kaya96 Privacy Policy

1. Introduction

kaya96 ("we", "us", "the Company") operates the online gaming and sportsbook platform accessible at kaya96.app (the "Platform"). We are committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy ("Policy") describes how kaya96 collects, uses, discloses, stores, and protects personal data provided by or generated through your use of the Platform. By registering a kaya96 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the kaya96 Terms & Conditions, which govern the overall contractual relationship between you and kaya96.

2. Personal Data We Collect

kaya96 collects personal data through the following means: directly from you during registration and account use; automatically through your interaction with the Platform; and from third parties where permitted by law.

2.1 Data You Provide Directly

• Registration data: full name, date of birth, gender, nationality, residential address, email address, and mobile telephone number.
• Identity verification (KYC) documents: government-issued photo identification (e.g., MyKad, passport), proof of address, and source of funds documentation where required by our licensing obligations.
• Financial data: payment method details (e.g., bank account numbers, eWallet identifiers for Touch n Go eWallet, Boost, or GrabPay), transaction history, deposit and withdrawal records.
• Communications: messages submitted via live chat, support tickets, or email correspondence with the kaya96 support team.
• Responsible gaming declarations and self-exclusion requests.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
• Usage data: pages visited, games played, wagers placed, betting history, session duration, login timestamps, and clickstream data.
• Cookie and tracking data as described in Section 6 of this Policy.

2.3 Data from Third Parties

• Identity verification data from licensed KYC and anti-money laundering (AML) service providers.
• Fraud prevention and risk assessment data from licensed third-party screening services.
• Payment transaction data from payment processors facilitating deposits and withdrawals on the Platform.

3. How kaya96 Uses Your Personal Data

kaya96 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your kaya96 account, authenticate your identity at login, and process your transactions.
• Regulatory compliance: To fulfil obligations under our international gaming licence, including KYC, AML, and responsible gaming requirements. kaya96 is obligated to verify player identities and monitor transactions for suspicious activity.
• Financial processing: To process deposits, withdrawals, and bonus payments in Malaysian Ringgit (MYR) via your chosen payment method.
• Customer support: To respond to your queries, resolve complaints, and provide technical assistance.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming behaviour, enforce self-exclusion requests, and apply player-set deposit or wagering limits.
• Platform improvement: To analyse aggregate usage patterns, improve the Platform's functionality, and develop new features that better serve Malaysian players.
• Marketing communications: To send promotional offers, bonus notifications, and product updates where you have provided consent. You may withdraw marketing consent at any time via your account settings.

4. Legal Basis for Processing

kaya96 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kaya96 — account registration, transaction processing, and Platform access.
• Legal obligation: Processing required to comply with applicable law, including gaming licence conditions, KYC/AML regulations, and data retention obligations.
• Legitimate interests: Processing for fraud prevention, Platform security, and aggregate analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other processing for which we have obtained your express consent.

5. Data Sharing and Disclosure

kaya96 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may disclose your personal data to the following categories of recipients:

• Service providers: Third-party vendors who provide services on our behalf, including payment processors (e.g., facilitating Touch n Go eWallet, Boost, Maybank FPX transactions), KYC/AML verification providers, cloud hosting services, and customer support platforms. All such vendors are contractually required to process your data only as instructed by kaya96 and to maintain appropriate security standards.
• Regulatory and licensing authorities: Our international gaming licensing authority and any competent regulatory body with jurisdiction over kaya96's operations, where disclosure is required by law or licence condition.
• Law enforcement and legal process: Government bodies, law enforcement agencies, or courts where disclosure is required by applicable law, court order, or to protect the rights, safety, or property of kaya96 or any third party.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of kaya96's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6. Cookies and Tracking Technologies

kaya96 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function correctly — session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalise your Platform experience.
• Analytics cookies: Collect anonymised data about how the Platform is used to help kaya96 improve performance and user experience. This data is aggregated and does not identify you personally.
• Marketing cookies: Used where you have consented to receive personalised promotional content based on your Platform activity.

You may manage non-essential cookie preferences through your browser settings. Note that disabling functional cookies may affect your Platform experience. Disabling strictly necessary cookies will prevent you from using the Platform.

7. Data Retention

kaya96 retains your personal data for as long as your account remains active and for such additional period as required by applicable law and our licensing obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• KYC documentation is retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support and communication records are retained for three (3) years from the date of the last interaction.
• Marketing consent records are retained for the duration of the consent and for one (1) year following its withdrawal, to demonstrate compliance.

Upon expiry of the applicable retention period, kaya96 will securely delete or anonymise your personal data.

8. Data Security

kaya96 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kaya96 Platform — the same standard used by major Malaysian banks including Maybank, CIMB, and Public Bank.
• Encryption of sensitive data fields (including passwords, which are stored as salted, one-way hashes) at rest.
• Role-based access controls limiting internal data access to authorised personnel with a legitimate operational need.
• Regular security assessments, penetration testing, and vulnerability management by qualified security professionals.
• Incident response procedures to detect, contain, and notify affected parties of any personal data breach in accordance with applicable law.

No data transmission over the internet is entirely risk-free. While kaya96 employs industry-leading security measures, we cannot guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your kaya96 login credentials.

9. Your Data Protection Rights

Subject to applicable law and our legal obligations, kaya96 account holders have the following rights in relation to their personal data:

• Right of access: Request a copy of the personal data kaya96 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kaya96's legal retention obligations.
• Right to restriction: Request that kaya96 restrict the processing of your data in certain circumstances.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw consent for marketing communications or non-essential cookies at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact kaya96 support via live chat or at the email address in Section 13. kaya96 will respond within 30 days of receiving a verifiable request.

10. Children's Privacy

The kaya96 Platform is strictly for individuals aged 21 years and above. 21+ kaya96 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from an individual below the minimum age, that account will be suspended immediately and all associated data deleted. If you believe an underage individual has registered a kaya96 account, please contact support immediately.

11. International Data Transfers

kaya96 may transfer your personal data to servers or service providers located outside of Malaysia where required for operational or licensing purposes. Any such transfers are conducted in accordance with applicable data protection law and are subject to appropriate safeguards, including contractual protections requiring the recipient to maintain equivalent data protection standards.

12. Changes to This Privacy Policy

kaya96 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our Platform operations. The date of the most recent revision is indicated at the top of this document. Where changes are material, kaya96 will notify registered account holders via the Platform or by email to their registered address. Continued use of the Platform following notice of an updated Policy constitutes acceptance of the revised terms.

13. Contact & Data Enquiries

For any questions regarding this Privacy Policy, to exercise your data protection rights, or to report a privacy concern, please contact kaya96 using the details below. Our support team is available 24 hours a day, 7 days a week.

Support email: [email protected]

Data subject requests will be acknowledged within 48 hours and responded to within 30 days, subject to identity verification. Requests involving account data may require KYC re-verification before kaya96 can process them.