Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by kaya69 ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with the kaya69 website at kaya69.cam, including all games, services, promotions, and support interactions offered therein.

kaya69 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Policy explains in plain terms what data we collect about you, why we collect it, how we use and protect it, with whom we may share it, and how long we keep it.

By registering an account on kaya69 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use the Platform.

2. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identity number, contact details, financial data, and behavioural data collected through use of the Platform.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" — kaya69, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third-party service provider who processes personal data on behalf of kaya69 under contractual obligation.
• "Member" / "User" — any individual who has registered an account on the kaya69 Platform.
• "Cookies" — small data files stored on your browser or device that enable the Platform to recognise you, maintain session state, and collect analytics data.
• "KYC" — Know Your Customer verification procedures, including identity and age verification.

3. Data We Collect

kaya69 collects the following categories of personal data, depending on how you interact with the Platform:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify the 21+ age requirement);
• Malaysian MyKad number, passport number, or other national identity document reference;
• Residential address, including postcode, city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam), and state;
• Email address and mobile phone number.

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references;
• E-wallet identifiers associated with Touch 'n Go eWallet, Boost, or GrabPay accounts (reference IDs only — kaya69 does not store full e-wallet credentials);
• Bank account details provided for withdrawal processing (Maybank, CIMB, Public Bank, Hong Leong Bank, or other FPX-participating institutions);
• Cryptocurrency wallet addresses used for deposits or withdrawals (BTC, ETH, USDT TRC20, LTC).

• Game session records including games played, bet amounts, win/loss outcomes, and session duration;
• Sports betting history including markets selected, odds accepted, and wager amounts;
• Bonus usage, promotional participation history, and loyalty tier activity;
• Customer support interaction logs, including chat transcripts and email correspondence.

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookie identifiers and analytics tracking data (see Section 8).

4. How We Collect Your Data

kaya69 collects personal data through the following means:

The majority of personal data we hold is provided directly by you: during the account registration process, when completing KYC verification, when making deposits or withdrawal requests, when contacting our customer support team, and when participating in promotional activities or surveys.

When you access and use the kaya69 Platform, certain technical and behavioural data is collected automatically through server logs, cookies, and analytics tools. This includes your IP address, device fingerprint, pages visited, game sessions initiated, and click-path data. See Section 8 for details on our cookie practices.

We may receive supplementary verification data from KYC identity verification service providers, fraud detection partners, and payment processors. Such third parties are contractually bound to handle your data securely and may only share it with kaya69 for the specified verification purpose.

5. How We Use Your Personal Data

kaya69 uses your personal data for the following purposes:

• Account Administration — to create and manage your Member account, authenticate your identity at login, and maintain accurate account records;
• Payment Processing — to process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, Maybank, CIMB, and other supported channels, and to process withdrawal requests;
• Identity Verification (KYC) — to verify that you meet the 21+ age requirement and to comply with our anti-money laundering (AML) and know-your-customer obligations;
• Fraud Prevention & Security — to detect, investigate, and prevent fraudulent activity, unauthorised account access, and any form of prohibited conduct as defined in our Terms & Conditions;
• Customer Support — to respond to enquiries, resolve complaints, and provide assistance with account, payment, and gameplay matters;
• Responsible Gambling — to monitor for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and comply with responsible gambling obligations;
• Platform Improvement — to analyse aggregated usage data to improve the Platform's functionality, game selection, payment flow, and overall user experience;
• Marketing Communications — to send you promotional offers, bonus notifications, and platform updates, where you have provided consent and have not opted out (see Section 5.1 below);
• Legal Compliance — to fulfil our legal obligations, respond to regulatory enquiries, and cooperate with lawful requests from competent authorities.

kaya69 may send you promotional emails, SMS notifications, or in-platform messages relating to bonuses, new game releases, and special events. You may opt out of marketing communications at any time by contacting our support team at [email protected]. Opting out of marketing does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

6. Legal Basis for Processing

kaya69 processes your personal data on the following legal bases:

• Contractual Necessity — processing that is necessary to perform our contractual obligations to you as a Member, including account management and payment processing;
• Legal Obligation — processing required to comply with applicable laws, including KYC/AML regulations and data retention requirements;
• Legitimate Interests — processing for fraud prevention, platform security, and service improvement, where our legitimate interests are not overridden by your rights;
• Consent — processing for marketing communications and non-essential cookies, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

kaya69 does not sell, rent, or trade your personal data. We may share data with the following categories of recipients only where strictly necessary and under contractual data protection obligations:

We share payment-related personal data with payment processing partners, including e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX-participating banks (Maybank, CIMB, Hong Leong, Public Bank), and cryptocurrency network infrastructure, to the extent necessary to complete transactions. These providers are subject to their own privacy and security obligations.

We engage licensed identity verification and KYC service providers to assist with document verification and fraud screening. These providers process your data solely for verification purposes and may not use it for any other purpose.

Where you play games hosted by third-party studios integrated into the kaya69 Platform, minimal session data (such as player ID and bet history) may be shared with those providers for game operation and dispute resolution purposes. Game providers do not receive your personally identifiable information unless specifically required for a dispute investigation.

kaya69 may disclose personal data to competent authorities, law enforcement agencies, courts, or regulatory bodies when required to do so by law, court order, or regulatory instruction. We will only disclose the minimum data necessary to comply with such requirements.

8. Cookies & Tracking Technologies

kaya69 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. By using the Platform, you consent to the use of cookies as described below.

• Strictly Necessary Cookies — required for core platform functionality such as maintaining your login session, processing bets, and storing your language and display preferences. These cannot be disabled without impairing Platform function.
• Performance & Analytics Cookies — collect aggregated data about how Members use the Platform, including pages visited, game sessions initiated, and error events. This data helps us identify and fix issues and improve the Platform.
• Functional Cookies — store your personalisation preferences, such as your preferred deposit method or display settings, so the Platform remembers your choices between sessions.
• Security Cookies — used to detect and prevent fraudulent activity, including bot traffic detection and session hijacking prevention.

Most web browsers allow you to control cookies through their settings preferences. You can choose to block or delete cookies; however, please note that disabling strictly necessary cookies will prevent you from logging in to your kaya69 account and using core Platform features. Disabling performance cookies will not affect your ability to play or transact.

9. Data Retention

kaya69 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data — retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations;
• KYC Documents — retained for a minimum of five (5) years following the completion of the customer relationship, in accordance with financial crime prevention requirements;
• Transaction Records — retained for a minimum of seven (7) years to comply with applicable financial record-keeping requirements;
• Customer Support Records — retained for three (3) years following the resolution of the relevant interaction;
• Marketing Consent Records — retained until consent is withdrawn plus one (1) year as evidence of prior consent;
• Analytics & Technical Data — retained in aggregated, de-identified form for up to twenty-four (24) months.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents recovery or re-identification.

10. Data Security

kaya69 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for all sensitive personal data and financial records stored in our databases;
• Access controls ensuring that only authorised personnel with a legitimate need can access personal data, and only to the extent required for their role;
• Multi-factor authentication for internal administrative access to systems containing personal data;
• Regular penetration testing and security audits conducted by independent third-party specialists;
• Intrusion detection and monitoring systems operating on a continuous basis;
• Staff training on data protection principles and security incident response procedures.

While kaya69 maintains industry-standard security controls, no system is entirely immune to risk. We encourage you to protect your account by using a strong unique password, enabling two-factor authentication where available, and contacting [email protected] immediately if you suspect any unauthorised access to your account.

11. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by kaya69. To exercise any of these rights, please contact us at [email protected] with your account details and a description of your request. We will respond within thirty (30) days of receipt.

• Right of Access — you may request a copy of the personal data we hold about you, along with details of how it is used;
• Right to Rectification — you may request correction of inaccurate or incomplete personal data;
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention;
• Right to Restrict Processing — you may request that we limit how we use your data in certain circumstances, such as while a rectification request is pending;
• Right to Data Portability — you may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Object — you may object to processing based on our legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

12. Minors & Age Verification

kaya69 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21 years. Age verification is a mandatory step in our account registration and KYC process.

If we become aware or have reasonable grounds to believe that personal data has been submitted by or on behalf of an individual under 21, we will immediately suspend the associated account, securely delete the collected data, and return any deposited funds to the source payment method in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered an account on kaya69, please notify us immediately at [email protected] so that we can take prompt action.

13. Third-Party Services

The kaya69 Platform integrates third-party services to deliver certain functions, including payment processing, identity verification, game hosting, and platform analytics. While we select third-party partners carefully and require them to meet appropriate data protection standards, kaya69 is not responsible for the privacy practices of third-party services operating independently of our Platform.

Third-party payment providers such as Touch 'n Go, Boost, GrabPay, Maybank, CIMB, and cryptocurrency network operators maintain their own independent privacy policies and data processing practices. We encourage you to review those policies directly for a complete understanding of how your data is handled within their systems.

14. Changes to This Privacy Policy

kaya69 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date displayed at the top of this page and, where the changes are significant, we will notify you via email to the address associated with your account or via a prominent notice on the Platform.

We encourage you to review this Privacy Policy periodically to remain informed of how we handle your personal data. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kaya69, please contact our Data Protection team through the following channel:

This Privacy Policy was last updated on 1 January 2026. All previous versions are superseded by this document.