Kaya918 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold over your own data. We handle your information transparently and in accordance with our licensing obligations and applicable data protection standards.
These cards highlight the most important aspects of how kaya918 handles your data. Please read the full policy below for complete details.
kaya918 collects personal data strictly necessary for account operation, payment processing, identity verification, and regulatory compliance. We do not collect data for purposes unrelated to your use of the Platform.
Your personal information is never sold, rented, or traded to any third party for marketing or commercial purposes. Sharing occurs only with service providers under strict contractual data protection obligations.
All personal and financial data is protected using 256-bit SSL/TLS encryption in transit. Data stored on our servers is encrypted at rest. Access to personal data is restricted to authorised personnel only.
You have the right to access, correct, port, or request deletion of your personal data at any time. Requests are handled within 30 days via our support team and require identity verification before processing.
Data is retained only as long as necessary. Active account data is held for the duration of the account relationship. Post-closure, certain records are retained for up to seven years to meet regulatory obligations.
In the event of a personal data breach that poses a risk to your rights, kaya918 will notify affected users promptly in accordance with our licensing authority's requirements and applicable data protection standards.
This Privacy Policy (hereinafter "this Policy") is issued by kaya918 (hereinafter "the Platform", "we", "us", or "our") and applies to all personal data collected, processed, stored, and shared in connection with your use of the kaya918 website at kaya918.cam and all related services, including account registration, deposit and withdrawal transactions, game play, promotional participation, and customer support interactions.
Kaya918 operates as an online casino and sports betting platform serving players across Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and beyond. In the course of providing our services, we necessarily collect and process personal data about the individuals who use those services. This Policy describes how we do that, why we do it, and what rights you hold in relation to your data.
By registering an Account with kaya918 or using the Platform in any manner, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein to the extent that consent is the applicable lawful basis. Where processing is carried out on a different lawful basis, your use of the Platform does not alter that basis.
Scope of this Policy: This Policy applies to data processed by kaya918 in connection with the Platform. It does not apply to third-party websites, payment processors, or service providers who maintain their own privacy policies. Where you interact with those third parties — for example, when initiating a Touch 'n Go eWallet or DuitNow transaction — their respective privacy terms govern the data you provide to them directly.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, or any factor specific to their identity. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | kaya918, which determines the purposes and means by which personal data is processed. |
| "Data Processor" | A third-party entity that processes personal data on behalf of kaya918 under a written data processing agreement. |
| "Data Subject" | The individual whose personal data is being processed — in this context, you, the Player. |
| "KYC Data" | Identity verification documents and associated records collected in connection with Know Your Customer obligations. |
| "Sensitive Data" | Personal data requiring heightened protection, including financial information, identification documents, and data relating to problem gambling indicators. |
Kaya918 collects the following categories of personal data from players in connection with the operation of its Platform:
| Category | Data Types | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad or passport number and copy | KYC verification, age enforcement, regulatory compliance |
| Contact Data | Email address, mobile phone number, city of residence (e.g. Kuala Lumpur, Penang) | Account communications, support, two-factor authentication |
| Financial Data | Payment method details (bank name, account reference, e-wallet identifier), transaction history, deposit and withdrawal amounts in MYR/RM | Payment processing, fraud prevention, AML compliance |
| Account Data | Username, account preferences, game history, bet records, bonus claims, VIP tier status | Service delivery, personalisation, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, geolocation (country/region level) | Security monitoring, fraud detection, platform performance |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with kaya918 | Support resolution, quality assurance, dispute evidence |
| Responsible Gambling Data | Self-exclusion requests, deposit limit settings, session time preferences, responsible gambling tool usage | Player protection, regulatory reporting, harm minimisation |
Kaya918 collects personal data through the following primary channels:
Kaya918 processes your personal data only where a lawful basis for doing so exists. The primary lawful bases relied upon are as follows:
Your personal data is used to register and maintain your Account, verify your identity and age, process deposits and withdrawals through your chosen payment methods, deliver game services, calculate and apply bonuses and VIP rewards, and provide customer support. These uses are necessary to fulfil our contractual obligations to you as a player on the Platform.
Kaya918 is required under its licensing obligations to maintain records of player transactions, conduct ongoing customer due diligence, and report certain activities to relevant regulatory bodies. Your data may be used to comply with these requirements, including anti-money laundering monitoring, transaction reporting, and responses to lawful requests from regulatory authorities or law enforcement agencies.
