Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how joy999 ("the Company", "we", "us", "our"), operator of the online gambling platform accessible at joy999.bid ("the Platform"), collects, processes, stores, and protects personal data relating to individuals who register for and use the Platform ("you", "the Player", "your").

By creating a joy999 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy forms part of the broader contractual relationship between you and joy999 and should be read in conjunction with our Terms & Conditions. This Policy applies to all personal data we collect through the Platform, including data provided directly by you, data collected automatically through your use of the Platform, and data received from third-party service providers such as payment processors and identity verification agencies.

2 Data Controller

joy999 acts as the data controller in respect of the personal data collected and processed through the Platform. As data controller, joy999 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how joy999 processes your personal data or wish to exercise any of your data rights, you may contact our Data Protection team at [email protected]. We aim to respond to all data-related enquiries within 30 calendar days of receipt.

3 Information We Collect

joy999 collects the following categories of personal data:

3.1 Information You Provide Directly

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (national ID, passport, or driver's licence) submitted during the KYC verification process.
• Contact Data: Email address, mobile phone number, and residential address (including city and postal code).
• Account Data: Username, password (stored in hashed form — we never store passwords in plain text), account preferences, and communication preferences.
• Financial Data: Deposit and withdrawal transaction records, payment method details (mobile wallet numbers for bKash, Nagad, Rocket, and Upay; masked card details for Visa and Mastercard), and USDT wallet addresses where applicable.
• Communications Data: Records of correspondence between you and joy999, including live chat transcripts, support emails, and feedback submissions.

3.2 Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
• Usage Data: Pages visited, games played, bets placed, session duration, click-stream data, and features accessed on the Platform.
• Geolocation Data: Approximate geolocation derived from your IP address for the purpose of jurisdictional compliance checks. We do not collect precise GPS coordinates.
• Cookie Data: Data collected through cookies and similar technologies as described in Section 8 of this Policy.

3.3 Information from Third Parties

• Identity Verification Providers: Results of identity and age verification checks conducted through third-party KYC service providers.
• Payment Processors: Transaction confirmation data and fraud-screening results from payment service providers including bKash, Nagad, Rocket, Upay, and card scheme operators.
• Fraud Prevention Agencies: Risk scores and flags from third-party fraud prevention databases where we have a legitimate interest in protecting the Platform from financial crime.

4 How We Use Your Information

joy999 uses the personal data we collect for the following purposes:

joy999 will not use your personal data for any purpose that is materially different from those described above without first informing you and, where required, obtaining your explicit consent.

5 Legal Basis for Processing

joy999 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing that is necessary to provide the services you have requested, including operating your account, processing transactions, and delivering customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and responsible gaming mandates.
• Legitimate Interest: Processing necessary for the legitimate interests of joy999, including fraud detection and prevention, Platform security, and analytical improvement of our services, where those interests are not overridden by your own data protection rights.
• Consent: Processing that is based on your freely given, specific, and informed consent, such as the receipt of marketing communications. You may withdraw consent at any time by contacting [email protected] or adjusting your account communication preferences.

6 Data Sharing & Disclosure

joy999 does not sell your personal data to third parties. We may, however, share your data with the following categories of recipients in the circumstances described:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and USDT processing partners receive the minimum personal and financial data required to execute your transaction and comply with their own AML obligations.
• Identity Verification Providers: Third-party KYC and age-verification agencies receive identity documents and biographical data solely for the purpose of completing verification checks mandated by our operating policies.
• Fraud Prevention Services: We share technical and transactional data with fraud screening services to protect the Platform and all players from financial crime. Results are used to assess risk and may inform account-level decisions.
• Game Studio Partners: Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token and anonymised player ID to deliver their game content. They do not receive your name, email, or payment details.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts of competent jurisdiction where we are required to do so by law, court order, or other compulsory legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of joy999, player data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers engaged by joy999 are subject to contractual data processing agreements that require them to process your data only on our documented instructions and in compliance with applicable data protection standards.

