kaya88 Privacy Policy

1. Introduction & Scope

kaya88 ("kaya88", "we", "us", "our") operates the online gaming platform accessible at kaya88.one, offering live casino games, sports betting, slots, lottery markets, and related services to registered players in Malaysia and other permitted jurisdictions.

This Privacy Policy applies to all personal data processed by kaya88 in connection with your registration, use of our platform, and any communications you have with us. It covers data collected via the kaya88 website (kaya88.one), our mobile browser interface, and through any direct communications including live chat and email support.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy. By registering an account or using the kaya88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection legislation, kaya88 is the data controller responsible for the personal information collected and processed through the kaya88.one platform. kaya88 operates under internationally recognised gaming authority oversight and is obligated to comply with applicable data protection standards as a condition of its licensing.

If you have any questions about how kaya88 handles your personal data, or wish to exercise any of your data rights, you may contact our Data Privacy team at [email protected] with the subject line "Privacy Enquiry".

3. Personal Data We Collect

kaya88 collects the following categories of personal data from players:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of identity documents (such as Malaysian MyKad, passport, or other government-issued ID) where required for KYC (Know Your Customer) verification.
• Contact Data: Email address, Malaysian phone number, and residential address.
• Account Data: Username, password (stored in hashed form only), account preferences, and security settings.
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet ID, Maybank or CIMB account details for withdrawal purposes), transaction history, deposit amounts, and withdrawal records. kaya88 does not store full card numbers or complete banking credentials.
• Gaming Data: Bet history, game play records, wagering patterns, win/loss history, session duration, and bonus usage.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, referral URL, and geolocation data (country/region level).
• Communications Data: Records of live chat transcripts, support emails, and any other direct communications between you and kaya88.
• Compliance Data: Data collected to satisfy anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations, including source of funds declarations where required.

4. How We Collect Your Data

kaya88 collects personal data through the following methods:

• Direct Collection: Information you provide when registering your kaya88 account, completing identity verification, making deposits or withdrawals, contacting customer support, or responding to promotions.
• Automated Collection: Technical data collected automatically when you access the kaya88 platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Section 9).
• Third-Party Sources: Identity verification data from licensed KYC and AML service providers; fraud detection data from risk management partners; payment confirmation data from payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and Malaysian banking partners.

5. How We Use Your Personal Data

kaya88 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your kaya88 player account, including processing your kaya88 login and verifying your identity.
• Service Delivery: To provide access to casino games, sports betting, slots, and all other platform features you use on kaya88.
• Payment Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) via your selected payment method.
• Regulatory Compliance: To comply with our obligations under our gaming licence, including AML screening, KYC verification, age verification (21+), and reporting obligations to licensing authorities.
• Responsible Gaming: To monitor gaming patterns and identify indicators of problem gambling, to enforce self-exclusion requests, and to apply deposit or wagering limits set by the player.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the kaya88 platform.
• Communications: To send you transactional messages (e.g., deposit confirmations, withdrawal notifications, security alerts) and, where you have consented, promotional communications about kaya88 offers.

kaya88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6. Legal Basis for Processing

kaya88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and our gaming licence, including KYC, AML, and age verification requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional tracking features, where you have provided explicit, informed consent. You may withdraw consent at any time by contacting kaya88 support.

7. Sharing of Personal Data

kaya88 shares personal data with third parties only in the following limited circumstances:

• Payment Processors: Your payment details are shared with licensed payment service providers (including Touch 'n Go, Boost, GrabPay, DuitNow, Maybank, and CIMB) solely for the purpose of processing your transactions.
• KYC & AML Providers: Identity documents and personal data may be shared with licensed identity verification and anti-money laundering screening services as required by our operating licence.
• Game Providers: Your account ID and gameplay data are shared with licensed game providers (e.g., Evolution Gaming, Pragmatic Play) to deliver their games to your account.
• Regulatory Authorities: kaya88 may be required to disclose personal data to our licensing authority, financial regulators, or law enforcement agencies upon lawful request.
• IT & Infrastructure Providers: Technical data is processed by our hosting and cloud infrastructure providers under strict data processing agreements.

All third parties to whom kaya88 discloses personal data are contractually required to process that data only for the stated purpose, to maintain appropriate security standards, and not to further disclose the data without authorisation.

8. Data Retention

kaya88 retains personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, subject to the following minimum retention periods:

• Account & Transaction Records: Retained for a minimum of five (5) years from the date of the last account transaction, as required by AML and gaming licence regulations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Communications Records: Live chat transcripts and support emails are retained for up to two (2) years.
• Technical Logs: Server logs and access records are retained for up to twelve (12) months.

Where personal data is no longer required for any lawful purpose, kaya88 will securely delete or anonymise it.

9. Cookies & Tracking Technologies

kaya88 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use include:

• Strictly Necessary Cookies: Required for the platform to function — including session management, kaya88 login authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language settings, game lobby layout, last visited section) to personalise your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players navigate the kaya88 platform, allowing us to identify and fix usability issues.
• Fraud Prevention Cookies: Used to identify suspicious login patterns, unusual device behaviour, and other risk signals.

kaya88 does not use third-party advertising or tracking cookies that share your data with external advertising networks. You may manage non-essential cookies through your browser settings, though disabling certain cookies may impair platform functionality.

10. Data Security

kaya88 implements industry-standard technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kaya88 servers.
• Passwords stored using one-way cryptographic hashing (never in plaintext).
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments of the kaya88 platform and infrastructure.
• Multi-factor authentication for internal administrative access to player data systems.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your kaya88 login credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

11. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by kaya88:

• Right of Access: Request a copy of the personal data kaya88 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Request that we provide your personal data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data for legitimate interest purposes, including profiling.
• Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact kaya88 at [email protected]. We will respond within 30 days of receiving your request. Identity verification may be required before we can fulfil your request.

12. Children & Minors

kaya88 strictly prohibits access by persons under the age of 21 years. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from an underage individual, we will immediately close the relevant account, void any associated transactions, and delete the data.

If you believe an underage person has registered on the kaya88 platform, please contact us immediately at [email protected].

13. Changes to This Policy

kaya88 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulatory requirements. Material changes will be communicated to registered players by email to the address on record and/or by a prominent notice on the kaya88 platform at least 7 days before the effective date of the change.

The current version of the Privacy Policy is always accessible at kaya88.one/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent revision was made. Continued use of the kaya88 platform after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact Us

For any privacy-related enquiries, data access requests, or concerns regarding how kaya88 processes your personal information, please contact our support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available daily 9:00 AM – 2:00 AM (MYT) via the kaya88 website

We aim to acknowledge privacy enquiries within 2 business days and to provide a substantive response within 30 days.