Privacy Policy

1. Who We Are

1.1 This Privacy Policy is issued by kaya100 ("kaya100", "we", "us", "our"), the operator of the online gaming platform accessible at kaya100.co ("Platform"). kaya100 acts as the data controller in respect of personal data collected from users and registered account holders of the Platform.

1.2 This Policy explains what personal data kaya100 collects about you, the purposes for which it is processed, with whom it may be shared, the security measures applied to protect it, and the rights available to you in respect of your data. It applies to all users of the Platform regardless of the device or browser used to access it.

1.3 If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact kaya100 using the contact details in Section 13.

2. Personal Data We Collect

2.1 kaya100 collects the following categories of personal data in connection with the registration, operation, and maintenance of your account and your use of the Platform:

2.1.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification purposes)
• Gender (where provided during registration)
• Malaysian NRIC number or passport number (for KYC verification)
• Residential address (current and verifiable)

2.1.2 Contact Data

• Email address registered to your kaya100 account
• Malaysian mobile telephone number for OTP and communications

2.1.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment methods used
• Payment account identifiers (Touch n Go eWallet account reference, bank account numbers where applicable) as required for AML compliance
• Account balance history and transaction logs

2.1.4 Gaming & Betting Activity Data

• Sports betting records: events wagered on, stakes placed, odds accepted, settlement outcomes
• Casino game session data: games played, wagers, outcomes, session duration
• Slot game activity: titles played, spin history, bonus activations
• Bonus uptake and wagering progress records

2.1.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Session timestamps and login history
• Platform navigation and interaction data (pages viewed, features used)

2.1.6 Communications Data

• Records of communications between you and kaya100 support, including live chat transcripts and email correspondence
• Support ticket content and resolution records

3. How We Use Your Personal Data

3.1 kaya100 uses personal data collected from you for the following purposes:

• Account Registration & Management: To create, maintain, and secure your kaya100 account; to verify your identity and age; to process your deposits and withdrawals; and to manage your account settings and preferences.
• Service Delivery: To provide access to the Platform's sportsbook, live casino, and slot game services; to process and settle bets and casino wagers; to credit winnings to your account balance; and to facilitate transfers to your verified payment method.
• KYC & AML Compliance: To fulfil our obligations under applicable Know Your Customer and anti-money laundering regulations, including identity verification, transaction monitoring, and suspicious activity reporting where legally required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent account activity, unauthorised access, collusion, and abuse of promotional offers; to protect the integrity of Platform games and betting markets.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour; to administer deposit limits, session reminders, and self-exclusion restrictions activated by players; and to fulfil our responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and manage complaints in connection with your use of the Platform.
• Platform Improvement: To analyse aggregate usage data for the purpose of improving Platform performance, game selection, user interface design, and service quality. Such analysis uses aggregated or anonymised data wherever possible.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and product updates relevant to your use of kaya100. You may opt out at any time as described in Section 9.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities, and defend kaya100's legal rights where necessary.

4. Legal Basis for Processing

4.1 kaya100 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between kaya100 and you as a registered account holder — including account creation, bet processing, game provision, and withdrawal facilitation.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out for kaya100's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of Platform services — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, including marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Sharing Your Personal Data

5.1 kaya100 does not sell or rent personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment Processors: Licensed payment service providers including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX — to the extent necessary to process your deposits and withdrawals. These providers act under strict data processing agreements.
• Game Providers: Certified gaming studios and RNG providers from whom kaya100 licences games — to the extent necessary to deliver those games and settle game outcomes. Game providers do not receive your financial or identity data.
• KYC & Verification Services: Licensed identity verification service providers engaged to conduct document verification and age verification checks in connection with your KYC process.
• Regulatory Authorities: Where required by applicable law, kaya100 may disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies pursuant to lawful requests or mandatory reporting obligations.
• Fraud Prevention Services: Third-party providers of fraud detection and prevention tools, who process data on kaya100's behalf under data processing agreements that restrict use to fraud prevention purposes only.
• Professional Advisers: Legal, accounting, and audit professionals retained by kaya100, subject to professional confidentiality obligations.

5.2 In the event of a business acquisition, merger, or restructuring affecting kaya100, player data may be transferred to the acquiring entity as part of that transaction, subject to the same level of privacy protection as provided in this Policy.

