Personal Data Protection

Kaya918 Privacy Policy – Player Data Protection & Privacy in Malaysia

At kaya918, we take every member's privacy seriously. This document clearly explains how we collect, use, store, and protect your personal data – no confusing legal language, just straightforward and honest information.

Updated: December 2026  |  Version 3.1

Our Privacy Commitment

Your data is never sold to third parties
256-bit SSL encryption for all data transmissions
Full rights to access and delete your data
No marketing without your consent
Compliance with the Personal Data Protection Act 2010
Data Protection Principles

The Six Privacy Pillars of kaya918

Our privacy policy is built on six core principles that ensure your data is always handled responsibly and transparently.

Full Transparency

We always inform you clearly about what data we collect, why we need it, and how it will be used. No hidden agendas, no silent data collection.

Purposeful Use

Collected data is used only for the stated purposes – managing your account, processing transactions, improving our services, and ensuring platform security.

Technical Security

256-bit SSL encryption, layered access controls, continuous security monitoring, and regular security audits ensure your data is protected from unauthorised access.

Control in Your Hands

You have the right to access, correct, and request deletion of your data at any time. Control stays with you – not with us.

Minimum Retention

Data is retained only for as long as necessary for the stated purpose or as required by law. Once the retention period expires, data is securely disposed of.

Legal Compliance

Kaya918 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant regulatory requirements to ensure your data is protected to the required legal standard.

To all kaya918 members: This Privacy Policy describes our personal data practices. Continued use of our platform following any amendments to this policy is considered acceptance of the updated terms.

1Information We Collect

Kaya918 collects several categories of personal data from members for defined purposes. Below is a breakdown of the types of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, MyKad number, date of birth Account verification & KYC
Contact Data Phone number, email address Communication & Support
Financial Data Banking details, transaction records Processing deposits & withdrawals
Technical Data IP address, browser type, device Security & improvements
Gaming Data Betting history, preferred games Responsible gaming & personalisation

We only collect data that is genuinely necessary to deliver our services effectively. This 'data minimisation' principle means we do not collect excessive or irrelevant information.

2How We Collect Data

2.1 Information You Provide Directly

The most important data is collected directly from you – when registering an account, completing your profile, making transactions, contacting customer support, or filling in any form on our platform.

2.2 Automatically Collected Data

When you use the kaya918 platform – whether via the website or mobile app – certain technical data is collected automatically, including IP address, browser or app type and version, device operating system, pages visited, and time of visit.

2.3 Data from Third Parties

In some circumstances, we may receive data from trusted third parties such as identity verification service providers for KYC purposes, or e-wallet providers to confirm payment transactions.

All third parties sharing data with kaya918 are bound by strict data protection agreements and must meet the same or higher security standards.

3Use of Personal Data

Data collected by kaya918 is used for the following purposes, all of which are directly related to the delivery of our services to you:

  • Account management – creating, verifying, and managing your user account
  • Transaction processing – processing deposits, withdrawals, and all financial activities related to your account
  • KYC verification – meeting regulatory requirements for identity verification and anti-money laundering compliance
  • Platform Security – detecting and preventing fraud, unauthorised access, and suspicious activity
  • Customer support – responding to enquiries and resolving issues reported by you
  • Service improvement – analysing usage patterns to improve the overall user experience
  • Legal compliance – fulfilling applicable legal and regulatory obligations

kaya918 does not use your data for automated decision-making that has a material impact on you without human review. Every significant decision involving your account is reviewed by our team.

4Data Sharing

Kaya918 does not sell, rent, or disclose your personal data to third parties for their marketing purposes. Data sharing only occurs in the following limited scenarios:

4.1 Service Providers

We work with trusted third-party service providers to operate the platform – including cloud infrastructure providers, payment gateway providers, and identity verification companies. All providers are bound by strict confidentiality agreements.

4.2 Legal Requirements

Data may be disclosed to relevant authorities when required by law, court order, or in the course of a legitimate financial crime investigation.

4.3 Platform Protection

In cases of suspected fraud, money laundering, or other illegal activity, relevant information may be shared with regulatory bodies or investigative authorities.

In all of the above situations, shared data is limited to the minimum information necessary. kaya918 always strives to protect your privacy interests, even in situations that require data disclosure.

5Data Security

Protecting your personal data is the highest priority for kaya918. We implement multiple layers of technical and organisational security to keep your data safe at all times.

5.1 Technical Security Measures

  • 256-bit SSL/TLS encryption for all data in transit between your browser or app and our servers
  • Encryption of sensitive data stored in databases using industry-standard encryption algorithms
  • Role-based access control (RBAC) ensuring staff can only access the data required for their role
  • Real-time security threat monitoring using an intrusion detection system (IDS)
  • Regular security audits and penetration testing conducted by independent third parties

5.2 Incident Response Procedures

Despite all security measures in place, no system is entirely risk-free. Should a data breach occur that affects your personal information, kaya918 is committed to notifying you within 72 hours of becoming aware of it, as required by applicable data protection laws.

6Cookies & Tracking Technologies

The kaya918 website and app use cookies and other tracking technologies to enhance the user experience and collect analytics data that helps us improve our services.

6.1 Types of Cookies Used

  • Essential cookies: Required for core platform functions such as login and session security. Cannot be disabled.
  • Functional cookies: Stores your preferences such as language and display settings for convenience.
  • Analytics cookies: Helps us understand how users interact with the platform for improvement purposes.
  • Security cookies: Used to detect and prevent fraudulent activity and unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data held by kaya918:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 days of receipt.

Right to Rectification

If the data we hold is inaccurate or out of date, you have the right to request a correction. Updates can be made through the account dashboard or by contacting our support team.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. Each request will be assessed against applicable legal and operational requirements.

Right to Opt Out of Marketing

You can withdraw consent to receive marketing communications at any time through your account settings or by contacting our support team.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another platform, subject to applicable technical limitations.

8Cross-Border Data Transfers

As a platform operating within the global technology ecosystem, some data may be processed or stored on servers located outside Malaysia. This occurs primarily when we use third-party cloud infrastructure services.

For all cross-border data transfers, kaya918 ensures that the recipient country or organisation provides a level of data protection comparable to Malaysian and international standards. Appropriate data transfer agreements are established to safeguard your data.

9Underage Users

The kaya918 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we find that we have inadvertently collected data from a minor, the account in question will be closed immediately and the relevant data will be promptly deleted.

10Changes to the Privacy Policy

Kaya918 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors. The date of the most recent update will always be displayed at the top of this document.

For material changes, we will send a notification to your registered email or display a clear notice on the platform at least 7 days before the changes take effect. Continued use of the platform after the effective date of the changes indicates your acceptance of the updated policy.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, kaya918's Data Protection Officer team is here to help.

Privacy Email: [email protected]

General Support: [email protected]

Privacy-related requests will be responded to within 5 business days.

For formal complaints that cannot be resolved directly with us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body.

Your Data Is Safe with kaya918

Your privacy is our priority. Join a community of 500,000+ Malaysia players who trust kaya918 for a safe and protected gaming experience.

Register for Free Terms and Conditions
Bahasa Melayu