joyana Privacy Policy — How We Handle Your Data

1. Information We Collect

joyana collects personal information from players in Bangladesh through several channels: directly from you when you register an account or contact support, automatically when you use our platform, and from third-party identity verification and payment processing partners. The categories of information we collect are set out below.

1.1 Registration Information

When you create a joyana account, we collect the following information that you provide voluntarily:

• Full legal name — as it appears on your government-issued identification document
• Date of birth — used to verify that you meet the 18+ age requirement
• Residential address — your current address in Bangladesh (city, district, postcode)
• Email address — used for account communications and security alerts
• Mobile number — particularly your bKash, Nagad, or Rocket registered number for payment processing
• Username and password — your chosen account credentials (passwords are stored in hashed form; joyana never stores plain-text passwords)

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) programme, joyana may request documentary evidence to verify your identity and age. Documents you may be asked to submit include:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid passport (photo page)
• Recent utility bill or bank statement as proof of address (issued within the past three months)
• Screenshot or confirmation of your mobile financial service account (bKash, Nagad, Rocket, or Upay) to verify payment method ownership

KYC documents are handled with the highest level of confidentiality and are stored on encrypted servers. They are accessed only by authorised joyana compliance personnel on a strict need-to-know basis.

1.3 Financial Transaction Data

joyana records details of all deposits and withdrawals made through your account, including transaction amounts in Bangladeshi Taka (৳), dates and times in Bangladesh Standard Time (UTC+6), and the payment method used (for example, bKash mobile number or bank name). joyana does not store full card numbers — only the last four digits and card type are retained where card payments are used.

1.4 Usage and Technical Data

When you visit joyana.net, our servers automatically collect certain technical information, including your IP address, browser type and version, device type (desktop, mobile, tablet), operating system, pages visited, time spent on each page, and referring URL. This data is used for platform security, fraud detection, and improving the overall user experience.

1.5 Gameplay Data

joyana records data relating to your gaming activity on the platform, including games played, wagers placed, outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance.

2. How We Use Your Data

joyana uses the personal information collected from Bangladeshi players for the following specific and lawful purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration details, username, password	Contract performance
Age and identity verification	Date of birth, KYC documents	Legal obligation / Contract
Payment processing	Financial transaction data, mobile number	Contract performance
Fraud prevention and security	IP address, usage data, transaction data	Legitimate interest
Responsible gaming compliance	Gameplay data, session data, account history	Legal obligation
Customer support	Contact details, account history, gameplay data	Contract performance
Promotional communications	Email address, mobile number	Consent (opt-in only)
Platform analytics and improvement	Usage data, technical data (aggregated)	Legitimate interest

joyana will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required to do so by applicable law.

3. Data Sharing & Third Parties

joyana does not sell your personal data to any third party. However, in order to operate the platform effectively and comply with our legal obligations, we may share your data with the following categories of third parties under strict contractual and security controls:

3.1 Payment Processing Partners

To facilitate deposits and withdrawals, joyana shares necessary transaction data with mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, and others). These providers receive only the minimum data required to process your specific transaction and are bound by their own data protection obligations.

3.2 Identity Verification Providers

joyana may use authorised third-party identity verification services to assist with KYC processing. These partners are contractually required to handle your documents with the same level of confidentiality and security as joyana itself. They may not retain, use, or share your documents beyond the scope of the verification task.

3.3 Game Content Providers

joyana's platform features games developed and operated by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data necessary for game operation and fairness auditing. They do not receive your full personal profile or financial details.

3.4 Analytics and Security Providers

joyana uses trusted third-party tools for fraud detection, platform security, and aggregate usage analytics. These tools process technical data such as IP addresses and device fingerprints. Where possible, data shared with analytics providers is anonymised or aggregated before transmission.

3.5 Legal and Regulatory Disclosure

joyana may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities if required to do so by applicable law, court order, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activity. joyana will always seek to notify you of such disclosures where legally permitted to do so.

4. Cookies & Tracking Technologies

joyana uses cookies and similar tracking technologies on joyana.net to ensure the platform functions correctly, to maintain your session while logged in, and to understand how players interact with our pages. A cookie is a small text file stored on your device by your web browser. joyana uses the following categories of cookies:

4.1 Strictly Necessary Cookies

These cookies are essential for the joyana platform to function and cannot be switched off. They include session cookies that keep you logged in while navigating the site, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember your language and display preferences. Without these cookies, core platform features such as account login and cashier access would not work.

4.2 Performance and Analytics Cookies

joyana uses aggregated analytics cookies to understand which pages are visited most frequently, how long players spend on different sections of the site, and where technical errors occur. This data is used in aggregate form to improve the platform and is not linked to your individual identity.