6. Cookies & Tracking Technologies

6.1 The kaya100 Platform uses cookies and similar tracking technologies to operate core platform functionality and to analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, session time reminder preferences, and display options.
• Analytics Cookies: Used to collect aggregate data about Platform usage patterns — pages visited, session duration, feature usage — to enable kaya100 to improve the Platform. Data processed for analytics is aggregated and anonymised wherever possible.

6.2 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the Platform.

7. Data Retention

7.1 kaya100 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years following the transaction date, in accordance with applicable financial record-keeping obligations.
• Betting and Gaming Activity Data: Retained for a minimum of two (2) years from the date of the activity, and longer where required for dispute resolution or regulatory compliance.
• Communications and Support Records: Retained for two (2) years from the date of the communication unless required for longer in connection with an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for as long as required to demonstrate compliance with consent obligations, and deleted within 90 days of a consent withdrawal request.

8. Security Measures

8.1 kaya100 implements technical and organisational security measures appropriate to the sensitivity of the data processed. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between user devices and kaya100 servers
• Encryption of sensitive data fields at rest within kaya100 data storage systems
• Role-based access controls restricting internal access to personal data on a need-to-know basis
• Multi-factor authentication requirements for internal systems handling personal data
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure
• Incident response procedures for detecting, containing, and reporting data security incidents

8.2 While kaya100 applies rigorous security standards, no online system can be guaranteed completely secure. In the event of a data breach that poses a risk to your rights and freedoms, kaya100 will notify affected players and relevant regulatory authorities in accordance with applicable data breach notification obligations.

9. Your Data Rights

9.1 As a kaya100 account holder, you have the following rights in respect of your personal data, exercisable by contacting kaya100 via the support channel:

• Right of Access: You may request a copy of the personal data kaya100 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of personal data that is inaccurate or incomplete. Some data (such as your legal name and date of birth) can only be corrected upon submission of supporting documentation.
• Right to Erasure: In certain circumstances you may request deletion of your personal data. This right is subject to kaya100's legal obligations to retain certain data under AML, KYC, and financial record-keeping regulations, which may override erasure requests.
• Right to Restrict Processing: You may request that kaya100 restrict processing of your data in certain circumstances, such as where data accuracy is disputed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your data be provided to you in a commonly used machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. kaya100 will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (including marketing communications), you may withdraw consent at any time via account settings or by contacting support. Withdrawal does not affect prior lawful processing.

9.2 kaya100 will respond to data rights requests within 30 calendar days. Complex requests may require an extension of up to an additional 60 days, in which case you will be notified of the extension within the initial 30-day period.

10. Children and Minors

10.1 The kaya100 Platform is strictly for users aged 21 years and above. kaya100 does not knowingly collect personal data from individuals under 21 years of age. Age verification checks are conducted as part of the KYC process for all registered accounts.

10.2 If kaya100 becomes aware that personal data has been collected from an individual under the age of 21 without verified parental or guardian consent, that account will be immediately suspended, the data will be deleted in accordance with applicable legal obligations, and any funds held in the account will be subject to investigation prior to any return.

11. International Data Transfers

11.1 In connection with the operation of the Platform, personal data may be transferred to and processed in jurisdictions outside of Malaysia, including the locations of kaya100's game providers, technology partners, and data hosting infrastructure.

11.2 Where such transfers occur, kaya100 ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to that required by applicable data protection law. Such safeguards include contractual data transfer mechanisms and processing agreements with recipient entities.

12. Changes to This Privacy Policy

12.1 kaya100 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the features and services offered on the Platform. Material changes will be communicated to registered players via the email address registered to their account, or via a prominent notice on the Platform, no less than 7 days prior to the effective date of the change.

12.2 The effective date of the current version of this Privacy Policy is stated at the top of this page. Your continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the revised Policy.

13. Contact & Data Enquiries

13.1 If you have questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how kaya100 has handled your personal data, please contact us via:

• Email: [email protected]
• Live Chat: Available 24/7 at kaya100.co — select the Data & Privacy option from the support menu

13.2 kaya100 will acknowledge privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days.

13.3 If you are not satisfied with kaya100's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.