jys9 Privacy Policy

jys9 ("we", "us", "our") operates the online casino and sports betting platform accessible at jys9.io (the "Platform"). We are committed to protecting the personal information of all players and visitors who interact with our Platform, particularly those based in Bangladesh.

This Privacy Policy sets out in clear, plain English how jys9 collects, stores, uses, and protects your personal data. It also explains the rights you have in relation to that data and how to exercise them. By registering an account or using the jys9 Platform, you acknowledge that you have read and understood this Privacy Policy.

This policy should be read alongside the jys9 Terms and Conditions, which govern the overall relationship between you and jys9. Where there is any conflict between this policy and the Terms and Conditions on a data privacy matter, this Privacy Policy takes precedence.

jys9 collects personal data in the following categories, depending on your interaction with the Platform:

jys9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond photo ID for identity verification), or medical data, unless you voluntarily disclose such information in the context of a responsible gaming support request.

jys9 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your jys9 player account, including authentication and account security.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) as part of our Know Your Customer obligations, in line with responsible gaming and anti-money laundering best practices.
• Payment Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and local bank transfer, and to maintain accurate financial records of all transactions.
• Service Delivery: To provide access to jys9 casino games, sports betting markets (including cricket and BPL betting), slots, and all other Platform features.
• Customer Support: To respond to your support enquiries, resolve disputes, investigate complaints, and improve the overall service experience.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible Gaming: To monitor gaming behaviour patterns that may indicate problem gambling and to administer self-exclusion, deposit limits, and session time tools at your request.
• Legal Compliance: To meet our obligations under applicable laws and to respond to valid requests from law enforcement or regulatory authorities.
• Platform Improvement: To analyse aggregated usage data (in anonymised form) for the purpose of improving Platform features, game selection, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about jys9 — but only where you have given explicit consent to receive such communications. You may opt out at any time by contacting [email protected].

jys9 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you without human review.

jys9 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and jys9 (i.e., providing the Platform services you have signed up to use), including account creation, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) checks, age verification, and responding to lawful authority requests.
• Legitimate Interests: Processing necessary for jys9's legitimate business interests, including fraud detection, platform security, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and optional personalisation features, where you have provided clear, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jys9 does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share necessary transaction data with bKash, Nagad, Rocket, Upay, and local banking partners solely to process your deposits and withdrawals. These providers are bound by their own privacy and data security standards.
• Identity Verification Providers: Where third-party KYC tools are used to assist in verifying your identity documents, the relevant data is shared with those providers under strict data processing agreements that prohibit secondary use.
• Game Software Providers: Game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymised player identifier and gameplay session data necessary to deliver the game. They do not receive your full identity or financial data.
• IT & Hosting Infrastructure: jys9's Platform is hosted on secure servers provided by third-party infrastructure partners. These partners have access to server-level data as part of hosting services but are contractually prohibited from accessing or using player data for any other purpose.
• Legal & Regulatory Authorities: jys9 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law, or where jys9 reasonably believes disclosure is necessary to prevent fraud, protect player safety, or fulfil a legal obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of jys9's assets, your personal data may be transferred to the acquiring entity. You will be notified via the email address on your account prior to any such transfer taking effect.

All third parties with whom jys9 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using that data for any purpose other than those specified in the relevant service agreement.

jys9 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform effectively and provide you with a consistent, personalised experience. The following types of cookies are in use:

• Strictly Necessary Cookies: These are essential for the Platform to function. They maintain your login session, store your language preferences, and enable core security features. These cookies cannot be disabled without preventing normal Platform use.
• Performance & Analytics Cookies: These collect anonymised data about how players navigate the Platform — which pages are visited most often, where errors occur, and how long sessions last. This data is used solely for internal Platform improvement and is never linked back to individual identities.
• Functionality Cookies: These remember your game preferences, display settings, and last-visited sections so that you do not need to configure these on every visit.
• Security Cookies: These assist in detecting suspicious login attempts, unusual geographic access patterns, and potential account takeover activity. They are part of jys9's fraud prevention infrastructure.

jys9 does not use third-party advertising cookies or behavioural retargeting technologies. You will not see jys9-targeted advertisements on external websites as a result of cookies placed by our Platform.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and processing transactions.

jys9 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the jys9 Platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data fields (including identity document references, payment tokens, and passwords) are encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. jys9 uses bcrypt hashing with unique salts per account, ensuring that even in the unlikely event of a data breach, passwords cannot be recovered in their original form.
• Access Controls: Personal data is accessible only to jys9 personnel whose job functions require it. Access is role-based, logged, and subject to regular review.
• Two-Factor Authentication: jys9 supports optional two-factor authentication (2FA) on player accounts as an additional layer of security. Players are strongly encouraged to enable 2FA via their account security settings.
• Regular Security Audits: jys9's Platform and infrastructure undergo periodic security assessments to identify and remediate potential vulnerabilities before they can be exploited.

