OFFICIAL KAYA68 DOCUMENT

Kaya68 Privacy Policy – How We Protect the Personal Data of Malaysian Players

At Kaya68, your privacy is more than a legal obligation – it is our moral responsibility. Find out exactly how your information is collected, used and protected in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026

Kaya68's Data Protection Commitment

Six core principles that guide how Kaya68 manages your privacy

256-bit SSL Encryption

All data transmitted between your device and Kaya68's servers is protected with the highest-grade SSL encryption. Your sensitive information cannot be intercepted or read by third parties while in transit.

Compliance with Malaysia's PDPA 2010

Kaya68 operates in full compliance with Malaysia's Personal Data Protection Act 2010. All data collection, processing, and storage is carried out within the bounds of applicable Malaysian law.

No Sale of Data to Third Parties

Kaya68 has never and will never sell, rent, or trade your personal data to any third party for marketing purposes without your explicit prior consent.

Right to Access & Correct Data

You have the right to access, review, correct, or request deletion of your personal data held by Kaya68 at any time by contacting our support team.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls, strict access controls, and regular security audits. Only authorised personnel have access to sensitive data.

Full Transparency

Kaya68 is committed to being fully transparent about our data practices. This policy is written in plain, easy-to-understand language – no confusing legal jargon or hidden terms.

Quick Summary: Kaya68 collects only the personal data necessary to operate the platform safely and lawfully. We do not sell your data. You have full rights to access, correct, or request deletion of your data. All our practices comply with Malaysia's PDPA 2010.

1Introduction

Kaya68 is fully committed to protecting the privacy of all its members. This Privacy Policy explains in detail how Kaya68 collects, uses, stores, discloses, and protects your personal data when you use our platform at kaya68.ws.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the overall agreement between you and Kaya68. By registering for or continuing to use the Kaya68 platform, you agree to the practices set out in this Privacy Policy.

Kaya68 acts as the Data Controller under the context of Malaysia's PDPA, this means we are responsible for determining the purposes and means by which your personal data is processed. If you have any questions about this policy, please contact us using the details provided in Section 11.

Important: This Privacy Policy applies to all Kaya68 services, including the kaya68.ws website, the Kaya68 mobile app, and all our official communication channels, including email and live chat.

2Types of Personal Data Collected

Kaya68 only collects data that is strictly necessary for legitimate purposes related to platform operations. The following are the categories of data we may collect:

Data CategorySpecific ExamplesRequired?
Identity Data Full name, MyKad/passport number, date of birth, gender Required
Contact Data Email address, Malaysian phone number, mailing address Required
Financial Data Payment methods (Touch 'n Go, DuitNow, GrabPay, Maybank2u, FPX), deposit and withdrawal records in RM Required
Technical Data IP address, device type, operating system, web browser, cookie data Automatic
Usage Data Game records, betting history, session duration, games accessed Automatic
Communication Data Live chat transcripts, support emails, feedback, and complaints Where Relevant
KYC Verification Data MyKad copy, verification selfie, proof of address For Withdrawals

Note: Kaya68 does not collect sensitive data such as health information, religious beliefs, or political views. We only request data that is relevant to the operation of our gaming platform.

3How Kaya68 Collects Your Data

Kaya68 collects your personal data through various methods depending on how you interact with the platform:

  • Account Registration: When you complete the Kaya68 registration form, you voluntarily provide basic information such as your name, email address, and phone number.
  • KYC Verification: When you submit a withdrawal request or when prompted by the Kaya68 system, you may be required to upload identity verification documents.
  • Financial Transactions: Data is collected automatically when you make a deposit using Touch 'n Go, DuitNow, GrabPay, Maybank2u, CIMB Clicks, Boost, ShopeePay, or FPX.
  • Gaming Activity: The Kaya68 platform records all gaming activity for security, dispute resolution, and legal compliance purposes.
  • Website Usage: Technical data such as IP addresses and browser types are collected automatically via cookies and similar tracking technologies.
  • Support Communications: When you contact the Kaya68 support team via live chat or email, conversation transcripts are stored for reference and service improvement purposes.
  • Referral Programme: If you participate in the Kaya68 referral programme, basic information about the referred person may be shared solely to facilitate bonus processing.

