kaya888 Privacy Policy

1 Who We Are

kaya888 ("we", "us", "our") is an online gaming platform operated under international gaming licensing, specifically serving players in Malaysia and across Southeast Asia. Our platform offers sports betting, live casino games, slots, crash games, and online poker. We are the data controller responsible for your personal information as described in this Privacy Policy.

Our registered contact email for privacy-related enquiries is [email protected]. All communications regarding this policy should be directed to that address.

By accessing or using the kaya888 platform — whether through desktop browsers in Kuala Lumpur, mobile devices in Penang, or any other means — you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

2 Data We Collect

kaya888 collects personal data from you in the following circumstances and categories:

Account Registration Data

• Full legal name as per your Malaysian identity document (MyKad) or passport
• Date of birth (used to verify you are 21 years of age or older)
• Email address and mobile phone number
• Preferred username and securely hashed password
• Residential address, including postcode and state (e.g., Selangor, Johor, Penang)

Identity Verification (KYC) Data

• Government-issued photo identification document
• Proof of address documentation where required
• Selfie or liveness verification image for anti-fraud purposes

Financial & Transaction Data

• Deposit and withdrawal transaction records (via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency)
• Bank account details or e-wallet identifiers used for payouts
• Betting history, game logs, and wagering records

Technical & Device Data

• IP address and approximate geolocation
• Browser type, version, and operating system
• Device identifiers (for mobile app users)
• Session duration, pages visited, and interaction logs

Communication Data

• Messages sent to our customer support team via live chat or email
• Survey responses and feedback you choose to provide

3 How We Use Your Data

kaya888 uses your personal data for the following specific and lawful purposes:

• Account Management: To create, maintain, and secure your kaya888 account, including password recovery and two-factor authentication.
• Identity Verification: To verify that you meet the minimum age requirement of 21 years and to comply with our Know Your Customer (KYC) obligations under our gaming licence.
• Payment Processing: To facilitate deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and supported cryptocurrencies including BTC, ETH, USDT TRC20, and BNB.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, and other illegal or prohibited activities.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email channels.
• Platform Improvement: To analyse usage patterns, identify bugs, and improve the performance and user experience of kaya888 across all devices.
• Regulatory Compliance: To maintain records as required by applicable laws and our international gaming licensing obligations.
• Responsible Gaming: To monitor betting patterns, enforce deposit limits and self-exclusion requests, and identify players who may need support.
• Marketing Communications: To send you promotional offers, bonus updates, and platform news via email or SMS — only where you have given explicit consent to receive such communications. You may opt out at any time.

kaya888 does not use automated decision-making or profiling in a way that produces significant legal effects on you without human review.

4 Legal Basis for Processing

Where data protection laws require us to identify a legal basis for processing your personal data, we rely on the following grounds:

• Contractual Necessity: Processing your registration data, KYC documents, and financial information is necessary to perform the contract between you and kaya888 (i.e., to provide gaming services).
• Legal Obligation: Certain data processing activities — such as retaining transaction records and performing identity verification — are required to comply with applicable laws and our licensing conditions.
• Legitimate Interests: We process technical and behavioural data to protect the security and integrity of our platform, prevent fraud, and improve our services. We ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Where we send marketing communications or use non-essential cookies, we do so only on the basis of your explicit, freely given consent. You may withdraw consent at any time without penalty.

5 Data Sharing & Disclosure

kaya888 does not sell, rent, or trade your personal information. We may share your data only in the following limited and controlled circumstances:

Service Providers & Processors

We engage carefully selected third-party service providers to support platform operations. These include payment processors (FPX gateways, DuitNow operators, e-wallet providers), identity verification services, cloud infrastructure providers, and customer support tools. All such providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

Regulatory & Law Enforcement Authorities

We may disclose your personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so — for example, in response to a lawful order, subpoena, or to prevent serious harm.

Anti-Fraud & AML Partners

To meet our anti-money laundering (AML) obligations, we may share transaction data with licensed fraud prevention networks and financial intelligence services as permitted under our gaming licence terms.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place.

