Privacy Policy for jowa9

1. Overview

jowa9 ("we", "us", "our") operates the online betting and casino platform accessible at https://jowa9.onl (the "Platform"). As the data controller for personal information collected through the Platform, jowa9 is responsible for the lawful, fair, and transparent processing of your personal data.

This Privacy Policy applies to all personal data we collect when you visit the Platform, create a jowa9 account, make deposits or withdrawals, place bets, participate in promotions, or contact our support team. It applies to all Players based in Bangladesh and to any other individual whose personal data we process in connection with the operation of jowa9.

We are committed to handling your personal data with care and in accordance with applicable data protection principles. We collect only the data we genuinely need, we keep it only as long as necessary, and we apply robust security measures to protect it at every stage.

2. Data We Collect

The personal data we collect falls into the following categories:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification — Players must be 21 or older).
• National Identity Card (NID) number or passport number, where provided for verification purposes.
• Photograph or scanned copy of identity documents submitted during KYC (Know Your Customer) verification.

2.2 Contact Data

• Email address registered to your jowa9 account.
• Mobile phone number, including the country code.
• Residential address (city, district, postal code), where provided.

2.3 Financial Data

• Mobile financial service account numbers used for deposits and withdrawals (e.g., bKash, Nagad, Rocket, Upay).
• Bank account details where bank transfers are used (e.g., Dutch-Bangla Bank, City Bank, BRAC Bank).
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references.
• We do not store full card numbers. Card payments (Visa, Mastercard) are processed by certified third-party payment gateways and we receive only a masked reference.

2.4 Account & Activity Data

• Username and encrypted password hash.
• Betting and gaming history, including game types, wager amounts, outcomes, and timestamps.
• Bonus and promotion participation records.
• Responsible gaming preferences (deposit limits, session limits, self-exclusion status).
• Customer support correspondence — including emails, live chat transcripts, and WhatsApp messages.

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Pages visited, time spent on pages, referral source, and click-path data.
• Session identifiers and authentication tokens.
• Error logs and crash reports where applicable.

3. How We Collect Data

We collect personal data through the following means:

• Direct submission: Data you provide when registering an account, completing identity verification, making deposits or withdrawal requests, or contacting our support team.
• Automated technologies: Data collected automatically as you use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-party service providers: Data received from payment processors (bKash, Nagad, Rocket), identity verification services, and fraud prevention platforms in connection with transactions you initiate on jowa9.
• Publicly available sources: In limited circumstances, we may verify information against publicly available databases as part of fraud prevention and anti-money-laundering compliance.

4. Legal Basis for Processing

jowa9 processes your personal data on the following legal grounds:

5. How We Use Your Data

jowa9 uses the personal data we collect for the following purposes:

• Account operation: To create, verify, maintain, and manage your jowa9 account, including processing logins, password resets, and account preference updates.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods. Financial data is used solely to execute and record transactions.
• Identity and age verification: To confirm that you are 21 years of age or older and that the identity information you have provided is accurate, as required prior to processing withdrawals or upon request.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other prohibited activities described in the Terms & Conditions.
• Responsible gaming: To administer deposit limits, session limits, cooling-off periods, and self-exclusion tools that you have set, and to monitor for patterns that may indicate problem gambling behaviour.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of your support history.
• Communications: To send you account-related notifications (transaction confirmations, security alerts, policy updates) and, where you have opted in, promotional communications about jowa9 offers, tournaments, and seasonal promotions including BPL and IPL betting markets.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the performance, content, and design of the jowa9 Platform.
• Legal compliance: To meet any applicable legal or regulatory obligations, including responding to valid requests from law enforcement or governmental authorities.

6. Data Sharing & Third Parties

jowa9 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only in the following limited circumstances:

6.1 Service Providers

We share data with carefully selected third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) — to process financial transactions.
• Identity verification providers: To conduct KYC checks and age verification as required before processing withdrawals.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to operate their games. These studios do not receive your identity or financial data.
• Fraud prevention and security platforms: To support transaction monitoring and account security.
• IT infrastructure and hosting providers: To store and process data securely in connection with the operation of the Platform.
• Customer support tools: Platforms used to manage email and live chat support interactions.

