kaya888 Privacy Policy

1.Introduction

kaya888 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who register for, access, or use the kaya888 platform at kaya888.club ("the Site"). This Privacy Policy ("Policy") sets out in clear terms what personal information kaya888 collects from you, why we collect it, how we use it, who we may share it with, and what rights you have in relation to your data.

This Policy applies to all data collected through the kaya888 website, account registration process, deposit and withdrawal transactions, customer support interactions, and any other channel through which you provide information to kaya888. Please read this Policy carefully. If you do not agree with any part of this Policy, you should not use the kaya888 platform.

This Policy is to be read in conjunction with the kaya888 Terms & Conditions, which govern your use of the platform more broadly.

2.Information We Collect

kaya888 collects personal information through various means during your use of the platform. The categories of information we collect include:

• Identity information: Full legal name, date of birth, and government-issued identification document details (such as MyKad number or passport number) provided during account registration or identity verification.
• Contact information: Email address, Malaysian mobile phone number, and mailing address as provided at registration or subsequently updated in your account settings.
• Financial information: Payment method details provided in connection with deposits and withdrawals, including bank account numbers, e-wallet identifiers (such as Touch n Go, Boost, or GrabPay account references), and transaction records. kaya888 does not store full card numbers; payment card data is handled by PCI-DSS compliant payment processors.
• Account activity data: Login history, session durations, games played, bet amounts, deposit and withdrawal history, bonus claims, and account preference settings.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, referring URLs, and cookie identifiers collected automatically when you access the kaya888 site.
• Communications data: Records of correspondence between you and the kaya888 support team, including chat transcripts, emails, and any documentation you submit in connection with a query or dispute.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, session limit configurations, and any responsible gaming disclosures made to kaya888 support.

kaya888 collects only the information that is necessary for the purposes described in this Policy. We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, or health data) except where required for specific regulatory compliance purposes and with appropriate safeguards in place.

3.How We Use Your Information

kaya888 uses the personal information we collect for the following purposes:

• Account administration: To create and manage your kaya888 account, verify your identity, process deposits and withdrawals, and administer your use of the platform's games and services.
• Age and identity verification: To comply with our strict 21+ age requirement and applicable Know Your Customer (KYC) obligations under our operating licence.
• Transaction processing: To process and record all deposit and withdrawal transactions in MYR and to resolve any payment disputes.
• Anti-money laundering (AML) compliance: To monitor account activity and identify patterns that may indicate money laundering, fraud, or other financial crimes, as required under international licensing obligations.
• Customer support: To respond to your queries, complaints, and support requests in a timely and effective manner.
• Platform security: To detect, investigate, and prevent unauthorised access, fraud, and other security incidents affecting kaya888 or its members.
• Responsible gaming: To monitor betting patterns and account activity that may indicate problem gambling, and to administer responsible gaming tools including deposit limits and self-exclusion.
• Marketing and promotions: To send you information about kaya888 promotions, bonuses, and new features where you have consented to receive such communications or where kaya888 has a legitimate interest in doing so. You may opt out at any time.
• Platform improvement: To analyse aggregate, anonymised usage data for the purpose of improving the kaya888 platform, enhancing game offerings, and optimising the user experience for Malaysian players.
• Legal compliance: To comply with applicable laws, regulations, licensing conditions, court orders, and requests from competent regulatory or law enforcement authorities.

4.Legal Basis for Processing

kaya888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and kaya888 under the Terms & Conditions — including account creation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and responsible gaming obligations under our international operating licence.
• Legitimate interests: Processing necessary for kaya888's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.Disclosure to Third Parties

kaya888 does not sell, rent, or trade your personal data to any third party. We may share your information only in the following limited circumstances:

• Payment processors: Financial information is shared with third-party payment processors (including providers of Touch n Go, Boost, GrabPay, and banking services) strictly for the purpose of processing your transactions. These processors are contractually bound to handle your data securely and only for the stated purpose.
• Game providers: Where required for the provision of specific games, kaya888 may share limited technical identifiers with licensed third-party game providers (such as Pragmatic Play, PG Soft, or Evolution Gaming). These providers do not receive personally identifying information beyond what is necessary for game delivery.
• Regulatory and law enforcement authorities: kaya888 may disclose personal data to relevant regulatory bodies, licensing authorities, or law enforcement agencies where required by law, court order, or where disclosure is necessary to prevent or report suspected financial crime.
• Identity verification services: kaya888 may use third-party KYC and identity verification services to verify documents provided during account registration. These services are contractually obligated to process data only for verification purposes.
• Professional advisers: kaya888 may share data with legal counsel, auditors, or other professional advisers under strict confidentiality obligations, where necessary in connection with legal proceedings or regulatory compliance.

All third parties who handle kaya888 member data are required to implement appropriate technical and organisational security measures and to process personal data only for the purposes for which it was shared.

6.Cookies & Tracking Technologies

kaya888 uses cookies and similar tracking technologies on the kaya888 site. Cookies are small text files stored on your device that help the platform recognise you, remember your preferences, and collect analytical data. kaya888 uses the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the kaya888 platform — these cookies maintain your login session, remember your language and currency preferences, and ensure the security of your account activity. These cannot be disabled without impairing platform functionality.
• Analytical cookies: Used to collect anonymised data about how visitors interact with the kaya888 site — including pages visited, time on site, and navigation paths. This data helps kaya888 improve the platform experience. No personally identifying data is included in analytical cookie data.
• Functional cookies: Used to remember choices you make on the platform (such as preferred game categories or responsible gaming settings) to provide a more personalised experience.

Most web browsers allow you to control cookie settings through the browser's privacy settings. Please note that disabling certain cookies may affect the functionality of the kaya888 platform. kaya888 does not use cookies for the purpose of serving third-party advertising.

7.Data Retention

kaya888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, licensing, tax, and accounting obligations. In practice, this means:

• Account registration and identity verification records are retained for a minimum period of five (5) years following account closure, as required under applicable AML and KYC obligations.
• Transaction records (deposits, withdrawals, and betting history) are retained for a minimum of five (5) years.
• Customer support correspondence is retained for a minimum of two (2) years following the resolution of the relevant interaction.
• Technical and analytical data collected via cookies is retained in anonymised or pseudonymised form for platform analysis purposes and is not linked to individual identifiable accounts beyond the applicable session.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

8.Data Security

kaya888 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and kaya888's servers.
• Access controls limiting employee access to personal data to those with a business need to process it, with all access activity logged and audited.
• Encrypted storage of sensitive personal and financial data at rest.
• Regular security assessments and penetration testing of the kaya888 platform infrastructure.
• Two-factor authentication availability for all member accounts.

While kaya888 takes all reasonable steps to protect your personal data, no digital system is completely immune from security risks. In the event of a personal data breach that poses a risk to your rights and freedoms, kaya888 will notify affected members and relevant regulatory authorities in accordance with applicable obligations.

9.Your Rights

As a kaya888 member, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data that kaya888 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by kaya888.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention.
• Right to restriction of processing: You may request that kaya888 restrict the processing of your data in certain circumstances, such as where you contest its accuracy.
• Right to object: You may object to kaya888 processing your data based on legitimate interests, including for direct marketing purposes. Objections to marketing will be honoured immediately.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to kaya888, to the extent technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the kaya888 data team at [email protected]. kaya888 will respond to data rights requests within a reasonable timeframe and in accordance with applicable obligations. Identity verification may be required before processing your request.

10.Children & Minors

kaya888 does not knowingly collect personal information from any individual under the age of 21. The kaya888 platform is strictly restricted to adults aged 21 and above. Age verification is conducted as part of the account registration and KYC process. If kaya888 becomes aware that personal data has been collected from a person under the required minimum age, such data will be deleted and the associated account closed without delay.

11.Changes to This Privacy Policy

kaya888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, kaya888 will notify members by posting the updated Policy on this page with a revised "Last Updated" date and, where appropriate, by email notification to registered members. Your continued use of the kaya888 platform following notification of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

12.Contact & Data Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kaya888 handles your personal data, please contact the kaya888 data and support team: