joa99 Privacy Policy

This Privacy Policy ("Policy") describes how joa99 ("we", "us", or "our") collects, uses, stores, discloses, and protects personal information relating to individuals who access or use the joa99 website and associated services ("Platform"). This Policy applies to all members, visitors, and users of the Platform regardless of where they are located. By registering an account with joa99 or by continuing to use the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal information as described herein.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement governing your relationship with joa99. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact support to close your account. We may update this Policy from time to time; the "Last Updated" date at the top of this page will reflect any revisions. Continued use of the Platform after a revision constitutes acceptance of the updated Policy.

1. Information We Collect

joa99 collects personal information in three primary ways: information you provide directly, information collected automatically when you use the Platform, and information received from third-party sources such as payment processors and identity verification providers.

Information You Provide Directly

• Registration data: full name, date of birth, mobile number (Bangladesh), and any optional profile details you add during or after account creation.
• KYC documents: government-issued photo ID (National ID Card, Passport, or Birth Certificate), selfie photographs, and proof of payment method ownership required for identity verification and withdrawal processing.
• Financial information: deposit amounts, withdrawal requests, transaction history, and payment method details (mobile wallet numbers, bank account references). joa99 does not store full payment card numbers.
• Communications: messages sent to joa99 support via email or in-platform chat, including the content of your queries and our responses, retained for quality assurance and dispute resolution purposes.

Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone setting collected automatically each time you access the Platform.
• Usage data: pages visited, games played, bets placed, session duration, click paths, and feature interactions used to understand how members use the Platform and to improve it.
• Cookie data: session identifiers, preference settings, and analytics cookies placed on your device as described in Section 5 of this Policy.

Information from Third Parties

• Payment provider confirmations: transaction status, mobile wallet reference numbers, and payment verification signals received from bKash, Nagad, Rocket, Upay, and connected banking partners.
• Identity verification data: results of KYC checks performed by third-party verification partners, including confirmation of identity document authenticity and age verification outcomes.
• Fraud and risk signals: data received from fraud-prevention services used to identify suspicious account activity, match-fixing patterns, multi-accounting, or other prohibited conduct.

2. How We Use Your Information

joa99 uses the personal information it collects for the following specific purposes. We do not use your information for any purpose not listed below without first obtaining your explicit consent.

3. Legal Basis for Processing Your Data

joa99 processes your personal data on one or more of the following legal bases, depending on the purpose for which the data is being used:

• Contractual Necessity: Processing required to fulfil our agreement with you — for example, creating your account, processing deposits and withdrawals, and delivering the gaming and betting services you have registered for.
• Legal Obligation: Processing necessary to comply with applicable laws — including KYC identity verification, anti-money-laundering record-keeping, and mandatory reporting obligations where required by law.
• Legitimate Interests: Processing carried out for purposes that joa99 has a legitimate interest in pursuing, provided those interests do not override your rights — for example, fraud detection, platform security, and service improvement through anonymised analytics.
• Consent: Where joa99 relies on your consent — for example, for sending you promotional offers or personalised recommendations — you may withdraw that consent at any time by contacting support or updating your account preferences.

4. Sharing Your Information

joa99 does not sell, rent, or trade your personal information. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers and Processors

joa99 engages trusted third-party service providers to assist in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, and banking partners), KYC and identity verification providers, fraud-prevention services, cloud hosting providers, and customer support technology partners. All service providers are contractually bound to process your data only on joa99's documented instructions, to maintain appropriate security measures, and not to use your data for their own purposes.

Legal and Regulatory Disclosure

joa99 may disclose your personal information to law enforcement authorities, regulatory bodies, or courts when required to do so by applicable law, court order, or legal process. In such cases joa99 will disclose only the minimum information required by the applicable legal obligation and, where permitted by law, will notify you of such disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of joa99's business assets, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity prior to the transfer taking effect. You retain the right to request deletion of your data before the transfer if you do not wish your information to be transferred.

5. Cookies and Tracking Technologies

joa99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and detect fraud. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings and display options — so you do not need to re-enter them each time you visit. These improve your experience but are not required for the Platform to function.
• Analytics Cookies: Used to collect aggregated, anonymised information about how members use the Platform — pages visited, session duration, error rates — which joa99 uses to identify areas for improvement. Analytics data is not linked to your personal identity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using key Platform features. Disabling functional or analytics cookies will not prevent you from using the Platform but may reduce the quality of your experience.

