kaya99 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how kaya99 ("kaya99", "we", "us", "our"), the operator of the online gaming platform at kaya99.win, collects, processes, stores, and discloses personal data relating to individuals ("you", "your", "User") who access or use the kaya99 platform and associated services.

kaya99 is committed to the responsible handling of personal data. This Policy is drafted in accordance with applicable data protection principles and the requirements of kaya99's international gaming authority licence. By registering an account or using the kaya99 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the kaya99 Terms & Conditions, which are incorporated by reference and govern your overall use of the platform.

2 Data We Collect

kaya99 collects personal data in the following categories:

Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (NRIC, passport) provided during account registration and KYC verification.

Contact Data: Malaysian mobile number, email address, and residential address. This data is used for account communications, OTP verification, and withdrawal processing.

Financial Data: Bank account details, e-wallet identifiers (Touch n Go eWallet, Boost), and FPX transaction references used for deposits and withdrawals. kaya99 does not store full payment card numbers.

Account Activity Data: Login timestamps, IP addresses, device identifiers, browser type, session duration, game history, betting records, wagering amounts, and deposit/withdrawal history.

Communications Data: Records of your interactions with kaya99 customer support, including live chat transcripts, support ticket content, and any documents you submit to us.

Technical Data: Device type, operating system, screen resolution, browser version, referring URL, and geolocation data (country/state level, derived from IP address).

3 How We Collect Data

kaya99 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in promotions.
• Automatically: when you use the kaya99 platform, our servers automatically record technical data including your IP address, device fingerprint, browser information, session activity, and pages visited.
• Via cookies and similar technologies: as described in Section 9 below.
• From payment processors: transaction confirmation data from Touch n Go, Boost, FPX, Maybank, CIMB, Public Bank, and other payment partners when you initiate deposits or withdrawals.
• From identity verification partners: kaya99 may use third-party KYC verification services to validate identity documents submitted during registration, in compliance with anti-money laundering obligations.

4 Why We Use Your Data

kaya99 processes your personal data for the following purposes:

• Account management: to create, maintain, and administer your kaya99 account, including authentication and security.
• Service delivery: to provide access to the gaming products available on the platform — sportsbook, live casino, slots, Toto 4D, and poker.
• Transaction processing: to process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method.
• Identity verification (KYC): to confirm your identity, age (21+), and residence, as required by our gaming licence and anti-money laundering obligations.
• Fraud and security: to detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct.
• Regulatory compliance: to comply with applicable laws, respond to regulatory enquiries, and fulfil kaya99's obligations as a licensed gaming operator.
• Customer support: to respond to your support requests, complaints, and queries in a timely manner.
• Responsible gaming: to monitor gaming behaviour and identify users who may benefit from responsible gaming interventions, in accordance with our licence obligations.
• Platform improvement: to analyse aggregate usage patterns and improve the design, performance, and content of the kaya99 platform.
• Marketing (with consent): to send you promotional communications about kaya99 bonuses, new games, and special offers, where you have provided consent and have not opted out.

5 Legal Bases for Processing

kaya99 relies on the following legal bases to process your personal data:

• Contractual necessity: processing required to perform the contract between you and kaya99 (i.e., to operate your account and provide gaming services).
• Legal obligation: processing required to comply with applicable laws and regulatory requirements, including anti-money laundering, counter-terrorism financing, and age verification obligations.
• Legitimate interests: processing carried out for kaya99's legitimate interests, including fraud prevention, platform security, and business analytics, where these interests are not overridden by your data protection rights.
• Consent: processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting kaya99 support.

6 Data Sharing

kaya99 does not sell your personal data to third parties. kaya99 may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: Touch n Go, Boost, FPX banks, and other payment partners, solely to process your deposit and withdrawal transactions.
• KYC and identity verification providers: to validate identity documents submitted during account registration.
• Game software providers: kaya99's game content is provided by third-party software developers. These providers receive only the minimum technical data necessary to deliver the gaming experience (e.g., session tokens), and not your full personal profile.
• Regulatory and law enforcement authorities: where kaya99 is required by law, court order, or regulatory direction to disclose personal data.
• Fraud prevention and security services: to detect and prevent fraudulent activity across the platform.
• IT and infrastructure providers: cloud hosting, database, and security vendors who process data on kaya99's behalf under data processing agreements that require them to protect your data.

