Privacy Policy Kaya86 – Personal Data Protection for Malaysian Players

Welcome to the kaya86 Privacy Policy. This document forms part of our ongoing commitment to operating transparently and responsibly in the management of all our members' personal information in Malaysia. Kaya86 Entertainment Sdn Bhd ("Kaya86", "we", "us") is the data controller for all personal information collected through the Kaya86 platform at kaya86.my.

We understand that your trust is Kaya86's most valuable asset. When you entrust us with your personal information — whether during account registration, making a deposit via Touch 'n Go eWallet or GrabPay, playing Live Casino or using any of our services — we take that responsibility very seriously. For Kaya86, privacy is not merely a legal obligation — it is part of our company's DNA.

This Kaya86 Privacy Policy has been drafted in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the principal legislation governing the collection, use and protection of individuals' personal data in Malaysia. We conduct periodic reviews and updates of this Privacy Policy to ensure it remains relevant and compliant with all applicable regulations.

Kaya86 collects two main categories of information: information you provide directly to us, and information collected automatically as you use our platform.

Information You Provide Directly

• Registration Information: Full name, national identification number (MyKad), date of birth, gender, active Malaysian phone number and email address upon registering a Kaya86 account.
• Identity Verification Information (KYC): A copy of your identity card (MyKad), bank statement, proof of address, or other supporting documents required for anti-money laundering (AML) and know-your-customer (KYC) compliance purposes.
• Financial Information: Details of payment methods used — including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX bank account numbers (Maybank2u, CIMB Clicks, RHB Now and others) and DuitNow — required to process deposits and withdrawals.
• Communications with kaya86: Records of live chat conversations, emails or any other communications between you and the kaya86 support team.

Information Collected Automatically

• Technical Data: IP address, device type and web browser, operating system, screen resolution, and language settings.
• Usage Data: Login and logout records, pages visited within the kaya86 platform, games played (such as Auto Roulette, Power Blackjack, Ocean King, Lucky Neko), session duration and in-game actions.
• Transaction Data: Deposit and withdrawal history, wagering amounts, winnings and losses across all Kaya86 games.
• Cookie Data: Information gathered through cookies and similar tracking technologies while you use the kaya86 platform — further details are covered in Section 6.

Kaya86 uses your personal information only for legitimate, necessary purposes that are directly related to providing our online casino platform services to you. We never use your data for purposes outside the scope stated here without your explicit prior consent.

• Account Management: Registering, verifying and managing your Kaya86 account, including the KYC process required under Malaysian law.
• Transaction Processing: Process deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, or ShopeePay, and receive your winnings quickly and securely.
• Gaming Services Provision: Gives you access to all kaya86 games — Live Dragon Tiger, Power Blackjack, Casino Hold Em, Auto Roulette, Ocean King, Lucky Neko, Gonzo Treasure and over 1,000 other titles.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, bonus abuse, multiple account usage and any activity that violates Kaya86's Terms & Conditions.
• Customer Support: To respond to enquiries, resolve complaints and provide technical assistance to Kaya86 members via live chat and email in both Bahasa Malaysia and English.
• Marketing & Promotions: To send you information about new bonus offers, Kaya86 promotions and service updates — only if you have given your consent to receive marketing communications. You may withdraw this consent at any time.
• Legal Compliance: To comply with the legal and regulatory obligations imposed on Kaya86 by Malaysian authorities, including the reporting of suspicious transactions under Malaysia's Anti-Money Laundering Act (AMLA).
• Platform Improvement: Analyses kaya86 platform usage patterns on an aggregated, non-identifiable basis to improve the user experience, technical performance, and game selection.

All data processing at Kaya86 is carried out on the basis of one or more valid legal grounds under PDPA 2010 — whether your consent, contractual necessity, legal obligation or legitimate interests that do not override your fundamental interests or rights.

Kaya86 never sells, rents or trades your personal information to any third party for their own commercial purposes. However, there are limited situations in which Kaya86 may need to share your information with certain parties, as outlined below:

Third Parties That May Receive Your Information

• Technical Service Providers: Companies that assist Kaya86 in operating the platform — including game providers, payment processors and cloud service providers. All such parties are bound by strict confidentiality agreements and may only use your data for purposes specified by Kaya86.
• Payment Processor: Payment service providers such as FPX, Touch 'n Go, GrabPay, DuitNow, Boost and ShopeePay, which are required to process your financial transactions. Data shared is kept to the minimum necessary solely to complete each transaction.
• Malaysian Authorities: Government agencies, law enforcement bodies or courts in Malaysia when Kaya86 is required to do so by law, court order or directive from a competent authority.
• Group Entities: Subsidiary or affiliated companies within the kaya86 group, where applicable, for internal management and shared service operations.

