yoya9 Privacy Policy

This Privacy Policy ("Policy") is issued by yoya9 ("we", "us", "our", or the "Platform") and applies to all personal data collected from individuals ("you", "Player", or "User") who access, register on, or interact with the yoya9 online betting and casino platform at yoya9.io and any associated mobile or web-based applications.

yoya9 is committed to protecting the privacy of all players who use our platform, particularly those based in Bangladesh. This Policy explains in plain, unambiguous English precisely what data we collect, why we collect it, how we store and protect it, and the choices and rights available to you.

This Policy should be read alongside the yoya9 Terms & Conditions and our Responsible Gaming policy. By registering an account or continuing to use the yoya9 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection law, yoya9 is the data controller responsible for the personal data collected through the platform. As data controller, yoya9 determines the purposes for which, and the means by which, personal data is processed.

All data-related enquiries, access requests, correction requests, and erasure requests should be directed to the yoya9 Privacy Team. Contact details are provided in Section 15 (Contact Us) of this Policy. yoya9 is committed to responding to all data subject requests within 30 calendar days of receipt of a verified request.

yoya9 collects personal data in the following categories, depending on your level of interaction with the platform:

yoya9 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for identity verification purposes under applicable law, and only with your explicit consent.

yoya9 collects personal data through the following means:

• Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal via bKash, Nagad, Rocket, Upay or bank transfer, contact our support team, or update your account profile.
• Automated technologies: As you browse and interact with the yoya9 platform, we automatically collect Technical Data and Usage Data using cookies, server logs, pixel tags, and similar tracking technologies. See Section 8 (Cookies & Tracking) for full details.
• Third-party sources: We may receive data about you from payment service providers (such as bKash and Nagad) to confirm the status of transactions, from identity verification service providers to complete KYC checks, and from fraud prevention agencies to protect the platform and its users.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, we may consult publicly available sources such as sanctions lists or court records published under Bangladesh law.

yoya9 uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your yoya9 account, including verifying your identity and eligibility to use the platform (21+ requirement).
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and supported bank transfers.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and other legal duties applicable under Bangladesh law.
• Platform delivery and improvement: To operate the betting and casino platform, personalise your experience, troubleshoot technical issues, and improve platform performance based on aggregated usage analytics.
• Responsible gaming: To administer deposit limits, loss limits, session time controls, cooling-off periods, and self-exclusion requests in accordance with your instructions and yoya9's responsible gaming obligations.
• Marketing and promotions: To send you information about yoya9 promotions, bonuses, cricket betting offers, and platform updates — but only where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the yoya9 platform.
• Dispute resolution: To resolve disputes relating to bets, account balances, and platform interactions in a fair and evidenced manner.

yoya9 does not use automated decision-making or profiling in a manner that produces legal or similarly significant effects on players, except where required to do so for AML compliance or fraud prevention, in which case you have the right to request human review of any such decision.

yoya9 processes your personal data on the following legal bases:

• Contract performance: Processing that is necessary to deliver the services described in the yoya9 Terms & Conditions — including account management, payment processing, and bet settlement — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with AML, KYC, and other mandatory legal obligations applicable under the laws of Bangladesh is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, dispute resolution, and improvement of platform services is carried out on the basis of yoya9's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications is carried out on the basis of your consent. You may withdraw consent at any time by contacting support@yoya9.io or updating your communication preferences in your account settings.

yoya9 does not sell your personal data to any third party. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners receive the minimum financial data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC and AML service providers receive identity and documentation data solely for the purpose of completing mandatory verification checks.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised technical session data necessary to deliver game content. No personally identifiable financial data is shared with game providers.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts in Bangladesh where we are required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of yoya9, our players, or the public.
• Professional advisers: Lawyers, auditors, and accountants who are bound by confidentiality obligations may access limited personal data where necessary to provide professional services to yoya9.

All third parties with whom yoya9 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was shared.

yoya9 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver a more relevant experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session management cookies that keep you logged in during a betting session. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps yoya9 improve the platform experience for Bangladesh players.
• Functionality cookies: Used to remember your preferences, such as language settings, preferred payment method (e.g., bKash or Nagad), and display settings.
• Targeting and marketing cookies: Used to track platform visits and interactions in order to deliver more relevant promotional content. These are only activated where you have provided consent.

You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the yoya9 platform. For full details on the cookies in use, please contact support@yoya9.io.

yoya9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the yoya9 platform.
• Encryption of sensitive personal data stored at rest on yoya9 servers.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of the platform infrastructure.
• Two-factor authentication (2FA) available for all player accounts.
• Automated fraud detection systems monitoring account activity for signs of unauthorised access or suspicious behaviour.

While yoya9 takes all reasonable precautions, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying yoya9 immediately if you believe your account has been compromised.

yoya9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

As a yoya9 player and data subject, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of all personal data yoya9 holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update certain details directly within your yoya9 account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations (see Section 10).
• Right to restriction: You have the right to request that processing of your personal data be restricted in certain circumstances, for example while the accuracy of data is being verified following a rectification request.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data on the basis of legitimate interests, and the right to object to processing for direct marketing purposes at any time without giving reasons.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact the yoya9 Privacy Team at support@yoya9.io with the subject line "Privacy Request". yoya9 will respond to all verified requests within 30 calendar days. In some cases, we may need to verify your identity before processing a request to protect against fraudulent submissions.

The yoya9 platform is strictly intended for adults aged 21 years and older. yoya9 does not knowingly collect personal data from any person under the age of 21.

If yoya9 becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all personal data associated with the account will be deleted as promptly as legally permissible, and any funds deposited will be returned to the verified account holder of the payment instrument used.

If you believe that a person under the age of 21 has registered an account on the yoya9 platform, please contact us immediately at support@yoya9.io so that we can take appropriate action without delay.

yoya9 primarily processes personal data of Bangladesh players within data centres serving the Bangladesh and South Asia region. However, certain service providers — including game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may process technical session data on servers located outside Bangladesh.

Where personal data is transferred internationally, yoya9 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy. Such safeguards include contractual data-processing agreements with all international service providers specifying the purposes for which data may be used and the security standards to be maintained.

yoya9 does not transfer personally identifiable financial data — including bKash account numbers, Nagad account numbers, or BDT transaction records — to servers outside Bangladesh except where strictly required to complete a payment transaction with the player's chosen payment provider.

yoya9 reserves the right to update or amend this Privacy Policy at any time. The effective date of the current version is displayed at the top of this document and in the last-updated badge above the policy text.

Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — yoya9 will provide advance notice to all registered players via email to the address on file, and will display a prominent notice on the platform for a minimum of 14 days before the changes take effect.

Your continued use of the yoya9 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to a revised Policy, you must cease using the platform and may request account closure by contacting the support team.

If you have any question about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how yoya9 handles your personal data, please contact the yoya9 Privacy Team using the details below:

• Email: support@yoya9.io — please use the subject line "Privacy Request" for all data-related enquiries.
• Response time: yoya9 aims to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days of receiving a verified request.
• Language: All privacy requests and responses are conducted in English.

yoya9 takes all privacy concerns seriously. If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or consumer protection body under the laws of Bangladesh.