Privacy Policy — Kaya68

This Privacy Policy ("Policy") describes how Kaya68 ("Kaya68", "the Company", "we", "us", "our") — the operator of the online gaming and sports-betting platform accessible at kaya68.cam — collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit our website, register a player account, or use any of our services.

By accessing the Kaya68 platform, creating an account, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not use our platform or submit personal data to us.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference into our overall user agreement framework.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data held by us or reasonably accessible to us.
• "Data Controller" means Kaya68, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of Kaya68 in accordance with our instructions.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Data" means identity verification documents and information collected as part of Kaya68's Know Your Customer procedures, including copies of identity cards (MyKad), passports, proof of address, and payment method verification.
• "Platform" means the Kaya68 website, any associated mobile web interface, and all related services and features accessible through those interfaces.

Kaya68 collects the following categories of personal data, depending on your interaction with the Platform:

Kaya68 collects personal data through the following channels:

• Direct submission by you: When you complete the registration form, submit KYC documents, contact support, or respond to a survey or promotion.
• Automated collection: Through cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the Platform. See Section8 for full details on cookies.
• Payment processors: When you make a deposit or withdrawal via payment partners such as Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online Banking, Hong Leong Connect, DuitNow, or FPX, we receive transaction confirmation data from those providers.
• Identity verification services: When we use third-party KYC providers to verify your identity documents, those providers may return verification status and risk-scoring data to us.
• Third-party sources: Where permitted by law and where necessary for fraud prevention or responsible gambling purposes, we may receive information from credit reference agencies, sanctions screening services, or industry-wide self-exclusion registers.

Kaya68 processes your personal data for the following specific purposes:

1. Account Creation and Management: To register your player account, verify your identity, maintain your account settings, and process your login sessions securely.
2. Service Delivery: To provide you with access to games, sports betting markets, live dealer tables, and all other features of the Kaya68 Platform.
3. Payment Processing: To process deposits and withdrawals via your chosen payment methods, confirm transaction status, and maintain an accurate financial record for your account.
4. Regulatory and Legal Compliance: To comply with anti-money-laundering (AML) requirements, Know Your Customer (KYC) obligations under our international gaming licence, and other applicable legal requirements.
5. Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent account activity, collusion, bonus abuse, unauthorised access, and other security threats.
6. Responsible Gambling: To monitor betting behaviour for indicators of problem gambling, apply responsible gambling tools requested by players (deposit limits, self-exclusion, cool-off periods), and fulfil our duty of care obligations.
7. Customer Support: To respond to your support enquiries via live chat, WhatsApp, or email, maintain records of support interactions, and improve our service quality.
8. Marketing Communications: Where you have opted in, to send you information about promotions, bonuses, and platform updates by email or in-platform notification. You may withdraw consent for marketing communications at any time.
9. Platform Improvement: To analyse aggregated usage data, identify technical issues, improve user experience, and develop new features based on player behaviour patterns.

Each data processing activity carried out by Kaya68 rests on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract formed when you register a Kaya68 account and accept our Terms & Conditions — including account management, game access, payment processing, and KYC verification.
• Legal Obligation: Processing required to comply with AML regulations, gaming licence conditions, and other applicable legal requirements imposed by our licensing jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided explicit, freely given, informed consent that you may withdraw at any time.

Kaya68 does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment Processors: We share transaction data with payment service providers including Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, and FPX, to the extent necessary to process your deposits and withdrawals. These providers are subject to their own privacy policies and applicable financial data protection regulations.
• KYC / Identity Verification Providers: We engage third-party identity verification services to assist with document authentication and sanctions screening. These processors act under strict data processing agreements and may not use your data for any purpose other than the specific verification task.
• Game Providers: Where game providers require minimal account identifiers (e.g., a pseudonymised player ID) to record game outcomes, such identifiers are shared. Personal identity data is not shared with game providers.
• Technology Infrastructure Providers: Hosting, cloud storage, and cybersecurity providers who process data on our behalf under contractual data protection obligations.
• Legal and Regulatory Authorities: Where required by law, court order, or our licensing obligations, we may disclose personal data to the appropriate authorities. We will, where legally permitted, notify you of any such disclosure.
• Business Transfers: In the event of a corporate restructuring, merger, or acquisition, personal data may be transferred to the successor entity, subject to the same protections described in this Policy. Affected players will be notified in advance where practicable.

Kaya68 uses cookies and similar tracking technologies to operate the Platform, maintain your session state, remember your preferences, prevent fraud, and analyse how the Platform is used. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and fraud detection cookies. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and notification preferences to personalise your experience on subsequent visits.
• Analytics Cookies:
• Marketing Cookies: Used only where you have provided consent to marketing communications, to track the effectiveness of promotions and to serve relevant content within the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the availability or performance of some Platform features. For detailed technical information about specific cookies in use, please contact our support team.

Kaya68 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a minimum period following account closure as required by our gaming licence and AML obligations (typically five years).
• Financial Transaction Records: Retained for a minimum of five years following the transaction date to comply with anti-money-laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for a period of two years following the closure of the relevant support interaction, to support quality assurance and dispute resolution.
• Technical / Log Data: Retained for a rolling period of 12 months for security monitoring and fraud prevention purposes.
• Marketing Consent Records: Retained for as long as the related consent is in force, plus three years following withdrawal, to demonstrate consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

Kaya68 implements a comprehensive, layered security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data exchanged between your device and Kaya68 servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit encryption. HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields — including passwords, payment identifiers, and KYC document contents — are encrypted at rest using AES-256 or equivalent industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel whose role requires it, governed by role-based access control policies and reviewed on a regular basis.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their Kaya68 accounts. 2FA is mandatory for all internal administrative access to systems holding personal data.
• Regular Security Audits: Kaya68 engages independent cybersecurity specialists to conduct periodic penetration testing and vulnerability assessments of the Platform and associated infrastructure.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and, where required, relevant authorities, within the timeframe prescribed by applicable law.

You hold the following rights in respect of your personal data held by Kaya68. To exercise any of these rights, contact our support team in writing at [email protected]. We will respond within 30 calendar days in most cases. Complex or high-volume requests may require up to 60 days, with notice provided.

The Kaya68 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data from our records and close the associated account in accordance with our Terms & Conditions.

Parents or guardians who believe that a minor has submitted personal data to Kaya68 are encouraged to contact us immediately at [email protected].

Kaya68 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this document.
• Where practicable, notify active account holders via their registered email address or through an in-platform notification.
• For significant changes affecting how we use your data, we will seek fresh consent where that processing is consent-based.

Continued use of the Kaya68 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically. The most current version is always accessible at kaya68.cam/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our personal data practices, please contact our Data Support team through the channels below. All contact details are provided as plain text — please copy and use them in your preferred communication application.

• Email: [email protected]
• Live Chat: Available24/7 via the Kaya68 Platform — average response under 5 minutes
• WhatsApp: Contact details available after login (text correspondence only)
• Response Time: Privacy-related written requests acknowledged within 5 business days; substantive responses within 30 calendar days

Support is available in English, Bahasa Melayu, and Mandarin Chinese, 24 hours a day, 7 days a week — including Malaysian public holidays.

Where your concern relates to responsible gambling or self-exclusion rather than data privacy, please visit our Responsible Gambling page for dedicated resources and tools.