Important Note: This Privacy Policy describes the personal data handling practices of kaya888 at kaya888.biz. By registering for or using the kaya888 platform, you acknowledge that you have read and understood this policy. Please read it carefully — it is your right to know.
Introduction & Scope of This Privacy Policy
Kaya888 ("we", "our platform") operates an online entertainment platform based at kaya888.biz. We understand that your trust depends greatly on how we handle the personal information you share with us.
This Privacy Policy applies to all individuals who access or use the kaya888 platform, including website visitors, registered users, and VIP programme members. It covers all information collected through the website, mobile applications (where applicable), and any direct interactions with the kaya888 team.
This policy was developed in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. We are committed to ensuring your personal data is processed lawfully, fairly, and transparently.
This Privacy Policy should be read in conjunction with kaya888 Terms & Conditions, which together form the complete contractual framework between you and kaya888.
Types of Personal Data Collected by kaya888
Kaya888 collects personal data from you through various sources and in a number of different circumstances. The following are the categories of data we collect:
A. Data You Provide Directly
- Registration Information: Full name, identity card number (MyKad), date of birth, phone number, email address.
- Account Information: Chosen username, password (stored in hashed form), security questions.
- Financial Information: Details of payment methods used (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX) — account numbers are not stored directly by kaya888.
- Verification Documents: MyKad copy, passport, or other supporting documents submitted during the KYC (Know Your Customer) process.
B. Data Collected Automatically
- Usage Data: Game records, bets, winnings, losses, session duration, pages visited.
- Technical Data: IP address, browser type and version, device operating system, screen resolution.
- Location Data: Approximate location based on IP address (state/city) — not precise GPS location.
- Cookie Data: Information collected through cookies and tracking technologies as described in Section 6.
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity | Name, MyKad, date of birth | Identity Verification & KYC |
| Contact | Email address, phone number | Communications & Notifications |
| Finance | Payment methods, transaction history | Processing deposits/withdrawals |
| Usage | Gaming records, active sessions | Platform improvement & AML |
| Technical | IP address, device type | Security & Verification |
How kaya888 Uses Your Data
Kaya888 uses your personal data only for lawful and relevant purposes. Here is how your data is used:
- Service Delivery: To allow you to register, log in, play games, bet on sports (including Malaysia Super League football, EPL, BWF badminton), purchase lottery tickets, and access all features of the kaya888 platform.
- Financial Processing: To process deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals of winnings to your account.
- Verification & KYC: To verify your identity and age as part of our anti-money laundering (AML) compliance and fraud prevention procedures.
- Customer Support: To assist with enquiries, resolve complaints, and provide technical support in Bahasa Melayu.
- VIP Programme & Promotions: To calculate VIP points, process cashback, and deliver relevant promotional offers based on your playing activity.
- Platform Improvements: To analyse aggregated usage patterns (non-individually identifiable) in order to improve the kaya888 platform's user experience.
- Security & Compliance: To detect fraudulent activity, prevent multi-account abuse, and fulfil legal obligations.
Legal Basis: The processing of your data by kaya888 is based on: (a) the fulfilment of the service contract between you and kaya888; (b) kaya888's legitimate interest in operating a secure business; (c) compliance with legal obligations; and (d) your consent where required.
Sharing of Data with Third Parties
Kaya888 does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, in the course of operating the platform, we may share data with the following parties on a limited basis:
- Payment Service Providers: Payment gateways that process DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX transactions — only the data necessary to complete each transaction is shared.
- Game Provider: Gaming software providers that supply Live Casino, slots, and other games — data is shared only as necessary to enable gameplay and verify results.
- Identity Verification Services: Third-party KYC providers who assist in verifying user identities in accordance with AML compliance requirements.
- Legal Authorities: Where required by Malaysian law, a court order, or a valid request from a law enforcement agency.
- Infrastructure Provider: Cloud computing and hosting services that store your data in a secure, controlled environment.
All third parties that share data with kaya888 are bound by strict confidentiality agreements and may only use that data for the specific purposes that have been agreed upon.
Kaya888 Data Security Measures
Kaya888 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
- Data Encryption in Transit: All communications between your browser and kaya888's servers are protected with 256-bit Transport Layer Security (TLS) encryption.
- Stored Data Encryption: Sensitive data such as passwords is stored in hashed form using the bcrypt algorithm, which cannot be decrypted.
- Internal Access Controls: Access to users' personal data is strictly limited to kaya888 staff who require it solely to carry out their job responsibilities.
