Who Operates This Site
joya33 operates the platform at joya33.ws. When you create an account, place a bet, or contact our support team, you are sharing personal data with us. This policy tells you exactly what we do with that data — plainly, without legal jargon where we can avoid it.
If you have a question about anything in this document, write to us at [email protected]. Our 24/7 live chat team can also direct you to the right person.
Data We Collect
We collect data in three ways: information you give us directly, information generated by your activity on the site, and limited technical data from your device. The table below lists the main categories.
| Category | Examples | How it comes to us |
|---|---|---|
| Identity | Full name, date of birth, NID / Passport / Driving Licence number | Registration form; KYC submission |
| Contact | Mobile number, email address | Registration form; support tickets |
| Financial | bKash / Nagad / Rocket / Upay account numbers, transaction IDs, deposit and withdrawal amounts | Payment flow; transaction records |
| Account activity | Bet history, game sessions, bonus usage, login timestamps | Automatically logged when you play |
| Device & network | IP address, browser type, operating system, device model | Automatically collected on each visit |
| Communications | Chat transcripts, email threads, any documents you send us | When you contact support or raise a dispute |
We do not collect sensitive personal data such as religion, ethnicity, or health information. We do not store full payment card numbers — joya33 uses only mobile-money methods (bKash, Nagad, Rocket, Upay), so card data is never involved.
Why We Collect It
Running your account
We need your name, contact details, and date of birth to create and maintain your joya33 account, verify your age (18+), process deposits and withdrawals, and send you transaction confirmations. Without this data, we cannot provide the service at all.
Identity verification (KYC)
Before your first withdrawal, joya33 requires a valid government-issued document — National ID Card (NID), Passport, or Driving Licence. This is not optional. KYC lets us confirm you are who you say you are, prevent fraud, and comply with anti-money-laundering requirements. The review normally takes up to 6 hours.
Responsible gaming
We monitor account activity to identify signs of problem gambling — unusual deposit patterns, rapid loss escalation, or self-exclusion requests. We use this data to protect players, not to market to them.
Security and fraud prevention
IP addresses and device fingerprints help us detect duplicate accounts, bonus abuse, and unauthorised login attempts. When a suspicious session is flagged, we may freeze withdrawals and ask for additional verification.
Service improvement
Aggregated, anonymised play data tells us which games players enjoy and how the app performs on different Android versions. We use this to fix bugs and decide which new titles to add. This analysis never identifies individual players.
How We Store and Protect Your Data
All data is stored on servers protected by TLS encryption in transit and AES-256 encryption at rest. Access is restricted to staff who need it to do their job. We log all administrative access and review those logs regularly.
KYC documents are stored in an isolated environment separate from general account data. Staff handling KYC submissions complete mandatory data-handling training before getting access.
If you use the joya33 app (Android, v2.8.3), login tokens are stored in the device's secure storage, not in plain text. The app does not cache payment credentials locally.
When We Share Your Data
joya33 does not sell your personal data. We share it only in these situations:
- Payment processors — bKash, Nagad, Rocket, and Upay receive the minimum information needed to process your transaction (account number, amount, reference ID).
- Game providers — Ezugi, Evolution, Pragmatic Play, JILI, Habanero, Red Tiger, and Sexy Gaming receive a hashed player ID and bet data to run their games. They do not receive your name or mobile number.
- Legal and regulatory authorities — We must share data when ordered to do so by a court or competent authority. We will notify you if we are legally permitted to do so.
- Fraud prevention services — We may share device and transaction data with third-party fraud-detection tools under strict data-processing agreements.
Any third party receiving your data is contractually required to protect it at a standard equivalent to this policy and to use it only for the stated purpose.
Cookies and Tracking
joya33.ws uses cookies and similar local storage to keep you logged in between sessions, remember your language preference, and analyse site performance. We do not use third-party advertising cookies.
| Cookie type | Purpose | Can you opt out? |
|---|---|---|
| Essential | Session authentication, CSRF protection, load balancing | No — the site will not work without these |
| Functional | Saving your game lobby filters, deposit method preference | Yes — clearing browser storage removes them |
| Analytics | Page load times, error rates, feature usage (data is aggregated) | Yes — email us to opt out |
How Long We Keep It
We keep your account data for as long as your account is open and for a minimum of five years after closure, in line with standard financial record-keeping practice. KYC documents are retained for the same period. Chat and email records are kept for three years. Anonymised analytics data has no set deletion date.
If you request account closure, we will delete or anonymise personal data that we are not legally required to retain within 30 days of the request being processed.
Your Rights
As a joya33 player, you can:
- Access — ask for a copy of the personal data we hold about you.
- Correct — ask us to fix inaccurate data (for example, a mis-typed phone number).
- Delete — ask us to erase data we no longer need, subject to legal retention obligations.
- Restrict processing — ask us to pause how we use your data while a correction request is under review.
- Withdraw consent — where we rely on consent (for example, promotional emails), you can withdraw at any time without affecting past processing.
- Complain — if you believe we have mishandled your data, you can raise a complaint directly with us at [email protected].
We aim to respond to all data rights requests within 15 business days. We may ask you to verify your identity before acting on a request, to make sure we do not share your data with someone else.
Minors
joya33 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us at [email protected] immediately. We will close the account and delete the data as quickly as possible.
Age verification is part of the KYC process. Any account that cannot confirm the holder is 18+ will be suspended until valid documents are provided.
Changes to This Policy
We update this privacy policy when our data practices change — for example, when we add a new payment method or game provider. The "Last updated" date at the top of this page always reflects the most recent version.
If we make a significant change (such as sharing data with a new category of third party), we will notify active players by email or by a notice inside the platform at least 7 days before the change takes effect. Continuing to use joya33 after that date means you accept the updated policy.
Reach Us
For any question about this privacy policy or your personal data, the fastest way to reach us is through the 24/7 live chat inside your joya33 account. For written requests — including data access, correction, or deletion — email us directly:
- Email: [email protected]
- Subject line: Privacy Request – [your registered mobile number]
Include your registered mobile number and a brief description of your request. We will acknowledge receipt within 24 hours and aim to resolve the matter within 15 business days.
Ready to play? Create your joya33 account — it takes under two minutes.