Privacy Policy — How jaya90 Protects Your Data

jaya90 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every individual who visits or uses our platform at https://jaya90.app. This Privacy Policy ("Policy") describes how jaya90 collects, processes, stores, shares, and protects personal information in connection with the provision of our online casino, live casino, sports betting, and related entertainment services.

This Policy is intended to provide clear and transparent information about our data practices in plain English so that all players — regardless of technical background — can make informed decisions about their personal information. We do not engage in hidden data collection, undisclosed profiling, or the sale of personal data to third-party advertisers.

This Policy should be read alongside the jaya90 Terms & Conditions, which govern your overall use of the platform. In the event of any inconsistency between this Policy and the Terms & Conditions regarding a data-specific matter, this Privacy Policy takes precedence.

jaya90 serves an audience of adult players primarily located in Bangladesh. All personal data processing described in this Policy is carried out with the Bangladesh market in mind, and we operate with respect for the privacy expectations of Bangladeshi players. All communications to and from our support team regarding data matters are conducted in English.

The categories of personal data that jaya90 collects are determined by the services you use and the interactions you have with the platform. The table below summarises the main categories of data we collect and the context in which they are gathered.

jaya90 collects personal data through the following primary channels:

3.1 Direct Collection

Data you provide directly to jaya90 when you create an account, complete identity verification, make a deposit or withdrawal, contact the support team, respond to a survey, or configure your account settings. This represents the largest and most significant category of data we hold about you.

3.2 Automated Collection

Data collected automatically when you access and interact with the jaya90 platform, including your IP address, device identifiers, session timestamps, pages visited, games launched, and betting patterns. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

3.3 Third-Party Collection

Data received from third parties who provide services to jaya90 in connection with the operation of the platform. This includes:

• Identity verification results from KYC service providers who check the authenticity of documents you submit.
• Transaction status data from payment processors including bKash, Nagad, Rocket, and Upay confirming the success or failure of a payment instruction.
• Fraud risk scores from fraud prevention service providers who analyse transaction and behavioural patterns to detect suspicious activity.
• Game session data from licensed game studio providers (including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and others) relating to game rounds played on their platforms via jaya90.

3.4 Publicly Available Sources

In limited circumstances connected with fraud investigation or AML compliance, jaya90 may consult publicly available information sources — such as public records, sanctions lists, or adverse media — to cross-reference information you have provided during registration or KYC.

jaya90 processes personal data for the following specific and legitimate purposes. We do not use your personal data for any purpose not described in this Policy without first obtaining your explicit consent.

• Account Creation and Management: To register your account, verify your identity, manage your account settings, and maintain your player profile throughout the duration of your relationship with jaya90.
• Service Delivery: To provide you with access to sports betting markets, casino games, live dealer tables, crash games, and all other entertainment content available on the jaya90 platform.
• Payment Processing: To process deposit and withdrawal requests, reconcile transactions, investigate payment disputes, and maintain accurate financial records of all transactions on your account.
• Identity Verification and KYC: To verify your identity and age in compliance with applicable Know Your Customer requirements, and to satisfy our Anti-Money Laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, multi-accounting, and other activities that may harm the platform or other players.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, to enforce responsible gaming limits and self-exclusion requests, and to fulfil our duty of care obligations toward players.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver the support you request through live chat or email.
• Legal and Regulatory Compliance: To comply with applicable legal obligations including record-keeping requirements, responses to lawful requests from law enforcement or regulatory authorities, and the enforcement of our Terms & Conditions.
• Platform Improvement: To analyse anonymised usage data and understand how players interact with the platform so that we can improve game selection, interface design, payment options, and overall user experience.
• Promotional Communications: To send you information about bonuses, promotions, and new features that may be of interest to you, where you have given consent or where we have a legitimate interest in doing so. You may opt out of promotional communications at any time through your account settings.

jaya90 processes your personal data on the following legal bases, which collectively justify all of the processing activities described in this Policy:

• Contractual Necessity: Processing your identity data, contact data, financial data, and usage data is necessary to perform the contract between you and jaya90 — specifically, to create and maintain your account and to provide the betting and gaming services you have requested.
• Legal Obligation: Processing for KYC verification, AML monitoring, record retention, and compliance with law enforcement requests is required in order for jaya90 to fulfil its legal obligations under applicable law.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight is carried out on the basis of jaya90's legitimate interests in operating a safe, fair, and sustainable platform. These interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications is carried out only where you have given explicit consent. You may withdraw this consent at any time via your account settings without any adverse effect on your ability to use the platform.

jaya90 does not sell, rent, or commercially transfer your personal data to third parties. We share personal data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

6.1 Service Providers

We share data with carefully selected third-party service providers who process data on our behalf under written data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service. These include KYC and identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), fraud prevention services, IT infrastructure and hosting providers, and customer support platform providers.

6.2 Game Studio Providers

When you play games provided by licensed studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — limited technical data (such as a pseudonymous player identifier and session token) is shared with the relevant studio to authenticate your game session. These providers do not receive your full name, contact details, or financial data.

