Privacy Policy — How jaya70 Protects Your Data

1 Introduction

This Privacy Policy ("Policy") describes how jaya70 ("jaya70", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the User", or "the Player") who access or use the jaya70 platform, including the website at https://jaya70.com and all associated services (collectively, the "Platform").

jaya70 takes data privacy seriously. We are committed to handling your personal information with care, transparency, and respect for your rights. This Policy is designed to give you a clear understanding of our data practices so that you can make informed decisions about your use of the Platform.

By registering an account, logging in, or otherwise using the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the jaya70 Terms and Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms and Conditions on a data privacy matter, this Policy shall prevail.

2 Who We Are

jaya70 is an online casino and sports betting platform operated for players in Bangladesh. The Platform offers a range of gaming and wagering products, including cricket betting, live casino games, slots, and other gaming categories provided by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

For the purposes of this Policy, jaya70 is the data controller — meaning we determine the purposes and means by which your personal data is processed. Where third-party service providers process data on our behalf, they do so as data processors acting under our instruction and bound by appropriate data protection obligations.

3 Data We Collect

jaya70 collects personal data that is necessary to provide, maintain, and improve the Platform, to verify your identity, to process financial transactions, and to comply with applicable legal and regulatory obligations. The categories of personal data we may collect include:

3.1 Identity and Account Data

• Full legal name
• Date of birth (for age verification purposes — you must be 18 or older)
• Username and encrypted password
• Government-issued identity document details (National ID, passport, or driving licence) submitted during KYC verification
• Photograph or selfie where required for identity confirmation

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, district, and postcode within Bangladesh)

3.3 Financial Data

• Payment method details including bKash, Nagad, Rocket, and Upay mobile wallet identifiers
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank)
• Card details (Visa or Mastercard) — card numbers are never stored in full; only masked versions are retained
• Deposit and withdrawal transaction history, including amounts in Bangladeshi Taka (BDT) and timestamps

3.4 Activity and Betting Data

• Betting history, including markets selected, stake amounts, odds, and outcomes
• Casino game session data, including games played, session duration, and round results
• Bonus and promotion participation records
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods)

3.5 Technical and Device Data

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session logs, access timestamps, and page interaction data
• Cookie identifiers and similar tracking data (see Section 9)

3.6 Communications Data

• Records of communications between you and the jaya70 support team, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records

4 How We Collect Your Data

jaya70 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification and fraud prevention data received from KYC service providers, payment processors, and financial institutions in connection with your transactions.
• Game providers: Aggregated game session data shared by our certified RNG game providers to facilitate accurate account crediting and dispute resolution.

jaya70 does not purchase personal data from data brokers or any commercial data sources. All personal data we hold about you originates from your direct interaction with the Platform or from service providers engaged to deliver the Platform.

5 Purposes and Legal Basis for Processing

The table below summarises the primary purposes for which jaya70 processes your personal data and the corresponding legal basis for each activity:

6 Disclosure of Your Data

jaya70 does not sell your personal data. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.1 Service Providers

Third-party companies engaged by jaya70 to provide services that support the Platform, including payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification providers, cloud infrastructure and hosting providers, customer support software vendors, and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). These providers act as data processors under contract and are not permitted to use your data for any purpose other than delivering the services for which they are engaged.

6.2 Legal and Regulatory Authorities

Where required by applicable law, court order, or regulatory directive, jaya70 may disclose personal data to government agencies, law enforcement bodies, financial intelligence units, or other competent authorities. Such disclosures are made only to the extent strictly required by law.

6.3 Fraud and Security Investigations

In cases of suspected fraud, money laundering, account takeover, or other security incidents, jaya70 may share relevant personal data with specialist security firms, law enforcement, or financial institutions as part of an investigation or prevention effort.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of jaya70's business, personal data held by jaya70 may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance of any such transfer and of any changes to the applicable privacy terms.

7 International Data Transfers

The jaya70 Platform primarily serves users in Bangladesh, and we endeavour to process and store personal data within appropriate geographic boundaries wherever practicable. However, some of our third-party service providers — including cloud infrastructure, KYC, and game content providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, jaya70 takes reasonable steps to ensure that an adequate level of data protection is maintained. This includes requiring contractual data protection clauses in agreements with all data processors that handle personal data outside Bangladesh and selecting service providers that maintain recognised security certifications.

If you have concerns about any specific international transfer of your personal data, you may contact us using the details in Section 14.

8 Data Retention

jaya70 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction and betting records: Retained for a minimum of five (5) years to satisfy financial reporting and audit requirements.
• Customer support communications: Retained for up to three (3) years from the date of the last interaction, unless retained longer in connection with an unresolved dispute.
• Technical and device logs: Typically retained for up to twelve (12) months, unless extended for security investigation purposes.
• Marketing consent records: Retained for the duration of the consent period plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.

9 Cookies and Tracking Technologies

jaya70 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. They allow the Platform to remember your preferences, maintain your login session, and gather aggregate analytical data.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and previously visited game categories. These enhance your experience but are not essential to core operations.
• Analytics Cookies: Used to collect aggregate, anonymised data about how users interact with the Platform — such as pages visited, session duration, and navigation paths. This data helps us identify performance issues and improve the user experience. We do not use third-party advertising networks for analytics.

9.2 Managing Cookies

You may control cookies through your browser settings. Most browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including your ability to log in and place bets. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect your personalised experience.

10 Security Measures

jaya70 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform
• Encryption at rest for sensitive stored data, including financial records and identity documents
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Regular security vulnerability assessments and penetration testing by qualified security professionals
• Incident response procedures with defined escalation paths and notification protocols in the event of a data breach

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you become aware of any suspected security vulnerability or unauthorised access to your jaya70 account, you must notify us immediately at [email protected].

11 Your Rights

As a jaya70 platform user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the jaya70 support team using the details provided in Section 14. We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data jaya70 holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account contact details, you may update this information directly in your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. Please note that we may be required to retain certain data for legal compliance purposes even after an erasure request.
• Right to Restriction of Processing: In certain circumstances, you may request that jaya70 temporarily restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where jaya70 relies on legitimate interest as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

12 Children's Privacy

The jaya70 Platform is strictly intended for adults aged 18 years and above. jaya70 does not knowingly collect, process, or store personal data from individuals under the age of 18. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If jaya70 becomes aware that personal data has been collected from a person under the age of 18 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account on the jaya70 Platform, please notify us immediately at [email protected].

13 Changes to This Policy

jaya70 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish the revised Policy on the Platform with an updated effective date. Where reasonably practicable, we will also notify registered users of significant changes by email or via an in-platform notification.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure by contacting jaya70 support.

We encourage you to review this Policy periodically to stay informed about how jaya70 protects your data. The date at the top of this page always reflects when the Policy was last revised.

14 Contact and Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jaya70 handles your personal data, please contact us using the following details. All privacy and data-related inquiries are handled by our support team, who will direct your request to the appropriate internal team.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: Privacy Request — [Your Full Name] — [Request Type]
• Response time: Within 30 days of receipt of a valid, verified request
• Identity verification: For data access, rectification, or erasure requests, jaya70 may require you to verify your identity before processing your request to prevent unauthorised disclosure