4How We Use Your Personal Data

Kaya68 uses your personal data solely for legitimate purposes necessary to operate the platform. Specifically, your data is used to:

  • Account Management: Creating and managing your Kaya68 account, processing registrations and verifying your identity.
  • Payment Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen Malaysian payment method.
  • Service Provision: Grants you access to all Kaya68 games and features, including slots, live casino, poker, football betting, e-sports, and badminton.
  • Security & Fraud Prevention: Detecting and preventing fraud, money laundering, multiple account creation and any suspicious activity.
  • Customer Support: Resolving queries, complaints, and technical issues you report to the Kaya68 team.
  • Legal Compliance: Meeting legal obligations under PDPA 2010, anti-money laundering (AML) requirements and directives from Malaysian authorities.
  • Marketing (With Consent): Sending information about Kaya68 promotions, bonuses, and platform updates — only if you have opted in to receive them.
  • Platform Improvements: Analysing aggregated usage data to understand usage patterns and improve the Kaya68 user experience.

Kaya68's Data Minimisation Principle: We collect only the data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

5Sharing Data with Third Parties

Kaya68 never sells, never rents, and never trades your personal data to any third party. However, there are limited circumstances in which data may be shared with the following parties:

  • Payment Service Providers: Financial transaction processing involves sharing only the minimum necessary data with providers such as Touch 'n Go, DuitNow, GrabPay and Malaysian banks. This data is used exclusively to complete transactions.
  • Third-Party Game Providers: The Kaya68 platform integrates games from internationally licensed providers. Minimal information may be shared for technical purposes in running the games – nothing beyond that.
  • Technology Service Providers: Parties that provide technical infrastructure to Kaya68 (such as server hosting) may have limited access to data in a technical capacity. They are bound by strict confidentiality agreements.
  • Legal Authority: Kaya68 will disclose data to Malaysian authorities when required by law, court order or in the course of investigating financial crime.
  • Regulatory Authority: Gaming authorities or relevant regulators with jurisdiction over Kaya68's operations may require access to certain records as part of official audits or investigations.

In all instances of data sharing mentioned above, Kaya68 ensures that only the minimum necessary data is shared, and that recipients are bound by appropriate confidentiality and data protection obligations.

6Kaya68 Data Security Measures

Kaya68 makes serious investments in security infrastructure to ensure your personal data remains protected at all times. The following security layers are in place:

256-bit SSL EncryptionAll data communications are encrypted
Multi-Layer FirewallMulti-layer server protection
Two-Factor AuthenticationAn additional layer of login protection
Regular Security AuditsSystem audits by independent experts
Strict Access ControlsOnly authorised staff can access data
Secure Data BackupData backed up regularly & securely

While Kaya68 takes all reasonable steps to protect your data, no internet transmission system or electronic storage is 100% secure. We encourage you to take your own precautions as well, such as using a strong, unique password for your Kaya68 account.

In the Event of a Data Breach: In the event of a data breach affecting your personal information, Kaya68 will notify you and the relevant authorities within the timeframe required by Malaysian law.

7Cookies & Tracking Technologies

Kaya68 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the Kaya68 website.

  • Essential Cookies: Required for core Kaya68 platform operations such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
  • Functional Cookies: Saves your preferences such as language, display settings and login information (at your option) for a more convenient Kaya68 experience.
  • Analytics Cookies: Helps Kaya68 understand how players use our platform in aggregate – this information is used to improve our services, not to identify you individually.
  • Marketing Cookies: Used only with your consent to display relevant Kaya68 promotional content.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Kaya68 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

8Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have certain rights regarding your personal data held by Kaya68. These rights are as follows:

Right of Access

You have the right to request a copy of the personal data Kaya68 holds about you at any time.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request that Kaya68 correct it.

Right to Erasure

In certain circumstances, you have the right to request that Kaya68 delete your personal data.

