Your Privacy at joia99
At joia99, your personal data is handled with the same care and precision we bring to every other aspect of our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you have over your own data. We believe transparency is the foundation of trust.
All data transmitted between your device and the joia99 platform is protected by industry-standard 256-bit SSL encryption, ensuring your personal and financial details remain private in transit.
joia99 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data belongs to you.
You have the right to access, correct, and request deletion of your personal data held by joia99 at any time. Contact our support team to exercise these rights at no cost.
joia99 uses cookies only for essential functionality, session management, and performance analytics. We do not use third-party advertising cookies or tracking pixels from ad networks.
joia99 does not store full card numbers or mobile banking PINs. Payment processing is handled by certified payment partners including bKash, Nagad, and Rocket under their own security frameworks.
joia99 keeps your data only for as long as is necessary for the purposes described in this policy or as required by applicable law. Retention periods are clearly defined for each data category.
Section 1
Information We Collect
joia99 collects personal information from you in the course of providing our online casino and sports betting services. We collect only the information that is necessary for the purposes set out in this Privacy Policy. The categories of personal information we collect are described below.
1.1 Information You Provide Directly
- Registration data: When you create a joia99 account, we collect your email address or Bangladeshi mobile phone number, a password of your choosing, and your confirmation that you are aged 18 or above.
- Identity verification (KYC) data: To comply with our know-your-customer obligations, we may ask you to provide your full legal name, date of birth, nationality, and a copy of a government-issued photo identity document such as a National Identity Card (NID) or passport.
- Address data: We may request your residential address, including city (for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), district, and postal code, in connection with identity verification or withdrawal processing.
- Payment information: When you make a deposit or request a withdrawal, we collect transaction reference numbers and the mobile number or masked card details associated with your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank). We do not store full card numbers or mobile banking PINs.
- Support communications: If you contact our customer support team via live chat or email, we retain records of those communications, including your messages, the date and time of contact, and the resolution provided.
- Responsible gaming preferences: If you set deposit limits, session time limits, or request a self-exclusion, we record those preferences and apply them to your account.
1.2 Information Collected Automatically
- Device and browser data: When you access the joia99 platform, our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, and preferred language settings.
- Session and usage data: We record the pages you visit on our platform, the games you play, the bets you place, the duration of your sessions, in-game actions, and the features you interact with. This helps us optimise platform performance and personalise your experience.
- Cookies and similar technologies: joia99 uses cookies, local storage, and session tokens to maintain your logged-in state, remember your preferences, and gather aggregate performance analytics. See Section 4 for full details.
- Transaction logs: All deposit, withdrawal, bonus credit, and wagering transactions are logged automatically for fraud prevention, account balance reconciliation, and dispute resolution purposes.
Minimum data principle: joia99 applies a minimum data collection approach. We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless it is strictly required for a specific compliance obligation and you have been separately informed of that collection.
Section 2
How We Use Your Information
joia99 uses the personal information we collect for the following purposes. In each case, we rely on one of the lawful bases described alongside that purpose.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contract performance |
| Identity verification (KYC) | NID / passport, address, date of birth | Legal obligation |
| Processing deposits and withdrawals | Payment method details, transaction logs | Contract performance |
| Fraud detection and prevention | IP address, device data, transaction patterns | Legitimate interest |
| Customer support | Support communications, account history | Contract performance |
| Responsible gaming enforcement | Gaming preferences, deposit/session limits | Legal obligation / legitimate interest |
| Platform analytics and improvement | Usage data, session logs, device data | Legitimate interest |
| Promotional communications | Email address, mobile number, game preferences | Consent (opt-in only) |
| Legal compliance and audit | All categories as required | Legal obligation |
joia99 does not use automated decision-making or profiling that produces legal or similarly significant effects on you without first giving you the opportunity to request human review of that decision.
Promotional communications: If you have opted in to receive promotional emails or SMS messages from joia99, you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Section 3
Sharing and Disclosure of Data
joia99 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
3.1 Service Providers and Technology Partners
To operate the joia99 platform, we engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank receive only the transaction data necessary to process your deposit or withdrawal. They operate under their own privacy frameworks and security certifications.
- Game studios: Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to launch game sessions. They do not receive your full name, email address, or payment details.
- Identity verification providers: Where automated KYC checks are used, your identity document images and personal details may be shared with a certified identity verification service provider. These providers are bound by the same data protection obligations as joia99.
- Analytics providers: Aggregated and anonymised usage data may be shared with platform analytics tools to help us understand player behaviour and improve the joia99 experience. No personally identifiable information is included in these data shares.
- Customer support platform: Our live chat support system processes your support messages and account reference data in order to deliver timely assistance.
3.2 Legal and Regulatory Disclosure
joia99 may disclose personal information to law enforcement agencies, financial intelligence units, regulatory authorities, or courts where we are required to do so by applicable law, court order, or in response to a lawful formal request. We will notify you of such a disclosure where we are legally permitted to do so.
3.3 Business Transfers
In the event that joia99's business or a substantial part of its assets is acquired, merged with, or transferred to another entity, your personal data may form part of the transferred assets. You will be notified via your registered email address or a prominent notice on the platform prior to any such transfer, and the receiving entity will be bound to honour this Privacy Policy or provide a materially equivalent level of protection.
No cross-border transfers to unprotected jurisdictions: joia99 does not transfer your personal data to countries or territories that do not provide an adequate level of data protection without first implementing appropriate safeguards, such as contractual data protection clauses.
Section 4
Cookies and Tracking Technologies
joia99 uses cookies and similar browser-based storage technologies to provide core platform functionality, maintain the security of your session, and understand how players use our services. This section describes the types of cookies we use and how you can manage them.
