Privacy Policy — jaay9 Online Casino

When you register for, access, or use the jaay9 Platform, we collect certain categories of personal information about you. We collect only the information that is genuinely necessary to operate the Platform, process payments, comply with our legal obligations, and provide you with a safe and personalised gaming experience.

The categories of personal information we collect are described below:

We do not collect personal data from individuals we know to be under 18 years of age. If we discover that data has been collected from an underage individual, that data will be deleted promptly and the associated account will be closed. If you believe we have inadvertently collected data from a person under 18, please contact us immediately at [email protected].

jaay9 processes your personal data for specific, legitimate purposes only. We do not use your data for purposes that are incompatible with those originally disclosed to you at the time of collection. The following table sets out our processing purposes and the legal basis on which each rests:

We will never sell your personal data to third parties for their own marketing purposes. Your data is yours, and we treat it with the seriousness that trust demands.

jaay9 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and always subject to appropriate contractual safeguards that require third parties to process your data only for specified purposes and in accordance with applicable privacy standards.

• Payment Processors: To complete deposits and withdrawals, we share necessary financial data (such as wallet numbers and transaction amounts) with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These providers receive only the data needed to execute the transaction.
• Game Providers: To facilitate gameplay, we share a pseudonymous player identifier with our game technology partners (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). These providers do not receive your full identity or financial data.
• KYC and Identity Verification Partners: We use specialist third-party identity verification services to validate NID documents and confirm player age. These services process your identity data strictly for verification purposes.
• Fraud Prevention and Security Services: We share technical data (IP addresses, device fingerprints, behavioural patterns) with fraud detection partners to identify and prevent account takeovers, money laundering, and bonus abuse.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand Platform performance. No personally identifiable information is included in such shares.
• Legal and Regulatory Authorities: We will disclose your personal data to law enforcement agencies, courts, regulatory bodies, or other competent authorities in Bangladesh when we are legally required to do so, or when we reasonably believe disclosure is necessary to protect the rights, safety, or property of jaay9, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of jaay9's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

All third-party processors engaged by jaay9 are bound by data processing agreements that impose obligations consistent with applicable privacy law, including restrictions on further disclosure, security requirements, and data minimisation principles.

The jaay9 Platform uses cookies and similar tracking technologies to operate core Platform functionality, remember your preferences, analyse usage patterns, and — where you have given consent — deliver personalised content and promotional offers. By continuing to use the Platform, you acknowledge the use of cookies as described in this section.

We use the following categories of cookies:

In addition to cookies, we may use web beacons (small image pixels embedded in emails) to track whether promotional emails have been opened and whether embedded links have been clicked. This helps us measure the effectiveness of our communications. You can disable this tracking by turning off image loading in your email client.

We do not use cookies or tracking technologies to build profiles on individuals across third-party websites that are unrelated to the jaay9 Platform. Our tracking activity is confined to the jaay9 Platform and its associated email communications.

jaay9 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the jaay9 Platform is encrypted using 256-bit SSL/TLS protocols, providing the same level of encryption used by major international banks.
• Data Encryption at Rest: Sensitive personal and financial data stored on jaay9 servers is encrypted at rest using AES-256 encryption. This ensures that even in the unlikely event of a server breach, your data remains unreadable to unauthorised parties.
• Access Controls: Access to personal data within jaay9's systems is restricted on a strict need-to-know basis. Staff members can only access the data that is necessary for the performance of their specific role. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): jaay9 offers optional two-factor authentication for player accounts, providing an additional layer of security beyond your password. We strongly encourage all players to enable 2FA in their account settings.
• Penetration Testing and Security Audits: jaay9 conducts regular security assessments, including penetration testing by qualified security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Fraud Detection Systems: Real-time automated monitoring systems analyse account activity for anomalous behaviour patterns indicative of account takeover, identity fraud, or financial crime. Flagged accounts are reviewed by trained analysts.

Data collected from players in Bangladesh is stored on secure servers. Where data is transferred to or processed by third-party service providers located outside Bangladesh (for example, international game technology providers), jaay9 ensures that adequate contractual safeguards are in place to maintain equivalent levels of data protection.

In the event of a data breach that poses a risk to your rights and freedoms, jaay9 will notify affected players promptly and take immediate steps to contain and remediate the breach. Notification will be made to the email address registered on your account.

As a jaay9 player, you have the following rights with respect to your personal data. These rights apply to data we hold about you in our capacity as a data controller. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request".

• Right to Access: You have the right to request a copy of the personal data jaay9 holds about you, along with information about how it is being processed. We will provide this information within a reasonable timeframe following verification of your identity.
• Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update many of your details directly through your account settings page.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, anti-money laundering record-keeping requirements) even after your account is closed.
• Right to Restrict Processing: You may request that we temporarily halt the processing of your data — for example, while a dispute about the accuracy of your data is being resolved — without deleting it.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where our processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal does not affect any processing that occurred lawfully prior to the withdrawal.

jaay9 will not charge a fee for handling privacy rights requests unless the request is manifestly unfounded, repetitive, or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline the request, providing written reasons for our decision.

jaay9 retains your personal data only for as long as is necessary for the purposes for which it was collected, unless a longer retention period is required by law. Our standard retention periods are as follows:

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be attributed to you. Anonymised data may be retained indefinitely for statistical and analytical purposes without restriction, as it no longer constitutes personal data.

jaay9 is the data controller responsible for the personal data collected through the jaay9 Platform. If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which jaay9 processes your personal data, please contact our support team using the details below.

• Email (Privacy Enquiries): [email protected] — please include "Privacy Rights Request" or "Data Enquiry" in your subject line so your message is routed to the appropriate team.
• Response Time: Our support team is available 24 hours a day, seven days a week. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days.
• Identity Verification: For the security of your personal data, all privacy rights requests must be accompanied by sufficient information to verify your identity. This typically means providing your registered email address, full name, and a reference to your jaay9 account number.

We are committed to handling all privacy enquiries transparently, respectfully, and promptly. Your trust in jaay9 depends on our being accountable for how we manage your data — and that accountability is a responsibility we take seriously.