kaya96 Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below.

• "kaya96", "we", "us", "our" refers to the operator of the kaya96 platform and any associated processing entities.
• "Player", "you", "your" refers to any individual who registers for a kaya96 account, visits the website, or interacts with kaya96 services.
• "Personal Data" means any information relating to an identified or identifiable natural person, including registration details, payment information, device identifiers, and usage records.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, or deletion.
• "KYC" means Know Your Customer identity-verification procedures required under international licensing obligations.
• "Third Party" means any person, organisation, or service provider that is not kaya96 or the player.

Data We Collect

kaya96 collects personal data through registration forms, KYC submissions, payment transactions, customer support interactions, and automatic technical means. The categories of data collected include, but are not limited to, those set out in the table below.

We may also collect data provided by third-party payment processors, identity-verification services, and fraud-prevention partners where this is reasonably necessary to operate the platform safely.

Lawful Basis for Processing

kaya96 processes personal data on one or more of the following lawful grounds:

• Contractual necessity — Processing is required to create and maintain your player account, execute deposit and withdrawal transactions, and deliver the services described in our Terms & Conditions.
• Legitimate interests — Processing is necessary for fraud prevention, security monitoring, responsible gambling analysis, platform improvement, and the detection of prohibited conduct, where those interests are not overridden by your rights and interests.
• Legal obligation — Processing is required to comply with applicable international licensing requirements, including KYC, anti-money-laundering, and age-verification obligations imposed on kaya96 by its licensing authority.
• Consent — Where consent is the chosen basis, for example for certain marketing or optional analytics, you will be given a clear opportunity to provide or withdraw that consent without detriment to your use of kaya96.

How We Use Your Data

Personal data collected by kaya96 is used for the following purposes:

• Opening, maintaining, and securing your player account, including password resets and two-factor authentication.
• Processing MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrency networks.
• Carrying out KYC identity and age verification to confirm that players are at least 21 years old.
• Administering bonuses, promotions, VIP tier calculations, cashback, and loyalty rewards in accordance with applicable promotional rules.
• Providing customer support through live chat, email, and on-site messaging channels in English.
• Detecting and preventing fraud, collusion, money laundering, underage access, and other prohibited conduct.
• Monitoring gameplay patterns to identify responsible gambling risk indicators, contacting at-risk players, and administering self-exclusion and deposit-limit tools.
• Sending essential account communications, including verification codes, transaction confirmations, security alerts, and policy update notices.
• Improving platform performance, game lobby design, payment flows, and customer service quality through aggregate and anonymised usage analysis.
• Complying with requests from the kaya96 licensing authority, auditors, or law enforcement where legally required.

Data Sharing and Disclosure

kaya96 does not sell, rent, or trade your personal data to third-party marketers. We may share data with carefully selected third parties only to the extent necessary for the following purposes:

• Payment processors and banking partners — Malaysian payment gateways, FPX operators, e-wallet providers, digital-asset network operators, and acquiring banks require transaction data to process deposits and withdrawals.
• Identity and fraud verification providers — Third-party KYC and anti-money-laundering screening services may receive identity documents and related data to perform regulatory checks.
• Game software providers — Certified game studios that supply casino titles and sportsbook data may receive technical session identifiers necessary for fair gameplay and RNG certification.
• Licensing and regulatory authorities — kaya96's international licensing authority or a duly authorised auditor may request account, transaction, or compliance records within their jurisdiction.
• Professional advisers — Legal, accounting, or security consultants engaged by kaya96 under confidentiality obligations may receive data necessary to provide professional advice.
• Law enforcement — Where required by a valid legal order, subpoena, or equivalent instrument, kaya96 will disclose the minimum information reasonably required to comply.

All third-party recipients are required to handle personal data in a manner consistent with appropriate security and confidentiality obligations. We do not authorise third parties to use your personal data for their own independent marketing purposes.

Cookies and Tracking Technologies

kaya96 uses cookies and similar client-side technologies to operate the platform, maintain login sessions, prevent fraudulent access, remember your preferences, and analyse aggregate traffic patterns. Cookies do not contain your password and are not used to track your activity across unrelated websites.

The following categories of cookies may be deployed on kaya96:

• Strictly necessary cookies — Required for login sessions, security tokens, and core platform functions. These cannot be disabled without preventing access to the service.
• Functional cookies — Remember preferences such as language, display settings, and recently accessed game categories to improve your experience.
• Analytics cookies — Collect anonymised aggregate data about page visits, session duration, and feature usage to help us improve the platform. No individual player is identified in this analysis.
• Security cookies — Detect unusual login patterns, device mismatches, and other indicators of account compromise or automated access.

