jaya 999 Privacy Policy

1 Introduction

jaya 999 is an online casino and sports betting platform serving players primarily across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to protecting the personal information of every player who visits or registers on our platform.

This Privacy Policy applies to all users of the jaya 999 platform — including visitors who browse without registering, registered players with active accounts, and former players whose accounts have been closed. It covers all personal data collected through the jaya 999 website at https://jaya-999.im, our mobile-optimised interface, and any communications you exchange with our customer support team.

jaya 999 acts as the data controller for the personal information described in this policy. This means we determine the purposes for which your personal data is collected and the means by which it is processed. We process personal data in accordance with internationally recognised data protection standards, including principles aligned with the General Data Protection Regulation (GDPR) framework, applied as best practice for the protection of our players regardless of jurisdiction.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the full agreement between you and jaya 999. If you have any questions about this policy or about how we handle your data, please contact our Data Protection Officer at [email protected].

2 Data We Collect

jaya 999 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the platform, and in limited cases from trusted third-party verification partners. We collect only the data that is necessary for the specific purpose for which it is being gathered.

2.1 Registration and Account Data

When you create a jaya 999 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 18 or over)
• Residential address (including city, district, and postcode)
• Email address and/or mobile phone number (including bKash or Nagad-registered number)
• Username and encrypted password
• Preferred language and currency settings

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your age and identity before your first withdrawal, we may collect the following KYC documentation:

• National Identity Card (NID), passport, or driving licence (front and back images)
• Proof of address (utility bill or bank statement dated within the past 90 days)
• Proof of payment method (screenshot of your bKash, Nagad, Rocket, or Upay account showing the registered phone number)
• A selfie photograph for facial match verification

2.3 Financial Transaction Data

We maintain a record of all financial transactions associated with your account, including:

• Deposit amounts, dates, times, and payment method references (bKash transaction IDs, Nagad reference numbers, bank transfer references, card last-four digits)
• Withdrawal requests, amounts, processing times, and destination account identifiers
• Bonus credits, wagering history, and cashback calculations
• Currency (Bangladeshi Taka, ৳) and conversion records where applicable

2.4 Gameplay and Wagering Data

We automatically record your activity on the jaya 999 platform, including game session logs (game titles, bet amounts, outcomes, session duration), sports betting records (market selections, odds accepted, settlement outcomes), and bonus usage history.

2.5 Device and Technical Data

When you access jaya 999, our systems automatically collect:

• IP address and geolocation data (country and city level)
• Device type, operating system, and browser version
• Screen resolution and language settings
• Referring URL and pages visited on the jaya 999 platform
• Session timestamps and connection duration

2.6 Communications Data

When you contact our customer support team via live chat, email, or WhatsApp, we retain a record of those communications including the date, time, subject matter, and full conversation transcript. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.

Data Category	Examples	Collection Method
Identity Data	Full name, date of birth, NID number	Provided directly by you
Contact Data	Email, mobile number, address	Provided directly by you
Financial Data	Transaction amounts, bKash/Nagad IDs, card last 4 digits	Automatically recorded on transaction
KYC Documents	NID scan, selfie, proof of address	Uploaded by you on request
Gameplay Data	Game logs, bet history, bonus usage	Automatically recorded by platform
Technical Data	IP address, device type, browser	Automatically collected on access
Communications	Support chat transcripts, email records	Recorded during support interactions

3 How We Use Your Data

jaya 999 uses the personal data we collect only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which jaya 999 processes personal data are as follows:

3.1 Account Management and Platform Access

Your registration data is used to create and maintain your jaya 999 account, authenticate your identity at login, provide access to casino games and sports betting markets, and communicate important account-related notifications including deposit confirmations, withdrawal processing updates, and security alerts.

3.2 Age Verification and KYC Compliance

jaya 999 is legally and ethically obligated to verify that all players are at least 18 years of age before allowing them to deposit or place wagers. KYC data is used solely for identity verification, age confirmation, and fraud prevention. KYC documents are handled by our secure verification systems and are never shared with third parties for marketing purposes.

