kaya100 Privacy Policy

1. Who We Are

kaya100 (referred to in this Privacy Policy as "kaya100", "we", "us", or "our") operates the online gaming platform accessible at kaya100.club. kaya100 is the data controller responsible for the personal information collected through the platform and its associated services.

This Privacy Policy applies to all personal data processed by kaya100 in connection with your use of the platform, including when you register an account, make a deposit or withdrawal, place a wager, interact with customer support, or browse the kaya100 website.

If you have any questions about how kaya100 handles your personal information, please contact our Data Protection team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

2. Data We Collect

2.1 Information You Provide Directly

When you register a kaya100 account or use our services, you voluntarily provide us with the following categories of personal information:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification documents (such as a Malaysian MyKad, passport, or driving licence) submitted during KYC verification.
• Contact Data: Email address, mobile phone number, and residential address.
• Account Credentials: Username and encrypted password. kaya100 does not store passwords in plain text.
• Financial Data: Payment method details including e-wallet account identifiers (Touch 'n Go, Boost, GrabPay), bank account information for FPX transfers, and transaction records. kaya100 does not store full payment card numbers.
• Communications Data: Records of your correspondence with kaya100 customer support, including live chat transcripts and email exchanges.

2.2 Information Collected Automatically

When you access the kaya100 platform, we automatically collect certain technical data, including:

• Device & Browser Data: IP address, device type and model, operating system, browser type and version, and screen resolution.
• Session Data: Login timestamps, session duration, pages visited, games played, bet amounts, and navigation paths within the platform.
• Geolocation Data: Approximate geographic location derived from IP address, used for fraud prevention and regulatory compliance purposes.
• Cookie Data: Information stored via cookies and similar tracking technologies as described in Section 6 below.

2.3 Information from Third Parties

kaya100 may receive personal data about you from third-party sources in the following circumstances:

• Identity verification providers used to confirm the authenticity of KYC documents.
• Fraud detection and AML screening services that cross-reference your details against watchlists and sanctions databases.
• Payment processors who provide transaction confirmation and chargeback notifications.

3. How We Use Your Data

kaya100 uses the personal data we collect for the following purposes:

• Account Registration & Management: To create and maintain your kaya100 account, verify your identity, and manage your account settings and preferences.
• Service Delivery: To process deposits and withdrawals in Malaysian Ringgit (MYR), settle bets and game outcomes, award bonuses, and provide the full range of kaya100 gaming services.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, or other communication channels.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other illegal activity.
• Regulatory Compliance: To fulfil kaya100's obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations, including age verification and self-exclusion enforcement.
• Platform Improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall performance and user experience of the kaya100 platform.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to enforce deposit limits, loss limits, and self-exclusion restrictions set by members or mandated by our responsible gaming programme.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to members who have opted in to marketing communications. You may unsubscribe at any time via your account settings or by contacting support.

4. Legal Basis for Processing

kaya100 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered member — including account management, game operation, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, tax reporting obligations, and regulatory reporting to our licensing authority.
• Legitimate Interests: Processing necessary for kaya100's legitimate business interests, including fraud prevention, platform security, improving our services, and protecting other members — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis — principally for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing

kaya100 does not sell your personal data to third parties. We may, however, share your personal information with the following categories of recipients in the circumstances described:

5.1 Service Providers

kaya100 engages third-party service providers who process personal data on our behalf under strict data processing agreements. These include: payment processors (Touch 'n Go eWallet, DuitNow, FPX banking partners), identity verification providers, cloud infrastructure providers, fraud detection services, and customer support platform operators.

5.2 Game Providers

Where required for the technical delivery of games, kaya100 may share session identifiers and player IDs with licensed game providers. These providers are contractually prohibited from using member data for any purpose other than game operation.

5.3 Regulatory & Legal Disclosure

kaya100 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our gaming licence conditions. kaya100 will notify affected members of such disclosures where legally permitted to do so.

5.4 Corporate Transactions

In the event of a merger, acquisition, or sale of all or a substantial portion of kaya100's business assets, personal data held by kaya100 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

6. Cookies & Tracking Technologies

kaya100 uses cookies and similar technologies (including local storage and session storage) to operate and improve the platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for platform functionality, including session authentication, login state maintenance, and security token validation. These cannot be disabled without impairing platform operation.
• Performance & Analytics Cookies: Used to collect aggregated data on how members use the platform — which pages are visited most frequently, where errors occur, and how navigation flows are used — to improve platform performance.
• Functionality Cookies: Used to remember your preferences, such as language settings, display preferences, and game lobby filter selections, to personalise your experience.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including identifying automated bots and tracking suspicious login patterns across sessions.