7 Payment Data

joy999 takes particular care in handling financial and payment data. The following protections apply specifically to payment information:

• Card Data: joy999 does not store full card numbers, CVV codes, or card expiry dates on its own servers. Card payment processing is handled entirely by certified payment service providers. We store only a masked card reference (e.g., the last four digits) for display purposes in your account history.
• Mobile Wallet Data: For bKash, Nagad, Rocket, and Upay transactions, we retain the mobile wallet number associated with each transaction as required for withdrawal matching and AML record-keeping. This number is encrypted at rest.
• USDT Wallet Addresses: Cryptocurrency wallet addresses used for USDT deposits and withdrawals are stored in encrypted form and used solely for transaction processing and record-keeping.
• Transaction Records: Full transaction histories are retained for a minimum of five years in compliance with financial record-keeping obligations. During this period, transaction records are stored in encrypted, access-controlled systems.

8 Cookies & Tracking Technologies

joy999 uses cookies and similar technologies (such as pixel tags and local storage) to operate and improve the Platform. The categories of cookies we use are as follows:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and game history. These improve your experience but are not strictly necessary.
• Analytics Cookies: Anonymised cookies used to measure how players navigate the Platform, which pages perform best, and where technical issues occur. This data is aggregated and does not identify individual players.
• Fraud Prevention Cookies: Persistent identifiers used to detect suspicious patterns, device fingerprinting anomalies, and multi-account behaviour across sessions.

You can manage non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the Platform. Disabling fraud prevention cookies may trigger additional identity checks on your account.

9 Data Retention

joy999 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and in any event for the minimum periods required by applicable law. Our general retention schedule is as follows:

• Active Account Data: Retained for the duration of your account and for a minimum of five years following account closure.
• Identity Verification Documents: Retained for a minimum of five years from the date of verification, or longer where required by AML regulations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Customer Support Records: Retained for three years from the date the support case was closed.
• Marketing Consent Records: Retained until consent is withdrawn, plus an additional two years as evidence of the consent having been obtained.
• Analytics Data: Retained in anonymised, aggregated form indefinitely; no individual is identifiable from retained analytics data.

When personal data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

10 Your Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to the personal data joy999 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as our legal basis, unless we can demonstrate compelling legitimate grounds for the processing that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. We may require you to verify your identity before processing a data rights request.

11 Data Security

joy999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Encryption: All data in transit is protected by TLS 1.3. Sensitive data at rest is encrypted using AES-256. Passwords are stored using industry-standard one-way hashing algorithms with salting.
• Access Controls: Access to personal data within joy999 is restricted on a need-to-know basis using role-based access controls. All access to production data systems is logged and audited.
• Infrastructure Security: The Platform is hosted in data centres with ISO 27001-aligned security practices. Regular vulnerability assessments and penetration tests are conducted by independent security professionals.
• Incident Response: joy999 maintains a documented security incident response plan. In the event of a data breach, affected players will be notified within 72 hours where the breach poses a risk to their rights and freedoms.
• Employee Training: All joy999 personnel with access to personal data receive regular data protection and information security training.

While we take all reasonable steps to protect your personal data, no system or transmission over the internet is completely secure. You are responsible for keeping your account credentials confidential and for notifying us promptly if you suspect any unauthorised access to your account.

12 Children's Privacy

The joy999 Platform is intended exclusively for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you are not permitted to register for or use the Platform in any capacity.

If joy999 becomes aware that personal data has been collected from a person under the age of 18, we will immediately suspend the relevant account, delete the data, and take appropriate steps to prevent further access. If you believe that a minor has accessed the Platform using your details or has created their own account, please contact us immediately at [email protected].

13 Third-Party Links

The joy999 Platform may, from time to time, contain references to third-party game providers and payment services. While joy999 takes care to partner only with reputable companies, we have no control over the privacy practices of third-party organisations and cannot accept responsibility for the content of their privacy policies.

We encourage you to review the privacy policies of any third-party services you use in connection with the Platform, including your mobile wallet provider (bKash, Nagad, Rocket, or Upay) and your card issuer. Your use of those services is governed by their respective terms and privacy policies, not by this Policy.

14 Changes to This Policy

joy999 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will notify registered players by email to the address held on their account and update the "Last Updated" date at the top of this page. The revised Policy will take effect on the date it is published on the Platform.

We encourage you to review this Policy periodically to stay informed about how joy999 protects your personal data. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must discontinue your use of the Platform and may request account closure.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which joy999 processes your personal data, please contact our Data Protection team using the details below. Our support team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6).

• Email: [email protected]
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team.
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 calendar days.
• Live Chat: Available directly from the Platform after logging in to your joy999 account for general support queries.

We take all privacy complaints seriously and will work with you in good faith to resolve any concerns regarding the handling of your personal data.