Last updated: 1 January 2026

Kaya918 Privacy Policy – Malaysian User Data Protection

Your privacy is our priority. This policy clearly explains how Kaya918 collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. We believe transparency is the foundation of trust.

πŸ”’ OUR PRIVACY COMMITMENT

How Kaya918 Protects Your Data

Six core principles underpinning Kaya918's privacy policy for users in Malaysia

πŸ›‘οΈ

Full PDPA Malaysia Compliance

All personal data processing activities at Kaya918 are in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We only process data that is necessary and always obtain your consent before using your information for any new purpose.

πŸ”

256-Bit SSL Encryption

Every bit of data transmitted between your device and Kaya918's servers is encrypted using 256-bit SSL β€” the same high-grade security standard used by Malaysia's leading banks, including Maybank and CIMB. No third party can intercept or read your communications with us.

🚫

No Sale of Data to Third Parties

Kaya918 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. Your data belongs to you. We only share data under very limited circumstances, as clearly set out in this policy.

πŸ‘οΈ

Full Transparency in Data Use

We are transparent about what data we collect, why we need it, how long we retain it, and who has access to it. There is no hidden data collection or use of your information beyond the stated purposes without your consent.

βœ‹

Full Rights Over Your Data

You have the right to access, correct, delete, or transfer your personal data at any time. You may also withdraw consent for specific uses of your data. All data rights requests will be handled within 14 business days.

πŸ—„οΈ

Secure & Minimal Data Storage

Your data is retained only for as long as necessary to meet legal and operational requirements. Kaya918's servers are protected by layered firewalls, intrusion detection systems, and periodic security audits conducted by independent experts to keep your data secure at all times.

Important Note: This Privacy Policy describes how Kaya918 ("we", "the platform") collects, uses, discloses, and protects your personal information when you use our website and services. By registering an account or using any Kaya918 service, you agree to the practices described in this Privacy Policy. Please read it carefully.

1Introduction & Scope of This Policy

Kaya918 is committed to protecting the privacy of all users on our platform. This Privacy Policy has been drafted in accordance with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010 and outlines your rights regarding the personal information you provide to us when registering, using our services, or communicating with our team.

This policy applies to all users of the Kaya918 platform regardless of how they access it β€” whether through a web browser on a computer, an Android or iOS smartphone, or any other device. It also applies to all services offered by Kaya918, including online casino, Sports Betting, promotional programmes, and customer support services.

Kaya918 acts as Data Controller (Data Controller) under the PDPA for all personal information collected through our platform. This means we are fully responsible for ensuring your data is handled in accordance with applicable laws and sound privacy principles.

2Personal Data We Collect

Kaya918 collects various types of personal information depending on how you interact with our platform. This includes:

Data you provide directly:

  • Full name as stated on your Malaysian identity card;
  • Your national identity card number (MyKad) or passport number for identity verification;
  • An active email address used for account communications;
  • A Malaysian phone number registered in your name;
  • Date of birth for age verification;
  • Payment method details such as your Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow e-wallet account numbers, or your FPX account (Maybank2u, CIMB Clicks);
  • Copies of identification documents requested during the KYC (Know Your Customer) process.

Automatically collected data:

  • The IP address of your device when accessing the platform;
  • Device type, operating system, and browser version in use;
  • Activity log data including the date, time, and pages visited;
  • In-platform gaming and betting history;
  • Financial transaction records, including deposits and withdrawals;
  • Cookie and similar tracking technology data.

Kaya918 does not collect unnecessary information. Every type of data we collect has a clear purpose, as outlined in the following sections. You are welcome to contact us with any questions about the data we hold relating to your account.

