Privacy Policy Kaya77 – Your Personal Data Protection

Kaya77 takes your privacy seriously. As an online gaming platform serving players in Malaysia, we understand that your trust depends not only on the security of your funds, but also on the protection of your personal information.

This Privacy Policy explains in detail how kaya77 ("we", "Platform") collects, processes, stores, and protects your personal data ("you", "player", "member"). It also describes the rights you hold regarding that data and how you may exercise them.

This policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection regulations. By registering an account or using kaya77's services, you consent to the processing of your personal data as described in this document.

Kaya77 only collects data that is strictly necessary to provide a safe, fair, and compliant service. The following are the categories of data we collect:

Data is collected via registration forms, KYC processes, direct platform usage, and automated tracking technologies such as cookies.

Every piece of data we collect is used for a clear and legitimate purpose. We do not use your data for any other purpose without obtaining your consent first.

• Creating and managing your account and ensuring secure access to the Kaya77 platform.
• Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Verifying your identity through the KYC process to comply with applicable legal requirements.
• Detecting and preventing fraud, money laundering, and suspicious activity.
• Sending important notifications related to your account, transactions, and security.
• Providing effective customer support and resolving any complaints or disputes.
• Monitoring usage patterns to identify signs of problem gambling and offer responsible gaming assistance.
• Improving the user experience through aggregate and anonymised analysis of usage behaviour.
• Sending you relevant promotional information and offers — you may unsubscribe at any time.

Kaya77 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in certain situations, we may need to share your data with the following parties:

• Payment Providers: Transaction data is shared with approved payment providers to securely process your deposits and withdrawals.
• KYC Service Providers: Identity information is shared with licensed identity verification partners to meet compliance requirements.
• Legal Authorities: We may be required to disclose data when mandated by a court order, regulatory directive, or applicable law.
• Technology Providers: Infrastructure and cloud service providers that help us operate the platform, subject to strict confidentiality agreements.
• Fraud Detection: Certain technical data is shared with third-party fraud detection systems to protect all players on the platform.

All third parties who receive your data are required to maintain security and privacy standards equal to or higher than those we uphold ourselves.

Protecting your personal data is a responsibility we take extremely seriously. Kaya77 implements multiple layers of technical and organisational security to ensure your data remains protected at all times.

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases.
• Two-factor authentication (2FA) is available and recommended for all player accounts.
• 24/7 system monitoring to detect and respond to any security threats.
• Internal staff access to personal data is restricted on a need-to-know basis only.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Clear incident response procedures to address any data breaches promptly.

Kaya77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for the platform to function properly — including login session management and security preferences. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as language, display settings, and game choices so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand how players use the platform for improvement purposes. Data is collected in aggregate and anonymised form.
• Security Cookies: Used to detect suspicious activity, protect accounts from unauthorised access, and prevent fraud.

You can manage your cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of the kaya77 platform.

As a Kaya77 player, you have certain rights regarding your personal data under Malaysia's PDPA and our own policies. The following are the rights available to you:

Kaya77 retains your personal data only for as long as necessary for the stated purposes or as required by applicable laws in Malaysia.

• Active account data is retained for as long as your account remains active and for a defined period following account closure.
• Financial transaction records are retained for a minimum of 7 years in line with Malaysia's financial legal requirements.
• Security logs and fraud detection data are retained for 5 years for investigation purposes if required.
• KYC documents are retained for the period required by applicable anti-money laundering regulations.
• Marketing data is deleted within 30 days after you unsubscribe from marketing communications.

Once the retention period expires, your data will be securely deleted or anonymised using methods that comply with industry standards.

In certain situations, your personal data may be transferred to or processed in countries other than Malaysia — for example, for cloud data storage or international payment processing purposes.

When this occurs, kaya77 ensures such transfers are protected by appropriate mechanisms, such as standard data transfer agreements, approved contractual clauses, or the requirement that the receiving country provides a level of data protection comparable to Malaysia's PDPA.

Kaya77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new technologies, legal requirements, or other relevant reasons.

You will be notified of any material changes via in-platform notifications or by email to the address registered on your account. It is your responsibility to review this page periodically.

Your continued use of the Kaya77 platform after an updated Privacy Policy is published constitutes your acceptance of those changes. If you do not agree with the amendments made, please contact us to close your account.