Privacy Policy — How java9 Protects Your Data

1. About This Policy

This Privacy Policy describes how java9 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "the Player") who access or use the java9 website at java9.io and all associated services. It applies to all players accessing java9 from Bangladesh and all other jurisdictions where the Platform is made available.

java9 acts as the data controller in respect of the personal information you provide when registering an account, making a deposit, placing a bet, or contacting our support team. As data controller, java9 is responsible for determining the purposes and means by which your personal data is processed.

This policy should be read alongside the java9 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account, verify your identity, make a deposit or withdrawal, or contact our support team, java9 may collect the following categories of personal data:

• Identity data: Full name, date of birth, gender, nationality, and copies of government-issued identification documents (national ID card, passport, or driver's licence).
• Contact data: Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode.
• Financial data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay reference, and masked card details for Visa and Mastercard transactions. Full card numbers are never stored by java9.
• Account credentials: Username and encrypted password hash. java9 never stores your password in plaintext.
• KYC documentation: Scanned or photographed copies of identity documents submitted during the account verification process.

2.2 Information Collected Automatically

When you access java9.io, certain technical and behavioural data is collected automatically through server logs, cookies, and analytics tools:

• Device and technical data: IP address, browser type and version, operating system, device type (mobile, desktop, tablet), and screen resolution.
• Usage data: Pages visited, features accessed, games played, betting history, session duration, and navigation patterns within the Platform.
• Location data: General geographic location derived from your IP address (country and city level only — java9 does not collect precise GPS coordinates).
• Session data: Login timestamps, logout timestamps, and session identifiers used to maintain account security.

2.3 Data Categories Summary

Category	Examples	Collection Method
Identity	Name, date of birth, national ID	Registration & KYC forms
Contact	Email, phone, address	Registration form
Financial	bKash/Nagad number, masked card details	Deposit & withdrawal process
Technical	IP address, browser, device type	Automatic (server logs)
Behavioural	Games played, bets placed, session length	Automatic (Platform analytics)
Communications	Support chat transcripts, emails	Customer support interactions

3. How We Use Your Data

java9 uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and secure your java9 account, authenticate your identity at login, and process account closure requests.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain an accurate transaction history.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years and to fulfil anti-money laundering obligations by confirming your identity and source of funds where required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and abuse of promotional offers.
• Responsible gaming compliance: To monitor gaming patterns that may indicate problem gambling behaviour, to apply self-exclusion or deposit limits requested by players, and to fulfil our duty of care obligations.
• Customer support: To respond to your enquiries, complaints, and requests submitted via email or live chat, and to maintain records of our communications with you.
• Platform improvement: To analyse aggregated usage data and improve the performance, layout, and game selection of the java9 Platform.
• Legal compliance: To meet our obligations under applicable anti-money laundering laws, data protection regulations, and any requirements imposed by competent authorities.
• Direct communications: Where you have opted in, to send you information about promotions, bonuses, and platform updates relevant to your account. You may unsubscribe from marketing communications at any time by contacting support.

4. Legal Basis for Processing

java9 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws, including KYC identity verification and anti-money laundering record-keeping obligations.
• Legitimate interests: Processing undertaken to pursue java9's legitimate business interests, including fraud prevention, platform security, and improving our services, where these interests are not overridden by your privacy rights.
• Consent: Where you have given clear, informed consent — specifically in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 Service Providers

java9 may share your personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processors (bKash, Nagad, Rocket gateway partners), identity verification service providers, cloud hosting infrastructure providers, and fraud detection specialists. All such providers are contractually bound to process your data only on java9's instructions and to maintain appropriate security standards.

5.2 Game Studios

Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others available on java9) may receive your Player ID and session token to facilitate game delivery. These studios do not receive your full name, contact details, or payment information.

5.3 Legal and Regulatory Disclosure

java9 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity. java9 will notify you of any such disclosure where legally permitted to do so.

5.4 No Sale of Data

java9 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. This commitment applies unconditionally to all player data collected through the Platform.

6. International Data Transfers

As java9 is an internationally operated platform, your personal data may be stored on servers or processed by service providers located outside Bangladesh. Where such transfers occur, java9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding that required under internationally recognised data protection principles. These safeguards include standard contractual clauses with service providers and selection of providers in jurisdictions with adequate data protection frameworks.

7. Data Security

java9 implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Bcrypt hashing for stored passwords — plaintext passwords are never stored.
• Role-based access controls ensuring that only authorised java9 personnel can access personal data, and only to the extent required for their specific role.
• Regular security audits and vulnerability assessments of Platform infrastructure.
• Intrusion detection systems and real-time monitoring for anomalous access patterns.
• Secure, encrypted storage of KYC documents with strict access logging.

Despite these measures, no method of electronic transmission or storage is entirely without risk. java9 cannot guarantee absolute security and encourages all players to use a strong, unique password for their account and to enable any available two-factor authentication features.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. java9 uses cookies and similar technologies (such as local storage and session tokens) to maintain the security and functionality of the Platform and to understand how players interact with our services.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without breaking core Platform functionality.
• Preference cookies: Used to remember your settings and preferences, such as language and display options, so you do not need to reconfigure them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use java9 — such as which pages are most visited and where users encounter errors. This data is used solely to improve the Platform and is not linked to individual player identities for marketing purposes.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling strictly necessary cookies will prevent certain Platform features — including account login — from functioning correctly.

9. Data Retention

java9 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. The following indicative retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following account closure or last account activity, to comply with anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years to meet financial audit and AML obligations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the relevant KYC check.
• Customer support communications: Retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing consent records: Retained for as long as your account is active or until you withdraw consent, whichever is earlier.
• Technical/log data: Typically retained for 90 days and then automatically deleted, unless retained longer in connection with a specific security investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

10. Your Privacy Rights

As a java9 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request. java9 will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of all personal data java9 holds about you, together with information about how it is used and shared.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: In certain circumstances, you may request that java9 delete your personal data. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to restriction of processing: You may request that java9 limit its processing of your personal data in certain circumstances, for example while a dispute about data accuracy is resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on legitimate interests. java9 will consider your objection and cease processing unless compelling legitimate grounds exist that override your interests.

11. Children's Privacy and Age Restrictions

Parents and guardians who believe that a minor may have registered an account on java9 should contact support at [email protected] immediately. java9 takes all such reports seriously and will act on them promptly.

12. Third-Party Links

java9.io may contain references to third-party game studios and payment service providers. Where technical integration with these third parties occurs (e.g., loading a game from Pragmatic Play's servers), that third party's own privacy practices govern the data they independently collect during the session. java9 is not responsible for the privacy practices of third-party service providers and recommends that you review their privacy policies independently if you have concerns.

13. Updates to This Policy

java9 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered players via on-platform notification or the email address associated with their account, with at least 14 days' notice before the revised policy takes effect. The effective date at the top of this page will be updated with each revision.

Your continued use of java9 following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting support.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way java9 handles your personal data, please contact our dedicated support team. We are available 24 hours a day, seven days a week.

Email: [email protected] (plain text — not a clickable link)

For information about responsible gaming tools, self-exclusion, and deposit limits, please visit the Responsible Gaming page. For common questions about your account and the Platform, visit our FAQ page.