3Purpose of Data Collection and Use

Kaya918 uses your personal data for the following purposes:

  • Account Management: Creating, verifying, and maintaining your user account;
  • Identity Verification (KYC): To verify that you are 18 years of age or older and to confirm your identity for fraud prevention purposes;
  • Payment Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, and FPX, and withdrawing winnings to your account;
  • Service Provision: Enabling you to access the online casino, slots, Live Casino, and Sports Betting;
  • Platform Security: Detecting and preventing fraudulent activity, money laundering, and system abuse;
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical support;
  • Promotions & Marketing: Sending information about promotions, bonuses, and special offers β€” only if you have consented to receive them;
  • Platform Improvement: Analysing usage patterns to improve the overall user experience;
  • Legal Compliance: To fulfil legal obligations under Malaysia's PDPA and other applicable regulatory requirements.

Kaya918 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

4Legal Basis for Data Processing

Under Malaysia's PDPA, Kaya918 processes your personal data on the following legal bases:

  • Consent: You provide explicit consent when registering an account and accepting the platform's terms of use. For marketing communications, we request consent separately;
  • Contract Performance: Data processing is required to fulfil the service agreement between you and Kaya918 β€” including processing deposits, withdrawals, and providing access to games;
  • Legal Obligation: Certain data processing is required to comply with Malaysian law, including anti-money laundering (AML) requirements and identity verification;
  • Legitimate Interest: Processing for platform security, fraud prevention, and service improvement purposes based on Kaya918's legitimate interests, where these do not override your fundamental right to privacy.

Right to Withdraw Consent: You have the right to withdraw your consent at any time, particularly for marketing communications. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal. Contact us at support@kaya918.best to submit a consent withdrawal request.

5Data Sharing with Third Parties

Kaya918 does not sell or rent your personal data to any third party. However, we may share your data in strictly limited circumstances as follows:

  • Payment Service Providers: To process deposits and withdrawals, the necessary transaction data is shared with providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX-affiliated banks. Only the minimum data required to complete each transaction is shared;
  • Game Providers: Licensed game providers such as Evolution Gaming and Pragmatic Play may receive minimal technical data (session IDs without full personal information) necessary to operate the games;
  • Identity Verification Services: For KYC processes, identity documents may be verified through third-party services that comply with strict security standards;
  • Legal Authority: Kaya918 will disclose data when required by Malaysian law, court order, or direction from a legitimate law enforcement agency;
  • Professional Consultants: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations.

All third parties receiving data from Kaya918 are required to protect that data to a standard at least equivalent to Kaya918's own, and to use it solely for the specified purpose.

6Data Security Measures

Kaya918 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or unintended disclosure:

  • 256-Bit SSL Encryption: All communications between your device and Kaya918's servers are encrypted using the latest TLS/SSL protocols;
  • Data-at-Rest Encryption: Sensitive data such as financial information and identity documents are encrypted at rest in our database;
  • Layered Access Controls: Only staff who require access to specific data to carry out their duties are authorised to do so, and all access is logged and monitored;
  • Firewall & Intrusion Detection Systems: Our servers are protected by multi-layered firewalls and real-time threat detection systems;
  • Regular Security Audits: Security assessments and penetration testing are conducted regularly by independent security specialists;
  • Two-Factor Authentication: Two-factor authentication is available for all user accounts as an added layer of security.

While we take reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in keeping your data safe β€” use a strong password, never share your login credentials, and report any suspicious activity to us immediately.

7Data Retention Period

Kaya918 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements:

  • Active Account Data: Retained for the duration your account is active, plus any required period following account closure;
  • Financial Transaction Records: Retained for a minimum of 7 years as required under Malaysian financial and anti-money laundering laws;
  • KYC Documents: Retained for the period required under applicable AML laws, typically 5 to 7 years after the business relationship ends;
  • Support Communication Logs: Retained for 2 years from the date of communication for reference and dispute resolution purposes;
  • Marketing Data: Retained until you withdraw your consent or submit a deletion request;
  • Cookie Data: Depending on the type of cookie β€” session cookies are deleted when the browser is closed; persistent cookies have a set expiry period.

Once data is no longer needed, it will be securely deleted or anonymised in accordance with approved procedures. You may request information on the specific retention period for your data by contacting our privacy team.

