Personal Data Protection

Privacy Policy kaya888 –
Your Data, Our Responsibility

Kaya888 takes every aspect of your personal data protection seriously. This document explains in detail how we collect, use, store and protect your information throughout your use of our platform.

Last Updated: 1 January 2026  |  Language: Malay
Important Note: This Privacy Policy forms part of the kaya888 Terms and Conditions. By using our platform, you agree to how we process your personal data as described in this document. Please read it carefully before continuing.
1

Introduction and kaya888's Commitment to Privacy

Kaya888 ("we", "our platform") deeply values the trust placed by every member who registers and uses our services. That trust goes beyond money — it also covers how we handle your most personal information.

This Privacy Policy is drafted in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and international best practices in data management. It clearly explains what data we collect, why we need it, how we use it, and who can access it.

We believe transparency is the foundation of a healthy relationship between a platform and its users. That is why we never hide information in fine print or use confusing technical language. What you read here is exactly what we do with your data.

Our commitment to you: kaya888 has never and will never sell your personal data to any third party for marketing purposes. Your data belongs to you — we only use it for the purposes stated in this policy.
2

Personal Data We Collect

Kaya888 collects various types of personal data to ensure our platform operates safely, efficiently and in compliance with applicable legal requirements. This data is collected directly from you during registration, platform use and through automated technologies.

Identity Information Full name, date of birth, identity card number, gender, nationality
Contact Information Email address, phone number, current residential address
Financial Information Bank account number, bank name, deposit and withdrawal transaction history
Device Data IP address, device type, operating system, web browser, unique device ID
Gaming Data Betting history, games played, session duration, wins and losses
Verification Documents MyKad copy, passport, bank statement for KYC process

We only collect data that is strictly necessary for legitimate purposes. We do not collect sensitive information such as biometric data or medical information unless specifically stated and with your consent.

3

How We Use Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. Here are the key ways kaya888 uses your personal information:

  • Account Management: To create, verify and maintain your account on the kaya888 platform, including the KYC process as required by law.
  • Transaction Processing: To process your deposits and withdrawals securely and accurately to your registered bank account or eWallet.
  • Fraud Prevention: To detect and prevent fraudulent activity, money laundering and platform abuse through behavioural pattern analysis.
  • Legal Compliance: To fulfil our obligations under Malaysian law, including PDPA 2010, AML/CFT regulations and other reporting requirements.
  • Service Improvement: To analyse usage patterns and improve platform performance, user experience and product offerings.
  • Communications: To send important account notifications, relevant promotions and platform updates via email or SMS.
  • Customer Support: To handle enquiries, complaints and support requests effectively and promptly.
You may opt out of marketing communications at any time by updating your notification preferences in your account settings. However, important notifications related to account security and transactions cannot be disabled as they are part of our core service.
4

Information Sharing and Disclosure

Kaya888 does not share your personal data with external parties except in the situations outlined below. Any data sharing is carried out with appropriate safeguards and only to the extent necessary for a legitimate purpose.

  • Payment Service Providers: We share necessary transaction information with banks, payment processors, and eWallet providers to enable deposits and withdrawals to be processed securely.
  • Identity Verification Providers: Your KYC information is shared with authorised third parties to verify your identity and ensure legal compliance.
  • Technology Service Providers: Our technical partners who help operate the platform infrastructure, analytics, and customer support are bound by strict confidentiality agreements.
  • Relevant Authorities: We will disclose information when required by law, court order, or direction from a legitimate regulatory authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of company assets, user data may be transferred with reasonable notice given to members.
What we do not do: kaya888 does not share, sell or rent your personal data to advertisers, data brokers or any third party for marketing purposes without your explicit consent. This is an unwavering commitment.
5

Data Security and Protection

Kaya888 continuously invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration or destruction.

  • 256-bit SSL/TLS Encryption for all data communications between your device and our servers.
  • Database-level data encryption for all sensitive information stored, including financial details and KYC documents.
  • Two-Factor Authentication (2FA) available for all member accounts as an additional layer of security.
  • 24/7 security monitoring by a dedicated cybersecurity team to detect and respond to any threats in real time.
  • Regular security audits by independent third parties to ensure our data protection standards remain current.
  • Internal access controls with strict controls — only authorised staff with a legitimate business need may access member data.

While we take all reasonable steps to protect your data, no security system is entirely perfect. In the event of a data breach affecting your information, we will notify you and the relevant authorities within the timeframe prescribed by law.

