joywin Privacy Policy

1. Introduction

joywin ("we", "us", "our") is committed to protecting the personal data of every player who uses the joywin platform at joywin.club ("the Website"). This Privacy Policy describes in detail the types of personal information we collect, the purposes for which that information is used, the circumstances under which it may be shared with third parties, the security measures we apply to protect it, and the rights you hold in relation to your personal data.

This Privacy Policy applies to all personal data collected through the joywin Website, including data provided during account registration, data generated through platform activity (deposits, wagers, game play), data collected automatically through cookies and similar technologies, and data provided when you contact our customer support team.

This policy should be read alongside the joywin Terms & Conditions, which governs your overall use of the platform. Both documents together constitute the primary agreement between you and joywin regarding your account and your data.

2. Data We Collect

joywin collects the following categories of personal data in connection with the provision of its services:

joywin applies the principle of data minimisation — we collect only the personal data that is necessary for the specific purpose for which it is collected. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law and with your explicit consent.

3. How We Collect Data

joywin collects personal data through the following means:

3.1 Direct Provision by You

The majority of the personal data we hold is provided directly by you when you: register a joywin account; complete identity or age verification; make a deposit or request a withdrawal; contact our customer support team; or respond to a survey or promotional communication.

3.2 Automated Technical Collection

When you visit joywin.club, our servers automatically collect certain technical data including your IP address, the type of device and browser you are using, the pages you visit, and the duration of your session. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

3.3 Payment Service Providers

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners may share transaction confirmation data with joywin in order to credit or debit your account balance. joywin does not receive your full payment credentials from these providers — only the data required to confirm transaction status and match it to your account.

3.4 Third-Party Verification Services

For the purposes of identity verification and fraud prevention, joywin may use third-party KYC service providers to cross-reference the identity information you provide with publicly available data sources. These providers operate under strict data processing agreements with joywin and are not permitted to use your data for any purpose other than identity verification.

4. How We Use Your Data

joywin uses the personal data we collect for the following purposes:

• Account creation and management: To set up and maintain your joywin account, verify your identity and age, and manage your account settings and preferences.
• Transaction processing: To process deposits, withdrawals, and bonus credits in Bangladeshi Taka (৳) via your nominated payment methods including bKash, Nagad, and Rocket.
• Customer support: To respond to queries, resolve disputes, investigate complaints, and provide technical assistance via our support team at [email protected].
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, and other prohibited conduct as defined in the joywin Terms & Conditions.
• Responsible gaming compliance: To monitor account activity for signs of problem gambling behaviour and to apply responsible gaming tools — including deposit limits, cooling-off periods, and self-exclusion — in accordance with our Responsible Gaming Policy.
• Legal and regulatory compliance: To meet anti-money-laundering (AML), Know Your Customer (KYC), and other applicable legal obligations that require retention or disclosure of account and transaction records.
• Platform improvement: To analyse aggregated usage data for the purpose of improving platform performance, game selection, and user experience.
• Communications: To send you account-related notifications (deposit confirmations, withdrawal status updates, security alerts) and, where you have given consent, promotional communications about offers, bonuses, and new game releases.

5. Legal Basis for Processing

joywin processes personal data on the following legal bases:

1. Contractual necessity: Processing is necessary to perform the contract between you and joywin — specifically, to operate your account, process transactions, and deliver the betting and gaming services you have requested.
2. Legal obligation: Processing is necessary to comply with applicable legal obligations, including anti-money-laundering regulations, age verification requirements, and financial record-keeping obligations.
3. Legitimate interests: Processing is necessary for joywin's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general platform analytics, provided those interests are not overridden by your rights and interests.
4. Consent: Where processing is not covered by the above bases — for example, the sending of marketing communications or the use of non-essential cookies — joywin will seek your explicit consent before processing commences. You may withdraw consent at any time without affecting the legality of processing that occurred prior to withdrawal.

6. Data Sharing & Third Parties

joywin does not sell or rent your personal data to any third party. We may share your data only in the following limited and controlled circumstances:

6.1 Payment Service Providers

Your financial data is shared with payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to the extent necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently responsible for data they process on their own platforms.

6.2 Identity Verification Partners

Where required to complete KYC verification, identity data may be shared with specialist third-party verification service providers. These providers are contractually bound to use your data solely for verification purposes and to maintain appropriate data security standards.

6.3 Game Content Providers

Certain technical session data (e.g., player session tokens, game round IDs) is shared with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable the delivery of their games within the joywin platform. These providers do not receive your full identity or financial data.

6.4 Legal and Regulatory Disclosure

joywin may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or in order to protect the rights, property, or safety of joywin, its players, or third parties.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of joywin's business assets, personal data held by joywin may form part of the transferred assets. Players would be notified of any such transfer and of any change in the identity of the data controller prior to the transfer taking effect.