6 Cookies & Tracking Technologies

kaya888 uses cookies and similar tracking technologies to operate and improve our platform. The types of cookies we use are:

• Essential Cookies: Required for core functionality such as maintaining your login session, remembering your preferences, and securing your account. These cannot be disabled without affecting platform usability.
• Analytics Cookies: Help us understand how players interact with kaya888 — which games are most popular, where users from Johor Bahru or Petaling Jaya tend to navigate, and how long sessions last. This data is aggregated and anonymised.
• Performance Cookies: Monitor page load times, error rates, and server response to identify and resolve technical issues quickly.
• Preference Cookies: Remember settings such as your preferred language, currency display (MYR), and notification preferences.

We do not use advertising or cross-site tracking cookies that follow you across unrelated third-party websites.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of specific kaya888 features. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide detailed cookie management controls in their privacy settings.

7 Data Retention

kaya888 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by law. Our general retention principles are:

• Account Data: Retained for the duration of your active account and for a period of up to five (5) years following account closure, to meet regulatory and audit requirements.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with standard financial record-keeping obligations.
• KYC & Identity Documents: Retained for the period required under our gaming licence conditions — typically five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for two (2) years from the date of last contact, to assist with follow-up queries and dispute resolution.
• Marketing Consent Records: Retained for three (3) years from the date of last interaction or until consent is withdrawn, whichever is earlier.

When your data is no longer required, we securely delete or anonymise it in accordance with industry-standard data destruction practices.

8 Security Measures

Protecting your data is a core operational priority at kaya888. We implement a layered security framework that includes:

• TLS 1.3 Encryption: All data in transit between your device and our servers is encrypted using Transport Layer Security 1.3 — the same protocol used by major Malaysian banks like Maybank and Public Bank.
• AES-256 Encryption at Rest: Sensitive data stored on our servers — including KYC documents and payment details — is encrypted using AES-256 symmetric encryption.
• Access Controls: Strict role-based access controls ensure that only authorised kaya888 personnel can access personal data, and only to the extent necessary for their specific duties.
• Two-Factor Authentication (2FA): Available for all player accounts to add an additional layer of login security.
• Regular Security Audits: We conduct periodic penetration testing and third-party security audits of our platform infrastructure.
• Incident Response: In the unlikely event of a data breach that poses a risk to your rights, kaya888 will notify affected users and relevant authorities within 72 hours of becoming aware of the incident.

While we take all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. We encourage you to use a strong, unique password for your kaya888 account and to enable 2FA.

9 Your Privacy Rights

Regardless of your location in Malaysia — whether you are based in Kuala Lumpur, Bangsar, Penang, or Johor Bahru — kaya888 recognises and upholds the following data subject rights:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that we limit the processing of your data in certain circumstances — for example, while a complaint is being investigated.
• Right to Data Portability: Where technically feasible, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests or to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact our Privacy Team at [email protected]. We will respond to all verified requests within thirty (30) calendar days.

10 Children & Minors

kaya888 is strictly an adult gaming platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 21.

During the account registration process, all applicants are required to provide a valid date of birth and government-issued identification to confirm they meet this age threshold. Accounts where the registered user is subsequently found to be under 21 will be immediately suspended and all funds held pending identity review.

If you believe a minor has registered on the kaya888 platform or that personal data of a person under 21 has been collected inadvertently, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11 Cross-Border Data Transfers

kaya888 operates under international gaming licensing and uses cloud infrastructure and service providers that may be located outside of Malaysia. As a result, your personal data may be transferred to and processed in countries other than Malaysia.

Where such transfers occur, kaya888 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Privacy Policy. These safeguards may include:

• Standard contractual clauses approved by recognised data protection authorities
• Data processing agreements with service providers confirming equivalent security obligations
• Transfers to countries that have been assessed as providing an adequate level of data protection

By using the kaya888 platform, you acknowledge that your data may be transferred internationally in accordance with this section.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how kaya888 handles your personal data, please reach out to us:

• Email: [email protected]
• Live Chat: Available 24/7 via the kaya888 platform — average response time under 2 minutes

We take all privacy enquiries seriously and aim to respond within five (5) business days for general queries, and within thirty (30) calendar days for formal data subject rights requests.

kaya888 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email and platform notifications at least 14 days before taking effect. We encourage you to review this page periodically to stay informed of how we are protecting your information.