joya bat Privacy Policy
At joya bat, the privacy and security of your personal data is a fundamental commitment — not an afterthought. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have as a registered player on our platform.
Our Privacy Commitments
How joya bat Protects You
Before you read the full policy detail below, here is a plain-English summary of the six core privacy principles that guide how joya bat handles your personal data. These principles are binding — they are not aspirational statements.
Minimum Necessary Collection
joya bat only collects personal data that is genuinely required to provide you with a functioning account, process your transactions, verify your identity, and comply with anti-money-laundering obligations. We do not collect data speculatively or for purposes unrelated to your use of the platform.
No Sale of Personal Data
joya bat does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is your data. The only circumstances in which joya bat shares your information with external parties are described in full in the Data Sharing section of this policy.
Enterprise-Grade Security
All personal and financial data stored by joya bat is protected with 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Access to player data is restricted to authorised personnel only, and all data access events are logged and monitored in real time.
You Control Your Data
Registered joya bat players have the right to access, correct, export, and request deletion of their personal data at any time, subject to legal retention obligations. These rights are not conditional on closing your account — you can exercise them while your account remains active.
Marketing Opt-Out Respected
If you receive marketing communications from joya bat and you choose to unsubscribe, your preference is actioned within 48 hours and is permanent unless you choose to re-subscribe. Opting out of marketing does not affect your ability to use your account or receive transactional communications such as deposit confirmations and withdrawal notifications.
Clear Retention Limits
joya bat does not retain your personal data indefinitely. We apply defined retention periods to every category of data we hold, and data is securely deleted or anonymised when the retention period expires. Full details of our retention schedule are in the Data Retention section of this policy.
1 Data We Collect
joya bat collects personal data in three distinct ways: information you provide directly, information generated automatically through your use of the platform, and information we receive from verified third-party sources as part of our identity and payment verification processes.
1.1 Information You Provide Directly
When you register a joya bat account or interact with our services, you may provide the following categories of personal data:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number | Account registration and KYC verification |
| Contact Data | Mobile number, email address, city of residence | Account registration |
| Payment Data | bKash / Nagad / Rocket account number, bank account details | Deposit and withdrawal requests |
| KYC Documents | Photo ID scans, proof of address, payment proof screenshots | Identity verification process |
| Support Data | Chat transcripts, email correspondence, complaint details | Customer support interactions |
| Preferences Data | Responsible gaming limit settings, communication preferences | Account settings updates |
1.2 Information Collected Automatically
When you access and use the joya bat platform, our systems automatically collect certain technical and behavioural data. This data is used to maintain platform security, improve user experience, detect fraud, and comply with our anti-money-laundering obligations. Automatically collected data includes:
- IP address, device type, operating system, and browser version.
- Pages visited, games played, bets placed, and session duration.
- Login timestamps and geographic location data derived from IP address.
- Cookies, session tokens, and similar tracking technologies (see Section 4).
- Transaction history including all deposits, withdrawals, bets, and bonus activity.
1.3 Information from Third Parties
In limited circumstances, joya bat may receive information about you from trusted third-party sources. This includes identity verification data from KYC service providers, fraud risk signals from payment processors, and publicly available information used to verify that a player is not subject to sanctions or self-exclusion orders. joya bat only requests third-party data where it is necessary for compliance or security purposes.
2 How We Use Your Data
joya bat processes your personal data only for lawful, specified purposes. We do not use your data for any purpose that is incompatible with the reason it was collected. The following table sets out our primary processing purposes and the legal basis for each.
| Purpose | Legal Basis |
|---|---|
| Creating and managing your player account | Contractual necessity |
| Processing deposits and withdrawals | Contractual necessity |
| Verifying your identity and age (KYC) | Legal obligation / contractual necessity |
| Detecting and preventing fraud and money laundering | Legal obligation / legitimate interest |
| Delivering customer support | Contractual necessity |
| Sending transactional notifications (deposits, withdrawals, security alerts) | Contractual necessity |
| Sending promotional and bonus communications | Consent (opt-in / opt-out available) |
| Monitoring responsible gaming indicators | Legal obligation / player protection |
| Improving platform performance and game offerings | Legitimate interest |
| Complying with legal and regulatory requests | Legal obligation |
2.1 Marketing Communications
With your consent, joya bat may contact you via SMS, email, or in-platform notification to inform you about promotions, bonuses, and seasonal offers — such as those tied to BPL season, Eid, Pohela Boishakh, or ICC tournament schedules. You may withdraw your consent to marketing communications at any time by updating your account preferences or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.
2.2 Automated Decision-Making
joya bat uses automated systems to assess fraud risk, flag unusual account activity, and apply responsible gaming interventions such as automatic session time reminders. Where an automated decision has a significant effect on your account — such as a temporary restriction placed due to a fraud flag — you have the right to request a manual review of that decision by contacting our customer support team.
3 Data Sharing & Disclosure
joya bat does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited and specific circumstances described below, and only to the extent necessary for each stated purpose.
3.1 Service Providers
joya bat works with a small number of trusted third-party service providers who process personal data on our behalf under strict contractual data protection obligations. These providers include:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment partners receive transaction data necessary to process your deposits and withdrawals. Each payment partner is subject to their own privacy policy with respect to data they independently hold.
- KYC and identity verification providers: Third-party identity verification services may receive copies of your identity documents to perform age and identity checks on joya bat's behalf.
- Technology and hosting providers: The infrastructure and cloud services that power joya bat are provided by third-party technology vendors who may process server-level data. These vendors are contractually prohibited from accessing or using player data for any purpose other than providing the contracted service.
- Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their own game servers and may receive pseudonymised player identifiers and game session data necessary to operate the game. Game providers do not receive your full name, contact details, or payment information.
3.2 Legal and Regulatory Disclosure
joya bat may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid court order, anti-money-laundering investigation, or regulatory audit. In all such cases, joya bat will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player that such disclosure has occurred.
4 Cookies & Tracking Technologies
joya bat uses cookies and similar technologies — including session tokens, local storage, and pixel tags — to operate the platform, maintain your login session, remember your preferences, detect fraud, and analyse how players use the site. This section explains what types of cookies we use and how you can manage them.
4.1 Types of Cookies Used
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, process transactions, prevent CSRF attacks | No — platform cannot function without these |
| Functional | Remember your language preferences, game display settings, and responsible gaming limit choices | Yes — disabling may reduce platform convenience |
| Analytics | Understand which games, pages, and features are most used in order to improve the platform | Yes — opt out via account settings |
| Security & Fraud Detection | Identify unusual login patterns, detect bot activity, and flag suspicious transactions | No — required for platform security |
4.2 Managing Your Cookie Preferences
You can manage non-essential cookie preferences through your joya bat account settings at any time. You may also control cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from logging into your account or completing transactions. Clearing your browser cookies will log you out of your current joya bat session and may reset your functional preferences.
joya bat does not use third-party advertising cookies or cross-site tracking technologies that monitor your behaviour on other websites outside of the joya bat platform.
5 Data Security
joya bat implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes the following controls:
- Encryption in transit: All data transmitted between your browser and joya bat's servers is encrypted using TLS 1.2 or higher. Our SSL certificate is visible as the padlock icon in your browser's address bar.
- Encryption at rest: All personal data stored in joya bat's databases is encrypted using AES-256 encryption. Payment credentials such as bKash and Nagad account numbers are stored in tokenised form and are never stored in plain text.
- Access controls: Access to player personal data within joya bat's internal systems is restricted to staff members who require it to perform their duties. All data access is role-based and logged. Staff with access to personal data undergo regular data protection training.
- Two-factor authentication: joya bat's internal administrative systems require two-factor authentication for all staff access. Players are also strongly encouraged to enable two-factor authentication on their own joya bat accounts.
- Penetration testing: joya bat's platform undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
- Incident response: In the unlikely event of a data security incident that affects your personal data, joya bat will notify affected players as promptly as practicable and will take immediate steps to contain and remediate the incident.
6 Data Retention
joya bat retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following retention schedule applies to the main categories of data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and regulatory compliance, dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | Anti-money-laundering legal obligations |
| Transaction records | Duration of account + 7 years after last transaction | Financial record-keeping obligations |
| Customer support records | 3 years from date of interaction | Complaint management and service improvement |
| Marketing preferences | Until opt-out or account closure | Consent management |
| Analytics and usage data | 26 months from collection | Platform improvement (anonymised after 6 months) |
| Self-exclusion records | Permanent (never deleted) | Responsible gaming — preventing re-registration during exclusion |
When the applicable retention period expires, joya bat securely deletes or anonymises the relevant data so that it can no longer be linked to any individual. Anonymised and aggregated data — which cannot identify any individual — may be retained indefinitely for statistical analysis and platform improvement purposes.
7 Your Privacy Rights
As a joya bat player, you have the following rights with respect to your personal data. These rights can be exercised at any time by contacting the joya bat privacy team at [email protected] with the subject line "Privacy Request".
7.1 Right of Access
You have the right to request a copy of all personal data that joya bat holds about you. We will provide this within 30 days of receiving a verified request. The first copy is provided free of charge; additional copies within a 12-month period may be subject to a reasonable administrative fee.
7.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account information (such as your mobile number or email address), you can update this directly in your account profile. For identity-related data such as your legal name or date of birth, please contact support with supporting documentation.
7.3 Right to Erasure
You have the right to request that joya bat delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. However, this right is subject to important exceptions: joya bat is legally required to retain certain categories of data (particularly transaction records and KYC documents) for defined periods regardless of an erasure request. Where erasure is not possible due to legal obligations, we will inform you of this and explain the applicable retention period.
7.4 Right to Restriction and Objection
You have the right to request that joya bat restrict the processing of your data in certain circumstances, such as while the accuracy of the data is being contested. You also have the right to object to processing carried out on the basis of legitimate interest, including profiling for fraud prevention purposes. We will consider all such objections and respond within 30 days.
7.5 Right to Data Portability
Where joya bat processes your personal data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider if you choose to do so.
8 Policy Updates & Contact
8.1 Changes to This Policy
joya bat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players by email or by posting a prominent notice on the joya bat platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date on which the most recent version was published.
We encourage you to review this Privacy Policy periodically to stay informed about how joya bat protects your personal data. Your continued use of the joya bat platform following the effective date of any changes constitutes your acceptance of the updated policy.
8.2 Contact the Privacy Team
If you have any questions, concerns, or complaints about how joya bat handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact our privacy team using the details below. We take all privacy enquiries seriously and aim to respond within 48 hours.
Email: [email protected] (subject line: "Privacy Request")
Operating Hours: 24 hours a day, 7 days a week
Response Language: English
Time Zone: Bangladesh Standard Time (BST, UTC+6)
If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority. joya bat will cooperate fully with any such investigation.
Your Data Is Safe With joya bat
Have questions about your data rights or want to learn more about how joya bat keeps your account secure? Our 24/7 English support team is here to help. You can also review our full Terms & Conditions or explore responsible gaming tools. 18+ only.