hjaya9 Privacy Policy

1. Data We Collect

hjaya9 collects personal data through several channels: directly from you when you register an account, make a deposit, or contact support; automatically through your use of the Platform; and, in limited circumstances, from third-party identity verification and payment service providers. The categories of personal data we process are as follows.

1.1 Account Registration Data

When you create a hjaya9 account, we collect your full legal name, date of birth, residential address in Bangladesh (including district and division), email address, and mobile number associated with your preferred payment method (bKash, Nagad, Rocket, or Upay). This information is mandatory — the Platform cannot create or operate an account without it.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may collect copies of government-issued identity documents such as your National ID Card (NID), passport, or driver's licence, as well as proof-of-address documents such as utility bills, bank statements, or mobile financial service statements dated within 90 days. This data is used solely for age and identity verification purposes.

1.3 Financial Transaction Data

We record details of all deposits and withdrawals processed through your hjaya9 account, including transaction amounts in BDT (৳), timestamps, payment method references (bKash/Nagad/Rocket wallet numbers are stored in partial/masked format), and transaction status. Full payment credential details are processed directly by the respective payment service providers and are not stored on hjaya9 servers.

1.4 Gameplay and Betting Activity Data

hjaya9 records all game sessions, bet placements, wager amounts, game outcomes, bonus redemptions, and account balance movements. This data is used for account management, dispute resolution, fraud prevention, responsible gaming monitoring, and platform analytics.

1.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session duration, pages visited, clickstream data, and approximate geolocation (country/city level, derived from IP address). This data is used for security monitoring, fraud detection, and service optimisation.

2. How We Use Your Data

hjaya9 processes your personal data only for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which we process personal data are as follows:

• Account management: Creating, maintaining, and operating your hjaya9 player account, including processing deposits, withdrawals, and bonus credits.
• Identity and age verification: Confirming that you are aged 18 or above and that the identity you have provided is genuine, as required by our responsible gaming and anti-fraud policies.
• Fraud prevention and security: Detecting and investigating suspicious activity, unauthorised access attempts, multi-accounting, bonus abuse, and potential money laundering or financial crime.
• Responsible gaming monitoring: Tracking deposit patterns, session durations, and betting behaviour to identify players who may be experiencing gambling-related harm, and to apply self-exclusion or account restrictions where appropriate.
• Customer support: Responding to queries, resolving disputes, and providing account assistance via live chat and email.
• Legal and regulatory compliance: Meeting our obligations under applicable law, including anti-money laundering (AML) requirements, and responding to lawful requests from competent authorities.
• Service improvement and analytics: Understanding how players use the Platform in aggregate to improve game offerings, navigation, and overall user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaigns (Eid, Pohela Boishakh, BPL season) to players who have opted in to receive marketing communications. You may opt out at any time.

3. Legal Basis for Processing

hjaya9 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract we have with you — i.e., to operate your account, process payments, and provide access to games. Without this processing, we cannot fulfil our obligations to you as a player.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification obligations, and responses to lawful requests from regulatory bodies or law enforcement authorities.
• Legitimate interests: Processing for fraud detection, security monitoring, platform analytics, and service improvement, where those interests are not overridden by your rights and interests as a data subject.
• Consent: Processing for marketing communications, where we have obtained your explicit opt-in consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing & Third Parties

hjaya9 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary.

4.1 Payment Service Providers

To process deposits and withdrawals, we share relevant transaction details with payment service providers including bKash, Nagad, Rocket, and Upay. These providers receive only the information required to execute the transaction and are bound by their own privacy and data security obligations.

4.2 Game Software Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier (not your name or contact details) to facilitate game session management, RNG certification audits, and return-to-player reporting. No directly identifiable personal data is shared with game studios without your explicit consent.

4.3 Identity Verification Partners

Where automated KYC verification tools are used, we may share document images and identity data with accredited identity verification service providers. These partners are engaged under strict data processing agreements and are prohibited from using your data for any purpose other than the specific verification task.

4.4 Law Enforcement and Regulatory Authorities

hjaya9 will disclose personal data to competent authorities — including law enforcement agencies and financial intelligence units — where required to do so by applicable law, valid legal process, or to protect the legal rights and safety of the Company, its staff, or other players. We will notify you of such disclosure where permitted by law to do so.

