jay9 app Privacy Policy — How We Protect Your Personal Data

1.1 Registration Data

When you create an account on jay9 app, we collect the information you provide during the registration process. This includes your chosen username, email address, date of birth, country of residence, and any other fields presented in the registration form. This information is required to establish your account and is retained for the lifetime of that account.

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to enforce our 18+ age restriction, jay9 app requires all players to complete a Know Your Customer verification process before withdrawals are processed. The documents and data collected during this process may include:

• A copy of a government-issued National Identity Card (NID) or valid passport.
• A residential address verification document such as a utility bill or bank statement issued within the previous three months.
• Payment method verification data, such as a bKash or Nagad transaction screenshot confirming that the registered account belongs to the player.
• A selfie photograph where required for liveness verification during enhanced due diligence checks.

1.3 Financial Transaction Data

jay9 app records the details of all financial transactions conducted on the Platform, including deposit amounts, withdrawal amounts, payment method identifiers (e.g., bKash account number, Nagad mobile number), transaction timestamps, and transaction reference numbers. This data is retained for a minimum of five years to satisfy financial record-keeping obligations.

1.4 Gaming Activity Data

We maintain a record of all wagering activity associated with your account, including game selections, bet amounts, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

1.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This information is used to maintain platform security, detect fraud, and optimise the user experience.

1.6 Communications Data

If you contact jay9 app via our support email or live chat function, we retain a record of that correspondence — including the content of your messages, the date and time of contact, and any resolution actions taken. This enables us to handle follow-up queries efficiently and to maintain a consistent standard of service.

jay9 app does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing with external parties is limited to the specific circumstances described below, each of which is necessary for the delivery of the Platform's services or required by applicable law.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals in Bangladeshi Taka (৳ BDT), jay9 app shares relevant transaction data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. The data shared is limited to what is strictly necessary to execute the requested transaction — typically the amount, reference number, and account identifiers — and is governed by each provider's own privacy and data handling policies.

3.2 Game Providers and Software Suppliers

The games available on the jay9 app Platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive anonymised session data necessary for game delivery, fairness verification, and technical support. No personally identifiable information is shared with game providers beyond what is operationally required.

3.3 Identity Verification Services

jay9 app may use specialist third-party KYC and identity verification service providers to assist in the automated or manual review of identity documents submitted by players. These providers act as data processors on behalf of jay9 app and are contractually bound to process data only in accordance with our instructions and to implement appropriate security measures.

3.4 Legal and Regulatory Disclosure

jay9 app will disclose personal data to law enforcement agencies, regulatory bodies, or other authorised government entities where required to do so by applicable law or by a valid legal process such as a court order or regulatory demand. In such cases, jay9 app will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted, notify the affected player of the disclosure.

jay9 app implements a layered data security architecture to protect player information against unauthorised access, disclosure, alteration, and destruction. The security measures in place include, but are not limited to, the following:

• Transport Layer Security (TLS): All data in transit between the player's device and the jay9 app servers is encrypted using current-generation TLS protocols, rendering it unreadable to any party intercepting the connection.
• Encryption at Rest: Sensitive data fields — including KYC documents, payment method identifiers, and authentication credentials — are encrypted when stored on our servers. Passwords are hashed using a one-way cryptographic algorithm and are never stored in plain text.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication. Access rights are reviewed periodically and revoked promptly upon changes in personnel roles.
• Intrusion Detection: jay9 app operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous access attempts or security incidents in real time.
• Incident Response: In the event of a data breach that poses a risk to affected players, jay9 app will notify those players and take all reasonable steps to contain and remediate the breach without undue delay.

While jay9 app applies rigorous security measures, no internet-based platform can guarantee absolute security against all possible threats. Players are strongly encouraged to use a unique, strong password for their jay9 app account, to enable any available two-factor authentication options, and to log out from shared or public devices after each session.

jay9 app retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, or for such longer periods as are required by applicable legal obligations. The key retention periods applied by jay9 app are summarised in the data collection table in Section 01 of this Policy.

In general terms, account and transaction data is retained for a minimum of five years following the closure of a player account, in line with standard financial record-keeping requirements. KYC documents are retained for the same minimum period from the date of submission. Gaming activity logs are retained for the duration of the account plus two years following closure.

Where a player exercises their right of erasure and no legal retention obligation applies to the data in question, jay9 app will delete or irreversibly anonymise the relevant data within 30 days of confirming the validity of the request. Data subject to a mandatory legal retention period will be deleted as soon as that retention period expires, without any requirement for a further request from the player.

Anonymised, aggregate data — from which no individual can be identified — may be retained indefinitely for statistical and analytics purposes. Such anonymised data is not subject to the retention limitations described above and does not constitute personal data for the purposes of this Policy.