Privacy Policy kaya33 —
Malaysian Player Data Protection

Welcome to the kaya33 Privacy Policy. This document is designed to give you a clear, transparent, and comprehensive overview of how we manage your personal information when you use the kaya33 online casino platform — whether through our website, mobile app, or any of our other service channels.

Kaya33 takes our responsibilities as a data controller seriously. We believe privacy is not merely a legal obligation — it is the foundation of trust that builds lasting relationships between our platform and the millions of loyal players across Malaysia. Every decision we make regarding data collection and use is measured against a simple question: does this benefit our players while respecting their privacy rights?

This Privacy Policy applies to all users of the kaya33 platform regardless of access method. It also covers information we collect through the registration process, KYC verification, financial transactions, gaming sessions, customer support interactions, and general website usage. By using kaya33 services, you acknowledge that you have read and understood this Privacy Policy.

Kaya33 collects various types of information depending on how you interact with our platform. Below is a detailed explanation of the data categories we collect and the purposes for collecting them:

There are also categories of data that we no collect: we do not store full credit/debit card numbers, do not record biometric information beyond what is required for KYC, and do not collect data from individuals under 18 years of age.

Kaya33 uses collected personal data solely for legitimate and necessary purposes in order to provide high-quality online casino services to players in Malaysia. We do not use your data for any purpose unrelated to our services without your consent.

• Account Management: Registering, maintaining, and protecting your player account, including login verification and password management.
• Payment Processing: Processing your deposits and withdrawals securely through your chosen payment methods such as FPX, TNG eWallet, and GrabPay.
• Legal Compliance: Fulfilling our legal obligations including KYC processes, anti-money laundering (AML) compliance, and reporting to relevant authorities when required by law.
• Platform Security: Detecting and preventing fraud, unauthorised access, account misuse, and suspicious activity on our platform.
• Service Improvements: Analysing platform usage patterns to improve the user experience, test new features, and ensure technical stability.
• Customer Support: Providing effective and personalised support when you contact our support team via live chat or email.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support related to responsible gaming and to enforce limits you have set yourself.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — only to players who have consented to receive such communications.

Kaya33 understands how sensitive players' financial and personal data is. We do not sell, rent, or transfer your personal data to any third party for their own marketing purposes. However, there are specific situations where we need to share your information with selected parties:

• Payment Service Providers: FPX, TNG eWallet, GrabPay operators and other payment service providers integrated with our platform receive the transaction data necessary to process your deposits and withdrawals. All such providers are bound by strict data protection agreements.
• Game Software Providers: Game providers partnering with kaya33 may receive the minimum technical data required to ensure games function correctly within your account.
• Identity Verification Services: A third-party KYC service provider used to verify player identities and documents. This service operates under strict data security standards.
• Legal Authorities: kaya33 will disclose information when required by law, court order, or official directive from a competent authority.
• Analytics Services: An analytics service provider that helps us understand platform usage — data shared is in aggregate or anonymised form that cannot identify you individually.

Kaya33 continuously invests in advanced cybersecurity infrastructure to keep your personal data safe at all times. Our approach to data security is comprehensive — from the system design stage through to the daily operations of our platform.

Key security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between you and our servers
• Encryption at rest for all sensitive data stored in our database
• Two-factor authentication (2FA) available for all player accounts as an additional layer of security
• 24/7 security monitoring by our in-house cybersecurity team
• Regular security audits by internationally recognised independent security firms
• Role-based access control — only authorised staff can access player data, and only to the extent required for their specific responsibilities
• Tested incident response procedures to ensure any data breach is detected and addressed promptly

In the event of a data breach affecting your personal information, kaya33 is committed to notifying you in a timely manner in accordance with applicable legal requirements and providing guidance on steps you should take to protect yourself.

The kaya33 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs at its best. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core functions such as login session authentication, security, and navigation. Without them, the platform cannot function properly.
• Performance Cookies: Helping us understand how players use the platform — which pages are visited most frequently, how long gaming sessions last, and where players encounter difficulties.
• Functional Cookies: Saving your preferences such as language, display settings, and other configurations to make your experience more comfortable on future visits.
• Analytics Cookies: Used for aggregate analytics purposes to help us make better decisions about platform development and improvement.

You can manage or delete cookies through your browser settings. Please note, however, that blocking all cookies may affect certain features of the kaya33 platform and your overall gaming experience.

Kaya33 recognises and respects your privacy rights. As a kaya33 player, you have the following rights regarding your personal data:

• Right of Access: You have the right to know what personal data we hold about you and to obtain a copy. Access requests will be processed within 30 business days.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you have the right to request a correction and we will update it promptly.
• Right to Erasure: In certain situations, you may request that we delete your personal data. Such requests are subject to our legal obligations to retain certain records.
• Right to Object to Processing: You may object to the use of your data for marketing purposes at any time without providing any reason.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service where technically feasible.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict how we process your data while awaiting resolution of an issue.

Kaya33 retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as long as required by applicable laws and regulations. We do not retain data longer than necessary.

• Active Account Data: Retained for as long as your account is active and for the required period after account closure to fulfil legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering (AML) and financial reporting legal requirements.
• KYC Documents: Retained for the period stipulated by legal compliance requirements and then securely destroyed.
• Communication Logs: Support chat logs and emails are retained for 2 years for quality control and dispute resolution purposes.
• Technical Data: Access logs and other technical data are typically retained for no more than 12 months, unless required for an ongoing security investigation.

When data is no longer needed, we ensure it is securely deleted or anonymised using industry-recognised data destruction procedures to prevent unauthorised recovery.

Kaya33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. We are committed to notifying you of any material changes in a clear and timely manner.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the kaya33 platform's home page
• Sending email notifications to all registered players regarding material changes
• In some cases, seeking your re-consent before changes take effect if they involve broader data use than previously

If you have any questions, concerns, or complaints regarding how kaya33 handles your personal data, our Data Protection Officer (DPO) team is ready to assist you. We take every privacy enquiry seriously and are committed to providing a thorough and timely response.

You can reach us via:

• Privacy Email: [email protected] — state "Privacy Enquiry" in your email subject line
• Live Chat: Available 24/7 on the kaya33 platform — select the "Privacy & Data" category in the support menu
• Response Time: We aim to provide an initial response within 48 hours and resolve requests within 30 business days

Kaya33 operates with full integrity and transparency. We believe player trust is our most valuable asset — and protecting your privacy is how we honour that trust every day.