yj2 Privacy Policy — How We Handle Your Data
yj2 is committed to protecting the privacy of every player. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over your information as a yj2 account holder in Bangladesh.
1. Introduction
This Privacy Policy ("Policy") applies to all users of the yj2 online gaming platform — including the yj2 website and all mobile-optimised browser versions accessible through the yj2 domain. By registering an account, making a deposit, or using the platform in any capacity, you acknowledge that you have read and understood this Policy and that you consent to the collection, use, and processing of your personal data as described herein.
yj2 collects and processes personal data only to the extent necessary to provide a safe, fair, and reliable online gaming service to players in Bangladesh. We do not sell personal data to third parties, and we do not use personal data for any purpose other than those described in this Policy. This Policy should be read in conjunction with yj2's Terms & Conditions and Responsible Gaming policy, which together form the full framework governing your relationship with the platform.
yj2 processes all financial transaction data exclusively in Bangladeshi Taka (BDT). No currency conversion or international financial data routing is performed on your personal payment information. Your bKash, Nagad, Rocket, or Upay transaction data is handled within the Bangladesh mobile financial services ecosystem and is not transferred to foreign payment processors.
2. Information We Collect
yj2 collects personal data through four primary channels: information you provide directly during registration and account use; financial transaction data generated through your deposit and withdrawal activity; technical data collected automatically when you access the platform; and cookies and similar tracking technologies. The specific categories of data we collect are described below.
When you register a yj2 account, we collect your Bangladesh mobile phone number (used as your primary identifier), a username of your choosing, date of birth (to verify you meet the 21+ age requirement), and any KYC documents you submit for identity verification — including National ID Card, Passport, or Driving Licence images as requested. We do not require a residential address unless it is needed for a specific verification matter.
We collect records of all deposits and withdrawals processed through your yj2 account, including the payment method used (bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank), the transaction amount in BDT, the timestamp of each transaction, and the transaction reference number provided by the payment provider. We do not store full mobile wallet PINs or full bank account numbers. Transaction reference data is retained to satisfy financial record-keeping obligations and to support dispute resolution.
When you access yj2, we automatically collect certain technical data including your IP address, device type and operating system, mobile browser type and version, session start and end timestamps, pages and game categories accessed within the platform, and approximate geolocation derived from your IP address. This technical data is used for platform security, fraud detection, and to optimise the gaming experience for Bangladeshi mobile networks.
yj2 uses session cookies to maintain your logged-in state across pages within a single visit and to store your language preference. We use persistent cookies to remember certain non-sensitive account preferences between visits. We do not use third-party advertising cookies or cross-site tracking cookies. The cookies yj2 sets are strictly functional and analytical — no data collected via yj2 cookies is shared with advertising networks.
yj2 does not collect sensitive personal data such as biometric data, health information, religious beliefs, or political opinions. The data we collect is limited to what is operationally necessary to deliver the platform's services and to comply with applicable financial and identity verification requirements.
3. How We Use Your Information
yj2 uses personal data for the following specific purposes. We process your data only where we have a legitimate basis for doing so — either to fulfil our contractual obligations to you as an account holder, to comply with legal requirements, or where we have a legitimate operational interest that does not override your rights.
- Account creation, authentication, and ongoing account management — verifying your identity, maintaining your account balance in BDT, and processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer.
- KYC verification and age verification — confirming that you meet the 21+ minimum age requirement and that your account details match the identity documents you provide.
- Fraud prevention and platform security — detecting and preventing unauthorised account access, multiple-account abuse, bonus exploitation, money laundering, and other prohibited conduct described in our Terms & Conditions.
- Responsible gaming compliance — monitoring account activity to identify patterns that may indicate problem gambling behaviour, and applying responsible gaming tools (deposit limits, self-exclusion) where requested by the account holder or required by our internal responsible gaming policy.
- Customer support — responding to your queries, resolving disputes, and processing responsible gaming requests submitted to [email protected].
