Last updated: 11 June 2026. This Privacy Policy explains how kaya88 handles the personal data of all registered players and visitors, in accordance with applicable data protection legislation.
Summary: kaya88 collects personal data necessary to operate a licensed online gaming platform, verify player identity, process payments, and comply with regulatory obligations. We do not sell your personal data to third parties. This policy explains what data we hold, why we hold it, and what rights you have over it.
kaya88 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our platform at kaya88.win. This Privacy Policy ("Policy") describes how kaya88 collects, processes, stores, discloses, and protects personal data in connection with the provision of our online gaming services to players in Malaysia and other permitted jurisdictions.
This Policy is issued in compliance with applicable personal data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, and in fulfilment of kaya88's obligations under its international gaming authority operating licence. By registering for a kaya88 account or continuing to use the platform following publication of this Policy, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read together with kaya88's Terms & Conditions and Responsible Gaming Policy, which together constitute the full agreement between you and kaya88 governing your use of the platform.
kaya88 collects personal data through direct interactions (such as registration and account management), automated systems (such as cookies and server logs), and from third parties (such as payment processors and identity verification services). The categories of personal data we collect include:
Full legal name, date of birth, nationality, and government-issued identification document details (including MyKad number for Malaysian players) collected at registration and during KYC verification.
Email address, mobile telephone number, and any correspondence you send to kaya88 support or through platform communication channels.
Payment method details including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account information (Maybank FPX, CIMB Clicks, Public Bank PBe), transaction history, deposit and withdrawal records, and balance information.
IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, session duration, and other technical information collected through cookies and server logs when you access kaya88.
Betting history, game session records, bonus usage, wagering progression data, and responsible gaming tool settings including deposit limits and self-exclusion elections.
Records of your interactions with kaya88 customer support, including live chat transcripts and email correspondence, retained for service quality and dispute resolution purposes.
| Data Category | Examples | Source |
|---|---|---|
| Identity | Name, DOB, MyKad number | You (registration / KYC) |
| Contact | Email, mobile number | You (registration) |
| Financial | e-Wallet ID, bank, transactions | You & payment processors |
| Technical | IP address, browser, device | Automated collection |
| Gaming | Bets placed, game history | Platform activity |
| Communications | Support chat, emails | You (interactions) |
kaya88 uses the personal data we collect for the following purposes:
kaya88 processes your personal data under the following legal bases, consistent with applicable data protection legislation:
kaya88 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share personal data only in the following circumstances:
kaya88 engages third-party service providers to support platform operations, including payment processors (FPX, e-wallet operators), KYC and identity verification providers, game software suppliers, cloud infrastructure providers, and customer support tools. These providers process personal data on kaya88's behalf and are bound by data processing agreements requiring them to handle data in accordance with applicable law.
kaya88 may disclose personal data to regulatory authorities, gaming licence supervisors, financial intelligence units, and law enforcement agencies where required by law, court order, or regulatory obligation — including for the reporting of suspicious transactions under applicable anti-money laundering regulations.
In the event of a merger, acquisition, restructuring, or sale of kaya88's business or assets, personal data held by kaya88 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments being maintained.
kaya88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and support marketing attribution. The categories of cookies used by kaya88 include:
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. Strictly necessary cookies cannot be disabled through browser settings without impacting your ability to use kaya88.
kaya88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, regulatory, accounting, or reporting obligations. Specifically:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with kaya88's data disposal procedures.
Subject to applicable law and certain exceptions provided for under data protection legislation and kaya88's regulatory obligations, you have the following rights in relation to your personal data held by kaya88:
To exercise any of the above rights, contact kaya88 support with your account email address and a description of your request. kaya88 will respond within 30 days. Identity verification may be required before your request is processed.
kaya88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While kaya88 employs robust security measures, no internet transmission or data storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, kaya88 will notify affected players and relevant regulatory authorities in accordance with applicable law.
kaya88 is strictly an adults-only platform. No person under the age of 21 years may register for or use kaya88. kaya88 does not knowingly collect personal data from any individual under 21 years of age.
Age verification is conducted as part of the mandatory KYC process for all registered accounts. If kaya88 becomes aware that personal data has been collected from a person under 21 — whether through false information at registration or any other means — the associated account will be immediately suspended, all transactions will be reviewed, and the data will be handled in accordance with applicable legal requirements.
If you have reason to believe that a person under 21 has registered for a kaya88 account, please contact kaya88 support immediately at [email protected].
The kaya88 platform may contain links to third-party websites or services, including payment processor portals and game provider interfaces. This Privacy Policy applies solely to data processed by kaya88 in connection with the kaya88 platform. kaya88 is not responsible for the privacy practices or content of any third-party websites or services you access via links from kaya88. We encourage you to review the privacy policies of any third-party services you use.
kaya88's platform infrastructure and certain service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred outside Malaysia, kaya88 ensures that such transfers are conducted in compliance with applicable data protection law, including by implementing appropriate transfer mechanisms such as standard contractual clauses or transferring to jurisdictions that provide an adequate level of data protection.
kaya88's game software providers — including those supplying live casino and slots products to the platform — may process gaming session data in their own infrastructure. These providers are selected partly on the basis of their compliance with applicable data protection standards and their certifications under independent regulatory oversight.
kaya88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our platform operations. Material changes will be communicated to registered players via email notification to the registered address and/or by prominent notice on the kaya88 platform, with reasonable advance notice prior to the changes taking effect.
The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of kaya88 following notification of amendments constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using kaya88 and may close your account in accordance with the account closure procedure described in the Terms & Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy or kaya88's handling of your personal data, please contact our support team through the official channels available on the platform. Our customer support team is available 24 hours a day, 7 days a week.
For data subject access requests, rectification requests, or complaints regarding data processing, please submit your request in writing with your registered account email address. kaya88 will acknowledge receipt within 5 business days and provide a substantive response within 30 days.
All data transmitted between your device and kaya88's servers is protected by 256-bit SSL encryption — the same standard used by Malaysian banks for FPX transactions. Your login credentials, payment details, and personal information are encrypted end-to-end.
kaya88 does not sell, rent, or trade your personal data to any third party for marketing or profiling purposes. Data shared with service providers is strictly limited to what is necessary for platform operation and is governed by data processing agreements.
kaya88's data practices are aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). Player data is collected lawfully, used only for the stated purposes, kept accurate, retained only as long as necessary, and protected by appropriate security measures.
You have the right to access, correct, and request deletion of your personal data held by kaya88, subject to legal retention requirements. Submit a request through kaya88 support and we'll respond within 30 days with full transparency about what we hold.
kaya88 is transparent about the cookies used on the platform. Strictly necessary cookies keep the platform running; optional analytics and marketing cookies can be managed through browser settings. We don't use cookies to build personal profiles for third-party advertising.
kaya88 processes age verification data as a mandatory regulatory requirement. No person under 21 may hold a kaya88 account. Age and identity data is handled with strict confidentiality and retained only for the minimum period required by licensing obligations.
If you want to access, correct, or request deletion of your personal data, or if you have any question about how kaya88 handles your information, our support team is available 24/7. Sign in to start a live chat.
Must be 21+. kaya88 is operated under international gaming authority licence. Play responsibly.