joy7 Privacy Policy

joy7 ("we", "us", "our") operates the online casino and sports betting platform available at joy7.io. This Privacy Policy describes how joy7 collects, uses, stores, shares, and protects personal information relating to individuals who register an account, visit the website, or otherwise interact with the joy7 platform ("you", "your", "player").

We are committed to handling your personal data responsibly and in accordance with applicable data protection principles. Our approach to privacy is grounded in transparency: we want you to understand exactly what data we hold, why we hold it, and what you can do about it.

This Privacy Policy applies to all players on the joy7 platform, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh, as well as any other location from which the platform is lawfully accessed.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and joy7.

joy7 collects several categories of personal data in the course of providing its services. The categories below represent all data we may hold about you at any given time, depending on your level of account activity and the services you have used.

2.1 Sensitive Data

joy7 does not intentionally collect special category data (such as health information, religious beliefs, or political opinions). The only exception is where a player voluntarily discloses such information in the context of a responsible gaming self-exclusion request or support enquiry, in which case the data is handled with heightened care and used only for the stated purpose.

joy7 collects personal data through the following channels and mechanisms:

• Direct collection: When you complete the registration form, submit KYC documents, deposit or withdraw funds, update your account profile, or contact our support team.
• Automated collection: When you browse or use the joy7 platform, our servers automatically log technical and usage data including your IP address, device identifiers, and session activity. This data is collected using cookies, web beacons, and similar tracking technologies (see Section 7).
• Payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a banking partner, that provider may share transaction confirmation data with joy7 to verify the payment.
• Identity verification services: If joy7 uses a third-party KYC or identity verification provider, that provider may supply verification outcomes and flagged data points back to joy7 as part of the KYC process.
• Fraud and security providers: joy7 may receive data from fraud-detection services that flag suspicious account activity, irregular betting patterns, or known bad-actor databases.

joy7 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing your identity, contact, financial, and account data is necessary to enter into and perform the contract with you (i.e., to operate your joy7 account, process deposits and withdrawals, and deliver the gaming services you have requested).
• Legal obligation: Processing for KYC verification, anti-money-laundering checks, record-keeping, and responsible gaming compliance is required to fulfil our legal and regulatory obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, service improvement, and responsible gaming monitoring is carried out on the basis of joy7's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — for example, to send you promotional communications — we will ask for it explicitly and provide a clear and easy mechanism for you to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

joy7 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your joy7 account, verifying your identity and age, and providing access to our casino games and sports betting services.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and our banking partners, and maintaining transaction records.
• KYC and compliance: Verifying your identity documents, conducting anti-money-laundering screening, and meeting our responsible gaming obligations.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of support interactions.
• Fraud and security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised account access.
• Platform improvement: Analysing usage patterns, game performance, and player behaviour (in aggregate and anonymised form where possible) to improve the joy7 product and user experience.
• Responsible gaming: Monitoring gaming activity to identify potential problem gambling indicators, enforcing self-exclusion and deposit limit settings, and reaching out to players whose patterns suggest distress.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal campaign messages where you have consented to receive them. You may opt out at any time by contacting our support team.
• Legal and regulatory: Complying with data retention requirements, responding to lawful requests from authorities, and enforcing our Terms and Conditions.

joy7 does not sell your personal data to third parties. We may, however, share your data with the following categories of recipient where necessary and lawful:

6.1 Payment Processors

Your financial data (payment method reference, transaction amounts, account holder name) is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank solely to the extent required to process your deposit or withdrawal transaction. These providers act as independent data controllers for the data they process in connection with your payment account.

6.2 Identity Verification Providers

Where joy7 uses a third-party KYC or identity verification service, your identity documents and personal details will be shared with that provider for verification purposes. Results are returned to joy7 and the provider retains data in accordance with its own privacy policy.

6.3 Fraud Prevention Services

joy7 may share account-level data with fraud prevention and risk management services to check for known fraudulent patterns, verify device fingerprints, or cross-reference accounts against watchlists. Data shared for this purpose is limited to the minimum necessary.

6.4 Game Providers

When you play a game hosted by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, technical session data (your player ID, bet amounts, and game outcomes) is transmitted to that provider's game server to operate the game. These providers do not receive your name, contact details, or payment information.

6.5 Legal and Regulatory Authorities

joy7 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where we have a good-faith belief that such disclosure is necessary to protect the rights, safety, or property of joy7, our players, or the public.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of joy7's business assets, personal data held by joy7 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting change to this Privacy Policy.

joy7 uses cookies and similar tracking technologies on its website to ensure the platform operates correctly, to remember your preferences, and to gather aggregate analytics data that helps us improve the service.

