joyawin Privacy Policy

joyawin collects personal data from you in several ways: directly when you register an account or interact with the platform, automatically when you browse or use our services, and occasionally from third-party sources as part of our verification and fraud-prevention processes. The categories of data we collect are described in full below.

1.1 Registration Data

When you create a joyawin account, you are asked to provide the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify that you are at least 18 years of age);
• Email address (used for account communication, verification, and promotional messages where consented);
• Mobile phone number (used for account security and payment method verification);
• Residential address;
• Chosen username and password (password is stored in hashed form and never in plain text).

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of the following documents:

• National Identity Card (NID) — the standard government-issued identity document for Bangladeshi residents;
• Passport (for non-NID holders or international verification);
• Driver's licence;
• Proof of address (utility bill, bank statement, or similar document dated within the last three months);
• Proof of payment method ownership (screenshot or statement from bKash, Nagad, Rocket, Upay, or bank account).

KYC documents are processed securely and retained only for the period required by our compliance obligations. They are not used for any purpose other than identity verification and fraud prevention.

1.3 Financial Transaction Data

Each time you make a deposit or withdrawal on joyawin, we record the transaction amount, currency (BDT), payment method used, transaction timestamp, and a reference number. We do not store full payment account credentials on our servers — bKash, Nagad, Rocket, Upay, and banking partner transactions are processed through their respective secure gateways.

1.4 Gameplay and Betting Data

We record data about your activity on the platform, including: games played, bet amounts, wagering history, game outcomes, bonus usage, and session durations. This data is used to personalise your experience, detect problem gambling patterns (in accordance with our Responsible Gaming Policy), resolve disputes, and comply with audit requirements.

1.5 Technical and Device Data

When you access joyawin, our servers automatically collect certain technical data, including:

• IP address and approximate geolocation (country/city level);
• Browser type, version, and language settings;
• Device type, operating system, and screen resolution;
• Referring URL and pages visited within joyawin;
• Session start and end times.

This data is used for security monitoring, fraud detection, platform optimisation, and aggregate analytics. It is not used to build individual advertising profiles.

1.6 Communications Data

If you contact our support team via email or live chat, we retain records of that correspondence, including the content of your messages and any attachments you send. This allows us to track the resolution of your query and maintain a history of support interactions for quality assurance purposes.

joyawin processes your personal data for the following purposes. For each purpose, we identify the lawful basis on which the processing is carried out.

2.1 Marketing Communications

joyawin may send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers (including Eid, Pohela Boishakh, and Victory Day promotions), new game releases, and other joyawin news — but only if you have explicitly opted in to receive such communications at the time of registration or in your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by adjusting your notification preferences in your account dashboard or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

joyawin uses automated systems to detect fraud, identify problem gambling patterns, and flag suspicious financial activity. In some cases, these automated systems may result in temporary account restrictions pending manual review by our compliance team. Where a significant decision affecting your account is made solely by automated means, you have the right to request human review of that decision. To exercise this right, contact us at [email protected].

joyawin does not sell your personal data. We do not rent or trade personal data to marketing companies, data brokers, or any third party for commercial gain. Your personal data is shared only in the specific circumstances described below.

3.1 Payment Processing Partners

To process your deposits and withdrawals, joyawin shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these partners processes your transaction data under their own privacy policies and security frameworks. joyawin is not responsible for the data practices of these third-party payment providers once data has been transmitted to their systems.

3.2 Game Technology Providers

Game content on joyawin is supplied by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Red Tiger. When you play a game provided by one of these studios, limited technical data (such as your session token, bet amounts, and game outcomes) is transmitted to that studio's servers to power the game. This data is governed by each provider's data processing agreement with joyawin and is used solely for game functionality and auditing purposes.

3.3 Identity Verification Services

joyawin may use third-party identity verification providers to assist in KYC processing. Where this is the case, copies of your identity documents are transmitted securely to the verification provider's system. These providers are contractually bound to process your data only for the purpose of identity verification and to apply data security standards equivalent to those used by joyawin.