8Your Rights Under the PDPA

As a data subject under Malaysia's PDPA, you have the following rights in relation to your personal data held by Kaya918:

  • Right of Access: Request a copy of the personal data we hold about you;
  • Right to Rectification: Request correction of any inaccurate or incomplete data;
  • Right to Erasure: Request the deletion of your data under certain circumstances, subject to our legal obligations;
  • Right to Restrict Processing: Request that we restrict the processing of your data under certain circumstances;
  • Right to Data Portability: Receive your data in a structured, machine-readable format;
  • Right to Object: Object to the processing of your data for direct marketing purposes at any time;
  • Right to Withdraw Consent: Withdraw consent previously given for specific data processing activities.

To submit any request relating to the rights above, please contact us by email at support@kaya918.best stating the type of request and your account details. Kaya918 will respond within 14 business days. For complex cases, we may require up to 30 days and will notify you accordingly.

9Cookies & Tracking Technologies

Kaya918 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled without affecting platform functionality;
  • Performance Cookies: Collects information on how users interact with the platform (e.g. most frequently visited pages) to help us improve our services. All data is anonymised;
  • Functional Cookies: Saving your preferences such as language selection and display settings to provide a more personalised experience;
  • Analytics Cookies: Used to understand aggregated usage patterns for product improvement purposes.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the Kaya918 platform. Session cookies are deleted automatically when you close your browser, while persistent cookies expire after a set period.

10International Data Transfers

In the course of its operations, Kaya918 may transfer your personal data to servers or services located outside Malaysia, particularly in connection with cloud infrastructure providers and international game suppliers. In all such cases, Kaya918 ensures:

  • The recipient country or region maintains a level of data protection equivalent to that of Malaysia;
  • Appropriate data transfer agreements are in place between Kaya918 and recipients, including approved standard contractual clauses;
  • Transfers cover only the minimum data necessary for the stated purpose;
  • Data recipients are required to protect data to a standard at least equivalent to Malaysia's PDPA.

You may contact us for more information about the data transfer mechanisms we use and a list of countries or regions where your data may be processed.

11Minors and Age Restrictions

The Kaya918 platform is strictly for individuals aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who suspect their child has registered an account with Kaya918 should contact us immediately at support@kaya918.best so that appropriate action can be taken without delay.

Kaya918 uses an age verification process at registration and may request additional documentary proof. This forms part of our commitment to responsible gaming and the protection of vulnerable individuals.

12Amendments to This Privacy Policy

Kaya918 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, updated legal requirements, or improvements to how we handle data. When material changes occur, we will:

  • Updating the "Last Updated" date at the top of this page;
  • Displaying clear notices within the platform regarding changes made;
  • For highly material changes, sending notification via registered email at least 7 days before the changes take effect.

We encourage you to review this page periodically. Your continued use of the Kaya918 platform after any amendments take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and discontinue use of the platform.

13Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Kaya918, please contact us via:

  • Privacy Email: support@kaya918.best β€” for all enquiries and data rights requests;
  • 24/7 Live Chat: Available directly on the Kaya918 platform β€” for general enquiries and issues requiring an immediate response;
  • Website: kaya918.best.

We are committed to responding to all privacy-related enquiries within 14 business days. For complaints that cannot be resolved through our internal channels, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP), the regulatory body responsible for enforcing the PDPA in Malaysia.

Summary of Kaya918's Data Practices

Data Type Purpose Retention Period
Name & IC/Passport Identity verification (KYC) 5–7 years
Email & Phone Number Communication & account security For the duration of the active account
Payment Information Deposits & withdrawals 7 years (legal requirement)
Betting Records Dispute resolution & compliance 5 years
Customer Support Logs Reference & improvement 2 years
Marketing Data Promotional communications (with consent) Until consent is withdrawn
Session Cookies Platform functionality & security Closed on exit
IP Address Logs Security & fraud prevention 90 days

βš–οΈ YOUR RIGHTS

You Have Full Control Over Your Data

Kaya918 respects your rights under Malaysia's PDPA β€” here is how you can exercise them

πŸ‘οΈ
Data Access

Request a copy of all personal data we hold about you within 14 working days.

