juwa Privacy
Policy

When you register for and use a juwa Account, we collect several categories of personal data. This data is necessary to provide you with a safe, functional, and personalised gaming experience on the juwa platform, and to meet our obligations under applicable anti-money-laundering and responsible gaming requirements.

The categories of personal data we collect include the following:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health records, or biometric data beyond what is strictly necessary for age and identity verification as required by applicable regulations. Where we collect such data, we apply heightened safeguards and will seek your explicit consent.

juwa uses the personal data it collects for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below, and we do not sell your personal data to third parties for their own marketing purposes.

• Account creation and management: To register your juwa Account, verify your identity, maintain your profile, and enable you to access all platform features.
• Transaction processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to record your transaction history; and to resolve any payment disputes or discrepancies.
• Platform delivery and improvement: To provide you with access to casino games, sports betting markets, and all other juwa platform features; to monitor platform performance; and to improve the quality and range of services we offer.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats. This includes automated monitoring of Account activity and flagging of unusual patterns.
• Responsible gaming compliance: To monitor gambling behaviour, enforce deposit limits and self-exclusion requests, identify at-risk players, and fulfil our responsible gaming obligations.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering obligations, retain records as required by law, and cooperate with regulatory or law-enforcement authorities where legally required.
• Customer support: To respond to your support enquiries, resolve complaints, and maintain a record of communications for quality assurance.
• Marketing communications: Where you have given your consent, to send you promotional offers, bonus notifications, and news about juwa by email or SMS. You may withdraw this consent at any time.
• Analytics and personalisation: To analyse aggregated usage patterns across the platform and, where permitted, to personalise your experience based on your game preferences and activity history.

juwa applies automated decision-making in limited circumstances, including fraud detection screening and responsible gaming risk flagging. Where an automated decision has a significant effect on your Account (for example, a withdrawal being placed on hold), you have the right to request human review of that decision by contacting [email protected].

juwa processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and juwa — namely, providing you with access to the platform, processing your deposits and withdrawals, and maintaining your Account.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering obligations, age verification requirements, and record-keeping mandates.
• Legitimate interests: Processing carried out in the legitimate interests of juwa or its players, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — in particular, sending you marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

juwa does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Game and platform providers: We share data with the technology companies that power games on the juwa platform — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — to the extent necessary for game delivery, game integrity, and technical support. These providers act as data processors under contractual obligations that prohibit them from using your data for their own purposes.
• Payment service providers: We share relevant transaction data with bKash, Nagad, Rocket, and Upay to facilitate deposits and withdrawals. These providers process payment data under their own privacy policies and applicable financial regulations.
• Identity verification services: We may use third-party KYC and identity verification partners to assist with age and identity verification processes. These partners are contractually bound to handle your data securely and only for verification purposes.
• Fraud detection and security services: We use specialist third-party fraud prevention and anti-money-laundering screening tools that process Account and transaction data to detect and prevent financial crime. Data is shared on a need-to-know basis only.
• Legal and regulatory authorities: Where we are required by applicable law, court order, or regulatory authority in Bangladesh or another relevant jurisdiction to disclose your data, we will do so. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event that juwa undergoes a merger, acquisition, or transfer of all or part of its business assets, your personal data may be transferred as part of that transaction. We will provide notice of any such transfer and the privacy implications for your data.

All third parties with whom juwa shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specific purposes for which it was shared. juwa remains responsible for ensuring that such third-party processing meets applicable data protection standards.

The juwa platform uses cookies and similar tracking technologies to enable core platform functionality, improve your user experience, and — where you have consented — deliver personalised content and analytics. A cookie is a small text file placed on your device by a website you visit; it enables the site to recognise your device on subsequent visits.

juwa uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They enable you to log in to your Account, maintain your session, and navigate between pages securely. You cannot opt out of strictly necessary cookies, as they are required for the platform to operate.
• Functional cookies: These remember your preferences and settings — such as your chosen language, last-visited game category, and session configuration — to provide a more personalised experience. You may disable these, but doing so may affect your experience on the platform.
• Analytics cookies: These help us understand how players interact with the platform by collecting aggregated, anonymised data about page visits, session durations, and feature usage. We use this data to improve the platform. Analytics cookies are placed only where you have given consent.
• Marketing cookies: Where you have consented, these cookies enable us to show you relevant promotional content based on your platform activity. They may also allow us to measure the effectiveness of our marketing campaigns.

juwa does not use tracking pixels or device fingerprinting for cross-site tracking purposes. Third-party analytics tools used by juwa are configured to anonymise IP addresses and to comply with applicable data minimisation principles.

juwa retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to meet our legal, regulatory, and contractual obligations. The following retention guidelines apply:

• Account data: Personal data associated with your juwa Account is retained for the duration of your Account's active status and for a minimum of five (5) years following permanent Account closure, in compliance with applicable anti-money-laundering record-keeping obligations.
• Transaction records: All deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction for regulatory compliance purposes.
• KYC and verification documents: Identity verification documents are retained for five (5) years from the date of submission or from Account closure, whichever is later.
• Support communications: Records of your communications with juwa support are retained for three (3) years from the date of the most recent communication in a given case.
• Marketing consent records: Records of your consent to receive marketing communications, and any subsequent withdrawal of that consent, are retained for as long as is necessary to demonstrate compliance with applicable consent requirements.
• Analytics data: Aggregated, anonymised analytics data that cannot be linked back to an individual player may be retained indefinitely for platform improvement purposes.

When your personal data is no longer required, juwa will securely delete or anonymise it in accordance with our internal data disposal procedures. You may request early deletion of your data in certain circumstances — see the Your Privacy Rights section below for further details.

As a juwa player, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting the juwa privacy team at [email protected]. We will respond to all verified privacy requests within a reasonable timeframe and at no charge to you, unless a request is manifestly unfounded, excessive, or repetitive.

• Right to access: You have the right to request a copy of the personal data juwa holds about you, along with information about how it is being used and who it has been shared with.
• Right to rectification: You have the right to request correction of any personal data we hold about you that is inaccurate, incomplete, or out of date. You may also update certain Account details directly from your Account settings page.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that we may be legally required to retain certain data even following an erasure request, in which case we will explain the applicable retention obligation.
• Right to restriction of processing: You have the right to request that juwa restricts the processing of your personal data while a dispute regarding accuracy or lawfulness is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. Where you object, juwa will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

juwa implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are reviewed and updated regularly to address evolving security threats.

• SSL/TLS encryption: All data transmitted between your device and the juwa platform is encrypted using SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Secure data storage: Personal data is stored on secure servers with access controls that restrict access to authorised personnel only. Database access is logged and monitored for anomalous activity.
• Access controls: juwa staff access to personal data is granted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality obligations.
• Password security: Account passwords are hashed and salted using industry-standard cryptographic methods. juwa does not store plaintext passwords and cannot retrieve your password — only a password reset is possible.
• Fraud and intrusion monitoring: juwa operates continuous automated monitoring for suspicious login attempts, unusual Account activity, and potential security incidents.
• Incident response: In the event of a data security incident that affects your personal data and poses a risk to your rights and freedoms, juwa will notify you without undue delay and take all reasonable steps to contain and remediate the incident.

Despite these measures, no online platform can guarantee absolute security. You play an important role in protecting your own data — in particular by using a strong, unique password for your juwa Account, not sharing your login credentials, and logging out after each session. If you believe your Account has been compromised, contact [email protected] immediately.

Last updated: January 2026. juwa may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. The current operative version is always published at juwa.bio/privacy-policy. Continued use of the platform following the effective date of any update constitutes acceptance of the revised policy.