- Platform improvement and analytics — analysing aggregated, anonymised usage data to improve game loading performance on Bangladeshi mobile networks, optimise payment method flows, and enhance the overall user experience.
yj2 does not use your personal data for targeted advertising on third-party platforms, does not share your data with advertising networks, and does not profile you for the purpose of selling advertising space. Any communication from yj2 to your registered mobile number is limited to account-related notifications, security alerts, and responsible gaming communications.
4. Data Retention
yj2 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable financial record-keeping and anti-money laundering regulations. The following table summarises our standard retention periods by data category.
| Data Category | Retention Period |
|---|---|
| Account registration data (mobile number, username, date of birth) | Duration of account + 5 years post-closure for legal compliance |
| KYC identity documents | Duration of account + 5 years post-closure |
| Financial transaction records (deposits, withdrawals, BDT amounts) | 7 years from transaction date (financial regulatory requirement) |
| Technical & session data (IP address, device type, session logs) | 90 days from session date, then anonymised for aggregate analytics |
5. Sharing of Information
yj2 does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:
- Payment processing partners (bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank) — we share only the transaction data required for each payment to be processed and confirmed. These partners are subject to their own regulatory obligations and privacy frameworks under Bangladesh Bank and Bangladesh Telecommunication Regulatory Commission rules.
- Game technology providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, PG Soft, Spribe) — these providers supply the game engines and live casino streams. They may receive a session token and game-specific data necessary to run the game. They do not receive your full registration data, mobile number, or financial account details.
- Fraud detection and identity verification service providers — third-party services used to assist with KYC document verification and real-time fraud pattern detection. These providers process data under strict data processing agreements and are not permitted to use the data for their own purposes.
- Law enforcement and regulatory authorities — where yj2 is required by law, court order, or regulatory direction to disclose personal data, we will comply to the extent required and will notify the account holder where legally permissible to do so.
All third parties with whom yj2 shares personal data are required to handle that data in a manner consistent with this Policy. yj2 does not knowingly engage service providers who use shared personal data for their own marketing or commercial purposes unrelated to the service they are providing to yj2.
6. Payment Data and Mobile Financial Services
Because yj2 operates exclusively for the Bangladesh market and processes all transactions in BDT via local mobile financial services and banks, the handling of payment data at yj2 differs materially from international gaming platforms that route payments through foreign card processors or e-wallets. The following section explains specifically how your bKash, Nagad, Rocket, Upay, and bank transfer data is handled at yj2.
yj2 does not store your full bKash or Nagad mobile wallet PIN. We do not store complete bank account numbers for BRAC Bank or City Bank transfers. We do not store CVV codes or full card numbers. We retain only the last four digits of a mobile wallet number (for display purposes in your account history) and transaction reference numbers issued by the payment provider. Your full payment credentials remain exclusively within the relevant payment provider's own system.
When you initiate a deposit or withdrawal via bKash or Nagad, the transaction is authenticated directly within the bKash or Nagad app on your device. yj2 receives a confirmation notification and a reference number from the payment provider once the transaction is authorised. yj2 does not intercept or have access to the authentication step that occurs within the payment provider's own app or USSD flow.
7. Cookies and Tracking Technologies
yj2 uses a minimal, strictly functional set of cookies. We do not use advertising cookies, retargeting pixels, or any third-party tracking scripts that would share your browsing behaviour with external parties. The cookies yj2 sets fall into the following three categories:
- Session cookies — set when you log in and deleted when you close your browser. These maintain your authenticated session so you do not need to log in again on each page within a single visit. They contain no personally identifiable information other than an encrypted session token.
- Preference cookies — persistent cookies with a lifespan of up to 12 months that store your language preference (English or Bengali) and certain non-sensitive display settings. These cookies do not track your activity across other websites and do not contain financial or identity data.
