joy baji Privacy Policy
At joy baji, protecting the privacy and personal data of every player in Bangladesh is a core commitment. This Privacy Policy explains in clear, formal terms what data we collect, why we collect it, how it is processed and stored, who it is shared with, and what rights you hold over your own information. We encourage you to read this document in full before registering an account.
SSL Encryption
All data transmitted between your device and joy baji is protected by industry-standard SSL/TLS encryption. Your personal details, payment credentials, and account activity are never transmitted in plain text over any channel.
Minimal Data Collection
joy baji collects only the personal data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or beyond what each stated purpose requires.
Your Data, Your Rights
Every registered player on joy baji holds enforceable rights over their personal data — including the right to access, correct, restrict, and request deletion of information we hold. These rights are described in full in the Your Privacy Rights section below.
No Unauthorised Sale of Data
joy baji does not sell, rent, or trade your personal data to advertising networks, data brokers, or any third party for their own commercial purposes. Data is shared only with the service providers required to operate the Platform, as detailed in this policy.
Secure Payment Data
Payment details — including bKash, Nagad, Rocket, Upay, and card information — are handled exclusively by certified payment processors. joy baji does not store full card numbers or mobile banking PINs on its own servers.
Transparent Purposes
Every category of data we collect is linked to a clearly stated, lawful purpose. We do not use your data for purposes that are incompatible with those stated at the time of collection without first obtaining your explicit consent.
Information We Collect
joy baji collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically when you browse or use the Platform; and from third-party service providers engaged in identity verification, payment processing, and fraud prevention. The categories of personal data we collect are described in the table below.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, National Identity Card (NID) number, passport number, photograph | Provided by you at registration or during KYC verification |
| Contact Data | Email address, Bangladeshi mobile number, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, etc.) | Provided by you at registration or in support communications |
| Financial Data | bKash / Nagad / Rocket / Upay wallet number, bank account details, transaction history, deposit and withdrawal amounts in ৳ | Provided by you when making deposits or requesting withdrawals |
| Account & Gaming Data | Username, account balance, bet history, game preferences, bonus activity, login timestamps | Generated automatically through your use of the Platform |
| Technical & Device Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (BST/UTC+6) | Collected automatically via server logs and analytics tools |
| Usage Data | Pages visited, session duration, navigation paths, search queries within the Platform, click events | Collected automatically via cookies and analytics scripts |
| Communications Data | Content and metadata of live chat transcripts, support emails, and feedback submissions | Provided by you when contacting our support team |
| Verification Data | Document scans, selfie photographs submitted for liveness checks, proof-of-address documents | Provided by you in response to a KYC or AML verification request |
Sensitive Data: joy baji does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes. If such data is provided incidentally (e.g., a document that reveals religious affiliation), it will not be processed for any purpose other than the verification task for which it was submitted.
Where you choose not to provide mandatory personal data — such as identity information required for KYC compliance — joy baji may be unable to open your account, process withdrawals, or provide certain services. We will always inform you at the point of collection whether providing a particular piece of information is mandatory or optional.
How We Use Your Data
joy baji processes personal data only where a lawful basis exists for doing so. The primary lawful bases we rely upon are: (a) the performance of a contract between you and joy baji (i.e., operating your account and delivering the services you have signed up for); (b) compliance with applicable legal obligations; (c) our legitimate interests in operating a safe, secure, and commercially viable platform; and (d) your consent, where explicitly obtained.
- Account management: Creating, maintaining, and administering your player account, including processing deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and partner banks.
- Identity verification: Conducting Know Your Customer (KYC) checks and age verification to confirm that you are at least 18 years of age and eligible to use the Platform under our Terms & Conditions.
- Fraud and AML prevention: Monitoring transactions and account activity to detect, prevent, and investigate suspicious activity, money laundering, fraud, and other financial crimes.
- Customer support: Responding to your queries, resolving account issues, processing complaints, and providing responsible gaming assistance in English, 24/7.
- Personalisation: Tailoring game recommendations, promotional offers, and on-platform content to your demonstrated preferences and playing history, where you have not opted out of such personalisation.
- Marketing communications: Sending you promotional emails and notifications about bonuses, cricket season specials, Eid offers, Pohela Boishakh promotions, and Platform updates — where you have given consent or where we have a legitimate interest and you have not opted out.
