70 joya Privacy Policy

This Privacy Policy applies to all users of the 70 joya platform, accessible at 70-joya.com, and any associated mobile or web applications. It governs the collection, use, storage, transfer, and deletion of personal data relating to registered users and visitors to our platform. By creating an account or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

70 joya is committed to ensuring that your personal information is handled responsibly and in accordance with applicable data protection principles. We apply strict technical and organisational safeguards to prevent unauthorised access, disclosure, alteration, or destruction of the personal data you entrust to us. This policy is written in plain English so that every player — regardless of technical background — can understand exactly how their information is treated on the 70 joya platform.

Information We Collect

70 joya collects personal data through several channels: directly from you during registration and account use, automatically through platform interactions, and from trusted third-party verification partners.

We collect only the data that is genuinely necessary for delivering our services, complying with legal obligations, and maintaining the security and integrity of the platform. The categories of personal data we collect are described below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or biometric data beyond what is strictly required for identity verification purposes. We do not collect data from users we know to be under the age of 18. If we discover that personal data has been inadvertently collected from a minor, it will be deleted immediately and the associated account closed.

How We Use Your Data

70 joya processes your personal data on clearly defined legal grounds and for specific, documented purposes. We do not use your data for any purpose beyond those described here without first notifying you.

The personal data we collect is used for the following purposes, each tied to a legitimate legal basis for processing:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account profile on the 70 joya platform. Legal basis: performance of a contract.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks. Legal basis: performance of a contract.
• Age and identity verification (KYC): To confirm that you are aged 18 or above and are the legitimate owner of the payment methods used on your account. Legal basis: legal obligation.
• Anti-fraud and security monitoring: To detect and prevent fraudulent activity, money laundering, multi-accounting, and abuse of promotional offers. Legal basis: legitimate interest and legal obligation.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance via [email protected]. Legal basis: performance of a contract.
• Platform improvement: To analyse aggregated usage data and improve the functionality, performance, and user experience of the 70 joya platform. Legal basis: legitimate interest.
• Responsible gaming compliance: To apply self-exclusion arrangements, deposit limits, session reminders, and cool-off periods at your request or where 70 joya identifies problem gambling indicators. Legal basis: legal obligation and legitimate interest.
• Legal and regulatory compliance: To comply with applicable anti-money laundering, counter-terrorism financing, and data protection obligations. Legal basis: legal obligation.
• Service communications: To send you important account-related notifications such as deposit confirmations, withdrawal updates, KYC status, and security alerts. Legal basis: performance of a contract. Note: these are operational communications, not marketing emails.

Where 70 joya wishes to send you optional promotional communications (such as bonus offers or seasonal promotions tied to BPL, Eid, or Pohela Boishakh), we will only do so where you have given explicit consent via your account communications preferences. You may withdraw this consent at any time by updating your preferences or contacting [email protected].

Data Sharing & Disclosure

70 joya does not sell your personal data. We share data with third parties only where strictly necessary to deliver our services or meet legal obligations, and only under appropriate data protection safeguards.

The following categories of third parties may receive limited personal data from 70 joya for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (BRAC Bank, City Bank, Islami Bank, Sonali Bank, Dutch-Bangla Bank) receive the minimum transaction data necessary to process your deposits and withdrawals. These providers are subject to their own privacy and security obligations.
• Identity verification partners: Third-party KYC service providers may receive your identity documents and personal details to carry out age and identity verification checks. These providers are contractually bound to use your data solely for verification purposes.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game providers may receive a pseudonymous session token to authenticate your game session. They do not receive your full name, financial data, or contact details.
• IT infrastructure providers: Cloud hosting, content delivery, and security service providers who process data on 70 joya's behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or in response to a legitimate legal request. We will notify you of such disclosures where we are legally permitted to do so.

Cookies & Tracking Technologies

70 joya uses cookies and similar tracking technologies to keep the platform functional, remember your preferences, and understand how users interact with our site. We do not use invasive advertising cookies.

A cookie is a small text file placed on your device when you visit a website. Cookies allow the site to recognise your browser across visits and enable core functions such as keeping you logged in and remembering your language and display preferences. The following types of cookies are used on the 70 joya platform:

70 joya does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place cookies on our platform to track your browsing activity across other websites. If you wish to control cookie behaviour, you may adjust your browser settings to block or delete cookies; however, please note that disabling strictly necessary cookies will impair your ability to use core platform functions including login and payment processing.

Data Retention

70 joya retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations.

Different categories of data are subject to different retention periods, reflecting the varying legal and operational requirements associated with each data type. The general retention schedule applied by 70 joya is as follows:

• Active account data (identity, contact, financial transaction records): retained for the duration of your account and for a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC documentation (identity documents, proof of address): retained for 5 years from the date of last account activity, as required under applicable financial compliance frameworks.
• Customer support communications: retained for 3 years from the date of the last interaction, to facilitate dispute resolution and service quality review.
• Analytical and usage data (aggregated clickstream, session data): anonymised after 13 months and retained in aggregate form for platform improvement analysis.
• Responsible gaming records (self-exclusion requests, limit settings): retained for 7 years to ensure that prior self-exclusion arrangements are honoured and that repeat registrations are identified.
• Marketing consent records: retained for the duration of the consent plus 3 years, to demonstrate that communications were sent on a valid legal basis.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request early deletion of your data, 70 joya will action your request where it is not overridden by a legal obligation to retain the data (for example, transaction records required for anti-money laundering compliance cannot be deleted early on request).

Data Security Measures

70 joya implements a layered set of technical and organisational security controls to protect your personal data against unauthorised access, loss, alteration, or disclosure.

The security of your personal data is a core operational priority at 70 joya. We invest in robust security infrastructure and follow recognised information security practices to maintain the confidentiality, integrity, and availability of your data. Our key security measures include:

• SSL/TLS encryption: All data exchanged between your browser or app and our servers is encrypted in transit using industry-standard TLS protocols. Our platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on 70 joya servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to 70 joya staff who require it to perform their job functions. All access is role-based, logged, and subject to regular audit.
• Two-factor authentication (2FA): We encourage all users to enable 2FA on their accounts for an additional layer of login security. Internal staff systems also enforce 2FA.
• Vulnerability monitoring: Our platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 70 joya will notify affected users promptly and take immediate remediation action.
• Staff training: All 70 joya personnel who handle personal data receive regular training on data protection obligations and security best practices.

Your Privacy Rights

As a 70 joya user, you have a number of rights over your personal data. We are committed to honouring these rights promptly and transparently.

Depending on applicable data protection law, you may hold some or all of the following rights with respect to your personal data held by 70 joya. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We aim to respond to all such requests within 30 days.

Please note that some rights are subject to exemptions. For example, we cannot erase transaction records that we are legally required to retain under anti-money laundering regulations, and we cannot restrict processing that is necessary to detect fraud or fulfil a contractual obligation to you. Where an exemption applies, we will explain this clearly in our response to your request.

Updates to This Policy

70 joya may update this Privacy Policy from time to time. We will notify you of any material changes and always publish the current version on this page.

70 joya reserves the right to update this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory guidance, platform functionality, or our data handling practices. When material changes are made, we will update the effective date at the top of this page and, where practicable, notify registered users via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the 70 joya platform following notification of a change constitutes your acceptance of the updated policy. If you object to any changes, you may request account closure in accordance with the Account Suspension & Closure section of our Terms & Conditions.

The version of this Privacy Policy published at 70-joya.com/privacy-policy at any given time is the operative version. Previous versions may be requested from [email protected] for reference.