3.3 Payment Processing

Financial transaction data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payments; to calculate and credit bonus amounts; to maintain accurate account balance records; and to investigate and resolve any disputed or failed transactions.

3.4 Responsible Gaming Monitoring

jaya 999 uses gameplay and wagering data to monitor player behaviour for signs of problem gambling, including unusual increases in deposit frequency, wager sizes, or session duration. Where our systems detect patterns consistent with harmful gambling, our Responsible Gaming team may reach out to you proactively. This use of your data is in your vital interests and forms a core part of our commitment to player welfare.

3.5 Fraud Prevention and Security

Device data, IP addresses, and account activity logs are used to detect and prevent fraudulent activity, including unauthorised account access, duplicate account creation, bonus abuse, money laundering, and the use of automated bots or scripted tools on the platform.

3.6 Legal and Regulatory Compliance

jaya 999 processes and retains certain personal data to comply with applicable legal obligations, including record-keeping requirements for financial transactions, responding to lawful requests from regulatory or law enforcement authorities, and maintaining audit trails for dispute resolution.

3.7 Platform Improvement and Analytics

Aggregated, anonymised data drawn from gameplay logs and session analytics is used to improve the jaya 999 platform — including game selection, user interface optimisation, and performance tuning. This analytical processing does not identify individual players and is not used for targeted advertising purposes.

3.8 Customer Support

Communications data is used to resolve your support queries efficiently, to maintain a record of previous interactions for context in future contacts, and to monitor support quality and staff performance. Support transcripts may also be used as evidence in any formal complaint or dispute escalation.

4 Data Sharing & Disclosure

jaya 999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data is shared only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

4.1 Payment Service Providers

To process deposits and withdrawals, jaya 999 shares relevant financial transaction data with our payment partners including bKash, Nagad, Dutch-Bangla Bank (Rocket), Upay, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These partners act as independent data processors and are contractually required to process your data only for payment purposes and to maintain appropriate data security standards.

4.2 Identity Verification Partners

KYC documentation submitted to jaya 999 may be processed by our trusted third-party identity verification partner. This partner performs facial matching and document authenticity checks on our behalf and is bound by strict data processing agreements. KYC data is never shared beyond what is required for verification.

4.3 Game Content Providers

When you play a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — your session data (username alias, bet amounts, game outcomes) is transmitted to that provider's servers to operate the game. These providers are regulated gaming studios operating under their own applicable licences and data protection standards. jaya 999 shares only the minimum data required for game delivery; your full identity and KYC data are never shared with game studios.

4.4 Legal and Regulatory Authorities

jaya 999 will disclose personal data to law enforcement, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, or where we reasonably believe disclosure is necessary to prevent crime, protect the safety of individuals, or defend jaya 999's legal rights in proceedings. We will notify you of any such disclosure request unless we are legally prohibited from doing so.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the jaya 999 business, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. In any such event, jaya 999 will notify affected players in advance and ensure that the receiving entity agrees to honour the commitments in this Privacy Policy.

5 Cookies & Tracking

jaya 999 uses cookies and similar tracking technologies to operate certain essential platform functions and to understand how players interact with our website. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain your session while you are logged in. Cookies are not executable programs and cannot carry viruses or access other information on your device.

5.2 Types of Cookies Used by jaya 999

Cookie Type	Purpose	Duration
Essential / Session	Maintains your login session, keeps your account authenticated while you navigate the platform	Session (deleted on browser close)
Functional / Preference	Remembers your language preference, display settings, and last-visited game category	30 days
Security	Detects and prevents fraudulent access, flags unusual device changes or location shifts	Session to 90 days
Analytics	Aggregated, anonymised page-view and interaction data used to improve platform UX (no personal identification)	Up to 12 months

5.3 Managing Cookies

You can control and manage cookie usage through your browser settings. All major browsers (Chrome, Firefox, Safari, Edge, and Opera) allow you to view, block, or delete cookies stored on your device. Please note that disabling essential cookies will prevent you from logging in to your jaya 999 account, as session authentication relies on these cookies. Disabling functional cookies will mean that your preference settings (such as language) will not be remembered between visits.

