Privacy Policy – Your Data at ju9

ju9 collects personal data in the following categories. We collect only what is necessary for the purposes set out in this Policy and do not process personal data in a manner incompatible with those purposes.

• Identity Data: Full legal name, date of birth, gender, and copies of government-issued identity documents (e.g., National ID card, passport) submitted during the account verification process.
• Contact Data: Mobile phone number, email address, and residential address in Bangladesh (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Financial Data: Mobile banking account identifiers for bKash, Nagad, Rocket, and Upay; bank account references for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and similar institutions; transaction history including deposit amounts, withdrawal requests, and currency (BDT / ৳).
• Account & Activity Data: Username, encrypted password hash, login timestamps, session duration, betting history, game activity, bonus claims, and promotional opt-ins.
• Device & Technical Data: IP address, device type, operating system version, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, clicks, scroll depth, time on page, game sessions initiated, search queries within the Platform, and referral source.
• Communications Data: Records of your correspondence with our customer support team, including live chat transcripts, email exchanges, and complaint records.

We do not collect special categories of personal data (such as health data, biometric data, or data revealing racial or ethnic origin) unless explicitly required for a specific compliance purpose and with your prior consent.

ju9 collects personal data through the following channels:

• Direct submission: Data you provide when you create an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotional offer.
• Automated technologies: Device data, IP addresses, and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access and interact with the Platform.
• Third-party sources: Identity verification and fraud screening providers may return additional data about you as part of the verification process. Payment processors may provide transaction confirmation data. We may also receive data from analytics partners to help us understand Platform performance.

ju9 processes your personal data for the following purposes, each of which rests on a specific legal basis:

• Account registration and management — to create and maintain your player account, verify your identity, and manage your account settings. Legal basis: performance of contract.
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels. Legal basis: performance of contract.
• Identity verification and age confirmation — to confirm that you are at least 21 years of age and that the identity you have provided is genuine. Legal basis: legal obligation and performance of contract.
• Fraud detection and prevention — to identify and investigate suspicious account behaviour, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. Legal basis: legitimate interest and legal obligation.
• Responsible gaming monitoring — to identify patterns of gambling behaviour that may indicate harm and to give effect to self-exclusion or deposit limit requests. Legal basis: legal obligation and legitimate interest.
• Customer support — to respond to your queries, complaints, and account-related requests. Legal basis: performance of contract and legitimate interest.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time by contacting [email protected].
• Platform improvement and analytics — to understand how users interact with the Platform, identify technical issues, and develop new features. Legal basis: legitimate interest.
• Legal compliance — to fulfil obligations under applicable law, respond to lawful requests from competent authorities, and defend legal claims. Legal basis: legal obligation.

ju9 does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of third parties strictly as necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, and partner banks process financial transactions on our behalf. They receive only the data necessary to execute and confirm payments.
• Identity and age verification providers: Third-party KYC (Know Your Customer) services that verify identity documents and perform age checks. These providers are contractually bound to use your data solely for verification purposes.
• Fraud prevention and security services: Specialist providers that help us detect and prevent fraud, money laundering, and account abuse. Data shared is limited to what is necessary for risk assessment.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to facilitate game delivery and verify game outcomes. These providers do not receive your identity or financial data.
• Analytics providers: We use anonymised and aggregated usage data with analytics partners to understand Platform performance. No personally identifiable information is shared for analytics purposes.
• Legal and regulatory authorities: We may disclose personal data to competent authorities where required to do so by applicable law, court order, or lawful government request.

All third-party service providers engaged by ju9 are required to enter into data processing agreements that bind them to process your data only on our documented instructions, maintain appropriate security standards, and not use your data for their own purposes.

ju9 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ju9 Platform.
• Encryption of sensitive data fields (including financial account references and identity document copies) at rest within our database infrastructure.
• Password hashing using industry-standard algorithms. Plaintext passwords are never stored by ju9.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to all players and enforced for all ju9 administrative staff.
• Automated anomaly detection systems that flag unusual login patterns, IP changes, and suspicious transaction activity in real time.

ju9 retains your personal data for as long as your account is active and for a minimum period of five (5) years following account closure. This retention period is set to allow us to fulfil our legal, regulatory, fraud prevention, and dispute resolution obligations.

• Financial transaction records and identity verification documents are retained for a minimum of five years from the date of the relevant transaction or verification event.
• Customer support communications are retained for three years from the date of the last interaction in a given support thread.
• Device and usage data used for analytics is retained in anonymised and aggregated form and is not subject to the same deletion timeline as personally identifiable data.
• Where you have exercised a right to erasure and we are not under a legal obligation to retain the data, we will action your deletion request within 30 days and confirm completion.
• Data retained solely on the basis of your consent (such as marketing preferences) will be deleted promptly upon withdrawal of consent.

The ju9 Platform is strictly intended for adults aged 21 and above. ju9 does not knowingly collect or process personal data belonging to persons under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately suspend the relevant account, delete all associated personal data, and reverse any financial transactions connected to that account.

If you have reason to believe that a person under the age of 21 has registered an account or provided personal data to ju9, please notify us immediately at [email protected] so that we can investigate and take prompt action.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way ju9 handles your personal data, please contact our support team. We aim to acknowledge all privacy-related enquiries within 5 business days and resolve them within 30 days of receipt.

Contact email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" or "Privacy Complaint" in the subject line of your message, along with your registered username and a clear description of your request or concern. All requests are handled in accordance with Bangladesh Standard Time (BST, UTC+6) business hours.