Kaya888 Privacy Policy – Your Personal Data Protection

1Introduction

Kaya888 ("we", "our platform") takes your privacy seriously. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you use the kaya888 platform, including the website, mobile app and all related services.

By registering an account or using any kaya888 service, you hereby consent to the collection and use of your personal data as described in this Privacy Policy. This Policy should be read alongside the kaya888 Terms and Conditions and forms part of the overarching agreement between you and our platform.

We encourage you to read this document carefully. If you have any questions or concerns about how we handle your data, the kaya888 privacy team is here to help.

2Personal Data We Collect

Kaya888 collects your personal information through various means depending on your interactions with our platform. Here is a comprehensive overview of the types of data we collect:

2.1 Information You Provide Directly

• Identity Information: Full name, date of birth, national identity card number (MyKad) or passport number.
• Contact Information: Email address, mobile number, and residential address.
• Financial Information: Bank account numbers and digital wallet details (Touch 'n Go, GrabPay, Boost) used for deposits and withdrawals.
• KYC Documents: Copies of identity documents, proof of address and other supporting documents for identity verification purposes.
• Communications: Messages you send to the kaya888 support team via live chat, email or WhatsApp.

2.2 Information Collected Automatically

• Technical Data: IP address, web browser type, operating system, and app version.
• Usage Data: Pages visited, session duration, games played and betting records.
• Transaction Data: Deposit history, withdrawals, claimed bonuses and financial activity on the platform.
• Device Data: Unique device identifiers, network information and device language settings.

3How We Use Your Data

Kaya888 uses the personal data we collect for legitimate and transparent purposes. We will not use your data for purposes other than those stated below without first obtaining your consent:

3.1 Service Provision

• Create and manage your kaya888 account.
• Process your deposits and withdrawals securely and efficiently.
• Provide access to all games and services within the platform.
• Manage bonuses, promotions and loyalty programmes you are eligible for.

3.2 Security & Compliance

• Verify your identity through the KYC process as required by law.
• Detect and prevent fraud, money laundering and other illicit activities.
• Comply with statutory reporting obligations to the relevant authorities.
• Enforce the platform's Terms and Conditions and protect the rights of kaya888 and other members.

3.3 Service Improvement

• Analyse usage patterns to improve the platform's design and functionality.
• Conduct internal testing and research to enhance service quality.
• Develop new features better suited to the needs of Malaysian members.

3.4 Communications & Marketing

With your consent, kaya888 may send you information about the latest promotions, exclusive offers, platform updates and other relevant content via email, app notifications or SMS. You may opt out of marketing communications at any time through your account settings or by contacting our team.

4Data Sharing with Third Parties

Kaya888 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, in certain legitimate situations, we may share your data with the following parties:

4.1 Trusted Service Providers

Kaya888 works with carefully selected third-party service providers to support our platform operations. These providers include:

• Payment Providers: FPX, Touch 'n Go, GrabPay, Boost and banking institutions to process your financial transactions.
• Game Providers: Gaming software companies that provide live casino content, slots and other games on our platform.
• Identity Verification Services: Third-party KYC providers that help us securely verify member identities.
• Cloud Services and Infrastructure: Server and cloud service providers that host and process our data.

All third-party providers are required to comply with our security and privacy standards and are not permitted to use your data for any other purpose.

4.2 Legal Obligations

Kaya888 may disclose your personal data when required by law or upon a valid request from government authorities, including law enforcement agencies and financial regulatory bodies. In such situations, we will disclose only the minimum information necessary.

4.3 Protection of Rights & Interests

Where necessary to protect kaya888's legal rights, prevent fraud, or safeguard the security of members and the public, we may share relevant information with appropriate parties.

5Data Security

Kaya888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction.

5.1 Technical Measures

• 256-bit SSL/TLS Encryption: All data in transit is protected with industry-leading encryption standards.
• Data-at-Rest Encryption: Sensitive data stored in our databases is also encrypted using recognised algorithms.
• Multi-Layer Firewall: Our infrastructure is protected by advanced firewalls that monitor and filter network traffic.
• Two-Factor Authentication (2FA): kaya888's internal systems require two-factor authentication for all staff access to sensitive data.
• Continuous Monitoring: Our security systems are monitored 24/7 with instant alerts for any suspicious activity.

5.2 Organisational Measures

• Access to members' personal data is restricted to staff who need it solely to perform their duties.
• All kaya888 staff who handle personal data are required to sign confidentiality agreements and undergo regular privacy training.
• Internal and external security audits are conducted regularly to ensure compliance with the latest security standards.

6Cookies and Tracking Technologies

Kaya888 uses cookies and similar tracking technologies to enhance your experience, analyse platform performance and deliver more relevant content. Below is an explanation of the types of cookies we use:

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login verification, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use the platform to help us improve its features and layout.
• Functional Cookies: Remember your preferences such as language, display settings and frequently used details for your convenience.
• Analytics Cookies: Help us understand aggregated usage patterns for product improvement purposes.

6.2 Cookie Management

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, or block cookies. However, disabling essential cookies may affect the functionality of the kaya888 platform and your overall experience.

For more information on how to manage cookies in your browser, please refer to the official documentation for the browser you are using.

7Your Rights Over Personal Data

As a data subject, you have certain rights regarding the personal information we hold about you. kaya888 respects and facilitates the exercise of these rights in accordance with applicable data protection laws:

8Data Retention and Deletion

Kaya888 will not retain your personal data longer than necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

8.1 Retention Period

• Active Account Data: Retained for the duration your account is active, plus any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements.
• KYC Documents: Retained for a minimum of 5 years after the end of the business relationship, in accordance with AML/CFT requirements.
• Communication Logs: Customer support records are retained for 2 years for reference and service improvement purposes.
• Analytics Data: Anonymised usage data is retained for a longer period for trend analysis purposes.

8.2 Deletion Procedure

When your personal data is no longer required, kaya888 will securely delete or anonymise it using industry-recognised methods to ensure the data cannot be recovered or reused.

9Third-Party Links and Services

The kaya888 platform may contain links to or be integrated with third-party services such as payment providers and gaming platforms. This Privacy Policy applies to the kaya888 platform only.

Kaya888 is not responsible for the privacy practices or content of third-party websites or services that you may access through our platform. We recommend reading each third party's privacy policy before sharing any personal information with them.

Payment providers such as FPX, Touch 'n Go, GrabPay and Boost have their own privacy policies governing how they handle your transaction data. kaya888 only receives the transaction confirmation details required and does not store your credit card numbers or digital wallet passwords.

10Changes to the Privacy Policy

Kaya888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements or improvements to our services.

You will be notified of any significant changes via a prominent notice on the platform, an email to the address registered on your account, or other appropriate communication methods. Notice will be given at least 14 days before changes take effect, except in situations requiring immediate action.

Continued use of the kaya888 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account and request deletion of your data.

11Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how kaya888 handles your personal data, please contact our Privacy Officer through the following channels:

We aim to respond to all privacy-related enquiries within 3 business days. For official complaints or data rights requests, we will respond within 30 business days in accordance with legal requirements.