1. Introduction

Kaya99 takes personal data protection seriously. This Privacy Policy details how we collect, use, disclose, and protect your personal information when you register and use the kaya99 platform.

This document is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices in user data protection. By using the kaya99 platform, you agree to be bound by the terms set out in this Privacy Policy.

"kaya99 is committed to ensuring every player fully understands how their data is used. Transparency is the cornerstone of our relationship with the player community across Malaysia."

This policy applies to all players who register via the kaya99 website, the kaya99 mobile app, and any official communication channels including support email and live chat. If you disagree with any part of this policy, we encourage you to contact us for further clarification before completing your registration.

2. Types of Personal Data We Collect

Kaya99 only collects data that is strictly necessary for platform operations, identity verification, payment processing, and regulatory compliance. We do not collect excessive or irrelevant data.

2.1 Data You Provide Directly

  • Full name as shown on official identification documents
  • Malaysia National Identity Card (MyKad) number or passport number
  • Date of birth for age verification (18 years and above)
  • Email address and mobile phone number
  • Current residential address
  • Local bank account details for deposit and withdrawal purposes
  • KYC supporting documents such as MyKad photos and bank statements

2.2 Data Collected Automatically

  • Your device's IP address when accessing the platform
  • Type and version of web browser or app used
  • Device operating system (Windows, iOS, Android, etc.)
  • Date, time and duration of each login session
  • Transaction history including deposits, withdrawals and wagering
  • Game interaction data including wagering history
  • Activity logs recorded for security and audit purposes

Kaya99 does not collect biometric data, health information, political affiliations, or religious beliefs. Our data collection is limited strictly to information needed to operate the platform safely and responsibly.

Data Category Example Information Primary Purpose Retention Period
Identity Name, MyKad, date of birth KYC Verification Throughout active account period + 7 years
Contact Email, phone number Communication & security Throughout active account period
Financial Bank account details, transaction history Payment processing 7 years (legal requirement)
Technical IP address, device type Security & fraud detection 90 days
Games Betting history, wins Audit & compliance 5 years

3. How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. kaya99 does not use your data for purposes beyond the scope stated below without first obtaining your explicit consent.

3.1 Platform Operations

  • Create and manage your player account securely
  • Process deposits and withdrawals via local Malaysian payment methods
  • Provide access to all games and services on the kaya99 platform
  • Send important notifications related to your account, transactions, and promotions

3.2 Security & Compliance

  • Perform KYC identity verification in line with regulatory requirements
  • Detect and prevent fraud, money laundering, and other illegal activities
  • Comply with reporting requirements to relevant regulatory bodies when required
  • Verify age eligibility and ensure only qualifying players access the platform

3.3 Service Improvement

  • Analyze usage patterns to improve the player experience
  • Personalize game recommendations and relevant promotional offers
  • Conduct technical testing and platform performance improvements
  • Generate internal reports for business management purposes

Kaya99 does not use your data for third-party advertising purposes. Any marketing communications we send are directly related to kaya99 services only, and you may opt out at any time.

4. Sharing Data with Third Parties

Kaya99 does not sell or rent your personal data to any third party for commercial purposes. However, in the course of operating the platform, we may need to share certain information with trusted parties under the limited circumstances described below.

4.1 Trusted Service Providers

We share necessary data with third-party service providers that help us operate the platform, including payment gateway providers (FPX, DuitNow, e-Wallet), cloud service providers, and identity verification companies. All such providers are bound by strict data protection agreements and may only use your information for the specific permitted purposes.

4.2 Legal Requirements

Kaya99 will disclose your personal data when required by Malaysian law, including to the Royal Malaysia Police (PDRM), Bank Negara Malaysia, the Malaysian Communications and Multimedia Commission (MCMC), or other relevant regulatory authorities. Such disclosures are only made when a valid court order or official request from a competent authority is in place.

Important Note: kaya99 will never sell, rent, or share your personal data with advertisers, data brokers, or third-party marketing companies under any circumstances.

5. Use of Cookies & Tracking Technologies

Kaya99 uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for the platform to function correctly — including login session authentication and security. These cookies cannot be disabled.
  • Performance Cookies: Help us understand how players interact with the platform for improvement purposes. Data is collected on an anonymized basis.
  • Functional Cookies: Save your preferences such as language and display settings so you don't need to reconfigure them each time you log in.
  • Analytics Cookies: Used to understand aggregated platform usage patterns for internal product development purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the overall functionality of the kaya99 platform.

6. Data Security Measures

Kaya99 continually invests in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorized access, and data breaches.

6.1 Technical Safeguards

  • 256-bit SSL/TLS encryption for all data transmission between browser and server
  • Data storage with AES-256 encryption in high-security-grade data centres
  • Intrusion detection system (IDS) and intrusion prevention system (IPS) active 24/7
  • Regular security vulnerability scans conducted by the internal security team and independent auditors
  • Automated data backup system with regular integrity verification

6.2 Operational Safeguards

  • Role-based access control (RBAC) — staff can only access data required for their specific duties
  • Two-factor authentication (2FA) is mandatory for all staff accessing data management systems
  • Regular cybersecurity awareness training for all kaya99 staff
  • Incident response procedures tested and updated every quarter

"While we take all reasonable precautions, no system in the world can be guaranteed 100% risk-free. We encourage players to also take an active role in securing their accounts by using strong passwords and keeping their login credentials private."

7. Player Rights Regarding Personal Data

Under Malaysia's PDPA and the kaya99 privacy policy, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights promptly and transparently.

1
Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 working days.

2
Right to Correction

If any data we hold is inaccurate or outdated, you have the right to request a correction by providing the relevant supporting evidence.

3
Right to Withdraw Consent

You may withdraw consent for certain data processing at any time, subject to applicable legal requirements.

4
Right to Complain

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Malaysia Personal Data Protection Commissioner.

5
Right to Opt Out of Marketing

You can opt out of marketing communications at any time via the unsubscribe link in any email or by contacting our support team.

6
Right to Feedback

You are entitled to a written response within 21 days for any enquiry or request relating to your personal data.

To exercise any of the above rights, contact kaya99's Data Protection Officer via email [email protected] stating the request type, account ID number and your identification details for verification.

8. Data Retention Period

Kaya99 retains your personal data only for as long as necessary to fulfill the purposes stated in this policy or as required by applicable Malaysian law. Once the retention period ends, data will be securely deleted or anonymized.

Active account data is retained for the duration your account remains active. Once an account is closed, most personal data will be deleted within 90 days, except for financial and transaction records which must be kept for 7 years under Malaysia's legal requirements. Technical data such as server logs is retained for 90 days, while wagering history is kept for 5 years for regulatory audit and compliance purposes.

9. Changes to This Privacy Policy

Kaya99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to all registered players via email at least 14 days before taking effect.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically. Continued use of the kaya99 platform after any changes are published constitutes acceptance of the updated policy.

10. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our data protection team is ready to assist.

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Response Time: Within 3 working days for general enquiries; 14 working days for data access requests
  • Live Chat Support: Available 24 hours a day, 7 days a week via the kaya99 platform

For formal complaints that cannot be resolved directly with kaya99, you may submit a complaint to Malaysia Personal Data Protection Commissioner through the official portal of the Malaysia Department of Personal Data Protection.