Privacy Policy kaya96 – Our Commitment to Protecting Your Personal Data

Kaya96 ("we", "Platform") takes the privacy protection of every user seriously. This Privacy Policy explains our practices for collecting, using, disclosing and protecting your personal information when you use the kaya96.vu website, the kaya96 mobile app and all related services.

This policy is drafted in accordance with the requirements of Malaysia Personal Data Protection Act (PDPA) 2010 and internationally accepted privacy standards. We are committed to ensuring your personal data is handled with care, respect and responsibility at all times.

We recognise that as an online gaming platform, your trust is the foundation of our relationship. That is why we are committed to being fully transparent about how your data is handled — not merely to meet legal requirements, but because we genuinely value the trust you place in us.

Kaya96 collects personal data from you through several means — directly when you register or interact with the platform, and automatically through website technologies. Below is a detailed breakdown of the data we collect:

We do not collect sensitive information such as biometric data without your explicit consent. Biometric authentication (fingerprint or facial recognition) within the kaya96 app is processed entirely by your device's operating system and is never stored on our servers.

Every piece of data we collect has a clear and legitimate purpose. kaya96 uses your personal information for the following purposes:

• Account Management: Creating, verifying and managing your kaya96 account, including the mandatory KYC process.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions accurately and securely.
• Service Delivery: Ensuring you can access all games, promotions and platform features without interruption.
• Security & Fraud Prevention: Detecting and preventing suspicious activity, unauthorised access and all forms of fraud on the platform.
• Legal Compliance: Meeting compliance obligations under PDPA 2010 and other applicable laws.
• Customer Support: Providing accurate and effective assistance when you contact our support team.
• Promotional Communications: Sending information about promotions, new bonuses and service updates — only if you have given your consent.
• Platform Improvements: Analysing usage patterns to improve the interface, performance and overall user experience.

Kaya96 does not sell, rent or trade your personal data to any party for commercial purposes. However, in the context of legitimate business operations, we share your personal data with selected and trusted third parties in the following circumstances only:

• Payment Providers: Transaction information that must be shared with payment service providers such as DuitNow, FPX, Touch 'n Go and Boost to process your deposits and withdrawals.
• Technical Service Providers: Companies that assist us in operating the platform, such as cloud computing services, CDN providers and cybersecurity services — all are bound by strict confidentiality agreements.
• Enforcement Body: When required by law, court order, or direction from a competent authority in Malaysia.
• Fraud Prevention: With parties who assist us in detecting and preventing fraud, money laundering, and other criminal activities.

All third parties with whom we share data are bound by strict data protection agreements and are not permitted to use your information for any purpose other than those specified.

Kaya96 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. Our security measures encompass multiple layers of protection:

• Data Encryption in Transit: All communications between your browser or app and kaya96 servers are protected with TLS 1.3 / 256-bit SSL encryption.
• Stored Data Encryption: Sensitive data such as passwords and financial information is encrypted at rest in our database using AES-256 encryption.
• Access Control: Only authorised staff with a legitimate business need may access user data, and all access is logged and monitored.
• 24/7 Monitoring: Intrusion detection systems and anomaly monitoring operate around the clock to identify any suspicious activity.
• Regular Security Testing: Our platform undergoes regular penetration testing and security audits by independent security experts.
• Two-Factor Authentication (2FA): We strongly encourage and fully support the use of 2FA as an additional security layer for your account.

Kaya96 uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic and maintain the security of your session. Cookies are small text files stored on your device.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display theme and other personal settings to streamline future use.
• Analytics Cookies: Helping us understand how users interact with the platform so we can make meaningful improvements.

You can manage cookie usage through your browser settings. However, disabling essential cookies may affect the functionality of the Kaya96 platform.

Kaya96 retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for 5 years following account closure for legal compliance purposes.
• Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• Security Logs: Retained for 12 months for security incident investigation purposes.
• Support Communication Data: Retained for 2 years from the date of last interaction.

Upon expiry of the retention period, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity.

As a kaya96 user residing in Malaysia, you have several rights guaranteed under the Personal Data Protection Act (PDPA) 2010. kaya96 respects and facilitates the exercise of all these rights:

Kaya96 is a platform exclusively intended for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we become aware that personal data of a child under 18 has been collected inadvertently, we will take the necessary steps to delete that data immediately and close the account in question.

Kaya96 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. The date of the latest amendment will always be displayed at the top of this document.

For material amendments — particularly those affecting how we use or share your data — notice will be sent by email to all registered members at least 14 days before the changes take effect. Continued use of the Kaya96 platform after that date constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist:

• Live Chat 24/7: The fastest way to get a response — available directly from the Kaya96 website or app.
• Privacy Email: [email protected] — Please state "Privacy Enquiry" in the email subject. Response within 3 business days.

You may also lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia if you believe your privacy rights have been violated and we have been unable to resolve the matter to your satisfaction.