4.3 Functional Cookies

Functional cookies allow joyana to remember choices you have made on the platform — for example, your preferred game view or notification settings — so that you do not have to reconfigure these preferences on every visit.

4.4 Managing Cookies

You can manage and disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use joyana's platform, as core features such as account authentication depend on them. Disabling performance or functional cookies will not prevent you from accessing the platform but may affect your user experience.

5. Data Retention & Storage

joyana retains your personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. The table below summarises our standard retention periods:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal and regulatory compliance
KYC verification documents	Duration of account + 5 years after closure	Anti-money laundering obligations
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Gameplay and session data	3 years from date of activity	Responsible gaming and dispute resolution
Support correspondence	3 years from last interaction	Service improvement and dispute resolution
Marketing consent records	Until consent is withdrawn + 1 year	Consent management compliance

Upon expiry of the applicable retention period, joyana will securely delete or anonymise your personal data. Anonymised data — data from which all identifying information has been irreversibly removed — may be retained for longer periods for statistical analysis and platform development purposes.

joyana's data is stored on secure servers. Where data is transferred to or accessed from outside Bangladesh, joyana ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Bangladesh.

6. Your Privacy Rights

As a joyana player based in Bangladesh, you have the following rights in respect of your personal data held by joyana. These rights can be exercised free of charge by contacting our support team at [email protected] with the subject line "Privacy Rights Request".

6.1 Right of Access

You have the right to request a copy of the personal data that joyana holds about you. Upon receipt of a valid access request, joyana will provide you with a summary of your data in a commonly used format within a reasonable timeframe, ordinarily within 30 days.

6.2 Right to Rectification

If any personal data held by joyana is inaccurate or out of date, you have the right to request that we correct it. You may also update certain account details (such as your email address or contact number) directly through your account settings panel.

6.3 Right to Erasure

In certain circumstances, you have the right to request that joyana delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and no other legal basis for processing exists. Please note that this right does not apply where joyana is required to retain data for legal or regulatory compliance purposes, such as anti-money laundering record-keeping obligations.

6.4 Right to Restrict Processing

You have the right to request that joyana restricts the processing of your personal data in specific circumstances — for example, while you contest the accuracy of the data or while a complaint is being investigated. During a restriction period, joyana may continue to store your data but will not actively process it beyond what is legally required.

6.5 Right to Withdraw Marketing Consent

If you have previously given consent to receive promotional emails or SMS messages from joyana, you may withdraw that consent at any time without detriment to your account. To opt out, update your communication preferences in your joyana account settings or send a request to [email protected]. Opt-out requests are processed within two business days.

7. Data Security Measures

joyana takes the security of your personal data extremely seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, disclosure, or destruction.

7.1 Technical Safeguards

• SSL/TLS encryption: All data in transit between your browser and joyana.net is encrypted using TLS 1.2 or higher.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. joyana staff cannot view your password in plain text under any circumstances.
• Encrypted data storage: Sensitive personal data including KYC documents and financial records is stored in encrypted form on secured servers.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Fraud detection systems: joyana employs automated monitoring systems to detect unusual account activity, suspicious login attempts, and fraudulent transaction patterns in real time.

7.2 Organisational Safeguards

• All joyana staff who handle personal data are trained in data protection principles and confidentiality obligations.
• Third-party service providers who process personal data on joyana's behalf are vetted and bound by written data processing agreements.
• joyana conducts periodic internal reviews of its data handling practices to identify and address potential vulnerabilities.

7.3 Security Incident Response

In the unlikely event of a data security incident that poses a risk to your personal data, joyana will take immediate steps to contain the incident, assess its scope, and notify affected players by email to their registered address as soon as practicable. We will also take corrective action to prevent recurrence.

8. Policy Updates & Contact

joyana reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is always displayed at the top of this page. Where changes are material — meaning they significantly affect your rights or how we use your data — joyana will notify registered players by email to their registered address at least 14 days before the changes take effect.

Your continued use of joyana's platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your account and cease using the platform before the effective date of the changes.

8.1 Children's Privacy

joyana's platform is strictly intended for adults aged 18 and above. joyana does not knowingly collect personal data from individuals under the age of 18. If joyana becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted immediately and the associated account will be closed. If you believe a minor has registered an account on joyana, please contact us at [email protected] immediately.

8.2 Links to Third-Party Sites

joyana.net may contain references to third-party payment providers (such as bKash and Nagad) and game studios. These third parties operate their own independent privacy policies, for which joyana bears no responsibility. We encourage players to review the privacy policies of any third-party service they use in connection with their joyana account.

8.3 Contact the joyana Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or joyana's data practices, please contact our privacy team directly. We are committed to addressing all privacy-related enquiries promptly and transparently.

Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 1 business day (Bangladesh Standard Time, UTC+6)
Languages: English