Official Privacy Policy

Kaya99 Privacy Policy – Malaysia Member Personal Data Protection

At Kaya99, your privacy is not just a legal obligation — it is our sincere commitment to every member. Find out exactly how we collect, use, and protect your personal information at all times.

Updated: 1 January 2026 Compliant with Malaysia's PDPA 2010 SSL 256-bit Encryption
Our Privacy Commitment
Your data is not sold to any third party Full encryption of all sensitive information Full control over your personal data Full compliance with Malaysia PDPA 2010 Regular security audits by independent parties
Comprehensive Protection

Six Ways Kaya99 Protects Your Data

Every layer of our security is specifically designed to keep your personal information safe and under control at all times.

Military-Grade Encryption

All data transmitted between your device and kaya99's servers is protected by 256-bit SSL encryption. Stored data is secured using AES-256 encryption — the same standard used by leading financial institutions worldwide.

Malaysia PDPA Compliance

Kaya99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data collection and processing activities have been reviewed and approved by qualified legal counsel.

Full Control by You

You have the full right to access, correct, and request deletion of your personal data at any time. Through your Kaya99 account settings, you can manage your privacy preferences easily and quickly.

No Sale of Data to Third Parties

Kaya99 does not sell, rent, or share your personal data with any third party for marketing purposes. Your data belongs to you — we only use it to provide you with a better service.

Regular Security Audits

Kaya99's security and privacy systems are regularly audited by accredited independent cybersecurity firms. Any vulnerabilities identified are promptly remediated to ensure your protection stays up to date.

Data Breach Notification

In the event of any security incident involving your data, kaya99 will notify you within 72 hours as required by PDPA. We believe in full transparency to maintain your trust.

This Privacy Policy explains in detail how Kaya99 ("we", "Platform" or "Kaya99") collects, uses, stores, and protects your personal information while you use our platform at kaya99.onl. We respect every member's privacy and are committed to ensuring your data is handled with care, integrity, and responsibility.

By registering or using the Kaya99 platform, you agree to the terms of this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to delete your account.
1

Privacy Policy Introduction & Scope

Kaya99 is an online gaming platform operating in Malaysia, offering a wide range of entertainment including slots, bingo, Sports Betting, and a VIP membership program. As a responsible platform, we take every aspect of our members' privacy and data security seriously.

This Privacy Policy applies to all users of the Kaya99 platform, including website visitors, registered members, VIP programme participants, and anyone who interacts with our platform through any channel — whether the website, mobile app, or customer support channels.

This policy explains:

  • The types of personal data we collect and their sources.
  • The purpose and legal basis for processing your data.
  • How we protect and store your information.
  • Your rights regarding your personal data and how to exercise them.
  • How to contact us for any privacy-related enquiries.
Legal Basis: kaya99 processes your personal data on the basis of your consent (at registration), contract performance (to deliver our services), legal obligations (PDPA compliance and KYC requirements), and the platform's legitimate interests (fraud prevention and security).
2

Types of Personal Data We Collect

Kaya99 collects various types of personal data depending on how you interact with our platform. Below is a comprehensive summary of the data we may collect:

Data Category Example Information Collection Method
Identity Data Full name, date of birth, national ID number Account Registration & KYC
Contact Data Phone number, email address, residential address Registration & Profile Updates
Financial Data Bank account number, transaction records, deposit history Deposit & Withdrawal Process
Technical Data IP address, device type, operating system, web browser Automatic during use
Usage Data Game history, play time, game preferences Automatic during gameplay
Communication Data Live chat transcripts, support emails, feedback Support Interactions

We only collect data that is strictly necessary to provide our services. We do not collect sensitive information such as health data, religious beliefs, or political views unless required by law.

3

How We Use Your Personal Data

The data we collect is used responsibly for clear and legitimate purposes. Kaya99 does not use your data for any purpose not stated in this policy without obtaining your fresh consent first.

The primary purposes for which your data is used are as follows:

  • Account Management: Creating and maintaining your account, processing your registration, and verifying your identity through the required KYC process.
  • Service Provision: Allowing you to access all games and features on the kaya99 platform, including slots, bingo, Sports Betting, and the VIP program.
  • Transaction Processing: Processing deposits and withdrawals securely and efficiently through supported payment methods.
  • Customer Support: Providing technical assistance and account support via Live Chat, email, and other communication channels.
  • Security & Fraud Prevention: Identifying and preventing fraudulent activity, multi-account use, and platform abuse.
  • Legal Compliance: Fulfilling legal obligations, including reporting to relevant authorities when required by law.
  • Platform Improvement: Analyzing usage patterns to improve the interface, performance, and overall user experience.
  • Marketing Communications: Sending promotions, bonus offers, and relevant platform updates — only if you have given your consent to receive them.
Marketing Communication Opt-Out Options: You can opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Opting out of marketing will not affect important account-related communications.
4

Data Sharing & Disclosure

Kaya99 does not sell your personal data. We only share your information in limited, specific circumstances as outlined below, and always with adequate safeguards in place.

