jaya9 best Privacy Policy

1.1 Information You Provide Directly

When you register an account, complete KYC verification, contact support, or otherwise interact with jaya9 best, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and national identification number as provided during account registration or KYC submission.
• Contact data: Residential address (including district, division, and postcode within Bangladesh), mobile phone number, and email address.
• Account credentials: Your chosen username and a hashed, salted representation of your password. We never store passwords in plain text.
• Verification documents: Copies of identity documents submitted for KYC purposes, such as your National ID card, passport, or birth certificate issued by a Bangladeshi authority.
• Financial data: Mobile financial service (MFS) account numbers for bKash, Nagad, Rocket, or Upay; bank account details for BRAC Bank, City Bank, Islami Bank, Dutch-Bangla Bank, or other supported institutions. We do not store full card numbers or CV V codes.
• Support communications: The content of any messages, emails, or live chat conversations you initiate with the jaya9 best support team, including attachments you submit.
• Responsible gaming data: Any self-exclusion requests, deposit limits, time-out preferences, or problem gambling disclosures you submit through our responsible gaming tools.

1.2 Information Collected Automatically

When you access or use the jaya9 best platform — whether via desktop browser or mobile device — our systems automatically collect certain technical data. This information is necessary for the platform to function correctly, to detect fraud, and to maintain security:

• Device data: Device type, operating system and version, browser type and version, screen resolution, and device identifiers.
• Network data: IP address, approximate geolocation derived from IP, internet service provider (ISP) name, and connection type.
• Usage data: Pages visited, time spent on each page, game sessions initiated, bets placed, clicks and interactions, and session timestamps in Bangladesh Standard Time (BST, UTC+6).
• Cookie and tracking data: Session tokens, preference cookies, and analytics identifiers. See Section 4 (Cookies & Tracking) for full details.

1.3 Information from Third Parties

In limited circumstances, jaya9 best may receive information about you from trusted third-party sources. This includes identity verification data returned by KYC service providers, fraud-risk signals from payment processors such as bKash and Nagad, and game history data supplied by our game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to support dispute resolution and audit processes. We use such data only for the purposes for which it was shared and in accordance with our agreements with those third parties.

3.1 Service Providers and Technology Partners

jaya9 best works with a limited number of carefully vetted third-party service providers who process personal data on our behalf to help us deliver the platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners (BRAC Bank, City Bank, Islami Bank, Dutch-Bangla Bank) receive the transaction data necessary to process deposits and withdrawals. Each provider operates under its own regulated privacy framework.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive session and bet data necessary to operate their games and settle results. This data is governed by the terms of our agreements with those studios.
• KYC and identity verification providers: Third-party KYC service providers may process your identity documents and biometric comparison data strictly for the purpose of age and identity verification as required by our responsible gaming and AML obligations.
• Cloud infrastructure and hosting: Our platform infrastructure relies on reputable cloud hosting providers. These providers process technical data (including IP addresses and session logs) under data processing agreements that prohibit use of that data for their own purposes.
• Analytics providers: We may use aggregate, anonymised analytics services to understand how players navigate the platform. No personally identifiable information is shared with analytics providers beyond what is strictly necessary for platform performance monitoring.

All service providers who process personal data on behalf of jaya9 best are bound by contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only in accordance with our documented instructions.

3.2 Legal and Regulatory Disclosure

jaya9 best may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of jaya9 best, our players, or the public. This includes disclosure in connection with anti-money laundering (AML) obligations, fraud investigations, and court orders. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the jaya9 best business, your personal data may be transferred to the successor entity as part of that transaction. We will provide notice of any such transfer and ensure that the acquiring entity is bound by privacy commitments consistent with this policy before any transfer of personal data takes place.

jaya9 best implements a layered security architecture designed to protect your personal data throughout its lifecycle on our platform. Our key technical security measures include:

• SSL/TLS encryption: All data in transit between your device and jaya9 best servers is encrypted using TLS 1.2 or higher. Our domain is HTTPS-only; unencrypted HTTP connections are automatically redirected.
• Password hashing: Account passwords are never stored in plain text. We use a strong adaptive hashing algorithm with per-user salting, making stored password hashes computationally infeasible to reverse even in the event of a data breach.
• Two-factor authentication (2FA): All registered players are encouraged to enable 2FA via SMS OTP. For accounts with high-value transaction activity, 2FA may be required before withdrawals are processed.
• Access controls: Access to personal data within jaya9 best is restricted on a strict need-to-know basis. Internal access controls are enforced via role-based permissions, and all access to sensitive data is logged and auditable.
• Intrusion detection: Our infrastructure includes continuous monitoring for unusual access patterns, failed login attempts, and other indicators of potential compromise. Suspected security incidents trigger an immediate internal response protocol.
• Data minimisation: We collect only the personal data that is genuinely necessary for the purposes described in this policy. We do not retain data beyond the periods set out in Section 6 (Data Retention).

While jaya9 best takes all reasonable and appropriate steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jaya9 best will notify affected players at the email address registered to their account as promptly as circumstances permit, and will take all available steps to contain the breach and mitigate its effects.

You also have an important role in keeping your account secure. Never share your password with anyone, use a strong and unique password for your jaya9 best account, and contact [email protected] immediately if you suspect your account has been accessed without your authorisation.

As a player on jaya9 best, you hold the following rights in relation to the personal data we hold about you. These rights may be subject to certain limitations where applicable law or our legal obligations require us to retain or continue processing particular data.

• Right to access: You have the right to request a copy of the personal data jaya9 best holds about you, together with information about how it is used and with whom it has been shared. We will provide this information in a clear, structured format within 30 days of a verified request.
• Right to rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data (such as your contact email and phone number) directly via your account settings. For identity data corrections, please contact [email protected] and provide supporting documentation.
• Right to erasure: You may request that jaya9 best delete your personal data. We will honour erasure requests where the data is no longer necessary for the purpose for which it was collected and where no overriding legal retention obligation applies. Note that AML and KYC data typically cannot be erased during the mandatory retention period.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that we temporarily restrict processing of that data while the matter is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV).
• Right to withdraw consent: Where we process your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

jaya9 best will not charge a fee for processing data rights requests submitted in good faith. In the event of requests that are manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or to decline to act on the request, in which case we will explain our reasons in writing.