jya7 Privacy Policy —
How We Protect Your
Personal Data

1. Introduction

jya7 is an online casino and sports betting platform operated for players in Bangladesh and other markets where the service is accessible. As part of delivering a safe, compliant, and personalised betting experience, jya7 necessarily collects and processes certain personal data about its players.

This Privacy Policy sets out, in clear and accessible English, the full scope of jya7's data practices — what we collect, why we collect it, how we protect it, and what rights you have as a data subject. We are committed to processing personal data lawfully, fairly, and transparently, and to retaining it only for as long as genuinely necessary.

This Policy applies to all personal data collected via the jya7 website (jya7.io), the jya7 mobile-optimised interface, customer support communications (including live chat and email), and any other channel through which players interact with jya7. It does not apply to third-party websites that may be linked from the Platform — those sites operate under their own independent privacy policies.

If you have any questions about this Privacy Policy or how jya7 handles your data, you may contact the jya7 Data Protection team at [email protected] at any time.

2. Data We Collect

jya7 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration Data

When you create a jya7 account, we collect the information you provide in the registration form, including:

• Full legal name
• Date of birth (to verify that you meet the 21+ age requirement)
• Mobile phone number (used as your primary account identifier and for two-factor authentication)
• Preferred username
• Account password (stored in hashed, non-reversible form — never in plain text)
• City or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

2.2 Identity Verification (KYC) Data

When you request a withdrawal or when jya7 initiates a verification check, we may collect:

• Scanned or photographed copy of a government-issued identity document (National ID Card, Passport, or Birth Certificate)
• Selfie photograph taken at the time of verification request
• Proof of payment method ownership (e.g., screenshot of bKash, Nagad, or Rocket account showing your registered mobile number)

2.3 Financial Transaction Data

When you deposit or withdraw funds, jya7 records:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer)
• Mobile number or bank account number associated with the payment method
• Transaction amounts in BDT (৳)
• Transaction timestamps (Bangladesh Standard Time, UTC+6)
• Transaction reference numbers generated by the payment provider

2.4 Gameplay and Betting Data

The Platform automatically records data associated with your gaming activity, including:

• Game sessions played, including game title, provider, start time, and end time
• Bet amounts placed on casino games and sports markets
• Game outcomes and resulting account balance changes
• Sports betting selections, odds accepted, and settlement results
• Bonus claims, wagering progress, and bonus expiry events

2.5 Technical and Device Data

When you access the Platform, our servers automatically collect:

• IP address (used for geolocation verification and fraud detection)
• Browser type and version
• Operating system and device type
• Session duration and pages visited within the Platform
• Device fingerprint (a pseudonymous identifier used to detect duplicate account registrations)

2.6 Support and Communication Data

When you contact jya7 via live chat, email, or any other support channel, we record the content of that communication, including any personal information you choose to share within the message, together with the timestamp and channel of the interaction.

3. How We Use Your Data

jya7 uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and operate your jya7 account, including processing login requests, managing account settings, and delivering account-related notifications.
• Age and Identity Verification: To confirm that you are at least 21 years of age and that your identity is consistent with the information provided at registration, in compliance with our responsible gaming and anti-fraud obligations.
• Payment Processing: To process deposits, validate withdrawal requests, match transactions to your account, and detect potentially fraudulent or third-party payment activity.
• Responsible Gaming Compliance: To monitor your gambling activity against any deposit limits, loss limits, or session time limits you have set, and to identify patterns that may indicate problem gambling behaviour requiring intervention.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorised access, account takeover, multi-accounting, money laundering, and other forms of fraudulent or abusive activity on the Platform.
• Customer Support: To respond to your queries, complaints, and support requests efficiently and accurately.
• Platform Improvement: To analyse aggregated, anonymised gameplay and navigation data to improve the Platform's performance, user experience, and game selection. This analysis never involves individually identifiable data.
• Promotional Communications: Where you have opted in to receive marketing communications, to send you relevant promotional offers, bonus notifications, and platform updates. You may opt out of marketing communications at any time by contacting [email protected].
• Legal Compliance: To retain records as required by applicable anti-money-laundering, financial crime prevention, and responsible gaming regulations.

4. Legal Basis for Processing

jya7 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing described in this Policy is necessary to perform the contract between you and jya7 — i.e., to provide you with the gaming and betting services you have registered to use. Without this processing, jya7 could not operate your account.
• Legitimate Interests: jya7 processes certain data categories — particularly technical and device data, fraud detection signals, and aggregated analytics — on the basis of its legitimate interests in operating a secure and compliant platform, provided those interests are not overridden by your privacy rights.
• Legal Obligation: jya7 is required by applicable law to retain certain financial transaction records and identity verification documents for defined periods. Processing of this data is mandatory for legal compliance and cannot be refused by either party.
• Consent: Where jya7 processes data for optional purposes — such as sending you personalised marketing communications — this processing is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Third Parties

jya7 does not sell, rent, or commercially transfer your personal data to any third party. Data is shared only in the following strictly defined circumstances:

All third-party service providers who receive your personal data are contractually required to process it solely for the purpose specified in the table above, to maintain appropriate security standards, and to delete the data once their engagement with jya7 ends or their processing purpose is fulfilled.