3.4 Legal and Regulatory Disclosure

joyawin may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including fraud, money laundering, or underage gambling. Such disclosures are made on a case-by-case basis and are limited strictly to the data necessary to satisfy the legal request.

joyawin uses cookies and similar technologies (including local storage and session tokens) to enable essential platform functionality, maintain your login session, detect fraud, and gather aggregate analytics data that helps us improve the platform. We do not use cookies to serve third-party advertising or to track your activity on websites outside of joyawin.app.

4.1 Types of Cookies We Use

4.2 Managing Cookies

Most modern web browsers allow you to control cookies through the browser's settings. You can choose to block all cookies, accept only essential cookies, or clear existing cookies at any time. Please note that blocking essential or security cookies may impair the functionality of the joyawin platform, including your ability to log in, maintain an active session, or complete financial transactions.

Instructions for managing cookies in common browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data.
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Safari (iOS/macOS): Settings → Safari → Privacy & Security.
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.

joyawin retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The following retention schedule applies:

At the end of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytics purposes.

joyawin takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure.

6.1 Technical Safeguards

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Password hashing: Your account password is stored using a one-way cryptographic hashing algorithm. joyawin staff cannot retrieve your password in plain text — only you know it.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. joyawin employees can only access the data categories necessary for their specific role.
• Intrusion detection: Our servers are monitored continuously for suspicious access patterns, brute-force login attempts, and anomalous activity.
• Regular security audits: joyawin conducts periodic internal security reviews and engages third-party security professionals to assess platform vulnerabilities.

6.2 Organisational Safeguards

• All joyawin employees who handle personal data are trained on data protection obligations and are bound by confidentiality agreements.
• Data breach response procedures are in place. In the event of a security breach that is likely to result in a risk to your rights and freedoms, joyawin will notify affected users without undue delay and take immediate steps to contain and remediate the breach.
• Third-party service providers who process data on behalf of joyawin are vetted for security standards and are required to sign data processing agreements before any personal data is shared with them.

As a joyawin user, you hold a number of rights with respect to your personal data. joyawin is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Data Subject Request" and a description of the right you wish to exercise.

7.1 Right of Access

You have the right to request a copy of the personal data that joyawin holds about you. Upon receiving a verified access request, we will provide you with a summary of your data within a reasonable timeframe. This includes your registration data, KYC status, transaction history, and gameplay records.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For routine updates (such as changing your contact email or phone number), you can make amendments directly through your account settings. For KYC-related corrections, please contact our support team.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where you object to processing and there is no overriding legitimate interest. Please note that joyawin may be required to retain certain data — particularly financial transaction records and KYC documents — for the retention periods specified in Section 5 to comply with legal and regulatory obligations. In such cases, your erasure request will be partially fulfilled, with data deleted to the maximum extent legally permissible.

7.4 Right to Restrict Processing

In certain circumstances (for example, while a dispute about data accuracy is resolved), you may request that joyawin restricts the processing of your personal data. During a processing restriction, we will continue to store your data but will not use it for any additional purposes without your consent.

7.5 Right to Data Portability

Where data is processed on the basis of your consent or in connection with a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). This allows you to transfer your data to another service provider if you choose to do so.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on joyawin's legitimate interests. Upon receiving an objection, joyawin will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

7.7 Right to Withdraw Consent

Where joyawin processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way joyawin handles your personal data, please contact our dedicated privacy support team. We aim to respond to all privacy-related enquiries promptly and transparently.

You can reach us at: [email protected]

Please use the subject line "Privacy Enquiry" or "Data Subject Request" so that your message is directed to the appropriate team member without delay. Our support team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays.

8.1 Policy Updates

joyawin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered users via email and/or a prominent notice on the joyawin website. The effective date at the top of this policy will be updated accordingly. We encourage you to review this Privacy Policy periodically. Your continued use of the joyawin platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms.

8.2 Children's Privacy

The joyawin platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account and provided personal data, we will immediately close that account, delete the associated data to the extent required by law, and take any additional steps required under our Responsible Gaming obligations. If you believe a minor has accessed the joyawin platform, please contact us immediately at [email protected].