7.1 Types of Cookies We Use

• Strictly necessary cookies: These are required for core platform functionality, including maintaining your login session, remembering your language and currency settings, and ensuring the security of your account. These cannot be disabled without impairing your ability to use the platform.
• Analytics cookies: joy7 uses anonymised analytics tools to understand how players navigate the site, which pages receive the most traffic, and where users encounter difficulties. This data is collected and processed in aggregate form.
• Performance cookies: These cookies help us measure page load times, identify technical errors, and monitor the performance of our games and betting interfaces to ensure a smooth user experience.
• Preference cookies: These store your display preferences, such as game filter settings and notification preferences, so you do not need to reset them each time you visit.

7.2 Managing Cookies

You may manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core features of the joy7 platform. Disabling analytics or performance cookies will not affect your ability to place bets or access games.

joy7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are as follows:

After the applicable retention period has elapsed, data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained indefinitely for statistical purposes as it can no longer be linked to an individual player.

As a player on the joy7 platform, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team using the details in Section 15.

The joy7 platform is strictly for adults aged 21 years and above. joy7 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the joy7 platform or provide any personal information to us.

If joy7 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to joy7, please contact our support team immediately so that we can investigate and take appropriate action.

joy7 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and joy7 servers, ensuring that your credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted password storage using industry-standard one-way hashing algorithms. joy7 never stores your password in plain text and our support staff cannot retrieve your password — only reset it.
• Access controls restricting access to personally identifiable data to only those joy7 employees and contractors who require it to perform their specific job functions. All access is logged and audited.
• Firewall and intrusion detection systems monitoring our network infrastructure for signs of unauthorised access or abnormal activity.
• Regular security assessments including vulnerability scanning and periodic reviews of our data handling practices to identify and address potential weaknesses before they can be exploited.
• Incident response procedures that allow us to detect, contain, and respond to data security incidents promptly. In the event of a breach that is likely to result in risk to your rights and freedoms, we will notify you without undue delay.

While joy7 takes data security seriously and applies industry-standard protections, no method of electronic storage or transmission is entirely free from risk. We cannot guarantee absolute security but commit to applying all reasonable and proportionate measures to protect your data.

joy7 primarily stores and processes personal data on servers located within secure data centres. In some circumstances, personal data may be transferred to or accessed from locations outside Bangladesh — for example, when a third-party game provider's servers are located in another jurisdiction, or when a fraud-prevention service processes data internationally.

Where such international transfers occur, joy7 takes steps to ensure that appropriate safeguards are in place to protect your personal data, including:

• Using contractual protections (such as standard data protection clauses) with third-party recipients to ensure your data is handled to an equivalent standard.
• Transferring data only to recipients in jurisdictions that offer an adequate level of data protection, or where other appropriate safeguards exist.
• Limiting the data transferred internationally to the minimum necessary for the specific purpose.

By using the joy7 platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh, and that the legal framework governing data protection in those jurisdictions may differ from Bangladesh's applicable laws.

The joy7 platform may contain links to or integrations with third-party websites, payment services, or game providers. This Privacy Policy applies solely to data collected and processed by joy7 in connection with the joy7 platform. It does not cover the data practices of any third party.

When you click a link to an external website or interact with a third-party payment gateway such as bKash or Nagad, you are subject to the privacy policy of that third party. joy7 has no control over and accepts no responsibility for the privacy practices of any external party. We encourage you to read the privacy policies of any third-party services you use in connection with your joy7 account.

joy7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When a material change is made, we will update the effective date shown at the top of this page and, where the change is significant, we will take reasonable steps to notify active players — for example, by displaying a notice on the platform or sending a notification to your registered email address.

Your continued use of the joy7 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and may request closure of your account and deletion of your personal data (subject to applicable legal retention requirements) by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how joy7 has handled your personal data, please contact our support team using the details below. All privacy-related requests and enquiries are handled by our dedicated data team.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" or "Data Enquiry" in the subject line of your email so it is directed to the correct team promptly.
• Response time: We will acknowledge receipt within 5 business days and provide a full response within 30 calendar days.
• Identity verification: To protect the security of your data, we may ask you to verify your identity before processing an access, erasure, or portability request. This is to ensure we do not inadvertently disclose your data to an unauthorised party.

joy7 is committed to resolving all privacy concerns fairly and promptly. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.