You may manage cookie settings through your browser's privacy controls. Please note that disabling certain categories of cookies may affect the functionality of the kaya100 platform.

7. Data Retention

kaya100 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active Accounts: Personal data associated with an active kaya100 account is retained for the duration of the account's existence and for a minimum period of 5 years following account closure, as required by AML regulations and gaming licence conditions.
• Transaction Records: Financial transaction records — including deposit, withdrawal, and betting history — are retained for a minimum of 7 years to satisfy tax and financial regulatory requirements.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following the end of the business relationship, as mandated by applicable AML legislation.
• Support Communications: Customer support interaction records are retained for 3 years from the date of the interaction to support dispute resolution.
• Marketing Data: Data used solely for marketing purposes is deleted or anonymised within 12 months of a member opting out of marketing communications or requesting account closure, where no other legal retention obligation applies.

8. Data Security

kaya100 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between member devices and kaya100 servers.
• AES-256 encryption for sensitive data stored in kaya100 databases, including identity documents and financial records.
• Role-based access controls ensuring that kaya100 staff can only access personal data necessary for their specific job function.
• Two-factor authentication requirements for kaya100 staff accessing systems that process member personal data.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• Automated monitoring and alerting systems that detect and respond to unusual data access patterns and potential security incidents in real time.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kaya100 will notify affected members at their registered email address without undue delay, and in any event within 72 hours of becoming aware of the breach.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data kaya100 holds about you:

• Right of Access: You may request a copy of all personal data kaya100 holds about you. kaya100 will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For standard account details, you may update these directly through your account settings.
• Right to Erasure: Subject to legal retention obligations (see Section 7), you may request deletion of your personal data following account closure. kaya100 will respond to valid erasure requests within 30 days.
• Right to Restrict Processing: In certain circumstances, you may request that kaya100 restrict the processing of your personal data while a dispute is under review.
• Right to Data Portability: Where technically feasible, you may request a structured, machine-readable copy of personal data you have provided to kaya100.
• Right to Object: You may object to kaya100 processing your data on the basis of legitimate interests, including for direct marketing purposes. Marketing objections will be actioned within 5 business days.
• Right to Withdraw Consent: Where consent is the legal basis for processing (principally marketing), you may withdraw consent at any time without affecting prior processing.

To exercise any of the above rights, please contact kaya100's Data Protection team at [email protected] with your registered account email address and a description of your request. kaya100 may request identity verification before actioning a data rights request.

10. Children's Privacy

The kaya100 platform is strictly intended for individuals aged 21 years and older. kaya100 does not knowingly collect personal data from individuals under the age of 21. If kaya100 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted and the associated account will be permanently closed.

Parents and guardians who become aware that a minor has registered a kaya100 account or submitted personal data to the platform should contact kaya100 support immediately at [email protected].

11. International Data Transfers

kaya100 may transfer personal data to servers and service providers located outside of Malaysia in the course of delivering its services. Where such international transfers occur, kaya100 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Use of standard contractual clauses approved by relevant data protection authorities where transfers occur to countries without an adequacy determination.
• Data processing agreements with all third-party service providers that impose equivalent data protection obligations.

Members may request information about the specific safeguards applicable to any international transfer of their personal data by contacting kaya100's Data Protection team.

12. Changes to This Privacy Policy

kaya100 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, kaya100 will notify registered members via their registered email address and will post a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Continued use of the kaya100 platform following notification of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to any revised terms, you should cease using the platform and contact kaya100 support to arrange account closure.

This Privacy Policy was last reviewed and updated on 11 June 2026.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or kaya100's data processing practices, please contact us through the following channel:

Email: [email protected]
Live Chat: Available 24/7 via the kaya100 platform (average response: 3–5 minutes)
Response Time: Privacy-related enquiries are handled within 5 business days

kaya100 is committed to resolving all privacy concerns fairly and transparently. Where a concern cannot be resolved to your satisfaction through our internal process, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.