Joiya's Privacy Policy — Our Commitment to Protecting Your Data

Protecting your privacy is our top priority at Joiya. This Privacy Policy explains what personal information Joiya collects, how it is used, who it is shared with, and the steps we take to keep your data secure.

By using the Joiya website or app, you agree to this Privacy Policy. If you do not agree, please refrain from using Joiya's services. This policy may be updated at any time — you will be notified of any changes.

This Privacy Policy complements Joiya's Terms & Conditions. Reading both documents together will give you a complete picture of your relationship with Joiya.

Joiya collects your information in several ways. Details are provided below:

This information is collected either directly from you or automatically through your use of the platform. Joiya never collects your password or card PIN.

Joiya uses your information only for specific purposes, which are:

• Account Management: To create your account, confirm logins, and verify your identity.
• Payment Processing: To process deposits and withdrawals accurately.
• Security: To prevent fraud, money laundering, and unauthorized account access.
• Service Improvement: To personalize your experience and develop new features.
• Legal Obligations: To comply with KYC and AML (Anti-Money Laundering) policies.
• Customer Support: To help resolve your issues quickly.
• Contact: To notify you of important updates, promotions, and offers (with your consent).

Joiya does not sell your personal information. However, it may be shared with specific third parties in the following limited circumstances:

• Payment Providers: Necessary information is shared to process payments via Mobile Pay, Nagad, or Rocket.
• Identity Verification Services: With accredited verification partners for the KYC process.
• Legal Authorities: In response to a court order or a lawful request from a regulatory authority.
• Technology Partner: With cloud and server service providers for platform operations, under strict confidentiality agreements.

In the event of a business restructuring or merger, user data may be transferred to the new entity, but this Privacy Policy will remain in effect.

Joiya follows the highest industry standards to protect your data. Our security measures include:

• SSL/TLS Encryption: 256-bit encryption is applied to all data transmissions.
• Two-Factor Authentication (2FA): An extra layer of security for account login.
• Firewall & IDS: The intrusion detection system runs 24/7.
• Regular Security Audits: Regular testing by independent cybersecurity experts.
• Data Minimization: Only the information that is strictly necessary is collected.

In the event of a data breach or security incident, Joiya will notify affected users within 72 hours and take all necessary action.

Cookies and similar technologies are used on the Joiya website and app. Cookies are small text files stored on your device that help the website recognize you.

• Essential Cookies: Required to maintain login sessions and for basic functionality. These cannot be disabled.
• Performance Cookies: To analyze page load times and usage patterns.
• Functional Cookies: To remember your preferences, such as language and theme.
• Analytics Cookies: For generating platform usage statistics (non-personally identifiable).

Joiya retains your information only for as long as necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active Account: All data is retained for as long as your account remains active.
• Closed Accounts: After account closure, certain data may be retained for up to 5 years as required by legal obligations.
• Financial Transactions: Under AML policy, transaction records must be retained for a minimum of 5 years.
• Log Files: Retained for up to 12 months for cybersecurity purposes.

Once the retention period expires, your data is securely deleted or anonymized so that your identity cannot be identified in any way.

As a Joiya user, you have the following rights over your personal information:

Joiya strictly does not provide services to anyone under the age of 18. We do not knowingly collect any personal information from minors.

If a parent or legal guardian believes their child's information has been collected without consent, please contact support@joiya.net immediately. Joiya will promptly delete that information.

If you have any questions, concerns, or complaints regarding this Privacy Policy, please reach out to our data protection team:

• Email: support@joiya.net
• Live Chat: Available 24/7 on the website or app
• Help Center: help-center page for a detailed guide

Joiya is committed to responding to all privacy-related requests within 30 days. For complex cases, this may be extended to a maximum of 60 days, and you will be notified accordingly.