ioya9 Privacy Policy — How We Protect Your Data

Privacy at a Glance

1. Introduction

ioya9 ("we", "us", "the Platform") is committed to protecting and respecting the privacy of all players and visitors who access the ioya9 platform. This Privacy Policy describes the personal data we collect, the purposes for which we process it, the conditions under which we may share it with third parties, and the rights you hold in relation to your personal data.

This policy applies to all players who have registered an account on ioya9, players who have visited the platform without registering, and any individual who contacts ioya9 via email or live chat. By using the platform, you consent to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, you should discontinue using the platform immediately.

2. Information We Collect

ioya9 collects personal data through several channels: directly from you during registration and account use, automatically as you use the platform, and from third-party service providers involved in payment processing and fraud prevention. The categories of data we collect are as follows.

• Registration data: your full name, date of birth, registered mobile number, and account credentials (username and encrypted password).
• Identity verification (KYC) data: government-issued identification documents, selfie photographs used for identity matching, and proof of address where required.
• Financial data: payment method identifiers (such as your bKash or Nagad wallet number), transaction history (deposits, withdrawals, bets placed, winnings received), and account balance history.
• Technical data: IP address, device type, operating system, browser type and version, session duration, pages visited, and referring URLs. This data is collected automatically via cookies and server logs.
• Communication data: the content of any live chat conversations, email correspondence, or support tickets you submit to the ioya9 support team.

We do not collect or store complete payment card numbers. Where a payment is processed through bKash, Nagad, Rocket, or Upay, ioya9 receives only a transaction reference and wallet identifier — the full credentials of your mobile banking account remain with your payment provider at all times.

3. How We Use Your Information

ioya9 processes your personal data only for legitimate, clearly defined purposes. We do not process data in any way that is incompatible with the purposes stated at the time of collection. Your data is used for the following purposes.

• Account management: creating and maintaining your player account, processing your login sessions, and providing access to games, promotions, and account features.
• Payment processing: executing deposit and withdrawal requests, reconciling transaction records, and detecting and preventing fraudulent payment activity.
• Identity verification: conducting age checks and KYC verification in compliance with responsible gaming obligations and anti-money laundering requirements.
• Customer support: responding to your enquiries, resolving complaints, processing account requests, and maintaining records of support interactions for quality and audit purposes.
• Responsible gaming: monitoring account activity to identify patterns consistent with problem gambling, applying requested self-exclusion or deposit limits, and fulfilling our responsible gaming obligations.
• Platform improvement: analysing aggregated, anonymised usage data to improve the performance, security, and usability of the ioya9 platform. No individual player is identifiable from this aggregated data.

4. Legal Basis for Processing

ioya9 processes your personal data on the following legal grounds, depending on the specific purpose of processing.

• Contractual necessity: processing your registration data, account activity, and payment records is necessary to fulfil our obligations under the player agreement you entered into when creating your ioya9 account.
• Legal obligation: processing KYC verification data, transaction monitoring records, and self-exclusion data is required to comply with applicable anti-money laundering, responsible gaming, and data protection laws.
• Legitimate interests: processing technical data for platform security, fraud prevention, and aggregate performance analysis serves ioya9's legitimate interest in providing a safe and reliable service.
• Consent: where we send promotional communications, we rely on your consent. You may withdraw consent to promotional communications at any time by contacting the support team.

5. Sharing Your Information

ioya9 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: we share wallet identifiers and transaction amounts with bKash, Nagad, Rocket, and Upay solely to process deposits and withdrawals on your behalf.
• Game providers: game session data (player ID, stake amounts, game outcomes) is shared with licensed game providers such as Pragmatic Play and Evolution Gaming for the purpose of delivering the game and resolving game disputes.
• Identity verification providers: KYC data (identity documents and selfie photographs) is shared with third-party identity verification services for the sole purpose of completing age and identity checks.
• Law enforcement and regulatory bodies: ioya9 will disclose personal data to competent authorities when required to do so by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm.

6. Payment Data and Financial Privacy

ioya9 takes additional precautions with financial data given its sensitivity. All financial transactions on the platform are processed through encrypted connections. ioya9 stores only the minimum payment data necessary to process transactions, maintain account records, and meet anti-money laundering reporting obligations. We store transaction references, wallet identifiers, transaction dates, and amounts — never the full credentials of your bKash, Nagad, Rocket, or Upay account.

If you believe there has been an unauthorised transaction on your ioya9 account, you should contact the support team immediately via live chat. ioya9 will investigate all reported financial irregularities and cooperate fully with relevant authorities where criminal conduct is suspected.

7. Cookies and Tracking Technologies

ioya9 uses cookies and similar tracking technologies to deliver core platform functionality, remember your preferences, and analyse platform performance. We use only the following categories of cookies.

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Performance cookies: used to collect anonymised data about how players use the platform, which pages are most visited, and where errors occur. This data is used solely to improve platform quality. No individual player is identified by performance cookies.
• Preference cookies: used to remember language settings and other personalisation choices you make on the platform. These cookies do not track your activity across other websites.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ioya9 platform, including your ability to stay logged in between sessions.

8. Data Retention

ioya9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide: account data is retained for the duration of the active account plus 5 years after account closure; KYC and identity verification records are retained for a minimum of 5 years from the date of verification, in compliance with anti-money laundering obligations; transaction records are retained for 5 years from the date of the transaction; and support correspondence is retained for 2 years from the date of the interaction.

When personal data is no longer required, ioya9 deletes or anonymises it in a secure manner. Players who request account closure may also submit a separate data deletion request to the support team. Deletion requests are processed within 30 days, subject to any legal retention obligations that prevent earlier deletion.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data ioya9 holds about you. To exercise any of these rights, please contact the support team via live chat or email. ioya9 will respond to all data rights requests within 30 days of receipt.

• Right of access: you may request a copy of the personal data ioya9 holds about you, along with information about how that data is being processed.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal obligations requiring its retention.
• Right to restriction: you may request that ioya9 temporarily restrict the processing of your personal data while an accuracy dispute or objection is being resolved.
• Right to object: you have the right to object to processing based on legitimate interests, including profiling. You also have the right to opt out of promotional communications at any time.

ioya9 will not charge a fee for handling data rights requests submitted in good faith. However, where a request is manifestly unfounded or excessive, ioya9 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for doing so.

10. Data Security

ioya9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL encryption for all data in transit, access controls limiting staff access to personal data on a need-to-know basis, regular security testing and vulnerability assessments, and secure server infrastructure with encrypted data storage.

While ioya9 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ioya9 will notify affected players within a reasonable timeframe and take all appropriate remedial action.

11. Children and Minors

The ioya9 platform is strictly restricted to individuals aged 21 and above. ioya9 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. If you believe a minor has registered on the platform, please contact the support team immediately so that we can investigate and take prompt action.

12. Third-Party Links and Services

The ioya9 platform may display the names or branding of third-party game providers and payment services. These third parties operate under their own privacy policies and data practices, for which ioya9 accepts no responsibility. ioya9 does not control and is not responsible for the privacy practices of any third-party provider. We encourage you to review the privacy policies of any third-party service provider whose services you interact with in connection with your ioya9 account.

13. Changes to This Privacy Policy

ioya9 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes, we will notify registered players via a prominent notice on the platform or by email to the registered address, with a minimum of 7 days' notice before the change takes effect. The date at the top of this policy indicates when it was last revised. Continued use of the platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how ioya9 handles your personal data, please contact the support team. All privacy-related enquiries will be handled with confidentiality and responded to within 30 days.