While jys9 employs robust security practices, no digital platform can guarantee absolute immunity from all security threats. In the event of a data breach that poses a risk to your rights, jys9 will notify affected players promptly and take all necessary remediation steps.

jys9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable legal and compliance obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure, in line with standard financial record-keeping and AML compliance requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 7 years from the date of the transaction for financial compliance purposes.
• Identity Verification Documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later.
• Customer Support Correspondence: Retained for 3 years from the date of the last interaction, to facilitate follow-up on complex disputes or recurring account issues.
• Technical & Usage Data (Anonymised): Aggregated and anonymised analytics data may be retained indefinitely for Platform improvement purposes, as it no longer constitutes personal data once anonymised.
• Marketing Consent Records: Retained for the duration of your consent plus 3 years thereafter, to demonstrate compliance in the event of a regulatory enquiry.

When personal data reaches the end of its applicable retention period, jys9 will securely delete or irreversibly anonymise that data in accordance with our internal data disposal procedures.

As a jys9 player, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request", including your registered account username and a description of the right you wish to exercise:

• Right of Access: You have the right to request a copy of all personal data that jys9 holds about you. We will provide this in a structured, commonly used electronic format within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor contact details (such as email address or phone number) can be updated directly through your account settings.
• Right to Erasure: You may request that jys9 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on legitimate interests grounds. Note that this right is subject to jys9's legal obligations to retain certain data (e.g., financial records) for defined periods.
• Right to Restrict Processing: You may request that jys9 restricts processing of your data in certain circumstances — for example, while a dispute about the accuracy of data is being resolved.
• Right to Object: You have the right to object to jys9 processing your data on the basis of legitimate interests, including for direct marketing purposes. Upon receipt of a valid objection to marketing, jys9 will cease that processing immediately.
• Right to Data Portability: Where jys9 processes your data on the basis of consent or contractual necessity, and where processing is carried out by automated means, you may request that we provide your personal data in a portable electronic format, or transfer it directly to another service provider where technically feasible.

jys9 will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

The jys9 Platform may, from time to time, contain references to third-party game providers or payment platforms in the context of describing available services. jys9 does not embed external third-party links that navigate away from the Platform in a manner that is outside of the core service delivery context.

However, in the event that you independently navigate to third-party websites (for example, through a payment provider's own portal), jys9 is not responsible for the privacy practices of those third parties. We strongly recommend that you review the privacy policy of any third-party service you interact with in connection with your jys9 account — particularly bKash, Nagad, Rocket, and Upay — before submitting personal or financial information to them.

jys9 has no control over the content, data practices, or security standards of third-party platforms, and this Privacy Policy does not apply to them.

The jys9 Platform is strictly for adults aged 21 years and above. jys9 does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and permanently close the associated account in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor in your care has registered on the jys9 Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including refunding any deposits made from the account (net of any winnings) to the payment method used.

jys9 employs age verification procedures during registration and at the withdrawal stage to enforce this policy. We cooperate with payment providers to identify and prevent underage gambling on our Platform.

jys9 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be available on this page, with the "Last Updated" date revised accordingly.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — jys9 will notify registered players via email to the address on file, or via a prominent on-Platform notification, at least 14 days before the changes take effect.

Your continued use of the jys9 Platform after any amendment to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you should cease using the Platform and may request account closure by contacting [email protected].

We encourage all jys9 players to review this Privacy Policy periodically to stay informed about how their personal data is being protected.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the jys9 Privacy team using the details below:

• Email: [email protected] — for all privacy enquiries, data rights requests, and breach notifications (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request – [Your Username]"
• Subject Line for Privacy Concerns: "Privacy Concern – [Brief Description]"
• Response Time: All privacy-related email enquiries are acknowledged within 24 hours and resolved within 30 days, or sooner where the matter is straightforward.
• Live Chat: Available 24/7 on the jys9 Platform for general enquiries. Complex data rights requests must be submitted in writing via email for audit trail purposes.

jys9 takes all privacy concerns seriously and treats every data rights request with equal attention regardless of the amount of data involved or the nature of the request. We are committed to being transparent, responsive, and fair in all matters relating to your personal information.