Your Privacy Matters to jaya7 — Our Full Data Protection Policy

1 Introduction

jaya7 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who accesses the jaya7 platform at https://jaya7.im. This Privacy Policy describes in detail the personal information we collect, the purposes for which we process it, how long we keep it, with whom we share it, and the rights available to you as a data subject.

jaya7 serves the Bangladesh market and targets English-speaking adult players aged 21 and above. This policy is written in English and covers all data processing activities conducted in connection with the operation of the jaya7 betting and casino platform, including account registration, identity verification, payment processing, gameplay activity, customer support interactions, and marketing communications (where applicable).

This Privacy Policy should be read alongside jaya7's Terms & Conditions, which are available at /terms-conditions, and our Responsible Gaming policy at /responsible-gaming. Where this Privacy Policy uses terms defined in the Terms & Conditions, those definitions apply here unless the context requires otherwise.

2 Data We Collect

jaya7 collects the following categories of personal data from account holders and platform visitors:

jaya7 does not intentionally collect sensitive personal data (such as health data, religious beliefs, political opinions, or biometric data) unless you voluntarily provide such information through a support interaction or responsible gaming self-declaration. Where such data is received, it is treated with an additional layer of care and processed only to the extent strictly necessary.

3 How We Collect Data

jaya7 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you access the platform, including via cookies, server logs, and session tracking tools.
• Third-party sources: Identity verification data received from our KYC (Know Your Customer) service providers; fraud risk signals from payment processing partners; device fingerprinting data from security providers.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you make deposits or request withdrawals.

4 How We Use Your Data

jaya7 processes your personal data for the following defined purposes:

• Account management: Creating, maintaining, and closing your jaya7 account; verifying your identity and eligibility; managing your account preferences and settings.
• Service delivery: Enabling access to betting markets, casino games, fishing games, slots, and table games on the platform; processing bets and settling winnings.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; reconciling transactions; issuing refunds where applicable.
• Security and fraud prevention: Monitoring for suspicious account activity, bot use, multi-accounting, and payment fraud; protecting the integrity of the platform.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours; applying self-exclusion and deposit limit settings at your request; flagging accounts for intervention where warranted.
• Legal and regulatory compliance: Fulfilling anti-money laundering (AML) and Know Your Customer (KYC) obligations; responding to lawful requests from regulatory or law enforcement authorities.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analysing usage patterns to improve the platform's design, performance, and game offering.
• Marketing communications: Sending promotional offers and bonus notifications where you have opted in to receive such communications. You may unsubscribe at any time by contacting support.

jaya7 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where automated processes are used in clearly defined fraud detection and account security contexts, and subject to your right to request human review of any such decision.

5 Legal Basis for Processing

jaya7 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to provide the jaya7 service under the Terms & Conditions you agreed to at registration — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and lawful authority requests.
• Legitimate interests: Processing carried out for jaya7's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing based on your explicit, freely given consent — principally for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing

jaya7 does not sell your personal data. We share data only in the following controlled circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the financial data required to process your deposit or withdrawal transactions.
• Identity verification providers: Third-party KYC partners receive your identity documents and personal details to perform age and identity verification on jaya7's behalf.
• Game providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session data necessary to deliver game content. These providers do not receive your full identity data.
• IT and infrastructure providers: Hosting, data storage, and security service providers who process data on jaya7's behalf under data processing agreements that bind them to confidentiality and security obligations.
• Regulatory and law enforcement authorities: Where jaya7 is required by applicable law or a valid legal order to disclose personal data, we will do so. We will notify you of such disclosures where we are legally permitted to.
• Business transfers: In the event of a merger, acquisition, or sale of jaya7's business or assets, personal data may be transferred to the acquiring entity, which will be bound by obligations consistent with this Privacy Policy.

7 International Data Transfers

jaya7 primarily operates its platform infrastructure to serve the Bangladesh market. Some of our third-party service providers — including game providers and IT infrastructure partners — may be located in or operate from jurisdictions outside Bangladesh. Where personal data is transferred to a third country, jaya7 takes reasonable steps to ensure that appropriate safeguards are in place to protect your data, including contractual data protection clauses with receiving parties.

By using the jaya7 platform, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh, subject to the safeguards described in this section. Where you have concerns about specific international transfers, please contact jaya7 support for further information.

