joa77 Privacy Policy — Your Data, Your Rights

This Privacy Policy applies to all personal data collected by joa77 in connection with your use of the joa77 website and related services ("the Platform"). By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

The following categories of personal data are collected and processed by joa77 in the course of operating the Platform and delivering services to players:

1. How We Collect Your Data

joa77 collects personal data through the following means:

• Directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically through the Platform via cookies, server logs, and tracking technologies that record how you interact with the website.
• From third-party payment processors (such as bKash, Nagad, Rocket, and Upay) when you initiate a deposit or withdrawal transaction through their services.
• From identity verification service providers and fraud detection partners who help joa77 confirm your identity and detect suspicious account activity.

2. How We Use Your Data

joa77 uses the personal data it collects only for legitimate purposes directly related to operating the Platform and serving players. Specifically, your data may be used for the following purposes:

• To create and manage your account, including verifying your identity and age as required by our responsible gaming and anti-fraud obligations.
• To process deposits and withdrawals, including communicating with your payment provider to execute transactions in BDT through bKash, Nagad, Rocket, Upay, and other supported payment methods.
• To provide customer support and respond to queries, complaints, or disputes raised by you in relation to your account, transactions, or the games available on the Platform.
• To detect and prevent fraud, money laundering, underage gambling, and other prohibited activities, including by monitoring transaction patterns and account behaviour.
• To send you transactional communications such as deposit confirmations, withdrawal status updates, and security alerts related to your account.
• To comply with applicable legal and regulatory obligations, including record-keeping requirements, reporting obligations to relevant authorities, and responding to lawful requests from law enforcement or regulatory bodies.

3. Legal Basis for Processing

joa77 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is processed:

• Contract performance: processing is necessary to fulfil our obligations to you under the Terms & Conditions, including registering your account and processing your financial transactions.
• Legal obligation: processing is necessary to comply with applicable laws, including anti-money laundering regulations, responsible gaming requirements, and record-keeping obligations.
• Legitimate interests: processing is necessary for joa77's legitimate interests in operating a safe, fair, and commercially viable platform, including fraud detection, security monitoring, and platform improvement activities, provided those interests are not overridden by your own rights and interests.
• Consent: where joa77 sends you optional marketing communications about promotions, bonuses, or new features, we do so on the basis of your consent. You may withdraw this consent at any time by contacting support.

4. Sharing Your Data

joa77 does not sell your personal data to any third party. joa77 does not share your personal data with third parties for their own independent marketing purposes. Your data may be shared with third parties only in the following limited circumstances:

• Payment processors: joa77 shares necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment partners to execute deposit and withdrawal transactions on your behalf.
• Identity verification providers: joa77 may share identity document data with third-party KYC service providers for the purpose of verifying that you meet the eligibility requirements set out in the Terms & Conditions.
• Legal authorities: joa77 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a court order, or a lawful regulatory direction.
• Service providers: joa77 may share technical data with cloud hosting providers, analytics platforms, and security vendors engaged to operate, maintain, and protect the Platform's infrastructure, subject to appropriate data processing agreements.

In every case where data is shared with a third-party service provider, joa77 ensures that the provider is contractually bound to process your data only for the specific purpose for which it was shared, to maintain adequate security standards, and not to retain the data beyond the period necessary for that purpose.

5. Cookies and Tracking Technologies

joa77 uses cookies and similar tracking technologies (including browser local storage and session tokens) to operate the Platform and improve your experience. Cookies are small text files placed on your device when you visit the Platform. joa77 uses the following categories of cookies: (a) Strictly necessary cookies, which are required for the Platform to function correctly and cannot be disabled; (b) Analytical cookies, which help joa77 understand how players navigate the Platform so that we can improve it; and (c) Security cookies, which help detect and prevent fraudulent activity and protect your account session.

Most mobile browsers allow you to control cookie settings through your browser's privacy or settings menu. Disabling strictly necessary cookies may prevent the Platform from functioning correctly. joa77 does not use third-party advertising cookies or share cookie data with advertising networks.

6. Data Retention

joa77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. In practice, this means that account data and transaction records are retained for a minimum of five (5) years from the date your account is closed or the last transaction is recorded, whichever is later, in order to comply with anti-money laundering and financial record-keeping obligations.

When your data is no longer required to be retained, joa77 will securely delete or anonymise it so that it can no longer be linked back to you as an identifiable individual. Backup copies of data held in secure archive storage are subject to the same deletion schedule.

7. Data Security

joa77 takes the security of your personal data seriously. The Platform uses SSL (Secure Socket Layer) encryption for all data transmitted between your device and the joa77 servers. Account passwords are stored using industry-standard hashing algorithms and are never stored or transmitted in plain text. Access to personal data within joa77's systems is restricted to staff members who require it to perform their job functions, and all such access is subject to logging and monitoring.

While joa77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential. If you suspect that your account has been accessed without your authorisation, please contact joa77 support immediately using the email address in the footer of this page.

8. Your Rights Over Your Data

As a player whose personal data is processed by joa77, you hold the following rights in relation to that data. To exercise any of these rights, please contact joa77 support using the email address in the footer of this page. joa77 will respond to all rights requests within a reasonable timeframe and in any event within thirty (30) days of receipt.

• 👁️Right of Access — You may request a copy of the personal data joa77 holds about you, together with information about how it is being used and with whom it has been shared.
• ✏️Right of Rectification — You may request that joa77 correct any inaccurate or incomplete personal data it holds about you. joa77 will action such corrections promptly on verification of the correct data.
• 🗑️Right of Erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to joa77's legal obligations to retain certain records for defined minimum periods.
• ⛔Right to Object — You may object to joa77 processing your personal data where that processing is based on legitimate interests. joa77 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• 📦Right to Data Portability — Where processing is based on your consent or on contract performance, you may request that joa77 provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.

Please note that some rights are subject to conditions and exceptions under applicable law. In particular, joa77's legal obligation to retain financial and identity records for defined minimum periods may limit your ability to exercise the right of erasure in relation to those specific records. joa77 will always explain the reasons if a rights request cannot be fulfilled in full.

9. Children and Minors

The joa77 Platform is strictly for adults aged 21 and above. joa77 does not knowingly collect personal data from persons under the age of 21. If joa77 discovers or has reason to believe that personal data has been collected from a person under the age of 21, joa77 will immediately close the relevant account, delete all personal data associated with that account to the extent permitted by law, and forfeit any account balance. If you believe that a minor has registered on joa77, please contact support immediately using the email address in the footer of this page.

10. Third-Party Links

The joa77 Platform does not contain links to external third-party websites. If you arrive at any third-party website through a channel other than the official joa77 Platform, please be aware that joa77 has no control over the content, privacy practices, or data security measures of that third-party site. joa77's Privacy Policy applies solely to data collected through the joa77 Platform itself.

11. Changes to This Privacy Policy

joa77 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, joa77 will notify registered players by posting a notice on the Platform. The revised Privacy Policy will take effect on the date indicated at the top of the document. Your continued use of the Platform after that date constitutes your acceptance of the revised Privacy Policy. joa77 recommends that you review this Privacy Policy periodically to stay informed about how your data is being handled.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how joa77 handles your personal data, please contact the joa77 support team. All data-related requests are handled with strict confidentiality and joa77 will respond within thirty (30) days of receiving your request.

Email: [email protected]