9jaya Privacy Policy — Your Data, Your Rights
At 9jaya, protecting the personal data of our members is a fundamental responsibility. This Privacy Policy explains in clear, formal terms what data we collect, why we collect it, how it is used and stored, and what rights you hold as a data subject. We are committed to maintaining the highest standards of data security for every Bangladeshi player who entrusts their information to our platform.
How 9jaya Protects Your Information
The following cards summarise the core principles behind the 9jaya Privacy Policy. For the complete legal text, please refer to the detailed sections below. These summaries do not replace the full policy.
9jaya collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with applicable legal obligations. We do not harvest data for speculative purposes. Every data point we hold serves a specific, documented function — from identity verification to fraud prevention and personalised service delivery.
All data transmitted between your device and the 9jaya platform is protected by 256-bit SSL encryption — the same standard used by major international financial institutions. Data at rest is stored on secured, access-controlled servers. We conduct regular security audits to identify and remediate vulnerabilities before they can be exploited.
As a 9jaya member, you hold clearly defined rights over your personal data — including the right to access, correct, delete, and port your data. You may also object to certain processing activities. These rights are exercisable at any time by contacting our support team. We will respond to all valid data requests within 30 days of receipt.
9jaya does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Where data sharing with external parties is necessary — for example, with payment processors such as bKash, Nagad, and Rocket, or with identity verification providers — it occurs strictly under contractual data-protection obligations and only to the extent required to deliver the service.
9jaya uses cookies and similar tracking technologies to maintain session security, remember your preferences, analyse platform performance, and detect fraudulent activity. We distinguish between strictly necessary cookies, which cannot be opted out of, and analytical or functional cookies, which you may manage through your browser settings. Our Cookie Policy is detailed in Section 7 of this document.
We do not retain your personal data indefinitely. Each category of data is held for a defined retention period appropriate to its purpose and any applicable legal obligation. Account data is typically retained for the duration of membership plus five years post-closure to satisfy anti-money laundering record-keeping requirements. Full retention schedules are set out in Section 6.
Summary Notice: This Privacy Policy ("Policy") describes how 9jaya ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Member") who access or use the 9jaya platform at https://9jaya.ws. By registering an account or using any part of the 9jaya platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
1 Who We Are
9jaya operates an online casino and sports betting platform accessible at https://9jaya.ws, offering services including cricket betting, live casino games, slot games, and card games to members based in Bangladesh. For the purposes of this Privacy Policy, 9jaya is the data controller responsible for the personal data you provide when using the platform.
As data controller, 9jaya determines the purposes and means by which your personal data is processed. Where 9jaya engages third-party service providers to process data on its behalf — such as payment processors or identity verification agencies — those parties act as data processors under contractual data-processing agreements that bind them to confidentiality and security obligations consistent with this Policy.
All formal correspondence regarding data protection matters, including subject access requests and complaints, should be directed to the 9jaya Data Protection contact at [email protected].
2 Data We Collect
9jaya collects personal data across several categories depending on your level of interaction with the platform. The following table provides a structured overview of the categories of data collected, the context in which collection occurs, and the primary purpose for which each category is held.
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number, passport number | Account registration, KYC verification |
| Contact Data | Mobile phone number, email address, residential address | Account registration, correspondence |
| Financial Data | bKash/Nagad/Rocket account number, transaction history, deposit and withdrawal amounts | Payment processing, financial compliance |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Automatic collection during platform use |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths | Automatic collection during platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Verification Documents | Scanned NID card, utility bill, bank statement, selfie photograph | Enhanced KYC, withdrawal verification |
9jaya does not collect or process special categories of sensitive personal data, such as biometric data, health information, religious beliefs, or political opinions, unless the Member voluntarily discloses such information in correspondence and it is strictly necessary to address the Member's inquiry.
3 How We Use Your Data
9jaya uses the personal data it collects for the following clearly defined purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or being required to do so by law.
- Account Management: To create, maintain, and administer your 9jaya member account, including authentication and account recovery processes.
- Service Delivery: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, settle bets, distribute winnings, and apply bonuses and promotional credits.
- Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) obligations and to confirm that you meet the 21+ eligibility requirement.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other security threats.
- Regulatory Compliance: To comply with applicable legal obligations including financial record-keeping, responding to lawful requests from authorities, and fulfilling responsible gaming obligations.
