koya9 Privacy Policy — Our Commitment to Protecting Your Information

Koya9's Privacy Policy explains how your personal information is collected, used, stored, and protected. We believe every user should have control over their own data. This Privacy Policy is our commitment to ensuring that control.

By using the koya9 platform, you agree to this Privacy Policy. If you have any questions, our support team is always ready to help.

This policy was last updated in January 2026. We will notify you in advance of any changes.

Koya9 collects information in three main ways — directly from you, automatically while you use the site, and through third-party verification services. In each case, only the necessary information is collected.

During registration, information you provide directly — such as your name, mobile number, and date of birth — is collected. For KYC verification, a copy of your national ID or passport is required, used solely to confirm your identity.

• Information provided directly through the account registration form.
• Identity documents uploaded for KYC verification.
• Payment information provided during deposit and withdrawal transactions.
• Information shared when contacting our support team.
• Log and cookie data collected automatically during your use of the site.

Koya9 uses your information only for specific, legitimate purposes. Your data is never used for anything beyond what is necessary or relevant. Each purpose is clearly outlined below.

• Account Management: To create, verify, and keep your account secure.
• Transaction processing: To process deposits and withdrawals accurately.
• Support services: To respond to your questions and resolve issues.
• Security Assurance: To prevent fraud and unauthorized access.
• Legal Obligations: To comply with applicable laws and regulations.
• Service improvement: To improve the user experience.
• Promotional Communications: To send you offers and notifications, with your consent.

To stop receiving promotional messages, you can disable notifications at any time through your account settings or by contacting our support team.

Koya9 never sells your personal information to third parties or shares it for advertising purposes. Data is shared only for specific, limited reasons.

• Payment Processors: bKash, Nagad, Rocket — only the information necessary to verify transactions.
• KYC service provider: Authorized organizations for identity verification purposes.
• Legal Authorities: When required by a court order or a lawful request from a government authority.
• Technology Partners: For site operations — they are granted access only to the data strictly necessary for their role.

Koya9 uses industry-standard technologies and practices to protect your data. Our servers are always accessed via encrypted connections. Sensitive information such as passwords is never stored in plain text.

• 256-bit SSL/TLS encryption — applied to all data transfers.
• Passwords are stored using bcrypt hashing.
• Two-factor authentication (2FA) is available.
• Regular security audits and penetration testing.
• Instant alerts for any suspicious login attempts.
• Data access is restricted to authorized personnel only.

Keep in mind, though, that no online platform can guarantee 100% security. That's why using a strong password and keeping it private is just as important.

Koya9 uses cookies — small text files stored in your browser that help improve your experience on the site. We use three types of cookies.

• Essential Cookies: Required to keep your login session active and the site running properly — these cannot be disabled.
• Analytics Cookies: Used to understand which pages are most visited — these do not contain any personal information.
• Preference Cookies: To remember your language and theme preferences.

You can delete or disable cookies at any time through your browser settings. Note that disabling essential cookies may cause some site features to stop working.

Koya9 does not retain your information longer than necessary. Data is kept while your account is active. After account closure, certain information may be retained for a defined period to meet legal obligations.

• Account data: retained for up to 5 years after account closure.
• Transaction records: up to 7 years, as required by financial regulations.
• KYC documents: collected as required by law.
• Support communication logs: up to 2 years.
• Analytics data: retained for up to 1 year, then anonymized.

Once the retention period expires, data is securely deleted or anonymized so that no individual can be identified.

Koya9 is strictly for users aged 18 and above. We never intentionally collect information from minors. Age is verified at registration, and any account suspected of belonging to a minor is closed immediately.

If it is found that a minor has accidentally created an account, all associated data is deleted immediately. Parents can contact our support team regarding this.

As a koya9 user, you have several important rights over your own data. To exercise these rights, contact our support team — we will respond within 3 business days.

• Right to Know: You can find out what data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate information.
• Right to Deletion: You may request deletion of your data, subject to certain conditions.
• Right to Portability: You can request a copy of your data.
• Right to Restrict Processing: You can request that the use of your data be restricted in certain cases.
• Right to Object: You can opt out of marketing communications at any time.

Koya9 may update this Privacy Policy when necessary. For significant changes, you will be notified at least 7 days in advance via email or platform notification. The "Last Updated" date at the top of the page will always reflect the latest version.

For any questions or concerns about our Privacy Policy, feel free to reach out. Our Bengali-speaking support team is available 24/7, seven days a week.