You may manage browser-level cookie settings through your browser's privacy controls. Disabling strictly necessary cookies will prevent core kaya96 functionality from working correctly. Third-party cookies used solely for the platform's operational purposes are subject to the privacy notices of the respective providers.

Data Retention

kaya96 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following considerations:

• Active accounts — Account registration data, KYC records, and transaction history are retained for the duration of the player relationship and for a period thereafter as required by licensing, anti-money-laundering, and dispute-resolution obligations.
• Closed accounts — Records associated with closed or self-excluded accounts may be retained for a legally reasonable period to comply with regulatory requirements, respond to audits, and prevent re-registration in breach of self-exclusion.
• Support communications — Live-chat transcripts and email records may be retained for quality assurance, dispute resolution, and compliance review purposes.
• Technical and usage data — Server logs, security events, and session records are typically retained for a limited operational period and then deleted or anonymised.

When the basis for retention ceases to exist and no legal obligation requires further storage, personal data will be deleted or anonymised in a secure and verifiable manner.

Data Security

kaya96 applies industry-standard technical and organisational security measures to protect personal data against accidental or unlawful access, disclosure, alteration, or destruction. Key measures include:

• 256-bit TLS/SSL encryption across all pages, login flows, API communications, and payment transactions — the same standard used by major Malaysian banks.
• Access control policies limiting personal data access to authorised personnel with a demonstrated operational need.
• Regular internal security assessments and monitoring for unusual login patterns, brute-force attempts, and other threat indicators.
• Secure document handling for KYC submissions, with files stored in access-controlled environments and not shared beyond necessary verification workflows.
• Incident response procedures to detect, contain, and, where appropriate, notify affected parties of any security breach involving personal data.

You are responsible for keeping your kaya96 login credentials, device access, and verification codes secure. kaya96 will never ask you to disclose your full password through live chat, email, or social messaging. If you suspect that your account has been compromised, contact support immediately.

Your Rights

Depending on the laws applicable in your location, you may have the right to exercise one or more of the following with respect to personal data kaya96 holds about you:

• Access — Request a copy of the personal data kaya96 holds about you.
• Correction — Request that inaccurate or incomplete personal data be corrected without undue delay.
• Deletion — Request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations.
• Restriction of processing — Ask kaya96 to restrict processing of your data in certain circumstances, for example while the accuracy of data is contested.
• Objection to processing — Object to processing carried out on the basis of legitimate interests where you have grounds specific to your situation.
• Data portability — Request a structured, machine-readable copy of personal data you provided on a contractual or consent basis where technically feasible.
• Withdrawal of consent — Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact kaya96 support through on-site live chat or by writing to [email protected] (displayed as plain text — not a clickable link). We will respond within a reasonable period and may need to verify your identity before actioning a request. We will not charge a fee for reasonable, good-faith requests.

Please note that certain rights may be limited where fulfilling them would conflict with kaya96's legal obligations, licensing requirements, fraud-prevention duties, or the rights of other persons.

Children and Minors

kaya96 is strictly for persons aged 21 years and above. We do not knowingly collect personal data from persons under 21. Age is verified during the KYC process and may be re-verified if there is any reasonable doubt about a player's eligibility.

If kaya96 becomes aware that personal data has been collected from a person under 21 without a parent's or guardian's verifiable consent, we will take prompt steps to delete that data and close the associated account. If you believe a minor may have accessed kaya96, please contact support immediately.

Changes to This Privacy Policy

kaya96 may update this Privacy Policy from time to time to reflect changes in processing activities, licensing obligations, security practices, or applicable guidance. Where changes are material, we will update the effective date at the top of this page and, where appropriate, send a notice to registered account holders.

Continued use of kaya96 after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically. The version displaying the most recent effective date is the governing version.

Contact Us

If you have a question, concern, or request relating to this Privacy Policy or the processing of your personal data, please contact the kaya96 privacy team through any of the following channels:

• On-site live chat — Available 24 hours a day, 7 days a week through the kaya96 website.
• Support email — [email protected] (plain text — not a clickable link).
• Support hours for Malaysia — 8 AM to 2 AM Malaysian Time (MYT), every day. English-language assistance available throughout.

When contacting us about a data rights request, please include your registered username and a clear description of your request. We may ask you to verify your identity before processing the request. If you are dissatisfied with our response, you have the right to raise a complaint with the relevant authority in your jurisdiction.