kaya99 Privacy Policy

1. Introduction

kaya99 ("we", "our", "us") is committed to protecting the privacy and personal information of all users who access and use the kaya99 platform at kaya99.lat. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

By accessing the kaya99 website, registering an account, making a deposit via GrabPay, Touch n Go eWallet, Maybank, CIMB, or any other accepted payment method, and by using any of our gaming services — including slots, sportsbook, live casino, roulette, and esports betting — you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Information We Collect

kaya99 collects personal information in the following categories when you interact with our platform:

2.1 Information You Provide Directly

• Full name and date of birth (age verification for the 21+ requirement)
• Email address and contact number
• Residential address (including postcode and state within Malaysia)
• Identity verification documents (NRIC, passport, or other government-issued ID where required)
• Financial details necessary to process deposits and withdrawals (e.g. bank account details, e-wallet identifiers)
• Username, password (stored in hashed form), and security preferences

2.2 Information Collected Automatically

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths within kaya99
• Session identifiers and login timestamps
• Game activity logs, wagering history, and transaction records

2.3 Information From Third Parties

In limited circumstances, kaya99 may receive information about you from third-party identity verification providers, fraud prevention agencies, or payment processors in order to comply with our Know Your Customer (KYC) obligations. Such data is handled with the same level of care as information collected directly.

3. How We Use Your Data

kaya99 uses your personal information for the following legitimate purposes:

• Account creation and management: to register your kaya99 account, verify your identity (21+ age check), and maintain your player profile.
• Service delivery: to provide access to slots, sportsbook, live roulette, esports betting, and all other gaming products available on the kaya99 platform.
• Payment processing: to facilitate deposits and withdrawals via GrabPay, Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and supported cryptocurrency channels.
• Customer support: to respond to your queries and resolve any account-related issues you report to our 24/7 support team.
• Legal compliance: to fulfil our anti-money laundering (AML), responsible gaming, and KYC obligations as required under applicable regulations.
• Platform improvement: to analyse user behaviour patterns and improve the overall experience on kaya99, including optimising our mobile interface for Malaysian users.
• Fraud prevention and security: to detect and prevent unauthorised account access, fraudulent transactions, or other suspicious activities.
• Communications: to send you account notifications, transaction confirmations, and — where you have opted in — promotional updates about kaya99 offers.

4. Data Sharing and Disclosure

kaya99 does not sell or rent personal data. We may share your information only in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers — including payment processors, KYC verification agencies, IT infrastructure providers, and customer support tools — who process data on our behalf under strict contractual obligations and confidentiality agreements. These parties may not use your data for their own purposes.

4.2 Legal and Regulatory Requirements

kaya99 may disclose personal data to regulators, law enforcement agencies, or courts when required to do so by applicable law, court order, or in connection with legal proceedings. We will notify affected users where legally permissible to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, your personal data may be transferred as part of that transaction. You will be notified in advance via email or a prominent notice on the kaya99 website, and your rights under this Privacy Policy will continue to apply.

4.4 With Your Consent

In all other cases, kaya99 will only share your personal data with third parties where you have given your explicit, informed consent to do so.

5. Cookies and Tracking Technologies

kaya99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise returning visitors, remember your preferences, and analyse how our site is used.

5.1 Types of Cookies We Use

• Essential cookies: required for the kaya99 platform to function correctly, including session management and login state. These cannot be disabled without affecting core functionality.
• Performance cookies: collect anonymised data about how users navigate kaya99, helping us identify which pages are most popular and where improvements are needed.
• Functional cookies: remember your preferences such as language settings, display options, and previously used payment methods (e.g. GrabPay or Touch n Go eWallet).
• Analytics cookies: allow us to measure traffic patterns and user engagement across the site to continuously improve our service for Malaysian players.

5.2 Managing Cookies

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the kaya99 platform. Most browsers allow you to refuse new cookies, delete existing ones, or alert you when new cookies are being set. Refer to your browser's help documentation for specific instructions.

6. Data Retention

kaya99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active accounts: personal data is retained for the duration of your account's active status and for a reasonable period thereafter to handle any outstanding queries or disputes.
• Transaction records: financial transaction logs, deposit records, and withdrawal histories are retained in accordance with anti-money laundering (AML) record-keeping requirements, typically for a minimum period of five (5) years from the date of the transaction.
• Identity verification documents: KYC documents are stored for the period required by applicable regulations governing online gaming operators.
• Closed accounts: upon account closure, we will retain only the data necessary for legal compliance, fraud prevention, and dispute resolution purposes. All other data will be securely deleted or anonymised.

When data is no longer required, kaya99 ensures it is disposed of securely using industry-standard deletion and anonymisation techniques.

7. Data Security

kaya99 takes the security of your personal information seriously. We have implemented appropriate technical and organisational measures to safeguard your data against unauthorised access, accidental loss, destruction, or disclosure.

• All data transmitted between your browser or mobile device and kaya99's servers is encrypted using Transport Layer Security (TLS) protocols.
• Passwords are stored using one-way cryptographic hashing and are never stored in plain text.
• Access to personal data within kaya99's internal systems is restricted on a strict need-to-know basis, with role-based access controls enforced at all levels.
• Our platform undergoes regular security assessments and vulnerability testing to identify and remediate potential risks before they can be exploited.
• Payment data processed through GrabPay, Maybank, CIMB, Public Bank, Boost, and other payment channels is handled by PCI-DSS compliant processors. kaya99 does not store full card numbers or sensitive payment credentials on its own servers.

8. Your Rights

As a player on the kaya99 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please reach out to us at the contact details listed at the end of this policy.

8.1 Right of Access

You have the right to request a copy of the personal data kaya99 holds about you, along with information about how it is being used.

8.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.

8.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.

8.4 Right to Restrict Processing

In certain circumstances, you have the right to request that we limit the processing of your personal data — for example, while a dispute about its accuracy is being resolved.

8.5 Right to Data Portability

Where technically feasible and legally applicable, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.

8.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. You may opt out of promotional communications from kaya99 at any time by updating your account notification preferences or by contacting our support team.

We will respond to all data rights requests within a reasonable timeframe and in accordance with applicable data protection obligations. There is no charge for making a request, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

9. Minors and the 21+ Age Restriction

kaya99 is strictly an adults-only platform. All gaming activities and services offered on kaya99 are intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain the personal data of anyone under the age of 21.

During the registration process, all users are required to confirm their age and submit identity verification documentation as part of our KYC procedures. Any account found to belong to an underage user will be suspended immediately, and all associated funds will be returned to the relevant payment source pending verification.

If you are a parent or guardian and believe that a minor has registered on kaya99 without your knowledge, please contact us immediately at [email protected] so that we can take appropriate action without delay. We encourage all responsible adults to make use of parental control software to restrict minors from accessing online gambling platforms.

For guidance on responsible gaming tools, self-exclusion options, and support resources available to Malaysian players, please visit our Responsible Gaming page.

10. Changes to This Privacy Policy

kaya99 reserves the right to update or amend this Privacy Policy from time to time in response to changes in our practices, applicable laws, or platform features. When material changes are made, we will notify registered users via email and/or a prominent notice on the kaya99 website prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how kaya99 is protecting your information. Your continued use of the kaya99 platform following the posting of any changes constitutes your acceptance of those changes.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kaya99 handles your personal data, please do not hesitate to get in touch with our data privacy team. We aim to respond to all privacy-related enquiries within two (2) business days.

You can reach us through the following channel:

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. kaya99 is committed to working cooperatively with regulators to resolve any privacy concerns in a fair and transparent manner.