Kaya88 Privacy Policy – Malaysian Player Data Protection

01Introduction

Kaya88 is an online entertainment platform operating under a valid international license. We place great importance on player trust and are fully committed to protecting your personal information. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international online gaming industry best practices.

As a platform serving hundreds of thousands of players in Malaysia, kaya88 understands that privacy is more than a legal obligation — it is the foundation of trust that builds lasting relationships between us and every player. We never sell, rent, or disclose your personal information to third parties for marketing purposes without your consent.

This policy details the types of information we collect, the purposes for collection, how it is stored securely, your rights as a data owner, and how to contact us for any privacy-related enquiries. We encourage you to read this document carefully before using the kaya88 platform.

02Information We Collect

Kaya88 collects various types of information to ensure a smooth, secure, and personalized experience for every user. This data collection is necessary to operate the platform, comply with legal requirements, and protect the interests of all parties.

We may also collect information you voluntarily provide through satisfaction surveys, feedback forms, or when interacting with our customer support team. This information is used solely to improve the quality of kaya88's services.

03How We Use Your Information

Every piece of information collected by kaya88 is used for a clear, lawful, and proportionate purpose. We adhere to the principle of data minimisation — meaning we only process information that is strictly necessary for the stated purpose.

• Account Management: Creating, verifying, and securely managing your player account, including the login process, two-factor authentication, and password recovery.
• Transaction Processing: Processing deposits, withdrawals, and any financial activity related to your account quickly and securely.
• KYC & AML Compliance: Fulfilling legal obligations related to identity verification and anti-money laundering in accordance with international standards.
• Service Communications: Sending important notifications regarding your account, transactions, policy updates, and promotional information you have agreed to receive.
• Security & Fraud Prevention: Detecting and investigating any suspicious activity or unauthorized access attempts on your account.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.
• Platform Enhancements: Analyzing aggregated usage data to improve the performance, design, and functionality of the kaya88 platform.
• Personalized Marketing: With your consent, sending promotional offers and bonuses tailored to your gaming preferences.

04Sharing Information with Third Parties

Kaya88 does not sell, rent, or disclose your personal information to third parties for marketing purposes without your explicit consent. However, in the course of business operations, we may share your information with a limited category of third parties in the following circumstances:

• Payment Service Providers: Entities such as banks, FPX providers, GrabPay, and Touch 'n Go that process your financial transactions. They receive only the minimum information necessary to process the relevant transaction.
• Technology Providers: Companies that provide the technical infrastructure, gaming software, cybersecurity, and cloud services underpinning kaya88's operations. All such providers are bound by strict confidentiality agreements.
• Regulatory Body: Licensing authorities, law enforcement agencies, or government bodies when we are legally required to disclose certain information.
• Audit Business Partners: Independent audit firms required by the licensing authority to verify the fairness of games and kaya88's financial compliance.

In all cases of data sharing, kaya88 ensures that the receiving party adheres to data protection standards equal to or higher than our own. We use legally binding data processing agreements with all third parties that handle your personal data.

05Security & Data Protection

Player data security is one of kaya88's most significant investments. We employ a combination of the latest encryption technology, strict access controls, and continuous monitoring to ensure your information is always protected against both external and internal threats.

• 256-bit SSL Encryption: All data transmitted between your device and kaya88 servers is protected by bank-grade SSL/TLS encryption, ensuring no third party can intercept your communications.
• Encryption of Stored Data: Sensitive information such as passwords, identification numbers, and financial data is stored in encrypted form using AES-256 encryption algorithms.
• Layered Access Control: Only authorized kaya88 staff who have passed strict background checks may access player personal data, based on the principle of least privilege.
• 24/7 Monitoring: A real-time threat detection system operates around the clock to identify and respond to any suspicious activity immediately.
• Two-Factor Authentication (2FA): All players are encouraged and able to activate 2FA for an additional layer of protection against unauthorised access to their accounts.
• Regular Penetration Testing: kaya88 conducts independent security testing on a regular basis to identify and address any system vulnerabilities before they can be exploited.

06Cookies & Tracking Technologies

The kaya88 platform uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and deliver more relevant content. Cookies are small text files stored on your device when you visit our website.

Types of cookies used by kaya88:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how players use the platform, such as the most frequently visited pages and time spent. This data is used in aggregate form for service improvements.
• Functional Cookies: Saving your preferences such as preferred language, display settings, and login information for convenience on future visits.
• Analytics Cookies: Helping us understand platform performance and overall user behavior without identifying individuals personally.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience on the kaya88 platform. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

07Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act (PDPA), you have certain rights regarding your personal information held by kaya88. We fully respect and facilitate the exercise of these rights.

08Data Retention Period

Kaya88 does not retain your personal information longer than necessary for the stated purposes or as required by law. The following are our data retention period guidelines:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure, to meet legal requirements related to AML and financial records.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial legislation.
• KYC Documents: Retained for the duration of the active account period and 5 years after account closure, or longer if required by authorities.
• Communication Logs: Emails and customer support records are retained for 3 years from the date of the last interaction.
• Analytics Data: Anonymised usage data may be retained indefinitely as it contains no information that can identify an individual.

Once the retention period expires, kaya88 will destroy or anonymise your data using secure, irreversible methods in accordance with established data disposal procedures.

09Cross-Border Data Transfers

As an online platform operating globally, kaya88 may transfer and store your personal information on servers located outside Malaysia. Such data transfers are necessary to ensure high-quality service, fast response times, and service continuity for players in Malaysia.

Kaya88 ensures that all cross-border data transfers are carried out with adequate safeguards through:

• Data transfer agreements compliant with international data protection standards
• Use of certified data centres compliant with ISO 27001 or equivalent standards
• Service contracts binding cloud providers to equivalent levels of data protection
• Regular assessments of data transfer destination countries to ensure adequate protection

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how kaya88 handles your personal information, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the kaya88 platform — the fastest way to get an immediate response.
• Email: [email protected] — for written enquiries requiring detailed responses or official documentation.
• Telegram & WhatsApp: kaya88's official instant messaging channels available in Bahasa Malaysia for your convenience.

We are committed to responding to all privacy-related inquiries within 5 working days from the date of receipt. For data subject rights requests requiring more in-depth investigation, the response period is within 30 working days as required under the PDPA.

Kaya88 also accepts written complaints related to privacy. Every complaint will be thoroughly investigated, and you will receive an official response regarding the outcome and any actions taken or planned. We take every complaint seriously, as your trust is our most valuable asset.