- Security and integrity: Protecting the Platform from technical attacks, ensuring fair play across all games, and detecting the use of automated bots or multi-accounting behaviour.
- Legal compliance: Meeting our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.
- Analytics and improvement: Understanding how players use the Platform in aggregate so that we can improve game performance, navigation, and the overall user experience for players across Bangladesh — from Dhaka to Cox's Bazar.
Marketing Opt-Out: You may withdraw your consent to marketing communications at any time by contacting our support team at [email protected] (plain text — not a clickable link) or by using the unsubscribe option in any promotional email we send you. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
Cookies & Tracking Technologies
joy baji uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate the Platform, remember your preferences, measure performance, and deliver a consistent experience across sessions. Cookies are small text files stored on your device by your browser when you visit the Platform.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Required for the Platform to function. Includes session tokens, authentication cookies, load balancing, and security cookies. Cannot be disabled. | Session / up to 24 hours |
| Functional | Remember your language preference (English), account settings, and in-game display preferences across sessions. | Up to 12 months |
| Analytics | Measure page views, session depth, and navigation patterns to help us improve Platform performance and content structure. Data is aggregated and anonymised. | Up to 24 months |
| Performance | Detect errors, measure load times, and monitor the technical performance of games and payment flows, particularly during high-traffic periods such as BPL and IPL seasons. | Up to 6 months |
| Marketing / Targeting | Where consent has been granted, used to understand the effectiveness of promotional campaigns and to limit repetitive messaging. joy baji does not share targeting cookies with advertising networks. | Up to 12 months |
You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform, including the ability to maintain a logged-in session or access certain game features. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, manage, and delete cookies stored by individual websites.
Third-Party Analytics: joy baji may use third-party analytics tools to process aggregated, anonymised usage data. These tools are contractually prohibited from using your data for their own commercial purposes or combining it with data from other sources without our explicit written authorisation.
Data Sharing & Third Parties
joy baji does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties. We share personal data only where it is strictly necessary to deliver our services, fulfil legal obligations, or protect the integrity of the Platform. All third-party recipients of personal data are contractually bound to process that data solely for the purposes specified by joy baji and in accordance with applicable data protection principles.
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard) receive financial data strictly as necessary to process deposits and withdrawals. Each processor operates under its own privacy framework and applicable Bangladeshi financial regulations.
- Identity verification providers: Third-party KYC and AML service providers receive identity documents and verification data to assist in confirming player identity and age. These providers are subject to strict data processing agreements.
- Game studios and platform providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for game performance monitoring. They do not receive personally identifiable player information beyond what is technically required for game delivery.
- IT and hosting providers: Infrastructure partners hosting the Platform's servers and databases process personal data on joy baji's behalf. All servers used to process data relating to Bangladeshi players operate in compliance with data security standards.
- Legal and regulatory authorities: joy baji will disclose personal data to law enforcement, courts, regulatory bodies, or other competent authorities where required to do so by law, court order, or in connection with legal proceedings. We will notify affected players of such disclosures where legally permitted to do so.
- Fraud prevention agencies: In cases of suspected fraud, money laundering, or collusion, relevant data may be shared with fraud prevention agencies and, where appropriate, with other gaming operators operating responsible gaming cross-operator initiatives.
International Data Transfers: Some of joy baji's third-party service providers — particularly game studios and technology partners — may be based outside Bangladesh. Where personal data is transferred internationally, joy baji ensures that appropriate contractual safeguards are in place to maintain the data protection standards described in this policy.
Data Retention & Security
joy baji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce our agreements. Retention periods vary by data category and are guided by both operational necessity and applicable legal requirements.
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Documents | 5 years following account closure | AML and regulatory compliance obligations |
| Financial Transaction Records | 7 years from date of transaction | Financial record-keeping and legal compliance |
| Account & Gaming History | Duration of active account + 3 years post-closure | Dispute resolution and responsible gaming monitoring |
| Support Communications | 3 years from date of last communication | Dispute resolution and service quality monitoring |
| Technical & Usage Logs | Up to 12 months | Security monitoring and fraud detection |
| Marketing Preferences | Until consent is withdrawn or account is closed | Consent-based processing |
joy baji implements a layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include:
- End-to-end SSL/TLS encryption for all data transmitted between player devices and Platform servers.
