Privacy Policy — Kayaraya88

This Privacy Policy ("Policy") is issued by Kayaraya88 ("Company", "we", "us", "our") and applies to all personal data processed in connection with your use of the kayaraya88 online gaming platform, accessible at kayaraya88.cam, including all associated services, features, mobile interfaces, and communications.

Kayaraya88 takes the privacy and security of your personal data seriously. We collect only what is necessary to operate the platform and deliver our services, we store it securely, and we do not sell it to third parties for commercial purposes. This Policy describes our data practices in full, and we encourage you to read it carefully alongside our Terms & Conditions.

By registering an account on the kayaraya88 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should refrain from using the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Kayaraya88 collects personal data from you in two ways: information you provide directly and information collected automatically through your use of the platform.

3.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, phone number, and chosen username when creating an account.
• KYC documents: Government-issued photo identification (Malaysian MyKad, passport, or driver's licence), proof of address, and payment method verification documents submitted during the identity verification process.
• Financial data: Payment method details (e-wallet account references, bank account details for FPX/DuitNow transactions) used for deposits and withdrawals. Full payment card numbers are never stored on our servers.
• Support communications: Records of your correspondence with our customer support team, including live chat transcripts and email exchanges.
• Responsible gambling declarations: Self-exclusion requests, deposit limit settings, and cooling-off declarations made through the platform.

3.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, and device identifiers.
• Usage data: Pages visited, features accessed, session duration, game activity, betting history, and navigation patterns on the platform.
• Transaction data: Records of all deposits, withdrawals, wagers placed, games played, and bonus activities associated with your account.
• Cookie data: Session cookies, preference cookies, and analytics cookies — described in detail in Section 7.
• Geolocation data: Approximate geographic location derived from your IP address, used for fraud prevention and jurisdictional compliance checks.

We process your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which kayaraya88 processes personal data:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without appropriate human review, except where strictly required for fraud detection purposes.

Kayaraya88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and our international licensing obligations — including KYC verification, anti-money-laundering checks, and responsible gambling reporting.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests — including fraud prevention, platform security, and improvement of our services — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, specifically in relation to marketing communications. You may withdraw consent for marketing at any time by contacting support or updating your account communication preferences.

Kayaraya88 does not sell your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment processors: Financial data shared with payment service providers (including Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and USDT TRC20 gateway providers) solely for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Identity documents shared with accredited third-party verification services engaged to conduct KYC checks on our behalf.
• Game software providers: Limited account and session data shared with licensed game providers as necessary to deliver gaming content within the platform.
• Regulatory and licensing authorities: Account and transaction data disclosed to our international licensing authority or relevant regulatory body where required under our licensing obligations.
• Law enforcement and legal process: Personal data disclosed where required by applicable law, court order, or other lawful process issued by a competent authority.
• Fraud prevention networks: Limited data shared with industry fraud prevention databases to identify and prevent fraudulent activity.

All third-party processors engaged by Kayaraya88 are subject to data processing agreements that require them to process your data only on our instructions, maintain appropriate security standards, and not use your data for their own independent purposes.

The kayaraya88 platform uses cookies and similar tracking technologies to operate effectively, remember your preferences, and understand how players use the platform so we can improve it.

Essential cookies cannot be disabled as they are necessary for the platform to function. You may decline non-essential cookies through your browser settings. Note that disabling certain cookies may affect your platform experience. Most modern browsers allow you to view, manage, and delete cookies stored on your device through the browser's privacy or settings menu.

Kayaraya88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with kayaraya88, plus a period of five (5) years following permanent account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Transaction records: Retained for a minimum of five (5) years, consistent with financial record-keeping obligations under our licensing framework.
• Support communications: Retained for two (2) years following the close of the relevant support interaction.
• Marketing data: Retained until you withdraw consent for marketing communications or request deletion, subject to retention obligations that may override erasure requests.
• Cookies and analytics data: Retained for the periods specified in Section 7 above.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

Kayaraya88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kayaraya88 platform.
• Encrypted storage of sensitive personal data and KYC documents at rest, using industry-standard encryption protocols.
• Access controls: Strict role-based access controls limiting internal access to personal data to authorised personnel who require it for their specific job functions.
• Two-factor authentication (2FA) available on all player accounts and required for all internal staff accounts.
• Regular security audits and penetration testing conducted by independent security professionals.
• Intrusion detection systems monitoring the platform infrastructure for suspicious activity on a continuous basis.

While we take every reasonable precaution to protect your data, no system is entirely impenetrable. In the event of a data breach that is likely to result in a risk to your rights or interests, Kayaraya88 will notify affected players and relevant authorities in a timely manner consistent with our obligations under applicable law.

As a data subject, you have the following rights in relation to your personal data held by Kayaraya88. Requests to exercise these rights should be submitted to our support team via live chat or email:

We will respond to verifiable data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension. Note that certain rights are subject to override by our mandatory legal and licensing obligations — for example, we cannot delete KYC records during the mandatory regulatory retention period.

If Kayaraya88 discovers or has reason to believe that an account is held by or on behalf of an individual under the age of 21, the account will be immediately suspended and all associated data will be reviewed. Any funds deposited by a minor will be returned to the payment source where possible, and the matter may be referred to appropriate authorities.

If you are a parent or guardian and you believe your child has registered an account on the platform, please contact our support team immediately via live chat or email at [email protected] so that we can take appropriate action without delay.

The kayaraya88 platform integrates with a number of third-party service providers to deliver its full functionality. These include payment processors (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX), game software providers, KYC verification services, and analytics tools.

Each third-party processor is vetted for compliance with applicable data protection standards before engagement. All processors are bound by data processing agreements requiring them to maintain appropriate security measures and to process personal data only for the specific purpose for which it was shared.

The kayaraya88 platform does not contain links to external third-party websites for general browsing. Where any third-party service is integrated within the platform, its data processing activities are governed by our data processing agreements. Any data you choose to provide directly to third-party services outside the kayaraya88 platform is subject to those third parties' own privacy policies, over which Kayaraya88 has no control.

As an internationally licensed platform, Kayaraya88 may process or store personal data in jurisdictions outside Malaysia, including in the jurisdiction where our international licence is issued. In such cases, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to, or greater than, the protections provided under Malaysian law.

Appropriate safeguards for cross-border transfers may include:

• Data processing agreements incorporating standard contractual clauses.
• Transfer to jurisdictions assessed as providing adequate data protection standards.
• Binding corporate rules where applicable within our corporate group structure.

By using the kayaraya88 platform, you consent to your personal data being transferred to and processed in jurisdictions outside Malaysia, subject to the safeguards described in this section.

Kayaraya88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will notify registered players by email and/or by a prominent notice on the platform, providing at least seven (7) days advance notice before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this page indicates when the current version of the Policy was published. We encourage you to review this Policy periodically. Your continued use of the platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern, please contact our support team through the channels below. We take all privacy-related enquiries seriously and will respond promptly.