We analyse account behaviour, transaction patterns, and technical data to detect and prevent fraud, money laundering, bonus abuse, collusion, and other prohibited conduct. This analysis may be carried out using automated systems as well as human review. Where suspicious activity is identified, account access may be restricted pending investigation.
Data relating to your gambling activity — including deposit frequency, session duration, and bet volumes — may be used by kaya918 to identify players who may be at risk of gambling-related harm and to offer appropriate responsible gambling interventions, including deposit limit suggestions, reality check prompts, or outreach from our responsible gambling team.
Where you have provided consent or where permitted under applicable rules for existing customer communications, kaya918 may use your contact details to send promotional offers, bonus notifications, and Platform updates. You may opt out of such communications at any time through your Account settings or by contacting support. Opting out of marketing communications does not affect transactional or service-related communications which we are required to send.
Kaya918 does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients only where necessary and under appropriate data protection safeguards:
No Commercial Data Sharing: Kaya918 does not share your personal data with advertising networks, data brokers, or any third party for the purpose of targeted advertising directed at you outside of the Platform.
Kaya918 operates infrastructure and engages service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, kaya918 takes reasonable steps to ensure that appropriate data protection safeguards are in place, including the use of contractual data processing agreements with overseas service providers.
You acknowledge that by using the Platform you consent to the transfer of your personal data to jurisdictions that may not offer data protection standards equivalent to those applicable in Malaysia. Kaya918 will not transfer data to jurisdictions that it reasonably considers to offer materially inadequate protection without additional contractual safeguards being in place.
Kaya918 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law or regulatory obligation. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.
Kaya918 implements technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Key security measures include:
Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying kaya918 immediately if you suspect unauthorised access to your Account.
Kaya918 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, maintain session security, and gather anonymised usage analytics. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Disabling essential cookies will impair or prevent your ability to access the Platform. Disabling functional or analytics cookies will not prevent access but may reduce the quality of your experience.
Subject to applicable law and regulatory limitations, you hold the following rights in relation to your personal data held by kaya918:
Request a copy of the personal data kaya918 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held on your Account.
Request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to retention obligations.
Request that we restrict the processing of your data in specific circumstances, such as where you contest its accuracy or object to a particular use.
Request a structured, machine-readable copy of personal data you have provided to kaya918, where processing is carried out by automated means.
Object to the processing of your personal data where we rely on legitimate interests as the lawful basis, or object to direct marketing at any time.
To exercise any of the above rights, please contact our support team at [email protected] (plain text only — not a clickable link). We will acknowledge your request within five (5) business days and aim to respond substantively within thirty (30) days. Requests will require identity verification before personal data is disclosed or deleted.
Regulatory Limitation on Erasure: The right to erasure is not absolute. Where kaya918 is required by applicable law, gaming regulation, or AML obligations to retain specific records — for example, transaction history and KYC documentation — those records cannot be deleted at your request within the mandatory retention period, even if your Account is closed.
Kaya918 is strictly an adult-only platform. The Platform is not directed at and does not knowingly collect or process personal data from individuals under the age of 21 years. Our minimum age requirement of 21 years is enforced through mandatory KYC age verification for all registered accounts.
If kaya918 becomes aware that personal data has been collected from an individual under the age of 21 without verified parental consent or as a result of a fraudulent registration, we will take immediate steps to suspend and close the Account, delete the personal data collected, and return any balance associated with the Account to the extent practicable. If you believe a minor has registered on the Platform, please contact our support team immediately so that the matter can be investigated and resolved without delay.
Kaya918 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational circumstances. Where amendments are material, we will notify registered players by email to the address associated with their Account, or through a prominent notice on the Platform, at least seven (7) days prior to the changes taking effect.
The version number and effective date at the top of this document will be updated each time a substantive revision is made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amended Policy constitutes acceptance of the revised terms.
If you have any questions, concerns, or requests in relation to this Privacy Policy or the manner in which kaya918 handles your personal data, please contact us through the following channels:
All data protection enquiries and subject access requests will be logged and acknowledged within five (5) business days of receipt. Substantive responses to formal data subject requests will be provided within thirty (30) days, which may be extended by a further sixty (60) days for complex requests, with notification to you of the extension and the reason for it.
For enquiries relating to responsible gambling, self-exclusion, or gambling harm support, please visit our dedicated Responsible Gambling page.
Our support team is available 24/7 to handle privacy requests, data access queries, and account enquiries. We aim to respond to all data-related requests within 30 days.