Privacy Policy GayaKaya – Serious Data Protection for Malaysian Players

GayaKaya ("we", "Platform") is the data controller responsible for personal information collected through the gayakaya.net website and the GayaKaya mobile app. We are committed to handling your personal data with respect, transparency, and in accordance with all applicable legal requirements.

This Privacy Policy describes GayaKaya's privacy practices and should be read together with our platform's Terms and Conditions. In the event of any conflict between this Privacy Policy and other documents, the provisions of this Privacy Policy shall apply to matters relating to data privacy.

GayaKaya collects only the information needed to provide a secure, compliant, and fully functional platform experience. We do not collect information beyond what our operations require.

Information You Provide Directly:

• Full name as shown on a valid identity document.
• Date of birth for age verification purposes.
• Email address and mobile number.
• Current residential address.
• Identity card number (MyKad) or passport number.
• Bank account or digital wallet details for deposits and withdrawals.
• Copy of identification document for KYC verification.

Automatically Collected Information:

• IP address and general location information (city/state).
• Device type, operating system, and web browser version.
• Gaming activity history and transaction records within the platform.
• Login session times and duration.
• App usage data including the most frequently used features.

Every piece of data we collect has a clear and legitimate purpose. gayakaya does not use your data for purposes unrelated to platform operations without your explicit consent.

• Account Management: Creating, verifying, and managing your player account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely.
• Platform Security: Detecting and preventing fraud, money laundering, and unauthorised account access.
• Customer Support: Providing technical support and effectively resolving your complaints or enquiries.
• Legal Compliance: Fulfilling the reporting and record-keeping obligations set by relevant authorities.
• Service Improvement: Analysing usage patterns to improve the overall platform experience.
• Platform Communications: Sending important notifications about your account, transactions, or policy changes that affect you.

GayaKaya does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited situations where we need to share certain information for legitimate operational purposes:

• Payment Processing Providers: Required financial information is shared with our integrated payment providers (FPX, Touch 'n Go, Boost, GrabPay, and partner banks) solely for the purpose of processing your transactions.
• Game Software Providers: Minimum technical data required is shared with game providers to ensure games function correctly and wins are calculated accurately.
• Legal Authority: GayaKaya will disclose information to the authorities where required by a valid court order, law, or regulation.
• Identity Verification Services: KYC information is shared with registered and trusted third-party identity verification service providers.

All third parties receiving data from gayakaya are bound by strict confidentiality agreements and are only permitted to use that data for specified purposes.

GayaKaya continuously invests in security infrastructure to keep your data safe at all times. Our security system is multi-layered — going well beyond basic passwords and encryption.

• 256-bit SSL/TLS encryption for all data in transit between you and our servers.
• Sensitive data stored in the database is encrypted using strong algorithms.
• Role-based access control — only staff who require it can access specific data.
• An intrusion detection system that monitors suspicious activity in real time.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Two-factor authentication (2FA) is available for all accounts as an added layer of protection.
• Regular data security training for all GayaKaya staff who handle player data.

GayaKaya uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as secure login and session security. Cannot be disabled.
• Functional Cookies: Storing your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies: Helps us understand how players use the platform for continuous improvement. This data is aggregated and does not identify individuals.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised access.

You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality of the GayaKaya platform.

As a gayakaya player, you have clear rights regarding your personal data. We respect these rights and provide easy channels for you to exercise them.

GayaKaya retains your personal data for as long as your account is active or as needed for the purposes outlined in this Privacy Policy. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account is active and for any additional period required by law after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial and anti-money laundering legal requirements.
• KYC Documents: Retained for as long as the account is active and a minimum of 5 years after account closure for compliance purposes.
• Support Communication Logs: Retained for 2 years for reference and service improvement purposes.
• Analytics Data: Stored in aggregate form without individual identification for a longer period for platform improvement purposes.

Once the retention period ends, your data will be securely deleted or anonymised in accordance with industry-standard procedures.

The gayakaya platform is integrated with several third-party services required for operations, such as payment providers and game providers. Please note that the privacy practices of these third-party services are governed by their own policies.

GayaKaya only works with third-party providers that have robust privacy policies and comply with industry-accepted data security standards. However, GayaKaya is not responsible for the privacy practices of any external websites or services not operated by us.

The gayakaya platform is strictly for adult users aged 18 and above. We do not intentionally collect or process personal data from individuals under 18.

If we determine that data has been collected from a minor, the account in question will be terminated immediately and all associated data will be permanently deleted from our systems. If you believe that a minor's data has been collected inadvertently, please contact our support team right away.

GayaKaya reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform improvements. The "Updated" date at the top of this document will always reflect the date of the latest version.

For material changes — such as changes to how we use your data or new types of data being collected — we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, the GayaKaya team is ready to assist you promptly and professionally.

• Live Chat: Available directly within the gayakaya platform, 24 hours a day, 7 days a week — the fastest way to get a response.
• Email: [email protected] — for written enquiries or official personal data requests.
• Supported Languages: Bahasa Melayu and English.

For official requests related to personal data such as access, correction, or deletion, please include "Personal Data Request" in your message subject along with your gayakaya account ID to expedite the process.