6.3 Legal and Regulatory Disclosure

jaya90 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by a legally binding obligation, court order, or official request. In such cases, jaya90 will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify the affected player.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of jaya90, personal data held by jaya90 may be transferred to the successor entity as part of that transaction. In such circumstances, we will provide reasonable advance notice to registered players and ensure that the successor entity is bound by data protection obligations at least equivalent to those in this Policy.

jaya90 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or for such longer period as is required or permitted by applicable law. The following retention schedule applies to the main categories of data we hold:

Upon expiry of the applicable retention period, jaya90 will securely delete or anonymise the relevant data. Anonymised data — from which no individual can reasonably be identified — may be retained indefinitely for statistical and analytical purposes.

jaya90 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, destruction, or loss. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the jaya90 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser confirms that your connection is encrypted.
• Encryption at Rest: Sensitive personal data — including identity documents, payment references, and account credentials — is stored in encrypted form on our servers.
• Access Controls: Access to personal data within jaya90 is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their designated function. All access is logged and audited.
• Two-Factor Authentication: Internal system access by jaya90 staff requires two-factor authentication to prevent unauthorised access in the event of credential compromise.
• Pseudonymisation: Where technically feasible, personal data used in analytics and fraud-detection processes is pseudonymised so that direct identification of individuals is not possible without access to separately held key data.
• Security Monitoring: Our infrastructure is continuously monitored for anomalous activity, intrusion attempts, and data exfiltration patterns. Automated alerting systems flag suspicious activity for immediate review.
• Penetration Testing: jaya90 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jaya90 will notify affected players without undue delay, providing a clear description of the nature of the breach, the data categories affected, the likely consequences, and the measures taken to address it.

jaya90 uses cookies and similar tracking technologies to operate the platform, personalise your experience, detect fraud, and analyse how the platform is used. A cookie is a small text file placed on your device by the jaya90 web server when you visit the platform.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your responsible gaming settings, and ensure secure authentication. The platform cannot operate without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your preferred display settings and language — so that you do not need to reconfigure them on each visit. They persist for a defined period after your last login.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how visitors use the platform — such as which game categories are most popular and which pages generate the most time-on-site. This data is used exclusively for internal platform improvement purposes and is not shared with advertising networks.
• Security Cookies: These cookies support jaya90's fraud detection systems by establishing a consistent device fingerprint that allows our systems to identify anomalous login patterns, unusual payment requests, or automated bot activity.

9.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a warning before a cookie is placed. Please note that disabling functional or analytical cookies may affect certain features of the platform. Strictly necessary cookies cannot be disabled without preventing the platform from functioning correctly.

jaya90 does not use third-party advertising cookies or cross-site tracking cookies. The analytical technologies we deploy are first-party only and the data collected is not shared with or accessible to external advertising platforms.

jaya90 respects your rights over your personal data. Depending on applicable law and the specific circumstances of your request, you may exercise the following rights in relation to the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data jaya90 holds about you, together with information about how that data is processed and on what legal basis.
• Right to Rectification: You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. You may update certain data directly through your account settings panel without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to jaya90's legal obligations to retain certain records, as described in Section 7.
• Right to Restrict Processing: You have the right to request that jaya90 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. Where you object, jaya90 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the jaya90 support team via live chat or by email at [email protected]. We will respond to all valid requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

jaya90 is strictly an adult entertainment platform. Access to the platform is restricted to individuals aged 18 years and above. jaya90 does not knowingly collect, process, or retain personal data from individuals under the age of 18.

Age verification is an integral part of the jaya90 registration and KYC process. Any account found to belong to a person under the age of 18 will be suspended immediately, all funds will be held pending parental or guardian review, and all personal data associated with the minor's account will be securely deleted as soon as the investigation is concluded.

If you are a parent or guardian and believe that your child has created a jaya90 account, please contact our support team immediately via live chat. We take underage gambling extremely seriously and will treat all such reports as the highest priority.

The jaya90 platform may contain links to third-party websites or services — for example, links to the websites of payment method providers such as bKash or Nagad for customer support queries. These third-party sites operate independently of jaya90 and are governed by their own privacy policies.

jaya90 is not responsible for the privacy practices of third-party websites and does not accept liability for any data processing carried out by those sites following your departure from the jaya90 platform. We encourage you to review the privacy policy of any third-party site you visit before submitting personal information to it.

jaya90 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The date of the most recent revision is always displayed prominently at the top of this page.

Where changes to this Policy are material — such as the introduction of a new category of data collection, a new sharing arrangement with a third party, or a significant change to retention periods — jaya90 will notify registered players in advance via the platform or by email to the address associated with their account.

Your continued use of the jaya90 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a material change to this Policy, you should stop using the platform and may request account closure by contacting the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to jaya90's data processing practices, please contact our support team. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

• Live Chat: Available directly on the jaya90 platform, 24 hours a day, 7 days a week. This is the fastest channel for urgent privacy requests such as data deletion or immediate account suspension.
• Email: [email protected] — for formal written requests regarding data access, rectification, or erasure. We respond to written requests within 30 days.

All privacy-related communications with jaya90 are treated with strict confidentiality. Our support team members who handle data rights requests are specifically trained in data protection procedures and are bound by confidentiality obligations.