6. Cookies & Tracking Technologies

jya7 uses cookies and similar browser-based tracking technologies to ensure the Platform functions correctly and to improve the player experience. The following cookie categories are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to operate. They maintain your login session, remember your language preference, and ensure security features function correctly. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences within the Platform — such as your preferred game view layout or notification settings — so you do not have to re-configure them on each visit.
• Analytics Cookies: jya7 uses pseudonymised analytics data to understand how players navigate the Platform, which games are most popular, and where usability improvements are needed. This data is aggregated and does not identify individual players by name.
• Security Cookies: These are used to detect and prevent fraudulent login attempts, identify unusual account activity, and protect against automated abuse of the Platform.

jya7 does not use third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use certain Platform features.

7. Data Retention

jya7 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any legal obligations that require longer retention. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which cannot be linked back to any individual player) may be retained indefinitely for statistical and platform improvement purposes.

8. Data Security

jya7 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and jya7 servers is encrypted in transit using industry-standard SSL/TLS protocols.
• At-Rest Encryption: Sensitive data fields — including identity documents, payment method details, and account credentials — are encrypted at rest in jya7's database infrastructure.
• Password Hashing: Account passwords are never stored in plain text. jya7 uses a secure, salted hashing algorithm to store password credentials in a non-reversible format.
• Access Controls: Access to production systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and audited.
• Penetration Testing: jya7's platform infrastructure undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to player rights and freedoms, jya7 will notify affected players without undue delay and will take immediate remediation action.

9. Your Data Rights

As a player whose personal data is processed by jya7, you have the following rights with respect to that data. To exercise any of these rights, contact jya7 at [email protected] with a clear description of your request.

jya7 will acknowledge data rights requests within 5 business days and will fulfil verified requests within 30 calendar days. Where a request is complex or involves a large volume of data, jya7 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it. jya7 reserves the right to verify your identity before processing any data rights request to ensure that data is not disclosed to an unauthorised party.

10. Children & Minors

The jya7 Platform is strictly prohibited for use by any person under the age of 21. jya7 does not knowingly collect, store, or process personal data relating to individuals under the age of 21 at any point in its operations.

If jya7 has reason to believe that a registered player is under 21 years of age — whether identified through KYC verification, parental notification, or any other means — jya7 will immediately suspend the relevant account, void all associated bets and bonuses, and take steps to return any deposited Real Money Funds to the payment method from which they originated. All personal data associated with the underage account will be flagged and processed solely for the purpose of resolving the closure, after which it will be securely deleted in accordance with jya7's data retention obligations.

11. International Data Transfers

jya7 is operated for players in Bangladesh, and the majority of data processing takes place within the Platform's primary server infrastructure. However, certain third-party service providers engaged by jya7 — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may be headquartered or operate servers in jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party provider located in another jurisdiction, jya7 ensures that appropriate safeguards are in place before any such transfer takes place. These safeguards may include:

• Contractual data processing agreements incorporating standard security and confidentiality obligations binding on the receiving party
• Requirements that the recipient maintain security standards at least equivalent to those applied by jya7 within its own infrastructure
• Restrictions limiting the recipient's use of the transferred data solely to the specific service being provided to jya7
• Obligations on the recipient to delete transferred data upon termination of the service engagement

By using the jya7 Platform, you acknowledge that your pseudonymised gameplay data may be transmitted to game providers in other countries as a technical necessity of delivering licensed game content, and you consent to such transfers subject to the safeguards described above. At no point is your full name, contact information, or payment details shared with game providers — only pseudonymous session identifiers are transmitted.

12. Third-Party Links & Services

The jya7 Platform may from time to time display references to third-party payment service providers — such as bKash, Nagad, Rocket, and Upay — as part of the deposit and withdrawal process. When you initiate a payment transaction, you will interact with the payment provider's own interface or application, which is operated independently of jya7.

jya7 is not responsible for the privacy practices or data handling policies of any third-party payment provider, game studio, or any other external service you may interact with in connection with your use of the Platform. Each third party operates under its own independent privacy policy. We strongly encourage you to review the privacy policy of any third-party service before submitting personal or financial information to it.

jya7 does not embed third-party advertising networks, social media tracking pixels, or cross-site behavioural advertising technologies within the Platform. Your browsing activity on jya7.io is not tracked or profiled by external advertising companies.

13. Changes to This Privacy Policy

jya7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in Platform operations, applicable law, regulatory guidance, or data processing practices. The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made.

Where a proposed amendment materially affects how jya7 processes your personal data — for example, a change to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — jya7 will provide advance notice of the change by:

• Sending an email notification to the address registered to your jya7 account at least 14 days before the amendment takes effect
• Displaying a prominent in-Platform notice on your account dashboard for the same 14-day notice period

If you do not agree with a material amendment to this Privacy Policy, you have the right to close your jya7 account before the amendment takes effect by contacting customer support. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

Minor, non-material changes — such as clarifications of existing language, corrections of typographical errors, or formatting adjustments — may be made without advance notice. The current version of this Privacy Policy is always available at jya7.io/privacy-policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jya7 handles your personal data, our Data Protection team is available to assist you. You may reach us via the following channel:

You may also use jya7's live chat support channel, available directly within the Platform after login, for general privacy enquiries. For formal data rights requests — including access, erasure, rectification, or portability requests — we recommend submitting your request by email so that a written record is created for both parties.

Please note that all email addresses displayed on this page are shown as plain text only and are not clickable links. Please copy the address manually into your email client when composing your message.