This Privacy Policy is an official kaya33 document effective from January 1, 2026. By using the kaya33 platform, you agree to the terms outlined in this policy.
1Introduction
Kaya33 ("we", "Platform") respects the privacy rights of every individual who uses our services. This Privacy Policy is drafted to provide full transparency about our personal data collection and handling practices to all members and website visitors in Malaysia.
We operate in accordance with international data protection standards and are committed to ensuring your personal information is handled responsibly, securely and transparently. This policy applies to all users of the kaya33 platform, including the official website, mobile app and any related services we offer.
By registering an account, using our services, or browsing the kaya33 website, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.
This Privacy Policy should be read together with
Terms and Conditions kaya33 for a comprehensive understanding of your rights and responsibilities as a member.
2Information We Collect
Kaya33 collects various types of information to ensure our services run smoothly, securely, and in compliance with applicable legal requirements. The information we collect can be divided into three main categories:
A. Information You Provide to Us
- Full name as shown on official identity documents
- Identity card number (MyKad) or passport
- Date of birth for minimum age verification of 18 years
- Active email address and mobile phone number
- Current residential address
- Bank account or e-wallet details for deposit and withdrawal purposes
- KYC documents such as a copy of your MyKad, utility bill, or bank statement
- Communication records such as messages sent to our customer support team
B. Automatically Collected Information
- IP address and network-based location data
- Device type, model, operating system and browser version
- Login session data including time, duration, and frequency of use
- Gaming activity history and transaction records
- Cookie and website tracking technology data
- Error logs and technical diagnostic data
C. Information from Authorized Third Parties
- Identity verification via certified third-party KYC services
- Payment verification information from licensed payment processors
- Fraud prevention data from security service providers
| Data Type |
Purpose of Collection |
Retention Period |
| Personal Identity |
KYC verification, legal compliance |
5 years after account closure |
| Payment Information |
Transaction processing, verification |
7 years (tax requirement) |
| Game Activity Data |
Account management, responsible gaming |
3 years after account closure |
| Technical & Log Data |
Security, troubleshooting |
12 months |
| Support Communications |
Customer service records |
2 years |
3How We Use Your Data
Kaya33 only uses your personal data for legitimate and necessary purposes. We do not use your data beyond what is required to operate our services properly and securely.
- Account Management — registering, verifying, and maintaining your member account.
- Transaction Processing — processing deposits, withdrawals, and all financial transactions on the platform.
- Identity Verification (KYC) — meeting anti-money laundering (AML) legal requirements and know-your-customer obligations.
- Platform Security — detecting and preventing fraud, unauthorised access, and account abuse.
- Responsible Gaming — monitoring gaming patterns to identify members who may need assistance.
- Customer Support — providing technical assistance and addressing your enquiries effectively.
- Service Communications — sending important notifications relating to your account, security, and service updates.
- Platform Improvements — analysing usage patterns to improve the overall user experience.
- Legal Compliance — complying with legal obligations, regulations, and directives from relevant authorities.
kaya33 does not use your personal data to make automated decisions that affect your rights without human oversight. Any significant decisions relating to your account will be reviewed by our team.
4Information Sharing
Kaya33 does not sell, rent, or disclose members' personal data to third parties for commercial marketing purposes. However, in certain limited situations, kaya33 may need to share your information with the following parties:
- Licensed Payment Processors — information required to securely process your deposits and withdrawals through licensed payment channels in Malaysia.
- KYC Service Providers — a certified digital identity verification platform to meet regulatory compliance requirements.
- Game Service Providers — third-party game software providers may receive minimal game session data for technical purposes.
- Relevant Authorities — kaya33 will disclose information to law enforcement agencies or regulatory bodies where required by law or court order.
- Professional Advisors — lawyers, accountants, or auditors subject to strict professional confidentiality obligations.
All third parties we work with are required to comply with data protection standards equivalent to our own policy and are only permitted to use your data for specified purposes.
In any data sharing with third parties, kaya33 ensures that only the minimum necessary information is disclosed, in line with the principle of data minimization.
5Data Storage & Security
The security of your personal data is kaya33's highest priority. We implement multiple layers of technical and organisational security measures to protect your information from unauthorised access, loss or accidental disclosure.
- All data is stored on servers protected by AES-256 encryption with multi-factor access controls.
- Data backups are performed regularly and stored across multiple data centres in different locations to ensure service continuity.
- 24/7 security monitoring system that detects and responds to cyber threats in real time.
- Penetration testing is conducted regularly by independent cybersecurity teams.
- All kaya33 staff who handle personal data undergo comprehensive data protection training.
- Data that is no longer required will be securely deleted in accordance with certified data deletion procedures.
While we take all reasonable precautions, no security system can be guaranteed 100% secure. If you suspect your account has been compromised, contact our support team immediately via 24/7 live chat.
SSL 256-bit
AES-256 Encryption
Zero Data Sale
KYC Verified
24/7 Monitoring
6Cookies & Tracking Technologies
Kaya33 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how members interact with our platform.
