purpose. We share your personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the specific purpose stated.
Payment Service Providers
To process deposits and withdrawals, joyabaj shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank. These providers act as independent data controllers for the data they receive and are governed by their own privacy policies and applicable Bangladesh financial regulations.
Identity Verification Providers
joyabaj may use third-party KYC and identity verification service providers to validate the identity documents you submit. These providers process your data on our behalf under contractual obligations that require them to maintain the security and confidentiality of your information and to use it only for the purposes of identity verification.
Game Software Providers
Games on the joyabaj platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive technical session data (such as a session token and game result data) to deliver their game content. They do not receive your name, contact details, or payment information.
Legal and Regulatory Disclosure
joyabaj will disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other illegal activity. We will notify you of any such disclosure where we are legally permitted to do so.
Cookies & Tracking
joyabaj uses cookies — small text files stored on your device by your browser — to operate the platform correctly, remember your preferences, and analyse aggregate traffic patterns. The following table summarises the types of cookies used on joyabaj.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Maintain your login session, remember your language preference, and ensure the platform functions correctly. These cannot be disabled without impairing core functionality. | Session / up to 30 days |
| Preference Cookies | Remember display settings, game lobby view preferences, and notification choices so you do not need to re-configure them on each visit. | Up to 12 months |
| Analytics Cookies | Collect aggregated, anonymised data about how players navigate the platform, which game categories are most visited, and where technical errors occur. Used to improve platform performance. | Up to 24 months |
| Security Cookies | Support fraud detection and account security systems by maintaining session integrity tokens and flagging unusual access patterns. | Session |
joyabaj does not use third-party advertising cookies or behavioural tracking cookies that build personal profiles for targeted advertising. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using core platform features. For instructions on managing cookies in your specific browser, consult your browser's help documentation.
Data Security
joyabaj implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect current best practices in information security.
Technical Safeguards
- All data in transit between your device and joyabaj servers is encrypted using TLS 1.2 or higher.
- Account passwords are stored as salted cryptographic hashes — plain-text passwords are never stored.
- Two-factor authentication (2FA) is available to all account holders and is strongly recommended.
- Our servers are hosted in access-controlled data centres with 24/7 physical and network security monitoring.
- Regular vulnerability assessments and penetration tests are conducted to identify and address security weaknesses before they can be exploited.
- Database access is restricted by role-based access controls — only authorised personnel with a specific operational need may access personal data.
Organisational Safeguards
- All joyabaj staff and contractors who handle personal data are required to complete data protection and security training.
- Access to personal data is governed by the principle of least privilege — each team member accesses only the data required for their specific role.
- Data processing activities are logged and audited regularly to detect any anomalous access patterns.
- In the event of a data breach that is likely to result in a risk to your rights or interests, joyabaj will notify affected users promptly and take all necessary steps to contain and remediate the breach.
Data Retention
joyabaj retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply to the main categories of personal data we hold.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Regulatory compliance, audit requirements |
| Transaction Records | 7 years from transaction date | Financial regulations, anti-money laundering obligations |
| KYC Documents | Duration of account + 5 years after closure | Age verification records, regulatory compliance |
| Support Correspondence | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical / Session Logs | Up to 12 months | Security monitoring, fraud detection |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
After the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.
Your Privacy Rights
As a joyabaj account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat on the platform or by emailing support@joyabaj. We will respond to all verified requests within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data that joyabaj holds about you. Upon receipt of a verified access request, we will provide a summary of the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update your name, contact details, and address directly through your account settings. For corrections to identity documents or other verified data, please contact our support team.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to its processing and there is no overriding legitimate interest. Please note that joyabaj is required to retain certain data for regulatory compliance purposes even after an account closure request, and that the right to erasure does not override these legal obligations.
Right to Restrict Processing
You have the right to request that joyabaj restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified, or while an objection to processing is being assessed. During a restriction period, joyabaj will continue to store your data but will not process it for any other purpose without your consent.
Right to Object
Where joyabaj processes your personal data on the basis of legitimate interests — such as for fraud prevention or responsible gaming monitoring — you have the right to object to that processing. joyabaj will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Marketing Consent
You may withdraw your consent to receive marketing communications from joyabaj at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Policy Updates & Contact
joyabaj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered users via the email address associated with their joyabaj account and/or by displaying a prominent notice on the platform. The "Last updated" date at the top of this page will be revised accordingly.
Your continued use of joyabaj following the effective date of any Privacy Policy update constitutes your acceptance of the revised policy. We encourage you to review this page periodically so that you remain informed about how your personal data is being handled.
Contacting joyabaj About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to joyabaj's handling of your personal data, please contact us through any of the following channels:
- Live Chat: Available 24 hours a day, 7 days a week on the joyabaj platform — our preferred channel for the fastest response.
- Email: support@joyabaj — please include "Privacy Request" in the subject line and your registered account email in the message body.
Our English-language support team is committed to responding to all privacy-related enquiries within 30 days of receipt. For urgent matters such as suspected data breaches or suspected unauthorised access to your account, please use our live chat channel for the fastest possible response.
Have Questions About Your Data?
Our 24/7 English-language support team is ready to help with any privacy or account query. You can also explore our FAQ or review our Terms & Conditions for more information. 18+ only. Play responsibly.