Privacy Policy of
joyabaje

1 Information We Collect

joyabaje collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of our services, and in limited circumstances from third parties such as payment processors and identity verification providers. The following table summarises the categories of personal data we collect and their primary source.

1.1 Data You Are Not Required to Provide

Certain data fields on the joyabaje platform are optional. Providing optional information (such as preferred language or notification preferences) may improve your experience but will not affect your ability to register, deposit, or place wagers. Where a field is mandatory, this will be indicated clearly during the registration or verification process.

1.2 Data Relating to Minors

joyabaje does not knowingly collect personal data from individuals under the age of 18. Our registration process requires all applicants to confirm they are 18 or older. If we become aware that personal data has been collected from a minor, we will delete that data promptly and close the associated account. If you believe a minor has registered on our platform, please notify us immediately at support@joyabaje.

2 How We Use Your Data

joyabaje processes your personal data only for the specific, lawful purposes described in this section. We do not use your data in ways that are incompatible with the purposes for which it was collected without first informing you and, where required, obtaining your consent.

2.1 Service Delivery

The primary purpose for which we process your personal data is to deliver the services you have requested — including operating your account, processing deposits and withdrawals via bKash, Nagad, Rocket, and connected Bangladeshi banks, settling bets, crediting bonuses, and providing customer support. Without processing this data, we would be unable to provide you with a functional account on joyabaje.

2.2 Identity Verification & Fraud Prevention

We use your identity and financial data to verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that your account activity does not indicate fraudulent behaviour, money laundering, or sports integrity violations. These processing activities are necessary for joyabaje to meet its legal and compliance obligations.

2.3 Responsible Gaming Monitoring

joyabaje analyses your gameplay and transaction patterns to identify indicators of potentially problematic gambling behaviour. This includes monitoring deposit frequency, session length, and betting velocity against your established account history. Where our systems flag a concern, our responsible gaming team may contact you proactively to offer support resources. This processing is carried out in your legitimate interest and in fulfilment of our responsible gaming commitments.

2.4 Platform Improvement & Analytics

Aggregated and anonymised usage data is used to understand how players interact with joyabaje, identify areas for improvement, optimise page performance, and develop new features. This analytics processing does not identify you personally and is conducted to improve the overall quality of our service.

2.5 Marketing Communications

If you have opted in to receive promotional communications, we may use your contact data to send you information about relevant offers, new games, seasonal promotions (such as BPL season specials or Eid bonuses), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support@joyabaje or using the unsubscribe option included in each marketing email.

3 Data Sharing & Third Parties

joyabaje does not sell your personal data to any third party. We share your data only in the limited circumstances set out below, and only to the extent necessary for each specific purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, joyabaje shares relevant financial and identity data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other connected financial institutions. Each of these partners operates under its own privacy and security obligations and processes your data only to facilitate the specific transaction you have requested.

3.2 Game Software Providers

Casino and sports betting data is processed in part by our third-party software providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the technical data necessary to authenticate your session and record game outcomes. They do not receive your full identity or financial data unless required for their own regulatory compliance.

3.3 Identity Verification Services

During the KYC process, joyabaje may share your identity documents and personal details with a third-party identity verification provider to authenticate your identity electronically. These providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of joyabaje.

3.4 Legal & Regulatory Disclosure

joyabaje may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are required to do so by applicable law, court order, or regulatory direction. Such disclosures will be made to the minimum extent necessary to satisfy the legal obligation in question.

3.5 Business Transfers

In the event that joyabaje undergoes a merger, acquisition, or sale of business assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and the privacy protections that will apply to your data in the hands of the new entity before the transfer takes effect.

4 Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. joyabaje uses cookies and similar tracking technologies — including local storage and session tokens — to operate the platform effectively, remember your preferences, and understand how you use our services.

4.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in securely and cookies that prevent cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred odds format, and notification preferences. Disabling these may reduce your user experience but will not prevent you from accessing core services.
• Analytics Cookies: Used to collect anonymised data about how players navigate joyabaje — which pages are visited most, where players drop off, and how long sessions last. This data is used exclusively to improve platform performance.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious account behaviour. These are a core component of our player protection infrastructure.

4.3 Managing Cookies

Most modern browsers allow you to control cookie behaviour through their settings menus — including blocking all cookies, blocking third-party cookies only, or deleting existing cookies. Please note that disabling essential cookies will prevent you from logging in to joyabaje and accessing your account. Instructions for managing cookies can be found in the help documentation of your specific browser.

