juya Privacy Policy

This Privacy Policy ("Policy") describes how juya ("we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "Player", "User") who access or use any service operated under the juya brand at juya.im, including the juya Casino, sports betting section, account management portal, promotional communications, live chat support, and any other digital service associated with the juya platform.

This Policy applies to all players regardless of the device or method used to access the juya platform. It applies to players based in Bangladesh — including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh — as well as to any other individual who accesses juya from any other location. By registering an account with juya or by continuing to use the juya platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

juya acts as the data controller for all personal data collected from players via the juya platform. As data controller, juya determines the purposes for which personal data is collected and the means by which it is processed. All data processing activities conducted by juya are carried out in accordance with the principles set out in this Privacy Policy.

Where juya engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and fraud prevention partners — those providers act as data processors and are contractually required to process personal data only on juya's documented instructions and in accordance with appropriate confidentiality and security obligations.

juya collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of personal data collected, along with examples of specific data points within each category.

juya does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness checks required for KYC), or health data. If you voluntarily disclose such information in the course of a support interaction, juya will use it only to address your specific enquiry and will not retain it beyond that purpose.

juya collects personal data through the following channels and mechanisms:

• Direct Provision: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically each time you access the juya platform, including IP address, device identifiers, browser characteristics, session duration, pages visited, and game interactions. This data is collected via server logs, cookies, and similar tracking technologies.
• Third-Party Payment Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a Bangladeshi bank, the relevant payment provider shares transaction confirmation data — including transaction reference numbers and payment account identifiers — with juya for the purpose of crediting or debiting your juya account balance.
• KYC Verification Partners: juya's identity verification providers may cross-reference the documents you submit against third-party databases to confirm your identity and age. The results of these checks are shared with juya.
• Fraud and Risk Monitoring Systems: juya's platform continuously monitors account activity for patterns associated with fraud, money laundering, bonus abuse, and problem gambling. This involves automated analysis of transaction data, betting patterns, and login behaviour.

juya uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your juya player account, including processing deposits and withdrawals, managing your balance, and delivering account communications.
• Identity & Age Verification: Confirming that you are aged 21 or above and that the identity information you provided at registration is accurate, as required before processing withdrawal requests or where otherwise indicated by juya's risk protocols.
• Platform Operation: Delivering the games, betting markets, live casino services, and promotional offers available on juya, and ensuring the technical functionality of the platform across all supported devices.
• Customer Support: Responding to your support enquiries, resolving disputes, investigating game complaints, and providing responsible gaming assistance.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, account takeovers, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. juya's fraud prevention activities are conducted in your interest as a player and in the interest of the broader player community.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion periods, and proactively reaching out to players who may be experiencing gambling-related difficulties.
• Marketing Communications: Sending you information about juya promotions, bonuses, seasonal offers (such as Eid, Pohela Boishakh, and BPL promotions), and platform updates, subject to your marketing preferences and the right to opt out at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use the juya platform, identify areas for improvement, and develop new features and services.
• Legal Compliance: Complying with applicable anti-money laundering obligations, responding to lawful requests from authorities, and enforcing juya's Terms & Conditions.

juya processes personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and juya — i.e., to operate your player account, process payments, and deliver the services you have registered to use. Without this processing, juya cannot provide its services to you.
• Consent: Processing based on your freely given, specific, and informed consent — principally marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
• Legitimate Interests: Processing that is in juya's legitimate business interests or the legitimate interests of third parties, provided those interests are not overridden by your data protection rights. This includes fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring.
• Legal Obligation: Processing that is necessary for juya to comply with a legal obligation applicable to it, including anti-money laundering requirements, identity verification obligations, and responding to lawful orders from competent authorities.

juya does not sell, rent, or trade your personal data to any third party. Personal data is shared with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard receive the minimum transaction data necessary to process deposits and withdrawals to and from your juya account.
• KYC & Identity Verification Providers: Third-party identity verification services receive copies of the documents you submit for KYC verification and use them to confirm your identity and age against relevant databases.
• Game Studios & Content Providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Ezugi receive a player session token — not your full personal data — to authenticate your game session. These providers operate under strict data processing agreements with juya.
• Fraud Prevention & Risk Management Partners: Specialist third-party fraud detection services may receive technical data — including IP addresses, device fingerprints, and transaction patterns — for the purpose of identifying and preventing fraudulent activity.
• IT & Infrastructure Providers: Cloud hosting providers and IT security firms that support the operation of the juya platform may have access to personal data as a necessary consequence of providing their infrastructure services. All such providers are contractually bound to process data only on juya's instructions.
• Legal & Regulatory Authorities: juya may disclose personal data to law enforcement agencies, regulators, or other competent authorities where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other serious criminal activity.