7 International Transfers

kaya99 is an internationally licensed gaming operator and some of the service providers and partners described in Section 6 may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, kaya99 implements appropriate safeguards to ensure your data receives a level of protection consistent with the standards described in this Policy, including the use of contractual data protection clauses with recipients.

By using the kaya99 platform, you consent to the international transfer of your personal data for the purposes described in this Policy, subject to the safeguards described above.

8 Data Retention

kaya99 retains personal data for as long as your account is active and for a further period as required by applicable law and our gaming licence obligations. Specifically:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
• KYC documents are retained for the same minimum five-year period post-closure.
• Support communications are retained for three (3) years to enable resolution of retrospective disputes.
• Marketing consent records are retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an identifiable individual.

9 Cookies & Tracking Technologies

The kaya99 platform uses cookies and similar tracking technologies to deliver and improve the platform experience. The categories of cookies used are as follows:

• Strictly necessary cookies: essential for the platform to function — including session authentication cookies that keep you logged in to your kaya99 account during a session. These cannot be disabled.
• Performance cookies: used to collect anonymous aggregate data about how users navigate the platform, enabling kaya99 to identify and resolve performance bottlenecks. No personally identifiable data is collected by these cookies.
• Functionality cookies: used to remember your preferences (e.g., preferred language, last visited game category) to personalise your platform experience.
• Analytics cookies: used to understand aggregate user behaviour and improve platform design. Data collected is anonymised before analysis.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the kaya99 platform, including the ability to remain logged in.

10 Your Rights

Subject to applicable law and kaya99's legal and regulatory obligations, you have the following rights with respect to your personal data held by kaya99:

• Right of Access: you may request a copy of the personal data kaya99 holds about you.
• Right of Rectification: you may request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure: you may request deletion of your personal data, subject to kaya99's legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction: you may request that kaya99 restrict its processing of your data in certain circumstances.
• Right to Data Portability: you may request a machine-readable copy of the personal data you provided to kaya99, for the purpose of transferring it to another service provider.
• Right to Object: you may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: where kaya99 processes your data based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact kaya99 support. Requests will be responded to within 30 days. In complex cases, this period may be extended by a further 60 days, and you will be notified of the extension and the reason for it.

11 Children's Privacy

The kaya99 platform is strictly restricted to persons aged 21 years or older. kaya99 does not knowingly collect personal data from persons under the age of 21. If kaya99 becomes aware that personal data has been collected from a person under the minimum age, that account will be immediately closed, all data deleted (except where retention is legally required), and any balance forfeited.

Parents and guardians who believe their minor child has registered on the kaya99 platform should contact kaya99 support immediately so that the account can be closed and the matter addressed appropriately.

12 Security Measures

kaya99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and kaya99's servers.
• Encryption at rest for sensitive stored data including financial records and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for internal administrative access to production systems.
• Regular security assessments and penetration testing of the kaya99 platform infrastructure.
• Incident response procedures to detect, contain, and notify affected users in the event of a data breach.

While kaya99 implements robust security measures, no system is entirely immune to risk. You are encouraged to use a strong, unique password for your kaya99 account and to enable OTP verification to maximise the security of your account.

13 Third-Party Links

The kaya99 platform does not contain links to external third-party websites for commercial purposes. Where kaya99's game content is provided by third-party software providers, those providers operate their game engines within the kaya99 platform environment. kaya99 is not responsible for the privacy practices of third-party game providers operating within their own separate infrastructure. You are encouraged to review the privacy policies of any third-party services you interact with.

14 Policy Changes

kaya99 reserves the right to amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or kaya99's data processing practices. Where a material amendment is made, kaya99 will post a notice on the platform and, where practicable, notify you via your registered contact details at least 14 days prior to the amendment taking effect.

Your continued use of the kaya99 platform following the effective date of an amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, please discontinue use of the platform and contact kaya99 to close your account.

The date of the most recent revision to this Policy is displayed at the top of this page. We recommend reviewing this Policy periodically to stay informed of how kaya99 protects your data.

15 Contact Us

For questions, concerns, or requests relating to this Privacy Policy or kaya99's handling of your personal data, please contact kaya99's support team:

kaya99 takes all privacy concerns seriously. If you believe your data rights have not been respected, you are entitled to raise a complaint with the relevant supervisory authority in your jurisdiction.