Kaya 88 Privacy Policy – How We Protect Your Personal Data in Malaysia

Kaya 88 (operated through the website kaya88.im) takes the privacy and personal data protection of all its members seriously. We understand that your trust in kaya 88 depends not only on the quality of the games and services we offer, but also on how we handle your most sensitive information.

This Privacy Policy is drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing the processing of personal data in Malaysia within the context of commercial transactions. kaya 88 complies with all seven data protection principles set out in the PDPA, including the general principle, notice and choice principle, disclosure principle, security principle, retention principle, data integrity principle, and access principle.

This policy applies to all information collected by kaya 88 through its website, mobile app, email communications, and any other channels used to interact with members in Malaysia.

Kaya 88 collects various types of personal data depending on how you interact with our platform. Below is a full list of the data categories we may collect:

Kaya 88 collects your personal data through several methods. We ensure all collection methods are lawful, transparent, and in line with PDPA 2010:

• Registration forms and profile: When you register a new account with kaya 88, you provide identification and contact information directly.
• Identity verification (KYC) process: To comply with Malaysian legal requirements, including anti-money laundering obligations, we may request identity verification documents such as a copy of your MyKad.
• Financial transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), your transaction details are recorded automatically.
• Gaming activity: kaya 88 systems record every game session — from slots to live baccarat and blackjack tables — for account management and support purposes.
• Cookie and tracking technology: The kaya 88 website uses cookies and similar technologies to enhance the user experience and analyse usage patterns.
• Support communications: Every time you contact the kaya 88 support team via Live Chat, email, or WhatsApp, that communication is stored to ensure service quality.

Kaya 88 uses your personal data solely for legitimate, stated purposes. The following are the primary purposes for which your data is used:

• Account management: Creating, verifying, and maintaining your kaya 88 account, including processing logins and keeping your account secure.
• Transaction processing: Processing deposits and withdrawals via Malaysian e-wallets and online banking securely and accurately.
• Service delivery: Gives you access to all kaya 88 games and services, including slots, baccarat, blackjack, poker, Malaysia Super League and EPL Sports Betting, badminton, and e-sports.
• Eligibility verification: Verifying that you meet the age eligibility requirement (18 years and above) and other conditions for using the kaya 88 platform.
• Legal compliance: Fulfilling Malaysian legal obligations, including anti-money laundering (AML) and KYC requirements.
• Customer support: Providing effective and personalised technical support and customer service.
• Platform improvements: Analysing aggregated and anonymised usage data to identify areas for improvement on the kaya 88 platform.
• Marketing communications: Sending you relevant information about kaya 88 promotions and bonuses — only if you have given your consent to receive such communications.

Kaya 88 does not sell, rent, or trade your personal data to any third party for their marketing or commercial purposes. However, there are limited situations where data sharing is necessary:

• Payment processors: Required transaction information is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (via DuitNow or FPX) to process your deposits and withdrawals.
• Gaming software providers: Required game data is shared with third-party game providers that supply slots, Live Casino, and other games on the kaya 88 platform — limited strictly to data necessary for running the games.
• Law enforcement authorities: kaya 88 is required under Malaysian law to disclose data when requested by competent authorities through valid legal processes.
• Technical service providers: Technology infrastructure providers (cloud servers, data analytics) that support kaya 88's operations — all bound by strict confidentiality agreements.

All third parties that receive data from kaya 88 are required to uphold equivalent data protection standards and may only use that data for the purposes specified in their agreement with kaya 88.

Kaya 88 does not retain your personal data any longer than necessary. Retention periods are determined based on the purpose of collection and applicable legal requirements:

• Active account data: Retained for the duration your account is active, plus 7 years after account closure to meet Malaysian legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian tax and anti-money laundering legal requirements.
• Support communication records: Retained for 3 years from the date of last communication.
• Technical activity logs: Retained for 90 days for security and debugging purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications.

Once the retention period expires and there is no legal basis to continue storing the data, it will be securely deleted or anonymised using industry-approved methods.

Kaya 88 continually invests in security infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, modification, or destruction. Our key security measures include:

• Data-in-transit encryption using TLS 1.3 and 256-bit SSL protocols — no personal data is transmitted in plain text.
• Data-at-rest encryption for all sensitive information, including passwords (stored as irreversible hashes) and financial information.
• Role-based access control (RBAC) ensures that only authorised staff can access member data, strictly limited to what their job requires.
• Round-the-clock security monitoring with an intrusion detection system (IDS) and automated incident response.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Mandatory data security training for all kaya 88 staff who handle member data.
• A comprehensive data incident response plan, including member notification procedures in the event of a material data breach.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by kaya 88:

To exercise any of the above rights, please contact the kaya 88 data protection team by email at support@kaya88.im. We will process your request within 21 working days from the date of receipt. For complex requests, we may require additional time and will notify you accordingly.

The kaya 88 website uses cookies — small text files stored on your device — to enhance your experience and keep certain features running smoothly. kaya 88 uses three categories of cookies:

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect certain functions of the kaya 88 platform.

Kaya 88 takes the protection of children and minors very seriously. The kaya 88 platform is restricted to individuals aged 18 and above in any way. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will promptly delete that data and close the account in question. Parents or guardians who find that their child has registered an account on kaya 88 should contact our support team immediately at support@kaya88.im.

Kaya 88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, service requirements, or Malaysian legal developments. Whenever a material amendment is made, we will:

• Updating the "Last updated" date at the top of this document.
• Posting a clear notice on the kaya 88 homepage at least 7 days before the changes take effect.
• Sending email notifications to all active members for significant changes.

Continued use of the kaya 88 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or complaints regarding how kaya 88 handles your personal data, or if you wish to exercise any of your rights under the PDPA 2010, please contact us through the following channels:

The kaya 88 data protection team will review all enquiries and complaints seriously and endeavour to respond within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia which is the regulatory body for PDPA in Malaysia.