jua9 Privacy Policy

1 Who We Are

jua9 is an online casino and sports betting platform operating at jua9.io, serving players in Bangladesh. The platform offers live casino games, slots, crash games, and sports betting — primarily in Bangladeshi Taka (BDT) via payment methods including bKash, Nagad, Rocket, and Upay.

For the purposes of this Privacy Policy, jua9 acts as the data controller for all personal information collected from registered Players. This means jua9 determines the purposes and means by which your personal data is processed. Our designated point of contact for all data-related queries and requests is our support team, reachable at [email protected].

This Privacy Policy applies to all personal data collected through the jua9 website, including data collected during account registration, gameplay, deposits and withdrawals, customer support interactions, promotional participation, and any other use of the jua9 platform.

2 Data We Collect

jua9 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarises the main categories of data we collect, their source, and the primary purpose for which they are collected.

2.1 Data You Do Not Need to Provide

jua9 does not require you to provide any sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information, or biometric data as a condition of using the platform. If you voluntarily provide such information (for example, in a support communication), it will be treated with the highest level of confidentiality and used only to resolve the specific matter at hand.

2.2 Data from Third Parties

In some circumstances, jua9 may receive personal data about you from third parties. This includes identity verification data returned by KYC service providers, fraud signals from payment processors, and responsible gaming flags from self-exclusion registries. Data received from third parties is handled under the same standards described in this Privacy Policy.

3 How We Use Your Data

jua9 uses personal data collected from Players for the following purposes. Each purpose is linked to a legal basis described in Section 4.

• Account creation and management: Processing your registration, maintaining your account, authenticating your identity at login, and communicating account-related updates.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment methods; verifying transaction ownership; reconciling financial records.
• KYC and age verification: Confirming that all Players are aged 21 or above; verifying identity prior to approving withdrawals and lifting account limits.
• Fraud prevention and security: Detecting and investigating unusual account activity, multiple account registrations, chargeback abuse, money laundering indicators, and other prohibited conduct described in the jua9 Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling behaviour; applying deposit limits, loss limits, session reminders, time-outs, and self-exclusion measures as requested or as required by jua9's responsible gaming obligations.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, site stability, and user experience across the jua9 platform.
• Legal compliance: Meeting applicable legal, regulatory, and financial reporting obligations, including retaining transaction records as required for financial compliance purposes.
• Marketing communications (where consent is given): Sending you information about jua9 promotions, bonus offers, tournaments, and seasonal campaigns — only where you have opted in and not subsequently opted out.

4 Legal Bases for Processing

jua9 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the jua9 Terms & Conditions — including account management, payment processing, KYC verification, and customer support. Without this processing, jua9 cannot provide the services described in the Terms & Conditions.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including financial record-keeping, anti-money-laundering procedures, and age verification obligations.
• Legitimate interests: Processing carried out to protect the security and integrity of the jua9 platform, prevent fraud, improve platform performance, and monitor responsible gaming compliance — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, non-essential cookies, and certain analytical tracking — where you have given explicit, informed consent and where you retain the right to withdraw that consent at any time without detriment to your account access.

Where jua9 relies on legitimate interests as a legal basis, we have conducted a balancing assessment confirming that the processing is proportionate, necessary, and does not unduly interfere with your fundamental rights and freedoms. You may request a copy of any such assessment by contacting [email protected].

5 Cookies & Tracking Technologies

jua9 uses cookies and similar tracking technologies to operate the platform, maintain your session state, and (where you have consented) analyse usage patterns and deliver relevant content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and notification preferences. These are set on a per-session or persistent basis depending on the feature.
• Analytical Cookies: Collect anonymised data about how Players navigate the platform — which pages are visited most frequently, where sessions start and end, and which features generate the most engagement. This data is used to improve platform design and performance. Analytical cookies are only activated where you have given consent.
• Marketing Cookies: Used to deliver promotional content relevant to your interests, both on the jua9 platform and (where applicable) on partner platforms. Marketing cookies are only activated where you have given explicit consent and may be withdrawn at any time via your account settings.

You can manage your cookie preferences at any time via the cookie settings panel accessible from the jua9 account settings page. Withdrawing consent for non-essential cookies will not affect your ability to deposit, play, or withdraw on the platform.

6 Data Sharing & Third-Party Processors

jua9 does not sell, rent, or otherwise trade your personal data with any third party for commercial purposes. We share personal data only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process deposit and withdrawal transactions. Payment processors handle data under their own security and compliance frameworks, which include PCI-DSS standards.
• KYC and identity verification providers: Third-party identity verification services that process the identity documents you submit (NID, passport, driving licence) for the purpose of confirming your age and identity in accordance with jua9's verification obligations.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios may receive limited technical data (such as session IDs and anonymised gameplay events) necessary to operate game sessions and resolve game disputes. These providers do not receive your name, contact details, or financial data unless it is required to settle a specific dispute.
• Customer support platforms: If jua9 uses a third-party live chat or ticketing system, support interaction data may be processed by that provider under a data processing agreement with jua9.
• Fraud prevention and security services: Specialist providers that analyse transaction and behavioural data to identify fraud patterns, money laundering indicators, and account security threats.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, jua9 may be required to disclose specific personal data to law enforcement, financial regulatory authorities, or other competent authorities. In such cases, jua9 will disclose only the minimum data necessary to comply with the legal requirement.

