Reference

How We Handle Your Privacy at joya4

This policy explains what personal information we collect when you open an account, deposit through bKash, Nagad or Rocket, and interact with our sportsbook and casino lobby. We keep it straightforward so you know exactly where your data goes and who can access it.

Data Collection ExplainedPayment Info HandlingAccount Security PracticesYour Rights Over Your Data
joya4 How We Handle Your Privacy at joya4
DATA HANDLING FRAMEWORK

How We Protect and Manage Your Information

We apply layered protections to your personal and financial data. From the moment you enter your bKash number during a deposit to the point your withdrawal clears into your Rocket wallet, every step is encrypted and logged. Below is a breakdown of how each aspect of data handling works at joya4.

Encryption at Rest and in Transit

All data moving between your device and our servers travels through encrypted channels. Stored records — including transaction history linked to your Nagad or bKash payments — remain encrypted on our infrastructure.

Cookie Usage

We use cookies to remember your login session and display your account wallet balance without repeated authentication. Functional cookies keep you logged in on mobile.

Account Security Measures

Your account is protected by OTP verification sent to your registered mobile number each time you log in from a new device. If three incorrect attempts occur in a row, the account locks temporarily.

Data Retention Period

We keep your personal data for as long as your joya4 account remains active. After you close your account, we retain transaction records for a limited period to meet any legal obligations that apply in your jurisdiction.

Third-Party Sharing Limits

We share personal data only with payment partners — bKash, Nagad, Rocket — to process your deposits and withdrawals. Security vendors receive limited data when investigating suspicious logins.

Requesting Changes or Deletion

You can ask us to update incorrect details — like a changed mobile number or email — or request full deletion of your data. Submit the request through live chat or email.

PRIVACY CONTACT PATHS

Reach Us About Your Data

If you have a privacy concern or want to exercise your data rights, we offer several ways to get in touch. Our support team handles privacy-related requests with the same priority as account issues, so you will not be bounced between departments. Reach out through any channel below and reference your registered mobile number so we can locate your records quickly.

Live Chat Open the live chat widget from any page on joya4. Tell the agent your request relates to privacy or data access.
Email Support Send your privacy query to our support email address listed in the Help section. Include your registered mobile number and a clear description of what data action you need — access, correction or deletion.
In-App Request From your account settings on mobile, tap the data request option. This generates a ticket tagged specifically for privacy matters, ensuring it reaches the right team without delay. You can track the status of your request from the same screen.

Common Questions About Your Data at joya4

Below are answers to the privacy questions our support team receives most often. If your concern is not covered here, reach out through live chat or email and our data team will respond directly.

We collect your full name, mobile number, email address and date of birth during registration. When you make your first deposit via bKash, Nagad or Rocket, we also record the wallet identifier used for that transaction so future withdrawals reach the correct destination.

Transaction details are encrypted immediately upon receipt and stored on servers with restricted access. We do not keep your bKash or Nagad PIN — only the wallet number and transaction reference. This means even if our logs were accessed externally, your PIN remains protected.

Yes. Contact our support team via live chat or email and request full data deletion. We will verify your identity through OTP, then remove your personal records. Note that we may retain certain transaction logs for a limited period if required by the regulations applicable in your region.

We share limited data with payment processors — specifically bKash, Nagad or Rocket — to complete your deposits and withdrawals. Security partners may receive device-level data during fraud investigations. We never sell or rent your personal information to advertisers or unrelated third parties.

Cookies store your session token so you stay logged in while browsing sportsbook markets or the casino lobby. Analytics cookies track page visits — not personal identity — to help us improve load speeds. You can clear cookies from your mobile browser settings at any time, though you will need to log in again.

Once your account is closed, we retain transaction records for a limited period to satisfy any legal retention requirements in eligible regions. After that window, all personal data — name, mobile number, email, payment references — is permanently erased from our active and backup systems.

Send a data access request via live chat or email. Include your registered mobile number so we can verify your identity with an OTP. Within a reasonable timeframe, we will provide a summary of the personal and transactional data linked to your account in a readable format.

Yes. We record your IP address and basic device information — browser type, operating system — each time you access the site. This data helps us detect unusual login patterns, such as access from a location you have never used before, and trigger additional verification steps to protect your account.

Every login from a new device triggers an OTP sent to your registered mobile number. Three consecutive failed login attempts lock the account temporarily. You can unlock it by verifying through live chat or your registered email. We also monitor session activity for irregularities and will notify you of anything unusual.

Access and eligibility depend on your local law and the regions we currently support. The core data handling practices described here apply uniformly, but specific retention periods or disclosure obligations may vary based on the regulatory framework of your jurisdiction. We update this policy when requirements change.