5. Cookies & Tracking Technologies

hjaya9 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your web browser. They allow the Platform to recognise your device across sessions, maintain your login state, personalise your experience, and collect analytics data.

5.1 Types of Cookies Used

• Essential cookies: Required for core Platform functionality — login sessions, account authentication, and security tokens. These cannot be disabled without disrupting Platform access.
• Functional cookies: Store your preferences such as language settings (English), preferred game lobby view, and notification preferences.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform — pages visited, session duration, device type, and clickstream patterns. This data is used to improve Platform design and game availability.
• Security cookies: Support fraud detection by identifying unusual patterns of access, multiple simultaneous sessions, or behaviour consistent with bot activity or account takeover attempts.

5.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Samsung Internet, and the default Android/iOS browsers widely used in Bangladesh) allow you to view, block, and delete cookies on a per-site basis. Please note that disabling essential cookies will prevent you from logging in to your hjaya9 account. For detailed instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

6. Data Retention

hjaya9 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The key retention periods applied by hjaya9 are summarised below.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data (for example, aggregate betting statistics with no individual identifiers) may be retained indefinitely for platform analytics purposes.

7. Your Privacy Rights

As a player on the hjaya9 platform, you hold the following rights in relation to your personal data. hjaya9 will respond to all valid rights requests within 30 days of receipt. To exercise any of the following rights, contact our support team via live chat from within your account dashboard, or email us at the address published on this site.

• Right of access: You have the right to request a copy of the personal data hjaya9 holds about you, together with information about how it is being used and on what legal basis.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For name and date-of-birth corrections, supporting identity documentation will be required.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. Please note that certain data must be retained to comply with legal obligations (e.g., AML record-keeping) and cannot be deleted on request during the mandatory retention period.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being investigated — you may request that we restrict processing of your data to storage only.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object to marketing: You have an unconditional right to object to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, hjaya9 will cease marketing communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

8. Data Security

hjaya9 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational security measures include:

• SSL/TLS encryption: All data in transit between your browser or mobile device and hjaya9 servers is encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser's address bar when accessing the Platform.
• Data encryption at rest: Sensitive personal data fields — including identity document references and financial identifiers — are encrypted in our databases using AES-256 encryption.
• Access controls: Access to personal data within hjaya9's internal systems is restricted to staff with a legitimate business need, governed by role-based access controls and authenticated via multi-factor authentication (MFA).
• Intrusion detection: Automated systems monitor Platform traffic and server activity for anomalies consistent with attempted unauthorised access, SQL injection, or other attack vectors.
• Regular security reviews: hjaya9 conducts periodic internal reviews of its data security practices and works with external security consultants to identify and address vulnerabilities.
• Staff training: All hjaya9 staff with access to personal data receive data protection training and are bound by confidentiality obligations.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, hjaya9 will notify affected players without undue delay in accordance with applicable legal requirements.

9. Children's Privacy

The hjaya9 Platform is strictly intended for adults aged 18 years and above. hjaya9 does not knowingly collect, process, or retain personal data relating to individuals under the age of 18. Age verification controls are applied at account registration and may be reinforced by KYC document checks at any point during the account lifecycle.

If hjaya9 becomes aware — through our own verification processes, a complaint, or any other means — that an account has been created by or on behalf of a minor, we will immediately close the account, void any gameplay activity, and securely delete all personal data associated with that account, subject only to any legal retention obligations that may apply.

Parents and guardians in Bangladesh who are concerned about a minor accessing the hjaya9 Platform are encouraged to contact our support team via live chat. Additionally, device-level parental control tools available on Android and iOS platforms can be used to restrict access to online gambling services.

10. Changes to This Policy

hjaya9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. All changes will be published on this page, and the effective date at the top of the document will be updated accordingly.

Where changes are material — meaning they significantly affect how we collect or use your personal data — hjaya9 will notify registered players by email to their registered address or by a notice displayed on the Platform at login. Your continued use of the hjaya9 Platform following a notified material change constitutes your acknowledgement of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how hjaya9 protects your personal data. If you have questions about any provision of this Policy, please contact our support team via live chat from within your account dashboard, or write to us at the email address listed in the footer of this page.