juya uses cookies and similar tracking technologies on the juya platform to ensure the platform functions correctly, to remember your preferences, to keep your session active while you are logged in, and to analyse how the platform is used. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the juya platform to operate. They include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery, and cookies that remember your language and region preferences. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember choices you make on the platform — such as your preferred game lobby view, recently played games, and notification preferences — to provide a more personalised experience. They are not strictly necessary but improve usability.
• Analytics Cookies: juya uses analytics tools to collect aggregated, anonymised data about how players navigate the platform, which games are most popular, and where players encounter difficulties. This data is used solely to improve the platform and does not identify individual players.
• Marketing Cookies: Where you have given consent, marketing cookies allow juya to tailor promotional content to your demonstrated interests. You may withdraw this consent at any time by adjusting your cookie preferences in your account settings.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent some or all parts of the juya platform from functioning correctly. Most modern browsers allow you to view, delete, and block cookies through the browser's privacy settings menu.

juya implements a comprehensive set of technical and organisational security measures to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and the juya platform.
• Encryption at rest for all sensitive personal data stored in juya's databases, including identity documents and financial data.
• Role-based access controls ensuring that juya staff can only access personal data to the extent required for their specific job function.
• Multi-factor authentication for all internal juya systems that have access to personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of the juya platform and underlying infrastructure.
• Secure data deletion and sanitisation procedures applied when personal data reaches the end of its retention period.
• A documented incident response plan covering detection, containment, investigation, and notification procedures in the event of a data security incident.

In the event of a personal data breach that poses a risk to your rights and freedoms, juya will notify affected players without undue delay and will take all reasonable steps to contain the breach and prevent further harm. You are also encouraged to report any suspected security incident affecting your juya account to [email protected] immediately.

juya retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — which can no longer be linked to an identifiable individual — may be retained indefinitely for platform analytics and improvement purposes.

As a player on the juya platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Request". juya will respond to all valid data subject requests within 10 business days of receipt.

• Right of Access: You have the right to request a copy of all personal data juya holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data juya holds about you. For straightforward account detail updates (email address, phone number, residential address), these can often be made directly within your account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. This right is subject to juya's legal and regulatory retention obligations, which may require certain data to be retained for a defined period after account closure.
• Right to Restriction: You have the right to request that juya restricts the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved, or where you have objected to processing and juya is assessing whether its legitimate interests override your objection.
• Right to Data Portability: You have the right to receive the personal data you have provided to juya in a structured, commonly used, and machine-readable format, and to request that this data be transferred directly to another data controller where technically feasible.
• Right to Object: You have the right to object to juya's processing of your personal data where that processing is based on legitimate interests — including profiling for responsible gaming purposes. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where juya processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.

The juya platform is strictly intended for use by adults aged 21 years and above. juya does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age declaration and is subject to mandatory KYC verification to confirm that all players meet this requirement.

If juya becomes aware that personal data has been collected from an individual under the age of 21, that Account will be immediately suspended, all data associated with the underage player will be deleted from juya's systems within 30 days, and any deposited funds will be returned via the original payment method. No winnings or bonus credits accrued by an underage player will be paid out.

juya may send you promotional communications by email or on-platform notification about bonuses, seasonal promotions, new game launches, and special offers relevant to players in Bangladesh. These may include promotions tied to events such as Eid, Pohela Boishakh, Victory Day, BPL cricket season, IPL, and T20 World Cup tournaments. Marketing communications are sent only where you have given explicit consent or where juya has an existing relationship with you and you have not opted out.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by juya.
• Updating your notification and marketing preferences in your juya account settings dashboard.
• Contacting [email protected] with the subject line "Unsubscribe" and your registered email address.

Opting out of marketing communications will not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests. These are sent as a necessary part of operating your juya account and cannot be disabled while your account remains active.

The juya platform may contain links to third-party websites or services — for example, the websites of payment partners such as bKash, Nagad, or Rocket — in the course of the deposit or withdrawal process. juya is not responsible for the privacy practices of these third-party platforms, and this Privacy Policy does not apply to them. We encourage you to review the privacy policy of any third-party platform you are directed to before providing personal data to that platform.

juya does not control the data collection or processing practices of third-party payment providers. However, all payment providers integrated into the juya platform are required to maintain appropriate data security standards as a condition of their integration agreement with juya.

juya reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in juya's data processing practices, or changes in the services offered on the juya platform. The effective date of the current version of this Policy is always displayed at the top of this page.

Where an amendment is material — meaning it significantly affects your rights or the way juya processes your personal data — juya will provide at least 14 days' advance notice by:

• Sending a notification email to the email address registered on your juya account.
• Displaying a prominent notice on the juya platform homepage and login area for the duration of the notice period.
• Publishing the updated Policy on this page with the new effective date clearly indicated.

Your continued use of the juya platform following the expiry of the notice period constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you should cease using the juya platform and contact [email protected] to request account closure and deletion of your personal data, subject to juya's applicable retention obligations.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how juya has handled your personal data, please contact the juya support team using the details below:

• Email: [email protected] — please use the subject line "Privacy Request" for data subject requests, or "Privacy Complaint" for complaints about juya's data handling practices.
• Live Chat: Available 24/7 via the live chat widget on the juya platform. Average first response time is under two minutes during Bangladesh Standard Time (BST, UTC+6) peak hours.
• Response Time: juya will acknowledge receipt of all privacy-related contacts within one business day and will provide a substantive response within 10 business days. Complex data subject requests, such as full data access requests, may take up to 30 days to process in full.