Right to Restrict Processing

You may request that Kaya68 stop processing your data for direct marketing purposes.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Lodge a Complaint

If you are dissatisfied with how Kaya68 handles your data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the Kaya68 support team by email at privacy@kaya68.ws or via live chat. Kaya68 will process your request within 30 business days. We may need to verify your identity before processing any data-related request.

9Data Retention & Deletion

Kaya68 retains your personal data only for as long as necessary for the purposes stated in this policy or as required under Malaysian law:

  • Active Account Data: Retained for the duration that your Kaya68 account remains active.
  • Financial Transaction Data: Retained for a minimum of 7 years after the transaction date, in accordance with Malaysian legal requirements on financial records and anti-money laundering.
  • KYC Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with Malaysia's AML requirements.
  • Game History Data: Retained for 2 years for dispute resolution and audit purposes.
  • Support Communication Data: Retained for 1 year for reference purposes and to improve Kaya68's services.
  • Closed Accounts: Account data for accounts closed at a member's request will be deleted or anonymised within 90 days, unless there is a legal obligation to retain it.

Early Data Deletion Requests: You may request deletion of your data before the specified retention period expires. However, Kaya68 may need to retain certain records to comply with Malaysian law even after a deletion request has been received.

10Changes to This Privacy Policy

Kaya68 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments.

  • You will be notified of any significant changes via an in-platform notification on Kaya68 or through the email address you registered with.
  • The "Last Updated" date at the top of this page will always reflect the most current version of the Kaya68 Privacy Policy.
  • Continued use of the Kaya68 platform after the changes take effect will be considered acceptance of the amended policy.
  • If you disagree with the changes made, you have the right to close your Kaya68 account and request data deletion before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how Kaya68 manages your data.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how Kaya68 handles your personal data, please reach out to us through the following channels:

Kaya68 Privacy Email

Send your privacy enquiry to privacy@kaya68.ws — we will respond within 3 business days.

24/7 Live Chat Support

For immediate enquiries about your data, contact the Kaya68 support team via live chat, available 24 hours a day.

Kaya68 General Support

Contact support@kaya68.ws for general enquiries. Include "Privacy Enquiry" in the subject line of your email for faster handling.

Effective date: 1 January 2026  |  Version: 5.0  |  Language: Bahasa Melayu (ms-MY)  |  Relevant Act: Malaysia PDPA 2010

FAQ – Kaya68 Privacy Policy

The most common misconceptions about privacy and data at Kaya68

No. Kaya68 never sells, rents, or shares your personal data with third parties for marketing purposes without your explicit consent. The only third parties that may receive data are technical service providers bound by strict confidentiality agreements — and even then, only the minimum data necessary to carry out the relevant operations.

Yes, you may request deletion of your data. However, certain limitations apply — Kaya68 is required to retain financial and transaction records for 7 years and KYC records for 5 years after the business relationship ends, as mandated by Malaysian law including anti-money laundering (AML) requirements. Any other data outside the scope of these legal obligations will be deleted within 90 days of your request being received.

Yes. All financial transactions at Kaya68 – whether via Touch 'n Go, DuitNow, GrabPay, Maybank2u, CIMB Clicks or any other method – are protected with 256-bit SSL encryption. Kaya68 does not store your full bank account number or card details. Payment processing is handled by licensed, secure payment gateways, and only the minimum data required to verify the transaction is shared with the relevant provider.

In the event of any data breach affecting your information, Kaya68 is committed to notifying you via your registered email and/or in-platform notification within the timeframe required by Malaysian law. The notification will describe the type of data potentially involved, the steps we have taken and what you should do to protect yourself. Kaya68 will also report the incident to the relevant authorities as appropriate.

Your Data Is Safe with Kaya68

Kaya68 protects your privacy the same way we protect your winnings — seriously and responsibly. Join over 500,000 Malaysian players who trust Kaya68 as their online gaming platform of choice.

256-bit SSL Protection  |  PDPA 2010 Compliance  |  No data selling

Bahasa Melayu