6

Cookies and Tracking Technologies

Kaya888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

  • Essential Cookies: Required for essential platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Helps us understand how users interact with the platform through anonymous analytics for continuous improvement.
  • Functional Cookies: Saves your preferences such as language, display settings, and game preferences to make your experience more comfortable.
  • Marketing Cookies: Used to display relevant promotions to you. You may decline these cookies without affecting the platform's core functionality.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect some features of the kaya888 platform, though core functions such as gaming and transactions will continue to operate normally.

7

Your Rights as a kaya888 Member

Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data held by kaya888:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request an immediate correction.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances as provided by law.

To exercise any of the above rights, contact our data protection team via support email. We will respond within 30 working days from the date the request is received.
8

Data Retention Period

Kaya888 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law.

  • Active account data: Retained for the duration your account is active and for 7 years after account closure to meet AML legal requirements.
  • Transaction records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia financial laws.
  • KYC documents: Retained for the duration of the active account and 7 years thereafter for compliance purposes.
  • Log and security data: Retained for 2 years for security and dispute resolution purposes.
  • Customer support communications: Retained for 3 years for reference and service quality purposes.

When data is no longer required, we will securely delete or anonymise it using approved procedures to ensure it cannot be recovered.

9

Privacy Policy Amendments

Kaya888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements or service improvements. Any significant amendments will be communicated to you through:

  • An email notification will be sent to your registered email address at least 14 days before any changes take effect.
  • A clear in-platform notification upon your next login.
  • Updating the "Last Updated" date at the top of this document.

Continued use of the kaya888 platform after the effective date of any changes constitutes acceptance of the revised privacy terms. If you do not agree with the changes, please stop using the platform and close your account.

10

Contact Us Regarding Privacy

If you have any questions, concerns or complaints about how kaya888 handles your personal data, or wish to exercise any of your privacy rights, our team is ready to assist.

You may contact the kaya888 Data Protection Officer (DPO) via:

  • Email: [email protected] (state "Privacy Enquiry" in the email subject)
  • Livechat: Via the live support widget on the kaya888 platform, available 24/7
  • Target response time: Within 5 working days for general enquiries; 30 working days for formal data rights requests
We are committed to handling every privacy enquiry seriously and professionally. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant authorities.
Why Your Privacy Is Safe with kaya888

We go beyond mere legal compliance — protecting your personal data is a core value that guides every decision we make.

High-Level Encryption

All data transmitted between your device and kaya888's servers is protected by 256-bit SSL/TLS encryption — the same standard used by leading banks in Malaysia. No one can intercept or misuse your information while in transit.

Malaysia PDPA Compliance

Kaya888 operates in full compliance with Malaysia's Personal Data Protection Act 2010. We conduct regular compliance reviews to ensure our data processing practices continuously meet the latest local legal requirements.

Strict Access Controls

Only staff with specific authorisation may access member personal data, and every access is fully logged. The need-to-know principle is enforced at all levels of the organisation without exception.

No Data Sales

This is not an empty promise – kaya888 has never and will never sell, rent, or share member personal data with advertisers or data brokers. Our business model does not rely on monetising user data.

Privacy Controls in Your Hands

Through your kaya888 account settings, you can manage communication preferences, update personal information, and request data deletion at any time. Your privacy controls require no permission or approval from any party.

Immediate Breach Notification

In the event of any security incident affecting your data, kaya888 is committed to notifying you within 72 hours — well ahead of the minimum timeframe required by law — so you can take early protective action.

kaya888's Data Protection Process

From the moment you register to every transaction you make, here is how we keep your data safe at all times.

1
Minimum Data Collection

We only request information that is genuinely necessary. No excessive data is collected – every field you fill in has a clear and legitimate purpose in the operation of our platform.

2
Instant Encryption

Your data is encrypted the moment it enters our systems. Whether in transit or at rest, your sensitive information is never stored in a readable form without authorisation.

3
Continuous Monitoring

Our automated monitoring system watches for any suspicious activity 24 hours a day, 7 days a week. Any anomaly triggers a security response within seconds.

4
Regular Audits and Reviews

Our internal teams and independent external auditors regularly assess our data security practices to ensure our protection standards remain aligned with the latest threats and regulatory requirements.

5
Staff Training

All kaya888 staff undergo rigorous and regular data protection training. A privacy culture is not just a policy on paper — it is practised by every individual in our organisation.

6
Secure Data Deletion

When data is no longer needed, it is deleted using procedures that ensure it cannot be recovered. No obsolete data is left sitting in our systems without a legitimate purpose.

Your Privacy Is Secured. Ready to Getting Started?

Join over 500,000 members who have trusted kaya888 as their online entertainment platform of choice. Register today and enjoy a safe, fair and enjoyable gaming experience.

Bahasa Melayu