kaya96 Privacy Policy

1. About This Policy

1.1 This Privacy Policy applies to all personal data processed by kaya96 in connection with the operation of the kaya96 online gaming platform accessible at kaya96.co (the "Platform"). It covers data collected when you register an account, make deposits or withdrawals, play games, contact support, or otherwise interact with kaya96 Services.

1.2 kaya96 acts as the data controller in respect of the personal data described in this Policy. "Personal data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, email address, device identifiers, and payment information.

1.3 By registering a kaya96 account and using the Platform, you confirm that you have read and understood this Privacy Policy. This Policy should be read alongside the kaya96 Terms & Conditions.

1.4 If you are located in Malaysia, your data is processed in accordance with our internal data protection standards modelled on internationally recognised privacy principles. kaya96 is not currently subject to the jurisdiction of Bank Negara Malaysia or the Personal Data Protection Act 2010 (PDPA) in its capacity as an operator licensed under Curacao eGaming; however, we voluntarily apply PDPA-equivalent protections to data relating to Malaysian players as a matter of good practice.

2. Data We Collect

2.1 kaya96 collects personal data through a number of means, including data you provide directly and data collected automatically through your use of the Platform. The categories of data we collect include:

2.2 kaya96 does not collect full payment card numbers. Card payment transactions are processed through certified payment service providers who are responsible for the secure handling of card data in accordance with PCI DSS standards. kaya96 receives only tokenised or truncated payment references.

3. How We Use Your Data

kaya96 uses the personal data it collects for the following purposes:

• Account Registration and Management: To create and maintain your kaya96 account, verify your identity, and manage your login credentials and session security.
• Payment Processing: To process your MYR deposits via FPX, Touch 'n Go eWallet, Boost, Maybank2u, CIMB Clicks, and other supported payment methods, and to process withdrawal requests to your registered payment method.
• KYC and AML Compliance: To verify your identity, detect and prevent money laundering and fraud, and meet the requirements of our Curacao eGaming licence obligations.
• Game and Platform Delivery: To provide access to kaya96 games and betting markets, record game outcomes, calculate results, and maintain the integrity of game sessions.
• Customer Support: To respond to your support requests, investigate complaints, and communicate with you regarding account-related matters.
• Responsible Gaming: To enforce deposit limits, self-exclusion requests, and other responsible gaming settings you have applied to your kaya96 account.
• Security and Fraud Prevention: To detect suspicious login activity, prevent unauthorised account access, and investigate potential policy violations or fraudulent behaviour.
• Marketing Communications: Where you have consented to receive them, to send you promotional offers, bonus notifications, and updates about new features or games on kaya96. You may withdraw this consent at any time via your account notification settings.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the performance and features of the kaya96 platform over time.

4. Legal Basis for Processing

kaya96 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations under the kaya96 Terms and Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with our obligations under our Curacao eGaming licence, including KYC identity verification and AML transaction monitoring.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics — where these interests do not override your data protection rights.
• Consent: Marketing communications and non-essential cookies, where your specific consent has been obtained and can be withdrawn at any time.

5. Sharing Your Data

5.1 kaya96 does not sell your personal data to third parties. We share personal data only where necessary for the purposes described in Section 3, and only with recipients who are contractually bound to maintain appropriate data protection standards. These recipients include:

• Payment Service Providers: Including FPX operators, Touch 'n Go eWallet, Boost, and banking partners such as Maybank, CIMB, and Public Bank — to the extent necessary to process your transactions.
• KYC and AML Verification Partners: Third-party identity verification services used to validate government-issued documents and screen against sanctions and PEP lists.
• Game Providers: Certified game studios and live casino operators — to the extent necessary to deliver game sessions and resolve disputes relating to game outcomes.
• IT and Hosting Providers: Cloud infrastructure and hosting providers who store and process platform data on kaya96's behalf under data processing agreements.
• Regulatory Authorities: The Curacao eGaming licensing authority, or other competent authorities, where disclosure is required by applicable law or licensing condition.
• Legal and Professional Advisers: Where disclosure is required in connection with legal proceedings, debt recovery, or regulatory investigations.

5.2 kaya96 does not disclose your personal data to advertisers or data brokers for commercial profiling purposes.