- Customer Support: To respond to support inquiries, resolve disputes, and improve the quality of assistance provided to members.
- Platform Improvement: To analyse usage patterns, diagnose technical issues, and develop new features and product enhancements that improve the member experience.
- Marketing Communications: To send promotional offers, bonus notifications, and product updates to members who have opted in to receive such communications. Members may unsubscribe from marketing messages at any time.
- Responsible Gaming: To monitor gambling behaviour and proactively identify members who may be exhibiting signs of problem gambling, enabling timely intervention through our responsible gaming tools.
4 Legal Basis for Processing
Every instance of personal data processing carried out by 9jaya rests on one of the following recognised legal bases. 9jaya relies only on lawful grounds for processing and will not process your data where no valid legal basis applies.
- Contractual Necessity: Processing required to perform the contract between 9jaya and the Member — including account creation, transaction processing, and service delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
- Legal Obligation: Certain processing activities — such as identity verification, financial record-keeping, and responding to lawful requests from law enforcement — are carried out because 9jaya is required to do so by applicable law.
- Legitimate Interests: Processing for purposes such as fraud detection, platform security, and internal analytics is carried out on the basis of 9jaya's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where 9jaya relies on consent as the legal basis for processing — for example, in relation to marketing communications or the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5 Data Sharing & Disclosure
9jaya does not sell your personal data to any third party. However, in order to operate the platform effectively and comply with legal obligations, we share personal data with the following categories of recipients under strictly controlled conditions:
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum financial and identity data necessary to process transactions on your behalf. Each provider operates under its own privacy policy and applicable financial regulation.
- Identity Verification Providers: Third-party KYC and age-verification services may receive copies of your identification documents for the sole purpose of confirming your eligibility to use the platform. These providers are contractually prohibited from using the data for any other purpose.
- Fraud Prevention & Security Services: We share technical and behavioural data with fraud detection platforms to protect the integrity of the platform and the security of all members.
- Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive session and technical data necessary to deliver their game content securely. No sensitive personal or financial data is shared with game studios.
- Law Enforcement & Regulatory Authorities: 9jaya will disclose personal data to competent authorities where required to do so by law, court order, or in response to a lawful request. Where permitted by law, we will notify you of such disclosure.
- IT Infrastructure & Hosting Providers: Our technology infrastructure partners provide server hosting, content delivery, and database management services. These providers act as data processors under binding data-processing agreements with 9jaya and have no independent right to use member data.
Where data is transferred outside Bangladesh for processing — for example, to a cloud hosting provider operating international data centres — 9jaya ensures that appropriate contractual safeguards are in place to maintain a level of data protection equivalent to that described in this Policy.
6 Retention Periods
9jaya retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of membership + 5 years post-closure | AML legal obligation |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligation |
| KYC Verification Documents | 5 years post account closure | AML legal obligation |
| Technical & Usage Data | 13 months from collection date | Legitimate interest (security/analytics) |
| Support Communications | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Marketing Preferences | Until consent withdrawn + 1 year | Consent |
In cases where a legal dispute is ongoing or where a regulatory investigation requires the preservation of specific data beyond the standard retention period, 9jaya will retain the relevant data until the matter is fully resolved.
7 Cookies & Tracking Technologies
9jaya uses cookies and similar technologies — including web beacons, pixel tags, and local storage objects — to support the operation of the platform and to improve the experience of its members. The following categories of cookies are used:
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, security identifiers, and load-balancing cookies. These cookies cannot be disabled without rendering the platform inoperable.
- Functional Cookies: These cookies remember your preferences and settings — such as your language preference and display configuration — to provide a more personalised experience. Disabling these cookies may affect the functionality of certain platform features.
- Analytical Cookies: These cookies collect aggregated, anonymised data about how members interact with the platform. The data is used exclusively for internal platform improvement purposes and is not shared with third-party advertisers.
- Security & Fraud-Detection Cookies: These cookies help 9jaya identify and prevent fraudulent account activity, detect automated bot behaviour, and protect members from unauthorised access attempts.
You may manage or delete cookies through your browser settings at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to your 9jaya account. Instructions for managing cookies are available through the help documentation of your browser provider.