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Essential / Session | Maintains your logged-in state, session security tokens, and server-load balancing preferences | Session (cleared on browser close) | No — platform will not function without these |
| Functional / Preference | Remembers your language preference, game lobby sort order, and responsible gaming settings | Up to 12 months | Yes — disabling may affect personalisation |
| Performance / Analytics | Collects aggregated, anonymised data about page load times, feature usage, and error rates to help us improve the platform | Up to 24 months | Yes — via browser settings or our preference centre |
| Fraud Detection | Identifies unusual login patterns, device fingerprinting signals, and suspicious transaction behaviour | Up to 6 months | No — required for platform security |
Managing Your Cookie Preferences
You may manage cookie settings through your browser's built-in privacy controls. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is placed. Please note that disabling essential or fraud-detection cookies will affect your ability to log in to and use the joia99 platform securely.
- To manage cookies in Google Chrome: Settings → Privacy and Security → Cookies and other site data.
- To manage cookies in Mozilla Firefox: Options → Privacy and Security → Cookies and Site Data.
- To manage cookies in Safari (iOS/macOS): Settings → Safari → Privacy and Security.
- To manage cookies in Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data.
No advertising cookies: joia99 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. We do not participate in cross-site behavioural advertising networks. The cookies we use are strictly limited to operating and improving our own platform.
Section 5
Data Security and Storage
joia99 takes the security of your personal data seriously and has implemented a multi-layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.
Technical safeguards include:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
- Encryption at rest for stored personal data and identity documents using AES-256 encryption.
- Strict access controls ensuring that only authorised joia99 personnel with a legitimate business need can access personal data.
- Regular vulnerability assessments and penetration testing of the platform infrastructure.
- Automated intrusion detection and real-time threat monitoring.
Organisational safeguards include:
- Mandatory data protection training for all joia99 staff who handle personal data.
- A clearly defined data breach response plan with escalation procedures and notification timelines.
- Contractual data processing agreements with all third-party service providers who handle player data on joia99's behalf.
- Regular internal audits of data handling practices against this Privacy Policy.
- Role-based access controls and multi-factor authentication for internal systems.
Despite these measures, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, joia99 will notify affected players without undue delay using their registered contact details, and will take immediate steps to contain and remediate the breach.
Player data is stored on servers located in secure data centre facilities. joia99 does not store your data on portable, unencrypted devices. All data centre partners are required to maintain physical and environmental security controls consistent with industry best practices.
Section 6
Your Data Rights
As a joia99 player, you have the following rights in relation to the personal data we hold about you. These rights are available to all players regardless of their location within Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
- Right of access: You may request a copy of the personal data joia99 holds about you at any time. We will respond to verified access requests within 30 days. The first copy is provided free of charge; subsequent copies within a 12-month period may attract a reasonable administrative fee.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your registered mobile number or email address) directly through your account settings, or by contacting support for changes that require identity verification.
- Right to erasure: In certain circumstances, you may request that joia99 delete your personal data. This right is subject to limitations — for example, we are required to retain certain records for legal, regulatory, and fraud prevention purposes for defined periods even after account closure.
- Right to restrict processing: You may ask us to restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of that data is being resolved.
- Right to data portability: You may request a copy of the personal data you have provided to joia99 in a structured, commonly used, and machine-readable format (such as CSV or JSON), where that data was processed on the basis of your consent or for contract performance.
- Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional SMS messages), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- Right to object: You may object to the processing of your personal data where joia99 relies on legitimate interests as the lawful basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
How to exercise your rights: To submit a data rights request, contact the joia99 support team via live chat. You will be asked to verify your identity before the request is processed. joia99 aims to acknowledge all data rights requests within 5 business days and to fulfil them within 30 calendar days. Contact email (plain text):
Section 7
Data Retention Policy
joia99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and regulatory obligation |
| KYC / identity documents | Duration of account + 7 years post-closure | Anti-money laundering (AML) compliance |
| Transaction records | 7 years from the date of each transaction | Financial record-keeping and AML compliance |
| Betting and gaming history | 5 years from the date of each session | Dispute resolution and responsible gaming audits |
| Customer support records | 3 years from the date of each interaction | Quality assurance and dispute resolution |
| Session and device logs | 12 months from the date of the session | Fraud detection and security monitoring |
| Marketing consent records | Until consent is withdrawn + 2 years | Evidence of lawful marketing basis |
| Self-exclusion records | Minimum 5 years from date of exclusion | Responsible gaming enforcement |
When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and research purposes, as it no longer constitutes personal data.
Dormant accounts: If your joia99 account has been inactive for 12 consecutive months, it will be classified as dormant. joia99 will contact you using your registered details before applying any dormancy procedures. Dormant account records are retained in line with the account registration data retention period above.
Section 8
Updates to This Privacy Policy
joia99 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable law, or the structure of our platform. When we make material changes to this policy, we will notify you by posting the revised policy on this page with an updated effective date, and — where the changes are significant — by sending a notification to your registered email address or mobile number at least 14 days before the changes take effect.
Your continued use of the joia99 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any changes to this policy, you should discontinue use of the platform and contact our support team to request account closure and deletion of your personal data to the extent permitted by our retention obligations.
The version of this Privacy Policy currently in effect is dated 1 January 2026. All previous versions are superseded by this version. If you have any questions about this Privacy Policy or about how joia99 handles your personal data, please contact our support team via live chat. Our support team is available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).
Contact email (plain text, non-clickable):
Questions About Your Privacy?
Our support team is available around the clock to answer any questions about how joia99 collects, uses, or protects your personal data.
18+ For adults aged 18 and above only. Gambling can be addictive — please play responsibly.