7 Data Retention

jua9 retains personal data for defined periods based on the purpose of processing and applicable compliance requirements. The following retention periods apply:

Where retention beyond the periods above is required for an ongoing legal dispute, regulatory investigation, or compliance obligation, jua9 will retain only the specific data necessary and will delete it as soon as the outstanding matter is resolved. Upon expiry of a retention period, data is securely deleted or anonymised in a manner that prevents reconstruction of personal identifiers.

8 Your Rights

As a jua9 account holder, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of all personal data jua9 holds about you. We will provide this in a structured, readable format within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity data corrections may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request that jua9 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to overriding retention obligations — for example, financial transaction records must be retained for 7 years regardless of an erasure request.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, where you believe your privacy rights override jua9's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Restrict Processing: You may request that jua9 restrict the processing of your data — meaning we continue to store it but do not actively use it — in specific circumstances, such as while a rectification request is being investigated.
• Right to Withdraw Consent: Where jua9 processes your data based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9 Data Security

jua9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the jua9 platform.
• Bcrypt hashing with unique salt values for all stored account passwords — jua9 staff cannot view your password in plain text.
• PCI-DSS compliant payment processing — full card numbers and mobile banking credentials are never stored on jua9 servers.
• Role-based access controls ensuring that jua9 staff can only access personal data relevant to their specific function — support agents, finance teams, and compliance officers have separate data access permissions.
• Regular internal security audits and vulnerability assessments conducted on the platform infrastructure.
• Intrusion detection systems monitoring for unusual access patterns, automated bot activity, and unauthorised access attempts.
• Data minimisation practices ensuring that personal data is pseudonymised or anonymised wherever possible in analytical and reporting contexts.

Despite these measures, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jua9 will notify affected Players without undue delay, explaining the nature of the breach, the categories of data affected, and the steps being taken to mitigate any harm.

10 Children & Minors

If you believe that a person under the age of 21 has registered a jua9 account or accessed the platform using your device or account credentials, please contact [email protected] immediately. We will investigate and take appropriate action within 24 hours of notification. jua9 strongly recommends enabling device-level parental controls on any shared device that minors may have access to.

11 Marketing Communications

jua9 sends promotional communications — including bonus offers, seasonal promotions, tournament announcements, and product updates — only to Players who have explicitly opted in to receive marketing emails or messages at the time of registration or subsequently through their account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email.
• Updating your notification preferences in the jua9 account settings panel.
• Contacting [email protected] with the request to be removed from all marketing lists.

Opting out of marketing communications does not affect transactional communications. jua9 will continue to send you account-related notifications — such as deposit confirmations, withdrawal approvals, security alerts, and KYC requests — regardless of your marketing preferences. These communications are necessary for the operation of your account and cannot be disabled while your account is active.

jua9 does not send marketing communications via SMS or WhatsApp without specific, separate consent for those channels. Our primary marketing channel is email to the address registered on your account.

12 Third-Party Links

The jua9 platform may contain references to third-party game providers, payment partners, and technology vendors in informational contexts. This Privacy Policy applies solely to data processed by jua9 directly. Third-party platforms and services — including payment processors such as bKash, Nagad, and Rocket — maintain their own independent privacy policies, which govern how they process data on their own platforms.

jua9 is not responsible for the privacy practices or security standards of any third-party service provider. We encourage you to review the privacy notices of any third-party payment service or identity verification provider whose services you use in connection with your jua9 account. Where jua9 shares data with third-party processors, we do so under contractual data processing agreements that impose obligations equivalent to those described in this Privacy Policy.

13 Changes to This Policy

jua9 reserves the right to update or amend this Privacy Policy at any time. Changes may be required to reflect updates to the platform's features, changes in applicable legal or regulatory requirements, or improvements to our data handling practices.

When a material change is made to this Privacy Policy, jua9 will:

• Update the "Last Updated" date displayed at the top of this page and in the page hero section.
• Publish a summary of the key changes in a platform notice visible to all logged-in Players for a minimum of 30 days following the update.
• Where the changes materially affect how we process your personal data or reduce your rights, send a direct notification to the email address registered on your account at least 14 days before the revised policy takes effect.

Your continued use of the jua9 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Privacy Policy, you should close your account and cease using the platform prior to the effective date of the revision. Account closure requests can be submitted to [email protected].

Minor, non-material changes — such as typographical corrections, clarifications that do not alter the substance of our data practices, or updated contact details — may be made without direct notification. The most current version of this Privacy Policy is always available at jua9.io/privacy-policy.

14 Contact & Data Requests

For all privacy-related queries, data rights requests, consent withdrawals, marketing opt-outs, and data breach reports, please contact the jua9 data team using the following details:

When submitting a data rights request, please include your registered email address and account username so that we can locate your records efficiently. For identity verification purposes, we may ask you to confirm additional details before processing access, rectification, or erasure requests.

If you are not satisfied with the way jua9 has handled your personal data or responded to a data rights request, you have the right to escalate your complaint. jua9 takes all privacy complaints seriously and commits to a thorough internal review of any escalated concern within 14 calendar days.