6. Data Retention

joa99 retains your personal information for as long as your account is active and for such additional period as is required by applicable law or necessary to fulfil the purposes set out in this Policy. The following general retention periods apply: account registration data and KYC documents are retained for a minimum of 5 years from account closure to comply with anti-money-laundering record-keeping requirements; transaction records are retained for a minimum of 5 years from the date of each transaction; support communications are retained for 3 years from the date of the final communication in each thread.

When the applicable retention period expires, joa99 will securely delete or permanently anonymise your personal data. Where deletion is not immediately possible due to technical constraints — for example, data held in backup systems — joa99 will isolate the data from active processing and delete it as soon as reasonably practicable.

7. Data Security

joa99 implements a range of technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit; encryption at rest for stored personal data and KYC documents; role-based access controls ensuring that only authorised personnel with a documented business need can access member data; regular security audits and penetration testing; and intrusion detection and anomaly monitoring systems operating continuously.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If joa99 becomes aware of a data breach that is likely to result in a high risk to your rights or freedoms, we will notify you without undue delay and will take all reasonable steps to contain the breach and mitigate any harm. You can help protect your account by choosing a strong, unique password and by logging out of the Platform when using a shared or public device.

8. Your Privacy Rights

As a joa99 member you have the following rights regarding the personal data we hold about you. To exercise any of these rights, please contact joa99 support with your request. We will respond within 30 days.

• Right of Access: You may request a copy of the personal data joa99 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right of Rectification: You may request correction of any personal data that is inaccurate or incomplete. You can update basic profile details directly within your account settings; for KYC-related corrections please contact support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to legal retention obligations which may require joa99 to retain certain data for a defined period after account closure.
• Right to Restrict Processing: You may request that joa99 temporarily suspend processing of your data — for example, while the accuracy of the data is being contested or while a complaint is being investigated — without requesting full deletion.
• Right to Data Portability: Where technically feasible, you may request that joa99 provide your personal data in a structured, commonly used, and machine-readable format, allowing you to transfer it to another service provider.
• Right to Object: You may object to processing of your personal data where joa99 relies on legitimate interests as the legal basis, including profiling for direct marketing purposes. Where you object to direct marketing, joa99 will cease that processing immediately without requiring justification.

To submit a privacy rights request, contact joa99 support by email at [email protected]. Please include your registered mobile number, the nature of your request, and any relevant details. joa99 may need to verify your identity before processing your request to protect against unauthorised access to another member's data.

9. Children's Privacy

joa99 operates a strict minimum age policy. The Platform is intended solely for individuals aged 21 years and above. joa99 does not knowingly collect personal information from anyone under the age of 21. If you are a parent or guardian and believe that a minor has registered on joa99 or provided personal information to joa99, please contact us immediately at [email protected]. Upon confirmation, joa99 will take immediate steps to close the account and delete all associated personal data.

10. Payment Data and Financial Information

joa99 processes payment data — including mobile wallet transaction references, bank transfer confirmations, and account balance records — solely for the purposes of facilitating deposits, processing withdrawals, verifying payment method ownership, and maintaining transaction records as required by applicable law. joa99 does not store full payment card numbers. Mobile wallet numbers (bKash, Nagad, Rocket, Upay) are stored only in association with the registered account and are used exclusively for processing transactions and verifying that payments originate from an account in the member's own name.

Payment data is shared with the relevant payment processing partner only to the extent necessary to complete the specific transaction requested. Payment partners are contractually bound by confidentiality obligations and may not use transaction data for any purpose other than processing the transaction and complying with their own legal obligations.

11. Third-Party Links and Integrations

The joa99 Platform may contain references to or integrations with third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. While these providers deliver game content within the joa99 Platform environment, their own privacy policies govern how they handle any data that passes through their game engines. joa99 recommends that you review the privacy policies of any third-party provider whose content you access. joa99 is not responsible for the privacy practices of third-party game providers or payment partners beyond the contractual data-processing agreements described in Section 4 of this Policy.

12. Changes to This Privacy Policy

joa99 reserves the right to update this Privacy Policy at any time. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly. Where a change materially affects how joa99 processes your personal data, joa99 will provide advance notice by posting a prominent notice on the Platform or by sending a notification to your registered mobile number at least 7 days before the change takes effect.

Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should stop using the Platform and contact support to arrange account closure and deletion of your personal data in accordance with Section 8 of this Policy.

13. Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how joa99 handles your personal data, please contact our support team. joa99 aims to resolve all privacy-related enquiries within 30 days of receipt. For time-sensitive matters such as suspected data breaches or unauthorised account access, please mark your message as urgent and we will prioritise your request.

Email us at: [email protected]