Privacy Policy kayagaya

Identity and Account Information

When you register an account with kayagaya, we collect personal information required for identity verification and account management, including:

• Full name as stated in your identity document (MyKad or passport)
• Identity card number or passport number
• Date of birth — to confirm you meet the minimum age requirement of 21 years
• Username and account password, hashed using encryption protocols
• Active email address for communication and account verification
• Mobile phone number for two-factor authentication and important notifications

Financial and Transaction Information

To process deposits and withdrawals securely, kayagaya collects information related to your financial transactions. This includes details of the payment method used, such as Touch 'n Go eWallet, DuitNow, FPX Online Banking, Boost, or cryptocurrency transactions (USDT, BTC, ETH), deposit and withdrawal records including the date, time and amount of each transaction, as well as verification information required to process withdrawals to an account that legitimately belongs to you.

We do not store full credit or debit card numbers in our systems. All payment processing is carried out through secure, licensed payment channels.

Technical and Usage Data

Our systems automatically record technical information when you visit or use the kayagaya platform:

• IP address and general location information (country and region)
• Device type, operating system and web browser used
• Session records including login and logout dates and times
• Pages visited, time spent on the platform and navigation patterns
• Cookie information and related tracking technologies as described in our Cookie Policy

Platform Service Operations

The information you provide is used primarily to deliver, maintain and improve kayagaya services. This covers processing account registration and login, verifying your identity for compliance purposes, processing deposits and withdrawals efficiently, and providing a personalised experience based on your preferences.

Security and Fraud Prevention

kayagaya uses technical data and transaction information to detect and prevent fraudulent activity, money laundering and platform abuse. These measures are part of our responsibilities as a licensed platform operator. In suspected cases, relevant information may be shared with the appropriate authorities in accordance with legal obligations.

Communications and Notifications

Your contact information is used to send important account notifications, updates to our Terms and Conditions or Privacy Policy, and information on promotions and bonuses you are eligible for. You may opt out of marketing communications at any time through your account settings or by contacting our support team.

Platform Analytics and Improvement

Usage data collected in aggregate and anonymised form helps us understand how users interact with the platform, identify technical issues and make data-driven decisions to improve the overall user experience. This analysis does not reveal individual identities.

Third-Party Service Providers

In operating the platform, kayagaya works with a number of selected and trusted service providers. These providers may have limited access to your information solely to carry out their specific functions, including:

• Payment processors and e-wallet gateways to handle financial transactions
• Game software providers such as PG Soft, Pragmatic Play, JILI and Spribe
• Hosting and security service providers for technical infrastructure
• Analytics service providers for platform performance monitoring

All third parties working with us are required to comply with strict data protection standards and are not permitted to use your information for any purpose other than those specified in their contractual agreements with kayagaya.

Legal and Licensing Obligations

kayagaya operates under an international licence that carries certain reporting and compliance obligations. We may be required to disclose personal information to the relevant authorities in the following circumstances:

• When ordered to do so by a court or competent regulatory body
• To fulfil reporting requirements related to anti-money laundering
• In investigations related to fraudulent activity or financial crime
• To protect the rights, property or safety of kayagaya, our users or the public

Data Retention Period

Your personal information is retained for as long as your kayagaya account is active or as long as needed to provide services to you. After account closure, we retain certain records for the period required by applicable licensing and legal requirements, typically between five and seven years for financial and transaction records, for audit and legal compliance purposes.

Data that is no longer required will be securely deleted or anonymised in accordance with our internal data management procedures.

Technical and Organisational Measures

kayagaya implements multiple layers of security to protect your personal information:

• Encryption of data in transit using the latest TLS protocols
• Encryption of data stored in our databases
• Role-based access controls — only authorised staff may access sensitive data
• Continuous security monitoring and regular system audits
• Two-factor authentication for administrative access to sensitive infrastructure
• Data security awareness training for all staff who handle personal information

While we take reasonable precautions, no system can be guaranteed to be 100% secure. We encourage you to also protect your account by using a strong password and not sharing your login credentials.

What Cookies Are and How We Use Them

Cookies are small text files stored on your device when you visit the kayagaya website. We use several types of cookies to keep the platform running properly and to give you a better experience:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Preference Cookies: Store your settings such as language preference and display layout for convenience on future visits.
• Analytics Cookies: Help us understand aggregate usage patterns to improve the platform. This data is anonymised and does not identify individuals.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the kayagaya platform.

Update and Notification Procedure

kayagaya reserves the right to modify this Privacy Policy from time to time to reflect changes in our data processing practices, new legal or licensing requirements, and improvements in how we protect user information.

Whenever this Privacy Policy is materially updated, we will notify you through:

• A prominent notice on the kayagaya platform homepage
• A notification email sent to your registered email address
• An in-platform notification upon your next login

Continued use of the kayagaya platform after the effective date of the updated Privacy Policy will be considered your acceptance of those changes. If you do not agree with any changes, please stop using the platform and contact us regarding account closure.