- 24/7 Security Monitoring: Intrusion detection and prevention systems (IDS/IPS) operate continuously to detect and respond to security threats.
- Regular Security Audits: kaya888 undergoes periodic independent security audits to ensure data protection standards are consistently upheld.
- Incident Response Plan: kaya888 has a clear data security incident response plan to ensure any data breach is handled promptly and users are notified accordingly.
Your Responsibilities: While kaya888 takes all reasonable steps to protect your data, account security is also your responsibility. Please use a strong password, do not share your login credentials, and contact us immediately if you suspect any suspicious activity on your kaya888 account.
Cookies & Tracking Technologies
Kaya888 uses cookies and similar tracking technologies to enhance the user experience and analyse how our platform is used. Below are the types of cookies we use:
- Essential Cookies: Required for the platform to function correctly — including login session authentication and language preferences. These cookies cannot be disabled.
- Performance Cookies: Collects information on how users interact with the platform (pages visited, time spent) to help us improve kaya888. Data is collected in aggregate form and cannot be used to identify individuals.
- Functional Cookies: Saving your preferences such as display language, interface layout, and other personal settings.
- Analytics Cookies: Used to understand overall platform usage patterns for the purpose of continuous improvement.
You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the kaya888 platform.
Your Rights Under Malaysia's PDPA
As a kaya888 user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) with respect to your personal data:
Right of Access
You have the right to request and receive a copy of the personal data kaya888 holds about you within a reasonable timeframe.
Right to Rectification
You have the right to request correction of your personal data that is inaccurate, incomplete, or out of date.
Right to Erasure
Under certain circumstances, you may request the deletion of your personal data, subject to legal retention obligations.
Right to Object
You have the right to object to the processing of your data for certain purposes, including direct marketing communications.
Right to Data Portability
You may request a copy of your personal data in a machine-readable format for transfer to another platform.
Right to Restrict Processing
Under certain circumstances, you may request that kaya888 restrict how your data is processed while a dispute is being resolved.
To exercise any of the above rights, please contact the kaya888 team by email at support@kaya888.biz or via Live Chat. We will process your request within 30 working days.
Data Retention Period
Kaya888 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by Malaysian law. The following are general data retention guidelines:
- Active Account Data: Retained for as long as your account is active and for 5 years following account closure, in line with AML compliance requirements.
- Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and AML legal requirements.
- KYC Documents: Retained for 5 years from the date of submission or account closure.
- Activity Logs: Technical and platform activity logs are retained for 12 months for security and audit purposes.
- Support Communications: Customer support interaction records are retained for 3 years.
When data is no longer needed, kaya888 will securely delete or destroy it in accordance with industry-standard procedures.
Children's Data Protection
The kaya888 Platform not designed for or directed at individuals under the age of 18. kaya888 does not knowingly collect personal data from children.
Should kaya888 discover that personal data of a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to:
- Closing the relevant account immediately.
- Permanently deleting all related personal data from our systems.
- Returning any related fund balances to the original sender.
Parents or guardians who are concerned that their child may have registered on kaya888 are advised to contact our support team immediately at support@kaya888.biz.
Amendments to This Privacy Policy
Kaya888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, the technologies we use, or applicable legal requirements.
When material changes are made to this Privacy Policy, kaya888 will:
- Updating the "Last updated" date at the top of this document.
- Displaying in-platform notifications on kaya888 to keep users informed of any changes.
- Sending email notifications to all registered users for highly significant changes.
Your continued use of the kaya888 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.
Contact kaya888's Data Protection Officer
If you have any questions, concerns, or complaints about how kaya888 handles your personal data, or if you wish to exercise your privacy rights, please contact us:
- Privacy Email: privacy@kaya888.biz
- General Support Email: support@kaya888.biz
- Live Chat: Available 24/7 via the kaya888 platform
- Response Time: Under 24 hours (email) | Under 3 minutes (live chat)
- Support Languages: Bahasa Melayu & English
If you are dissatisfied with our response, you have the right to lodge a complaint with Personal Data Protection Commissioner of Malaysia through the official channels designated for this purpose. Further details are available on the official website of the Department of Personal Data Protection Malaysia.
This Privacy Policy is governed by and interpreted in accordance with the laws of Malaysia, in particular the Personal Data Protection Act 2010 (PDPA). Any disputes relating to this policy are subject to the jurisdiction of Malaysian courts.