4.4 No Third-Party Advertising Cookies

joyabaje does not use advertising network cookies or cross-site tracking pixels to build advertising profiles or share your browsing behaviour with external advertising platforms. The analytics tools we use are configured to anonymise IP addresses and aggregate data before storage.

5 Data Retention & Storage

5.1 Retention Periods

joyabaje retains your personal data for as long as your account remains active and for a period after closure as required by our legal, regulatory, and contractual obligations. The general retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your account plus 5 years after closure, to meet anti-money laundering record-keeping obligations;
• Transaction and financial records: Retained for 7 years from the date of each transaction, consistent with standard financial record-keeping practice;
• Support communications: Retained for 3 years from the date of the interaction;
• Technical and usage data: Retained for 24 months on a rolling basis, after which it is aggregated and anonymised or deleted;
• Marketing preference records: Retained for as long as your account is active and for 12 months after any opt-out, to provide an audit trail of your consent decisions.

5.2 Storage Location

Player data collected by joyabaje is stored on secure servers with access restricted to authorised personnel only. Data may be processed and stored in locations outside Bangladesh where our technology infrastructure or third-party service providers are based. In all cases, appropriate safeguards are applied to ensure that your data receives a standard of protection equivalent to that described in this Privacy Policy.

5.3 Data Deletion

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data must be retained for legal reasons beyond your account closure, it is placed in a restricted-access archive and is not used for any operational purpose.

6 Your Data Rights

As a player on joyabaje, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to support@joyabaje from the email address registered to your account.

6.1 Right of Access

You have the right to request a copy of the personal data that joyabaje holds about you. We will provide this information in a clear, readable format within a reasonable timeframe following receipt of a valid request. We may ask you to verify your identity before processing an access request to protect your data from unauthorised disclosure.

6.2 Right to Correction

If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that it be corrected or updated. You may also update certain account details directly through the account settings section of the joyabaje platform without needing to contact support.

6.3 Right to Deletion

You may request that joyabaje delete your personal data. We will honour deletion requests to the fullest extent possible, subject to our legal obligation to retain certain categories of data (such as transaction records and identity verification data) for defined periods. Where deletion is not possible, we will explain the reason and restrict the use of your data to the minimum necessary.

6.4 Right to Data Portability

You have the right to receive a copy of your personal data in a structured, machine-readable format so that it can be transferred to another service provider of your choice. Data portability requests will be fulfilled within a reasonable period and will include your account data and transaction history where technically feasible.

6.5 Right to Object to Processing

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests — for example, processing for responsible gaming monitoring or platform analytics. Where you raise a valid objection, joyabaje will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

7 Data Security Measures

7.1 Technical Safeguards

joyabaje implements a range of technical security measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include TLS/SSL encryption for all data in transit, encrypted storage for sensitive data at rest, firewall protection, intrusion detection systems, and regular security vulnerability assessments.

7.2 Access Controls

Access to personal data within joyabaje's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories necessary for their specific role, and all access is logged and subject to periodic review. Administrative access to production systems is protected by multi-factor authentication.

7.3 Payment Security

joyabaje does not store full payment card numbers, bKash PINs, Nagad PINs, or other payment credentials on our servers. All payment transactions are handled via the secure APIs of our payment partners, which maintain their own security certifications. Transaction references and confirmation codes are the only payment-related data retained by joyabaje.

7.4 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, joyabaje will notify affected individuals promptly, describing the nature of the breach, the data involved, the likely consequences, and the steps we are taking to address the situation. We take data breach preparedness seriously and conduct regular drills and reviews of our incident response procedures.

7.5 Player-Side Security Responsibilities

While joyabaje takes extensive steps to protect your data on our side, you also play an important role in keeping your account secure. We recommend that you:

• Use a strong, unique password for your joyabaje account;
• Never share your login credentials with any other person;
• Log out of your account when using a shared or public device;
• Contact support@joyabaje immediately if you suspect unauthorised access to your account.

8 Changes to This Policy

joyabaje reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this policy, we will notify registered players by email to their registered address and by posting a prominent notice on the joyabaje platform at least 7 days before the changes take effect.

The version number and effective date displayed at the top of this document will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how joyabaje protects your data. Continued use of the platform after the effective date of any update constitutes your acknowledgement of the revised policy.

If you have any questions about this Privacy Policy, about how your personal data is processed, or if you wish to exercise any of your data rights, please contact our support team at support@joyabaje. Our support team is available 24 hours a day, 7 days a week, and operates on Bangladesh Standard Time (BST, UTC+6).