- Encryption of sensitive data fields at rest within the Platform's database infrastructure.
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function.
- Regular independent security audits and penetration testing of Platform infrastructure.
- Automated fraud detection and anomaly monitoring systems operating continuously across all player accounts and transactions.
- Incident response procedures to detect, contain, and report data security incidents in a timely manner.
Data Breach Notification: In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected players, joy baji will notify affected individuals without undue delay. Notifications will be sent to the email address registered on your account and will describe the nature of the breach, the data affected, and the steps being taken to address it.
Your Privacy Rights
As a player on the joy baji Platform, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link). We will respond to all valid requests within a reasonable timeframe and in any event within 30 days of receipt, unless the request is particularly complex, in which case we will notify you of any extension.
Right of Access
You may request a copy of all personal data we hold about you, including details of how it is being processed and the purposes for which it is used.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes collected, or where you withdraw consent and no other lawful basis applies. Note that legal retention obligations may prevent full erasure in some cases.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection is being assessed.
Right to Portability
Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
Right to Object
You may object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, subject to our demonstrating compelling grounds.
Automated Decision-Making
Where joy baji makes decisions about your account solely through automated means — such as fraud scoring — you have the right to request human review of that decision and to contest the outcome.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
Identity Verification for Rights Requests: To protect your privacy and prevent unauthorised requests, joy baji will verify your identity before actioning any data rights request. You may be asked to confirm account details or provide a copy of a valid identity document. We will not action requests from third parties without written proof of authorisation from the account holder.
Minors & Age Verification
The joy baji Platform is intended exclusively for adults aged 18 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration process and may be reinforced at any subsequent point through our KYC procedures.
If we become aware — through verification checks, player reports, or any other means — that personal data has been collected from a person under the age of 18, we will take immediate steps to close the relevant account, delete all associated personal data (subject to any overriding legal retention obligations), and return any deposited funds to the payment method from which they originated, subject to verification.
- Parents and guardians of minors are encouraged to install parental control software on any shared device that could be used to access the Platform.
- If you believe a minor in your care has registered an account on joy baji, contact us immediately at [email protected] (plain text — not a clickable link) and we will act without delay.
- joy baji treats the protection of minors as a non-negotiable responsibility and fully supports the responsible gaming principles set out in our Responsible Gaming Policy.
- Age-related personal data collected during verification is retained only for the minimum period required to satisfy our legal obligations and is never used for marketing or profiling purposes.
18+ Only: By registering an account and using the joy baji Platform, you confirm that you are at least 18 years of age. Misrepresentation of age constitutes a material breach of our Terms & Conditions and will result in immediate account closure and forfeiture of all balances.
Policy Updates & Contact
joy baji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The version date displayed at the top of this page indicates when the current policy took effect. Material changes — those that meaningfully affect how your personal data is used — will be communicated to registered players via the email address on file or through a prominent notice on the Platform prior to the change taking effect.
We encourage you to review this Privacy Policy periodically. Your continued use of the joy baji Platform following the posting of an updated policy constitutes your acceptance of the revised terms, subject to any additional consent that may be required for material changes to the purposes or lawful bases for processing.
Previous versions of this Privacy Policy are archived and available on request by contacting our support team. We will provide a copy of any prior version within 10 business days of a valid request.
Contact for Privacy Queries: If you have any questions about this Privacy Policy, wish to exercise a data rights request, or want to raise a concern about how joy baji handles your personal data, please contact our support team. Our team is available 24/7 in English and operates on Bangladesh Standard Time (BST, UTC+6).
Email (plain text — not a link): [email protected]
Operating hours: 24/7 | Response target: within 48 hours for formal privacy queries
joy baji is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy query or complaint, you retain the right to escalate your concern to the relevant data protection authority or seek independent legal advice. We will always cooperate with any lawful investigation or review process.
Questions About Your Privacy?
Our support team is available 24/7 in English to help you understand how joy baji protects your data. You can also explore our FAQ, review our Responsible Gaming policy, or head to the Platform. 18+ only.
Gambling involves risk. Play responsibly. For adults aged 18 and above only.