joya line Privacy Policy

This Privacy Policy ("Policy") is issued by joya line ("we", "us", "our", "the Platform") and applies to all individuals who visit, register on, or otherwise interact with the joya line website and associated services. The Policy sets out our commitment to handling your personal information responsibly, transparently, and in accordance with recognised international data protection principles.

By creating an account on joya line or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood the terms of this Policy. If you have any questions, you may contact our Data Protection team at [email protected] at any time.

joya line collects personal data in several ways: directly from you when you register an account or use our services; automatically through your interaction with the platform; and on occasion from trusted third-party sources as part of our identity and payment verification processes. The categories of data we collect include, but are not limited to, the following:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such data is incidentally disclosed during a support interaction, it will not be processed for any purpose other than resolving the immediate query and will be deleted from our records promptly thereafter.

Minors: joya line does not knowingly collect data from individuals under the age of 18. If we become aware that data belonging to a minor has been collected, the associated account will be closed immediately and all data permanently deleted. Please see our Terms & Conditions for our full age verification policy.

joya line processes your personal data only for specific, clearly defined purposes. We will not use your data in a way that is incompatible with the purposes listed below. Our legal basis for processing is one of the following: contractual necessity (processing required to fulfil the service you have registered for); legitimate interests (where processing is reasonably necessary to operate the platform safely and fairly); compliance with a legal obligation; or your explicit consent where obtained.

• Account Administration: To create, maintain, and manage your joya line account, verify your identity, and ensure that only you can access your account.
• Service Delivery: To enable gameplay, process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and banking partners, and to credit bonuses and promotional rewards to your account.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, and any other conduct that violates our Terms & Conditions or applicable law.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion agreements, and apply deposit or session limits as requested by the player or required by our policies.
• Customer Support: To respond to your queries, resolve complaints, and maintain a record of your support interactions for quality and training purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or in-platform message — but only where you have opted in to receive such communications. You may opt out at any time through your account settings or by contacting support.
• Platform Improvement: To analyse usage patterns in aggregate form, diagnose technical issues, test new features, and optimise the overall player experience on the joya line platform.
• Legal Compliance: To fulfil any obligations imposed on joya line by applicable law, regulatory guidance, or lawful requests from competent authorities.

We will never sell your personal data to third parties for their own marketing purposes. We will never use your data to make fully automated decisions that produce significant legal effects on you without first providing an opportunity for human review.

joya line shares personal data with third parties only where strictly necessary to deliver the platform's services, fulfil legal obligations, or protect the integrity of the platform. All third-party recipients of personal data are bound by contractual data processing agreements that require them to handle your data in accordance with standards consistent with this Policy. The categories of third parties with whom data may be shared are as follows:

• Payment Processors: Mobile money operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard) receive the minimum financial data necessary to process deposit and withdrawal transactions.
• Game Studios & Content Providers: Certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level technical data required to deliver live dealer tables, RNG slots, and other gaming content. They do not receive your full identity profile.
• Identity Verification Partners: Third-party KYC and anti-fraud service providers may process copies of identity documents you submit to verify that you are who you say you are and that you meet our eligibility criteria.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand how the platform is used and where improvements can be made. No personally identifiable information is included in these datasets.
• Legal & Regulatory Authorities: Where required by law, court order, or a lawful request from a competent authority, joya line may disclose personal data to law enforcement agencies or regulatory bodies. We will notify you of such a disclosure where we are legally permitted to do so.

joya line does not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards such as contractual clauses requiring the recipient to uphold data protection standards equivalent to those described in this Policy.

joya line uses cookies and similar tracking technologies (such as pixel tags and local storage) to ensure the platform functions correctly, to remember your preferences, and to gather aggregated analytics about how the site is used. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

The types of cookies used on the joya line platform are categorised as follows:

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will impair the functionality of the joya line platform and may prevent you from logging into your account or completing financial transactions.