Types of cookies we use:
- Essential Cookies — required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
- Functional Cookies — saving your preferences such as language, display settings, and location for a more personalised experience.
- Analytics Cookies — helping us understand how members use the platform so we can improve our services. This data is collected in aggregate and does not identify you individually.
- Security Cookies — used to detect suspicious activity, prevent fraud, and protect your account.
You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect the functionality of the kaya33 platform. By continuing to use our platform, you agree to the use of cookies as described here.
7Your Privacy Rights
As a kaya33 member, you have certain rights regarding your personal data. kaya33 is committed to making it easy and transparent for you to exercise these rights.
Right of Access
You have the right to request a copy of all personal data we hold about you. We will provide this information within 30 business days.
Right to Rectification
If any of your personal data is inaccurate or outdated, you have the right to request prompt correction through our customer support.
Right to Erasure
You may request deletion of your personal data, subject to legal obligations and minimum retention periods set by the relevant authorities.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes. We will honor this choice promptly.
Right to Data Portability
You may request your personal data in a machine-readable format for transfer to another service provider if needed.
Right to Restrict Processing
In certain circumstances, you may request that we restrict the processing of your personal data while your request is under review.
To exercise any of the above privacy rights, please contact our data protection team via 24/7 live chat or email at
[email protected]. All requests will be processed within 30 business days.
8Children's Data
Kaya33 is an online gaming platform restricted to individuals aged 18 and above only. We do not intentionally collect or process personal data from children or individuals under the age of 18.
- All account registrations require age verification through a strict KYC process.
- If we become aware that personal data of a child has been collected without parental or guardian consent, we will delete that data immediately.
- Parents or guardians who believe their child has registered on kaya33 should contact our support team immediately to request account deletion.
If you suspect any minor is using the kaya33 platform, please report it to us immediately via live chat. We take child protection in the online gambling environment seriously.
9Third-Party Links
The kaya33 platform may contain links to third-party websites or services related to our offerings, such as payment providers or identity verification platforms. kaya33's Privacy Policy does not apply to those third-party websites or services.
- We are not responsible for the privacy practices or content of any third-party websites.
- Before using any third-party service linked from our platform, we recommend reading their own privacy policy.
- The presence of links to third-party websites on our platform does not imply that we endorse or approve of those websites.
10Privacy Policy Changes
Kaya33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or service improvements. Any material changes will be communicated to members via an in-platform notice or your registered email.
- The "Last Updated" date at the top of this document will be updated whenever changes are made.
- Continued use of the kaya33 platform following any policy changes constitutes your acceptance of the updated terms.
- If the changes made are significant and materially affect your privacy rights, we will notify you at least 14 days before the changes take effect.
- You are advised to check this page periodically to stay informed of our latest policy.
11Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how kaya33 handles your personal data, our data protection team is ready to assist you.
- Live Chat 24/7 — the fastest way to reach us, available directly within the kaya33 platform.
- Email — send your privacy enquiry to [email protected] and we will respond within 1–2 business days.
- Response Time — privacy rights requests will be processed within 30 business days from the date of receipt.
The kaya33 support team is available 24 hours a day, 7 days a week to assist you with any privacy or account security enquiries.
FAQ – Privacy Policy
Answers to the most frequently asked questions about kaya33's privacy and data protection
Absolutely not. kaya33 has never and will never sell, rent, or disclose members' personal data to any third party for commercial marketing purposes. Your data is only shared with parties necessary to operate our services — such as licensed payment processors and KYC providers — and strictly for specified purposes only.
Data retention periods vary by type of information. Personal identity data is retained for 5 years after account closure to meet legal requirements. Financial transaction information is retained for 7 years in accordance with tax requirements. Gaming activity data is retained for 3 years. All data exceeding its retention period is securely deleted in accordance with certified procedures.
You may request deletion of your personal data by contacting the kaya33 support team via 24/7 live chat or by emailing
[email protected]. Please include your account details to speed up the process. Note that data deletion is subject to certain legal obligations — for example, financial transaction records must be retained for the minimum period required under Malaysian law. We will inform you of which data can be deleted and which must be retained.
kaya33 does not store bank card details or credit/debit card numbers directly on our servers. All payment transactions are processed through licensed, PCI-DSS certified third-party payment processors. We only retain the minimum bank account information required for fund withdrawal purposes, and this information is fully encrypted using AES-256 encryption.
Yes, kaya33 provides privacy controls to members through account settings on our platform and mobile app. You can manage notification preferences, review active login sessions, manage marketing preferences, and request a copy of your data directly through your account. For more specific requests such as data deletion or processing restrictions, please contact our support team directly.
When you close your kaya33 account, we will immediately disable access to it. However, certain personal data will be retained for legally required periods — for example, financial transaction records (7 years) and identity data (5 years) — to meet regulatory compliance obligations. Data not subject to legal retention requirements will be securely deleted. You may contact us for more information about the account closure and data management process.