8 Your Data Rights
As a data subject, you have the following rights in relation to the personal data held by 9jaya. These rights may be subject to limitations where their exercise would conflict with a legal obligation applicable to 9jaya. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Data Rights Request".
9jaya will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you of the extension within the initial 30-day window. There is no fee for exercising your data rights unless a request is manifestly unfounded or excessive.
9 Children & Minors
9jaya is strictly an adult gambling platform. Access to our services is prohibited for individuals under the age of 21. We do not knowingly collect personal data from persons under 21 years of age. If 9jaya becomes aware that it has inadvertently collected personal data from an individual who does not meet the minimum age requirement, that data will be deleted immediately and the account will be closed without recourse.
Parents and guardians who believe that a minor may have accessed the 9jaya platform or provided personal data without their knowledge are encouraged to contact us immediately at [email protected] so that we may take prompt action to verify the situation and, if confirmed, remove the relevant data and account.
9jaya actively employs age-verification procedures during account registration, including cross-referencing provided date-of-birth information against identity documents submitted during the KYC process. These measures are designed to prevent under-age access in accordance with our responsible gaming commitments. For adults aged 21 and above only.
10 Security Measures
9jaya employs a multi-layered security framework to protect member data against unauthorised access, disclosure, alteration, and destruction. Our security posture is reviewed and updated on a regular basis in response to the evolving threat landscape. Key security measures in place include:
- 256-bit SSL/TLS encryption for all data transmitted between member devices and the 9jaya platform infrastructure.
- Encrypted storage of sensitive personal and financial data at rest using AES-256 or equivalent standards.
- Role-based access controls (RBAC) limiting internal staff access to personal data on a strict need-to-know basis.
- Multi-factor authentication (MFA) requirements for administrative access to systems holding member data.
- Continuous monitoring of platform traffic for anomalous activity, including automated intrusion detection and real-time alerting.
- Regular third-party penetration testing and vulnerability assessment of the platform's technical infrastructure.
- Formal incident response procedures to ensure rapid containment and notification in the event of a data breach.
In the event of a data breach that poses a high risk to the rights and freedoms of affected members, 9jaya will notify impacted members without undue delay and will take all reasonable steps to mitigate the consequences of the breach. Members should immediately report any suspected compromise of their account credentials to [email protected].
11 Third-Party Links
The 9jaya platform does not contain outbound links to third-party websites for commercial or advertising purposes. However, game content delivered by licensed studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe is rendered within the 9jaya platform environment via embedded integrations. These studios operate under their own data protection frameworks, which are separate from this Policy.
9jaya is not responsible for the privacy practices of third-party game content providers in relation to any data those providers independently collect through their game engines or studio platforms. Members who have concerns about the data practices of any specific game studio are encouraged to review that studio's published privacy documentation.
12 Policy Updates
9jaya reserves the right to update or amend this Privacy Policy at any time. When material changes are made — that is, changes that substantially affect how your personal data is collected, used, or shared — we will provide at least 7 days' advance notice by email to your registered address and/or through a prominent notice displayed on the platform prior to the changes taking effect.
For non-material changes — such as typographical corrections, clarifications of existing practices, or minor structural reorganisation — updates may be published without prior notice, with the revised effective date shown at the top of the document. The version of this Policy published at the time of any data processing activity is the version that governs that activity.
We encourage you to review this Privacy Policy periodically to stay informed of how 9jaya is protecting your personal data. Your continued use of the platform following the publication of a revised Policy constitutes your acceptance of the updated terms.
13 Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about the way in which 9jaya has handled your personal data, please contact us using the details below. We take all privacy-related inquiries seriously and will respond promptly and in good faith.
Data Protection Contact:
Response Time: Within 30 calendar days of receipt of a valid request.
Live Chat: Available 24/7 from any page on the 9jaya platform — average response time 2–5 minutes.
Subject Line: Please use "Data Rights Request" or "Privacy Complaint" when contacting us so your message is routed to the correct team without delay.
If you are not satisfied with the outcome of a complaint submitted to 9jaya, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. 9jaya cooperates fully with all competent supervisory authorities in the resolution of data protection complaints.
Ready to Experience Bangladesh's Premier Casino?
Your data is protected. Your experience is premium. Explore cricket betting, live casino games, slots, and card games — all on a platform built for Bangladeshi players. For adults aged 21 and above only.