7. Data Retention

joywin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law. The following general retention guidelines apply:

• Account data (name, contact details, identity documents): Retained for the duration of the active account relationship and for a period of at least five (5) years following permanent account closure, in compliance with financial record-keeping and anti-money-laundering requirements.
• Transaction records (deposits, withdrawals, bet history in ৳ BDT): Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial regulations.
• Customer support records (support ticket transcripts, emails): Retained for two (2) years from the date of the last communication, unless the subject matter of the support interaction relates to an unresolved dispute or legal matter in which case retention is extended until resolution.
• Technical and log data (IP addresses, session logs): Retained for up to twelve (12) months and then deleted or anonymised unless required for an active fraud or security investigation.
• Marketing consent records: Retained for as long as you hold a joywin account, or until you withdraw consent, whichever is earlier. Records of consent withdrawal are retained to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

8. Data Security

joywin implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport layer security: All data transmitted between your browser and joywin.club is encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting any page of the joywin Website.
• Password hashing: Account passwords are never stored in plain text. They are processed through a cryptographic one-way hashing algorithm before storage, meaning joywin staff cannot retrieve or view your password.
• Access controls: Access to databases containing personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and monitored.
• Payment data isolation: Full payment credentials (card numbers, mobile wallet PINs) are not stored by joywin. Payment processing is handled by PCI-DSS-compliant payment partners.
• Security monitoring: joywin employs automated systems to detect and alert on suspicious login activity, unusual transaction patterns, and potential security incidents in real time.

Despite these measures, no internet-based service can guarantee absolute security. Players are reminded to use strong, unique passwords for their joywin accounts, to enable any available two-factor authentication options, and to contact [email protected] immediately if they suspect their account has been compromised.

9. Cookies & Tracking Technologies

joywin uses cookies and similar tracking technologies to operate the platform, maintain your session state while you are logged in, and gather analytics data to help us understand how players use the Website. The following types of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the joywin Website to function. They maintain your login session, remember your account preferences during a visit, and enable core features such as deposit and withdrawal flows. These cookies cannot be disabled without significantly impairing your ability to use the platform.

9.2 Analytics Cookies

joywin uses first-party analytics tools to collect aggregated data about how players navigate the Website — including which pages are most visited, how long sessions last, and what device types are most common. This data is used in anonymised form to improve platform performance and content. No individual player is identified through analytics data.

9.3 Functional Cookies

Functional cookies remember choices you make — such as your preferred display language — to provide a more personalised experience during future visits. These cookies do not track your browsing activity across other websites.

9.4 Managing Cookies

You may configure your browser settings to refuse non-essential cookies or to alert you before cookies are stored. Please note that disabling cookies may affect certain features of the joywin platform, including persistent login sessions. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, and Safari.

10. Your Rights

As a joywin account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the joywin data team at [email protected] with the subject line "Data Rights Request" and your registered account details for verification.

• Right of Access: You may request a copy of the personal data joywin holds about you. We will provide this in a structured, commonly used format within a reasonable period of receiving a verified request.
• Right to Rectification: If you believe any personal data joywin holds about you is inaccurate or incomplete, you may request that it be corrected. You may also update basic contact details directly within your account settings.
• Right to Erasure: You may request deletion of your personal data. This right is subject to legal retention obligations — for example, transaction records required for AML compliance cannot be deleted before the applicable retention period expires, even following account closure.
• Right to Restriction of Processing: You may request that joywin restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You may request that joywin provide your personal data in a machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to the processing of your personal data where that processing is based on joywin's legitimate interests. joywin will review such objections and cease processing unless there are compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

11. Children & Minors

The joywin platform is strictly intended for adults aged 18 years and over. joywin does not knowingly collect, store, or process personal data from individuals under the age of 18. If joywin becomes aware that a registered account belongs to a person under 18, the account will be suspended immediately, all associated personal data will be deleted in accordance with applicable law, and any balance on the account will be handled per the joywin Terms & Conditions.

If you believe that a minor may have registered a joywin account, please contact our support team at [email protected] immediately so that we may investigate and take appropriate action without delay. joywin takes its responsibility to protect minors from gambling services extremely seriously.

12. Changes to This Policy

joywin reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly. For significant changes that materially affect how we use your personal data, joywin will provide notice via your registered contact details where practically possible.

Your continued use of the joywin platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how joywin protects your data.

13. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how joywin handles your personal data, please contact the joywin support team using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request — [Your Registered Name]"
• Response Time: Acknowledgement within 72 hours; resolution within 30 days for standard requests.

All data rights communications must be submitted in English. To protect your privacy, joywin will verify your identity before processing any data access, rectification, or deletion request.