Kaya86 continuously invests in the latest cybersecurity infrastructure to ensure your personal and financial data remains protected at all times. The key security measures we have implemented are as follows:

• 256-bit SSL Encryption: All data transmitted between your device and Kaya86's servers is encrypted using 256-bit TLS/SSL protocols — the same standard used by leading international banking institutions. This ensures your information cannot be intercepted by unauthorised parties during transmission.
• Member Funds Segregation: Your deposits in your Kaya86 account are held in an account completely segregated from the company's operating funds. This ensures your credit balance remains protected even in unforeseen financial circumstances.
• Regular Security Audits: kaya86 undergoes regular external security audits by independent cybersecurity experts to identify and address any potential vulnerabilities in our systems.
• Strict Access Controls: Access to members' personal data within the Kaya86 organisation is restricted to staff who require that information to carry out their duties only, in accordance with the principle of minimum privilege.
• Two-Factor Authentication (2FA): kaya86 supports and actively encourages the use of two-factor authentication for account access, adding an extra layer of security to protect your account from unauthorised access.
• Fraud Detection System: kaya86's automated systems continuously monitor account activity to detect suspicious patterns and take immediate preventive action whenever necessary.

While Kaya86 takes all reasonable steps to protect your data, no system is entirely foolproof. We encourage you to play your part in keeping your Kaya86 account secure — use a strong password, never share your login credentials with anyone, and contact Kaya86 support immediately if you suspect any suspicious activity.

The Kaya86 platform uses cookies and similar technologies to enhance your experience, ensure the platform functions correctly and analyse how our platform is used. Cookies are small text files stored on your device when you visit the Kaya86 website.

Types of Cookies kaya86 Uses

• Essential Cookies: Required for the core operation of the kaya86 platform — including login authentication, game session management, and transaction security. Without these cookies, the kaya86 platform will not function properly. These cookies cannot be disabled.
• Performance Cookies: Collects information on how visitors use the kaya86 platform — most frequently visited pages, technical errors encountered and page load times. This data is used in aggregate form and cannot be used to identify any individual.
• Functionality Cookies: Saving your preferences within the Kaya86 platform — such as your preferred language (Bahasa Melayu or English), display settings and game preferences — so you don't have to reconfigure them each time you log in.
• Marketing Cookies: Used to deliver more relevant kaya86 promotions and advertisements based on your interests. You may opt out of these cookies without affecting the platform's core functionality.

You can manage or delete cookies at any time through your web browser settings. Please note, however, that disabling essential cookies may affect your ability to fully use certain features on the kaya86 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

In the course of operating the Kaya86 platform, there are situations where your personal data may be processed or stored on servers located outside Malaysia. This is standard practice in the global digital technology industry, particularly with respect to cloud services and the international game providers that Kaya86 partners with.

When your data is transferred outside Malaysia, kaya86 ensures that equivalent or greater protection is applied through recognised mechanisms, including:

• Data transfer agreements compliant with Malaysia's PDPA standards and applicable data protection legislation.
• Transfers are made only to countries or entities with data protection laws recognised as equivalent to those of Malaysia.
• Use of standard contractual clauses that protect your rights under all circumstances.

Kaya86 will not transfer your personal data to jurisdictions that lack adequate data protection without first putting in place the necessary additional safeguards.

As a Kaya86 member and an individual protected by Malaysia's PDPA 2010, you hold the following rights regarding the personal data we hold about you. Kaya86 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the kaya86 data protection team by email at [email protected] or via the Kaya86 platform's live chat. Kaya86 will process your request within 14 business days and may require identity verification before any action is taken.

Kaya86 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Our core principle is never to retain data longer than needed.

• Active Account Data: For as long as your kaya86 account remains active and in use, your personal data will be retained to ensure continuity of service and to meet our legal obligations.
• After Account Closure: Toggle navigation
• Marketing Data: If you withdraw your marketing consent, your data will be removed from kaya86's marketing lists within 30 days, unless it is required for another legitimate purpose.
• Technical Logs & Records: Technical system logs are typically retained for 90 to 180 days before being automatically deleted, depending on the type of log in question.

Once the retention period expires, kaya86 will ensure your data is securely deleted, destroyed or anonymised so that it can no longer be linked to you as an individual.

The kaya86 platform is strictly for individuals aged 18 and above only. Kaya86 does not knowingly collect or process personal data of any individual under the age of 18. If you believe that Kaya86 may have collected personal information of someone under 18, please contact us immediately at [email protected] and we will take prompt action to delete that information.

Kaya86 uses a range of mechanisms to verify the age of new account applicants, including MyKad information checks during the KYC process. This forms part of Kaya86's commitment to responsible gambling and the protection of vulnerable individuals.

Kaya86 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Malaysian law, industry best practices, or the way we handle your personal data. Any changes will be published on this page with a new "Updated" date.

For changes deemed material — meaning those that significantly affect how we handle your data or your rights — kaya86 will endeavour to provide reasonable advance notice via your registered email address or through a prominent notification within the kaya86 platform. We encourage you to review this page periodically.

Your continued use of the Kaya86 platform after any changes to the Privacy Policy are published will be considered your acceptance of the updated version. If you do not agree with the changes, you have the right to close your Kaya86 account by contacting our support team.

If you have any questions, concerns, or requests regarding kaya86's Privacy Policy or how we handle your personal data, please don't hesitate to reach out. Our team is available to assist you in both Bahasa Malaysia and English.