Your Privacy Matters

This Privacy Policy ("Policy") describes how joyavip ("joyavip", "we", "us", "our"), the operator of the online gaming platform at joyavip.org, collects, processes, stores, and discloses personal information relating to individuals ("Player", "User", "you") who access or use our services. By registering an account or continuing to use the joyavip platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy forms part of the joyavip Terms & Conditions.

1. Information We Collect

1.1 Information You Provide Directly

When you register an account, make a deposit, contact support, or engage with joyavip's services, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, national ID or passport number (for KYC verification).
• Contact data: Email address, mobile phone number, and residential address in Bangladesh.
• Financial data: Mobile financial service details (bKash, Nagad, Rocket, Upay account references), bank account information (Dutch-Bangla Bank, City Bank, BRAC Bank), and transaction history on the joyavip platform.
• Account credentials: Username and encrypted password. joyavip does not store passwords in plain text.
• Communications data: Records of correspondence you send to joyavip support, including live chat transcripts, email exchanges, and support ticket content.

1.2 Information Collected Automatically

When you visit joyavip.org or use our mobile platform, we automatically collect certain technical information, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited on joyavip.org, time spent on each section, games played, wagering history, session start and end times, and navigation paths.
• Location data: General geographic location derived from your IP address (country and city level only). joyavip does not collect precise GPS coordinates unless you grant explicit permission on a mobile device.
• Cookie and tracking data: See Section 4 (Cookies & Tracking Technologies) for full details.

1.3 Information from Third Parties

joyavip may receive personal data about you from third-party sources in limited circumstances, including:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and partner banks to verify deposits and withdrawals.
• Identity verification providers: Results of KYC checks conducted through third-party verification services where we are required to confirm your identity before processing withdrawals.
• Fraud prevention partners: Risk signals and flagged activity patterns shared by industry fraud-prevention networks to help protect all joyavip players.

2. How We Use Your Data

joyavip processes your personal data only for clearly defined, lawful purposes. The table below summarises the primary uses of your data and the legal basis for each:

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contractual necessity
Processing deposits and withdrawals	Financial, identity	Contractual necessity
KYC identity and age verification	Identity, date of birth, ID documents	Legal obligation
Fraud detection and prevention	Usage, device, financial, IP	Legitimate interest
Customer support communications	Contact, communications	Contractual necessity
Responsible gaming monitoring	Usage, wagering history	Legal obligation / legitimate interest
Personalised promotions and offers	Usage, wagering preferences	Consent (opt-in)
Platform performance and analytics	Usage, device, cookie data	Legitimate interest

2.1 Marketing Communications

joyavip will only send you promotional emails, SMS messages, or in-platform notifications regarding bonuses, tournaments, and new game releases if you have explicitly opted in to receive such communications during registration or through your account preferences. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect your ability to use the joyavip platform.

2.2 Responsible Gaming Use

joyavip uses your gameplay and transaction data to monitor for indicators of problem gambling. Where our systems detect patterns consistent with harmful gambling behaviour — such as rapid escalation of deposit frequency, chasing losses, or extended uninterrupted play sessions — we may proactively reach out to offer responsible gaming resources, apply temporary protective limits, or refer you to our self-exclusion tools. This use of data is fundamental to our duty of care as an operator and is conducted in your direct interest.

3. Data Sharing & Third Parties

3.1 Service Providers

joyavip engages carefully selected third-party service providers who assist in delivering the platform. These providers are permitted to access your personal data only to the extent necessary to perform their contracted services and are bound by strict data processing agreements. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — for transaction processing.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Habanero — for delivering licensed game content. These providers may receive session tokens and anonymised gameplay identifiers.
• KYC and fraud prevention vendors: Third-party identity verification and risk-scoring providers used to fulfil our anti-money-laundering obligations.
• Cloud infrastructure and hosting providers: Secure server infrastructure used to host joyavip.org and store player data with appropriate encryption and access controls.

3.2 Legal Disclosures

joyavip may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities when required to do so by applicable law, court order, or in response to a lawful legal process. We will notify you of such disclosures where we are legally permitted to do so.

3.3 Business Transfers

In the event that joyavip undergoes a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address registered to your account, and your rights under this Policy will be maintained by the successor entity.

4. Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit joyavip.org. They allow the platform to recognise your browser, remember your preferences, maintain your session, and collect analytical data about how the site is used. joyavip uses both first-party cookies (set directly by joyavip.org) and third-party cookies (set by trusted partners such as analytics and game content providers).

4.2 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your joyavip account. These cannot be disabled without breaking core functionality.
• Analytical and performance cookies: Used to understand how players navigate joyavip.org, which pages perform well, and where technical issues may occur. Data is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming limits you have set within your account.
• Marketing cookies: Used only where you have provided consent. These may track your activity on the joyavip platform to help us present relevant promotions to you within the site.

4.3 Managing Your Cookie Preferences

You may control non-essential cookie categories through your browser settings at any time. Most modern browsers allow you to block or delete cookies via their privacy or security settings menus. Please note that disabling certain cookies may affect the functionality of the joyavip platform — for example, disabling session cookies will prevent you from staying logged in to your account. joyavip does not respond to browser "Do Not Track" signals at this time, as no industry-wide standard has been established for such signals.

5. Data Security Measures

joyavip employs a layered approach to information security to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• TLS/SSL encryption: All data in transit between your browser or app and joyavip's servers is encrypted using current TLS protocols.
• Encrypted password storage: Account passwords are stored using strong one-way cryptographic hashing. joyavip staff cannot view your password in plain text.
• Access control: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data undergo background screening and are bound by confidentiality obligations.
• Intrusion detection: Our infrastructure is monitored continuously for anomalous access patterns, potential breaches, and denial-of-service attempts.
• Regular security audits: joyavip conducts periodic security assessments to identify and remediate vulnerabilities in the platform and its underlying infrastructure.

6. Data Retention Policy

joyavip retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

Data Category	Retention Period	Reason
Account and identity data	Duration of account + 5 years post-closure	Legal and regulatory obligations
Transaction and financial records	7 years from transaction date	Anti-money-laundering compliance
KYC verification documents	5 years post-account closure	Regulatory requirements
Customer support communications	3 years from last interaction	Dispute resolution, quality assurance
Gameplay and wagering logs	3 years from session date	Responsible gaming monitoring
Marketing preferences and consent logs	Until consent is withdrawn + 1 year	Proof of consent
Analytical and cookie data	Up to 13 months from collection	Platform performance analysis

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analysis purposes.

7. Your Rights as a Player

As a player whose personal data is processed by joyavip, you hold the following rights with respect to your information. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and provide a full response within 30 days.

7.1 Right of Access

You have the right to request a copy of the personal data that joyavip holds about you, along with information about how it is being used and with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If any personal data joyavip holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor account details (such as contact number or address), you may update these directly through your joyavip account settings.

7.3 Right to Erasure

You may request that joyavip delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing was based. Please note that this right is subject to our legal obligations to retain certain data (as outlined in Section 6). Where erasure is not possible due to a legal retention requirement, joyavip will inform you of the reason and the expected retention period.

7.4 Right to Restriction of Processing

In certain circumstances — such as where you contest the accuracy of your data or object to our processing — you may request that joyavip restricts the use of your personal data to storage only while the matter is investigated or resolved.

7.5 Right to Object

You have the right to object to joyavip's processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time. Upon receipt of a valid objection, joyavip will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.6 Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that joyavip provide your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) so that you may transfer it to another service provider.

8. Contact & Data Officer

joyavip takes its data protection responsibilities seriously. If you have any questions, concerns, or complaints about this Privacy Policy or the way in which your personal data is handled, please contact us using the details below.

All data-related enquiries should be directed to our support team, who will escalate data protection matters internally as required:

• Email: [email protected] (Subject line: "Privacy Enquiry" or "Data Rights Request")
• Response time: We aim to acknowledge all privacy-related enquiries within 72 hours (Bangladesh Standard Time, UTC+6) and provide a substantive response within 30 calendar days.
• Platform: joyavip.org

joyavip may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will revise the "Last Updated" date at the top of this page. For significant changes that materially affect your rights, we will notify registered players via email. Your continued use of joyavip following publication of an updated Policy constitutes your acceptance of the revised terms.