6. Cookies & Tracking Technologies

6.1 kaya96 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that allow us to recognise returning visitors, maintain session state (keeping you logged in across page navigations), and collect analytics data about how the Platform is used.

6.2 The types of cookies used by kaya96 include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your kaya96 account. These cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to collect aggregated data about how players navigate the Platform — pages visited, session duration, and feature usage. This data is used to improve the kaya96 user experience. These are set only where you have consented.
• Preference Cookies: Store your language settings and display preferences so that they persist between sessions.

6.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the kaya96 login process and game sessions from functioning correctly.

7. Data Retention

7.1 kaya96 retains personal data for as long as your account remains active and for a period thereafter as required by our Curacao eGaming licence obligations and applicable anti-money laundering regulations. In practice, this means transaction records and identity verification documents are typically retained for a minimum of five years following account closure.

7.2 Gaming activity logs and account history are retained for a period sufficient to resolve any outstanding disputes and to meet our reporting obligations to the licensing authority.

7.3 Marketing communications data is retained only for so long as you maintain your consent to receive such communications. Upon withdrawal of consent, your email address will be removed from marketing lists within 30 days, though it will be retained on our suppression list to prevent accidental re-subscription.

7.4 Technical logs (server access logs, security event logs) are retained for a rolling period of 12 months unless a specific security investigation requires longer retention.

8. Data Security

8.1 kaya96 implements technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and kaya96 servers — the same encryption standard used by Malaysian banking applications such as Maybank2u and CIMB Clicks.
• Bcrypt hashing with per-user salts for all stored passwords. kaya96 cannot retrieve your plaintext password — only you know it.
• Role-based access controls ensuring that kaya96 staff can only access the minimum personal data required to perform their specific function.
• Two-factor authentication availability for all kaya96 accounts, reducing the risk of unauthorised access even where credentials are compromised.
• Regular security assessments and penetration testing of Platform infrastructure.
• Automated monitoring for unusual login patterns, with immediate account alerts to your registered email address upon detection.

8.2 Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, kaya96 will notify you without undue delay in accordance with our notification obligations.

9. Your Rights

9.1 In relation to the personal data that kaya96 holds about you, you have the following rights, which you may exercise by contacting kaya96 support:

• Right of Access: You may request a copy of the personal data kaya96 holds about you, together with information about how it is being used.
• Right to Rectification: If any personal data held by kaya96 is inaccurate or incomplete, you have the right to request its correction.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to overriding retention obligations under our Curacao eGaming licence.
• Right to Object to Marketing: You may withdraw consent for marketing communications at any time via your account notification settings or by contacting support.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to kaya96.
• Right to Restrict Processing: In certain circumstances, you may request that kaya96 restrict the processing of your personal data pending resolution of a dispute about its accuracy or the lawfulness of its processing.

9.2 kaya96 will respond to data rights requests within 30 days. We may request identity verification before processing requests in order to protect your data from unauthorised third-party access.

10. Children & Minors

10.1 The kaya96 platform is strictly for adults aged 21 and over. kaya96 does not knowingly collect personal data from persons under the age of 21. If we become aware that an account has been registered by a person under the minimum age, that account will be closed immediately and all deposits returned.

10.2 If you believe that a minor has accessed the kaya96 platform, please contact support immediately. kaya96 takes underage access extremely seriously and will take all reasonable steps to prevent it.

11. International Data Transfers

11.1 kaya96 is operated under a Curacao eGaming licence. Your personal data may be processed and stored on servers located outside of Malaysia, including in jurisdictions that may not have data protection laws equivalent to Malaysian standards.

11.2 Where personal data is transferred internationally, kaya96 takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses with all data processors that handle your information outside Malaysia.

12. Policy Changes

12.1 kaya96 reserves the right to update this Privacy Policy at any time. The effective date of the current version is displayed at the top of this page. Where changes are material, kaya96 will notify registered players by email to the address on record.

12.2 Continued use of the kaya96 platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. We recommend reviewing this page periodically.

13. Contact & Complaints

13.1 If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact the kaya96 support team:

13.2 If you are dissatisfied with kaya96's response to a privacy complaint, you may escalate the matter to the Curacao eGaming licensing authority in accordance with the dispute resolution pathway described in the kaya96 Terms & Conditions.