6.2 Legal Disclosures

jowa9 may disclose personal data where required by law, by court order, or in response to a valid request from a law enforcement authority, regulatory body, or other governmental institution. We will endeavour to notify affected Players of such disclosures where legally permissible to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of jowa9's assets, personal data held by jowa9 may be transferred to the relevant successor entity. We will notify affected Players of any such transfer via the registered email address on file, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

7. Cookies & Tracking Technologies

jowa9 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language or responsible gaming settings, to provide a more personalised experience.
• Analytics cookies: Used to collect anonymous aggregate data about how Players interact with the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve the Platform over time.
• Security cookies: Used to detect and prevent fraudulent activity, including CSRF protection tokens and device fingerprinting signals used by our fraud prevention systems.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from logging in or using key features of the Platform. jowa9 does not use third-party advertising cookies or cross-site tracking for ad retargeting purposes.

8. Data Retention

jowa9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention guidelines apply:

• Account data: Retained for the lifetime of your active jowa9 account, plus a minimum of 5 years following account closure, in order to comply with anti-money-laundering record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction.
• Identity verification documents: Retained for the duration of your account and for a minimum of 5 years following account closure.
• Customer support records: Retained for 3 years from the date of the last interaction, unless the record is relevant to an ongoing dispute or legal matter.
• Technical and usage logs: Retained for up to 12 months, after which they are anonymised or deleted.
• Marketing consent records: Retained for as long as you remain opted in, plus 12 months following opt-out to demonstrate compliance.

Where data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.

9. Data Security

jowa9 takes the security of your personal data seriously and applies a range of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the jowa9 Platform, including login sessions, deposits, withdrawals, and account updates.
• Password hashing: Account passwords are stored using industry-standard one-way cryptographic hashing. jowa9 staff cannot view your password in plain text.
• Access controls: Personal data is accessible only to jowa9 staff and contractors who require it to perform their job functions. All such personnel are bound by confidentiality obligations.
• Fraud detection systems: Real-time monitoring of transactions and login activity to detect anomalies and prevent account takeover or financial fraud.
• Regular security audits: The Platform and its infrastructure undergo periodic security reviews and penetration testing.
• Incident response: jowa9 maintains a data breach response procedure. In the event of a breach affecting your personal data, we will notify affected Players via the registered email address within a reasonable timeframe.

10. Your Rights

As a Player whose personal data is processed by jowa9, you have the following rights with respect to your personal information. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the personal data jowa9 holds about you, along with information about how it is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that we may be required to retain certain data to comply with legal obligations even after an erasure request is received.
• Right to Restriction of Processing: You may request that we limit our use of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a copy of certain personal data you have provided to jowa9 in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where it is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jowa9 will respond to all verifiable data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

11. Minors

The jowa9 Platform is strictly intended for adults aged 21 years and older. jowa9 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered on jowa9 or submitted personal data through the Platform, please contact us immediately at [email protected]. We will investigate and act swiftly to address the situation.

12. International Data Transfers

jowa9 operates as an international platform and your personal data may be processed by service providers located outside of Bangladesh. Where data is transferred internationally — for example, to game software providers such as Evolution Gaming or Pragmatic Play, or to cloud infrastructure providers — jowa9 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy.

Such safeguards may include contractual data processing agreements with the receiving entity that impose obligations equivalent to those set out in this Privacy Policy. By using the jowa9 Platform and accepting this Privacy Policy, you acknowledge and consent to such international transfers of your personal data where they are necessary for the delivery of the Platform's services.

13. Changes to This Policy

jowa9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. Where changes are material — meaning they substantively affect how we collect, use, or share your personal data — jowa9 will provide at least 14 days' advance notice via the email address registered to your account or via a prominent notice on the Platform.

Minor updates (such as clarifications, corrections of typographical errors, or non-substantive rewording) may take effect immediately upon publication on the Platform. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how jowa9 protects your data. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jowa9 holds about you, please reach out to our support team using the contact details below:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

Please use the subject line "Privacy Enquiry" for general questions or "Data Rights Request" when exercising any of the rights described in Section 10. We aim to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 30 days.