Where local storage or session storage is used in place of cookies (for example, to maintain your game state during a session), the same principles of minimal data collection and proportionate retention apply.

joya line retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Identity, contact, and financial data associated with an active account is retained for the lifetime of the account plus a minimum of five years following permanent closure, in order to satisfy potential legal, regulatory, and anti-money laundering record-keeping requirements.
• KYC Documents: Copies of identity and address verification documents are retained for a minimum of five years from the date of submission, consistent with standard anti-money laundering best practices.
• Transaction Records: Full records of all deposits, withdrawals, and in-game wagers are retained for a minimum of five years from the date of each transaction.
• Support Communications: Chat transcripts and email correspondence with the support team are retained for two years from the date of the last interaction in a given ticket.
• Marketing Consent Records: Records of when you opted in or out of marketing communications are retained for the duration of your account and for three years following account closure.
• Anonymised Analytics Data: Aggregated, anonymised platform analytics data from which no individual can be identified may be retained indefinitely for internal reporting and product development purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints (for example, data held in backup archives), we ensure the data is isolated from active processing until it can be permanently destroyed.

All personal data is stored on servers protected by industry-standard physical and logical security controls. Data in transit between your device and the joya line platform is protected by TLS 1.2 or higher encryption at all times.

joya line implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme is reviewed and updated on a regular basis to address evolving threats. Key measures currently in place include:

• SSL/TLS Encryption: All data transmitted between your device and the joya line platform is encrypted using TLS 1.2 or TLS 1.3 protocols. The padlock indicator visible in your browser confirms that a secure connection is active.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a cryptographically strong one-way hashing algorithm with a unique salt per user, making it computationally infeasible to reverse-engineer the original password from stored data.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal data access events are logged and periodically audited.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. Internal administrative systems require mandatory 2FA for all staff with access to personal data.
• Intrusion Detection: Our platform is monitored around the clock for anomalous activity. Automated systems flag unusual login patterns, multiple failed authentication attempts, and atypical transaction behaviour for immediate review.
• Vulnerability Management: Regular security assessments and penetration tests are conducted on the joya line infrastructure. Identified vulnerabilities are assessed, prioritised, and remediated in accordance with a defined security patch management schedule.

Despite our rigorous security measures, no system connected to the internet can be guaranteed to be completely invulnerable. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, joya line will notify affected players without undue delay and take all reasonable steps to contain and mitigate the incident.

As a player on the joya line platform, you hold a number of rights with respect to your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request" and include enough information for us to verify your identity before processing the request.

• Right of Access: You have the right to request a copy of the personal data joya line holds about you, along with information about how it is being processed. We will provide this information within a reasonable timeframe, typically within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your account settings page.
• Right to Erasure: Subject to our legal and regulatory retention obligations described in Section 5, you may request that we delete your personal data. Where deletion is not immediately possible due to a legal hold, we will restrict processing of that data to the minimum necessary.
• Right to Restrict Processing: You may request that we temporarily suspend active processing of your personal data — for example, while a rectification request is being assessed, or where you contest the lawfulness of our processing.
• Right to Data Portability: Where technically feasible and where our processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object to Marketing: You may withdraw consent to receive marketing communications at any time by updating your notification preferences in your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right Not to be Subject to Automated Decision-Making: joya line does not make decisions with significant legal or similarly significant effects on individuals based solely on automated processing without the possibility of human review. If you have concerns about any decision affecting your account, please contact our support team.

Please note that some of these rights are subject to limitations. For example, we cannot delete data that we are legally required to retain, and we cannot provide data portability for data that is technically inseparable from other players' records. Where a limitation applies, we will explain clearly why we cannot fully comply with a request.

joya line reviews this Privacy Policy periodically and updates it whenever there is a material change to how we collect, use, or protect personal data — or when required to do so by changes in applicable law or regulatory guidance. The "Last Updated" date at the top of this page reflects the date on which the most recent revision came into effect.

When a material change is made, registered players will be notified via the email address associated with their account at least seven days before the revised Policy takes effect. For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy), no advance notice will be given, but the "Last Updated" date will be revised accordingly.

Your continued use of the joya line platform after the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the platform and contact support to request account closure.

Contact for Privacy Enquiries: If you have any questions, concerns, or complaints about this Privacy Policy or about how joya line handles your personal data, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24/7 through the joya line platform
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve substantive requests within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day deadline expires.