8 Data Retention

jaya7 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account data: Retained for the duration of your active account, plus a minimum of five years following account closure to satisfy financial record-keeping and AML compliance requirements.
• Transaction records: Retained for a minimum of five years in accordance with financial compliance obligations.
• Identity verification documents: Retained for the duration of the account relationship plus five years post-closure.
• Support communications: Retained for three years from the date of the interaction for dispute resolution and quality assurance purposes.
• Technical and usage data: Aggregated or anonymised within 13 months of collection. Non-anonymised technical logs retained for up to 12 months for security purposes.
• Marketing consent records: Retained until you withdraw consent, plus a short period thereafter to maintain a record of the withdrawal.

When the applicable retention period expires, data is securely deleted using industry-standard data destruction methods, or anonymised so that it can no longer be attributed to you individually.

9 Your Data Rights

As a jaya7 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact jaya7 support via live chat or by email. We will acknowledge your request within 72 hours and aim to fulfil it within 30 days.

• Right of access: You have the right to request a copy of the personal data jaya7 holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held by jaya7.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to limitations where retention is required for legal compliance purposes.
• Right to restriction of processing: You may request that jaya7 temporarily suspend processing of your data in defined circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller, where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10 Cookies & Tracking Technologies

jaya7 uses cookies and similar technologies (including session tokens, local storage, and pixel tags) on the platform for the following purposes:

• Strictly necessary cookies: Essential for the platform to function correctly, including maintaining your logged-in session, remembering your language preference, and processing secure transactions. These cannot be disabled without significantly impairing platform functionality.
• Analytical cookies: Used to collect aggregated information about how visitors use the platform — which pages are visited most, how long sessions last, and where users encounter errors. This data helps jaya7 improve the platform experience.
• Functional cookies: Used to remember your preferences (such as game settings and display options) to provide a more personalised experience on return visits.
• Security cookies: Used for fraud detection and session integrity purposes, including device fingerprinting and login anomaly detection.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse all or selected cookies, delete existing cookies, and receive alerts when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging into your jaya7 account and using the platform's core features.

jaya7 does not use cookies to serve third-party advertising or to track your browsing activity across websites other than https://jaya7.im.

11 Security Measures

jaya7 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and jaya7's servers.
• Encryption of sensitive data fields (including payment credentials and identity document data) at rest in jaya7's databases.
• Role-based access controls ensuring that jaya7 staff can only access personal data to the extent required for their specific job function.
• Regular security assessments, vulnerability scanning, and penetration testing of platform infrastructure.
• Automated anomaly detection systems that flag suspicious account activity in real time.
• Staff training on data protection obligations and secure handling of personal information.

While jaya7 takes data security seriously and maintains a robust security programme, no data transmission or storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that poses a risk to your rights, jaya7 will take prompt action to contain the breach and will notify affected users in accordance with applicable obligations.

12 Children and Minors

The jaya7 platform is strictly intended for adults aged 21 and above. jaya7 does not knowingly collect, store, or process personal data belonging to persons under the age of 21. Age verification is a mandatory step in the jaya7 account registration process, and accounts found to be held by persons under 21 will be closed immediately.

If you are a parent or guardian and believe that a person under 21 has provided personal data to jaya7 or created an account on the platform without your knowledge, please contact our support team immediately at [email protected]. We will investigate the matter promptly, close any underage account identified, and delete the associated personal data to the extent permitted by our legal obligations.

13 Changes to This Privacy Policy

jaya7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, we will notify you by posting a prominent notice on the platform and, where appropriate, by sending a notification to your registered email address.

The "Effective" date at the top of this policy indicates when the current version was last updated. Your continued use of the jaya7 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the platform and may request account closure by contacting support.

We encourage you to review this Privacy Policy periodically to stay informed about how jaya7 protects your personal data. Previous versions of the Privacy Policy are available upon request by contacting jaya7 support.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jaya7's data processing practices, please contact our support team. Our customer support team is available 24 hours a day, 7 days a week and will respond to data-related enquiries promptly.

This Privacy Policy was last updated in January 2026 and supersedes all previous versions. For the most current version, please refer to this page at https://jaya7.im/privacy-policy.