  • Payment Service Providers: Authorised payment gateways such as FPX, TNG eWallet, GrabPay, Boost, and DuitNow QR providers receive the financial data necessary to process your transactions. All these providers are bound by strict data protection agreements.
  • Game Service Providers: Third-party game developers providing slots and other games on our platform may receive anonymised usage data for game improvement purposes.
  • Legal Authorities: kaya99 will disclose required data to competent authorities when mandated by Malaysian law or a valid court order.
  • Fraud Prevention Services: We share technical data with fraud detection service providers to protect the platform and its members from malicious activity.
  • Business Merger or Acquisition: Should kaya99 undergo a merger or acquisition, member data may be transferred to the new entity subject to advance notice and equivalent protections.
All third parties who receive kaya99 member data are contractually bound to use that data only for the specified purposes and must comply with security standards equal to or higher than our own.
5

Data Security & Protection Measures

Kaya99 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, misuse, or accidental disclosure.

Key security measures we implement include:

  • 256-bit SSL Encryption: All communications between your device and kaya99's servers are fully encrypted.
  • Data-at-Rest Encryption (AES-256): Sensitive data stored on our servers is encrypted using the highest industry standards.
  • Layered Access Controls: Only authorized personnel with a legitimate business need may access member data, and every access is automatically logged.
  • Two-Factor Authentication (2FA): kaya99's internal systems require 2FA for all staff access to the member database.
  • 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity or intrusion attempts.
  • Penetration Testing: We conduct regular security testing to identify and address vulnerabilities before they can be exploited.
Shared Responsibility: While we take all reasonable steps to protect your data, the security of your account also depends on your own actions. Please use a strong password, enable 2FA, and never share your login credentials with anyone.
6

Cookies & Tracking Technologies

Kaya99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

  • Essential Cookies: Required for core platform functions such as login session verification and account security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Helps us understand how members use the platform by collecting anonymous statistical data for continuous improvement.
  • Functional Cookies: Remembering your preferences such as language, display settings, and game choices to deliver a more personalized experience.
  • Analytics Cookies: Used to analyse platform traffic patterns and usage to help us make better improvement decisions.

You can manage cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the Kaya99 platform.

7

Your Rights as a Kaya99 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our privacy policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data we hold about you in a readable format.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request immediate correction at no charge.

Right to Erasure

You can request deletion of your personal data, subject to legal data retention obligations.

Right to Object

You can object to the processing of your data for direct marketing purposes or purposes based on our legitimate interests.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.

Right to Restriction of Processing

In certain circumstances, you can request a temporary restriction on the processing of your data while an investigation is being carried out.

To exercise any of the rights above, please contact our Privacy Officer by email at [email protected] or via our platform's live chat. We will respond to your request within 14 business days.

8

Data Retention Period

Kaya99 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Retention periods vary by data type:

  • Active Account Data: Retained for the duration your account is active and for an additional period after account closure as required by law.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements.
  • Support Communication Logs: Retained for two (2) years after the last interaction for service reference and improvement purposes.
  • KYC (Identity Verification) Data: Retained for five (5) years after account closure in accordance with anti-money laundering (AML) compliance requirements.
  • Technical Data & System Logs: Retained for ninety (90) days for security and system debugging purposes.
  • Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you.

9

Cross-Border Data Transfers

As an online platform, kaya99 may store and process your data on servers located outside Malaysia. All cross-border data transfers are carried out with strict protective measures and in full compliance with Malaysia's PDPA requirements.

When your data is transferred outside Malaysia, we ensure:

  • The recipient country or region provides an equivalent or higher level of data protection.
  • Legally binding data transfer agreements have been put in place with all relevant service providers.
  • Approved standard contractual clauses are used to ensure continued protection of your data.
kaya99's core server infrastructure is hosted on cloud computing providers with internationally recognized security certifications. All data centers comply with ISO 27001 and SOC 2 standards to ensure consistent data protection.
10

Children's Privacy

The kaya99 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

During the registration and KYC verification process, we conduct strict age checks to ensure our platform remains inaccessible to minors. Should we discover that a child's personal data has been collected inadvertently, we will take immediate action to:

  • Deleting all data relating to that individual from our systems.
  • Immediately closing the associated account.
  • Refunding any relevant deposits in accordance with established procedures.

If you suspect that a minor has registered on our platform, please contact us immediately at [email protected] so that we may take the appropriate action.

11

Contact Our Privacy Officer

Kaya99 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling any privacy-related inquiries or complaints from our members.

If you have any questions, concerns, or wish to exercise your privacy rights, you can reach us through the following channels:

Live Chat
Available 24/7 directly on the kaya99 platform
Privacy Email
General Support

We aim to respond to all privacy-related inquiries within 14 working days. For more complex requests such as data exports or account deletion, resolution may take up to 30 working days.

Complaints to Regulatory Authorities: If you are not satisfied with how we have handled your data after contacting us, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPA) or the relevant regulatory authority.
12

Privacy Policy Amendments

Kaya99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Any material amendments will be communicated to members via their registered email or a prominent notice on the platform before the changes take effect.

The latest version of the Privacy Policy will always be available on this page with the update date clearly noted at the top of the document. Continued use of the kaya99 platform after any amendments are published constitutes your acceptance of the updated policy.

Review Periodically: We recommend reviewing this Privacy Policy page regularly — at least once every three months — to stay informed about how we handle your personal data. If you have any questions about the latest updates, feel free to reach out to our team.

Your Data is Safe. Your Gaming Experience Awaits.

With high-standard privacy protection and a trusted platform, you can play with peace of mind at Kaya99. Register now and enjoy hundreds of slot games, bingo, sports betting, and more.

Bahasa Melayu