- Analytics cookies — anonymised, first-party cookies used to count page visits and measure which game categories are most popular among yj2 players in Bangladesh. The data produced is aggregated and cannot be used to identify any individual user.
You can control and delete cookies through your mobile browser settings. Deleting session and preference cookies will log you out of your yj2 account and reset your language preference. Disabling analytics cookies does not affect the functionality of your account or the availability of any game on the platform.
8. Your Data Rights
As a yj2 account holder, you have the following rights with respect to the personal data yj2 holds about you. To exercise any of these rights, contact yj2 support at [email protected] with your registered mobile number and a description of your request. yj2 will respond within a reasonable timeframe, typically within 30 days of receiving a verifiable request.
Request a copy of the data yj2 holds about you
Ask us to correct inaccurate or incomplete data
Request erasure of data we no longer need to retain
Ask us to restrict processing while a dispute is resolved
Receive your data in a structured, machine-readable format
Object to processing based on legitimate interest
Please note that certain data rights may be limited where retention of the data is required by applicable financial regulation, anti-money laundering law, or to resolve an active dispute. In such cases, yj2 will explain the limitation when responding to your request.
9. Data Security Measures
yj2 applies a layered security approach to protecting personal and financial data. While no online platform can guarantee absolute protection against all possible threats, yj2 implements the following technical and operational controls as standard practice across the platform:
All data transmitted between your device and yj2 is encrypted using SSL/TLS protocols. This ensures that your login credentials, session data, and financial transaction confirmations cannot be intercepted in transit on any network — including mobile data networks and public Wi-Fi connections commonly used in Dhaka, Chittagong, Sylhet, and other major cities in Bangladesh.
Access to personal data within yj2's systems is restricted on a need-to-know basis. Staff members who handle support queries, KYC verification, or payment disputes are granted access only to the minimum data required for their specific role. Data access events are logged and subject to internal audit. yj2 does not permit bulk export of personal data by individual staff members without senior authorisation.
The security of your yj2 account also depends on the steps you take to protect your own login credentials. Use a strong, unique password for your yj2 account that you do not reuse on other platforms. Do not share your password or one-time verification codes with anyone. If you receive an unsolicited message claiming to be from yj2 and asking for your password or PIN, do not respond — contact [email protected] to report it immediately.
If you suspect that your yj2 account has been accessed without your authorisation, contact yj2 support immediately at [email protected] and change your password. yj2 will assist you in securing your account and will investigate the suspicious activity in accordance with our internal security protocols.
10. Protection of Minors
yj2 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. If yj2 becomes aware that personal data has been collected from a person who does not meet the 21+ age requirement, that account will be immediately closed and all associated data will be deleted, except where retention is required by applicable law. If you are a parent or guardian and believe that a person under 21 in your household has registered a yj2 account, please contact [email protected] immediately so we can investigate and take appropriate action.
11. Changes to This Privacy Policy
yj2 may update this Privacy Policy from time to time to reflect changes in our data handling practices, updates to the platform's features, or changes in applicable law. When we make a material change to this Policy, we will update the effective date shown at the top of this document and provide notice to registered account holders via the platform or by communication to their registered mobile number.
Your continued use of yj2 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. It is your responsibility to review this Policy periodically to remain informed of how yj2 handles your personal data. The most current version of this Policy is always accessible at yj2.onl/privacy-policy.
12. Contact and Data Requests
For any questions about this Privacy Policy, to exercise your data rights, or to report a suspected data security incident involving your yj2 account, please contact yj2 support using the details below. All privacy-related communications are handled confidentially and will receive a response within 30 days of receipt of a verifiable request.
[email protected] — Include your registered Bangladesh mobile number, the nature of your request (access, correction, deletion, etc.), and a brief description of the data concerned.
Questions About Our Privacy Practices?
Browse our FAQ for quick answers, or read our Terms & Conditions to understand the full framework governing your yj2 account.
Read Our FAQ Terms & Conditions