For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation. Clearing your cookies does not delete your jaya 999 account or any account data stored on our servers.

6 Data Retention

jaya 999 retains personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or for as long as is required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

Data Category	Retention Period	Reason
Account Registration Data	Duration of account + 5 years after closure	Legal compliance, dispute resolution
KYC Documents	Duration of account + 5 years after closure	AML and age verification obligations
Financial Transaction Records	7 years from transaction date	Financial record-keeping requirements
Gameplay and Wagering Logs	3 years from session date	Responsible Gaming monitoring, dispute resolution
Support Communications	3 years from last contact	Quality assurance, dispute evidence
Device and Technical Logs	12 months from collection	Fraud prevention and security monitoring
Self-Exclusion Records	Duration of exclusion + 7 years	Regulatory compliance, player protection

When the applicable retention period expires, jaya 999 will securely delete or anonymise the relevant personal data so that it can no longer be used to identify you. Anonymised aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

If you request deletion of your personal data under your privacy rights (see Section 7), we will process that request promptly. However, we may be required to retain certain data for the minimum periods specified above where legal or regulatory obligations apply, in which case we will inform you of what data is being retained and the reason for retention.

7 Your Privacy Rights

jaya 999 respects your rights over your personal data. Regardless of your location within Bangladesh, you have the following rights in relation to the personal information we hold about you. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request" and your registered account username or email address.

jaya 999 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. We will never charge a fee for processing a legitimate data rights request.

8 Data Security

jaya 999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the jaya 999 platform is encrypted using industry-standard 256-bit SSL/TLS protocols, preventing interception during transit.
• Encrypted Data Storage: Sensitive personal data — including KYC documents, payment references, and account credentials — is stored in encrypted form on secured servers with strict access controls.
• Password Security: Account passwords are hashed using a modern one-way cryptographic algorithm before storage. jaya 999 staff cannot view your plaintext password — only you know it.
• Two-Factor Authentication (2FA): jaya 999 offers SMS-based 2FA as an optional (and strongly recommended) additional security layer for your account login.
• Access Controls: Personal data is accessible only to jaya 999 staff who require it for their specific job function. Access permissions are reviewed regularly and revoked immediately upon staff departure.
• Penetration Testing: The jaya 999 platform undergoes regular third-party security audits and penetration testing to identify and remediate any potential vulnerabilities before they can be exploited.
• Data Breach Response: jaya 999 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, we will notify affected players within 72 hours of becoming aware of the breach, and provide guidance on protective actions you should take.

Despite our best efforts, no online platform can guarantee absolute security. You also play an important role in keeping your account secure: use a strong, unique password for your jaya 999 account, enable two-factor authentication, never share your login credentials with anyone, and notify us immediately at [email protected] if you suspect any unauthorised access to your account.

9 Contact & DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jaya 999 handles your personal data, please contact our Data Protection Officer (DPO) using the details below. We take all privacy enquiries seriously and will respond promptly and thoroughly.

9.1 How to Reach Us

You can contact the jaya 999 Data Protection Officer through the following channels. Please note that all contact details are provided as plain text only and are not clickable links — copy the email address or phone number manually to use them.

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 directly within the jaya 999 platform. Select "Privacy & Data Protection" from the support topic menu.
• WhatsApp (plain text): +880 1700 000 999 — available during Bangladesh Standard Time (BST, UTC+6) business hours.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6).

9.2 Response Times

jaya 999 aims to acknowledge all privacy enquiries within 2 business days of receipt. Substantive responses to data rights requests (access, rectification, erasure, portability, restriction, or objection) will be provided within 30 calendar days. For complex requests requiring extended review, we will notify you within the initial 30-day window and provide an updated timeline.

9.3 Policy Updates

jaya 999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will notify registered players by email or by a prominent notice on the jaya 999 platform at least 14 days before the changes take effect. The updated policy will always be accessible at https://jaya-999.im/privacy-policy. The "Effective Date" at the top of this document will be updated to reflect the date on which the revised version comes into force.

Your continued use of the jaya 999 platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with a revised policy, you should stop using the platform and may request account closure by contacting our support team.