✏️
Correct Data

Request correction of any inaccurate, outdated, or incomplete data in your account.

πŸ—‘οΈ
Delete Data

Request the deletion of your data when it is no longer required, subject to applicable legal obligations.

πŸ“¦
Data Portability

Receive your data in a structured, machine-readable format for transfer to another platform.

🚫
Object to Marketing

Stop receiving marketing communications at any time without affecting your account.

⏸️
Processing Limits

Request that we restrict the processing of your data under certain circumstances while a dispute is being resolved.

↩️
Withdraw Consent

Withdraw consent for specific data processing at any time without penalty.

πŸ“’
File a Complaint with the JPDP

Report privacy concerns to the Department of Personal Data Protection Malaysia if you are not satisfied.

To exercise any of the above rights, contact us at support@kaya918.best or via 24/7 Live Chat.

Privacy at Kaya918 – More Than Just a Document

Many people think of a privacy policy as a dry legal document that nobody actually reads. At Kaya918, we want to change that perception. Our Privacy Policy is more than just regulatory compliance β€” it reflects the core values we hold about the relationship between a platform and its users. We believe privacy is a fundamental right, not a privilege, and the way a company handles its users' data speaks volumes about how much it truly respects them.

When you register an account at Kaya918 and share your personal information with us, you are placing your trust in us. We do not take that trust lightly. Every decision about how we collect, store, and use data is made with the same question in mind: is this truly necessary, and would our users be comfortable with this if they knew? If the answer is uncertain, we do not proceed.

One of the most privacy-sensitive aspects of an online casino and Sports Betting platform is financial information. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX into your Kaya918 Kaya918 account, that transaction information is fully encrypted and is never stored in a format accessible to general support staff. Access to financial data is strictly limited β€” only automated systems and senior personnel who require access to resolve specific technical issues may do so, and every instance of access is logged and auditable.

The KYC (Know Your Customer) process we conduct to verify member identities is a legal requirement under Malaysia's anti-money laundering (AML) regulations, not merely an option. When you submit a copy of your MyKad or passport to Kaya918, the document is immediately encrypted, stored in a secure and isolated environment, and accessible only to specially trained compliance personnel. Once verification is complete, access to the document is further restricted. We do not use your identity document for any purpose other than identity verification and legal compliance.

Regarding marketing communications, Kaya918 follows an opt-in approach, meaning we only send you promotional communications if you have actively agreed to receive them. We will not add you to any marketing list automatically or assume that having an account means you want to receive promotional emails. If you agree to receive promotional communications but later change your mind, you can unsubscribe at any time with a single click β€” and we will respect your decision immediately.

Cybersecurity is a growing concern in Malaysia, with online fraud incidents rising year on year. Kaya918 continuously invest in security infrastructure to ensure our platform stays ahead of the latest threats. This includes real-time threat detection systems that monitor platform traffic 24/7, regular security testing by independent experts, and ongoing staff training in security best practices. In the event of a security incident affecting user data, we are committed to notifying affected users within the timeframe stipulated by law and taking immediate action to limit any damage.

For users accessing Kaya918 via smartphone β€” the preferred device for the majority of our users given Malaysia's high mobile penetration β€” there are a few important precautions to keep in mind. Secure your phone with a PIN, fingerprint, or facial recognition to prevent unauthorised access to the platform should your device be lost or stolen. Log out of your Kaya918 account when you are done playing, especially on shared devices. Do not save your login credentials in the browser on any device that others may access.

Finally, it is important to know that if you close your account Kaya918 you, this does not mean all your data will be deleted immediately. As outlined in this policy, certain data must be retained for specified periods in accordance with Malaysian legal requirements β€” particularly financial transaction records, which must be kept for 7 years. This is not our choice; it is an obligation under the Malaysian Accounting Act and AML regulations. However, we will delete all data not subject to such legal obligations within a reasonable time following account closure, and access to any retained data is strictly limited and used solely for legal compliance purposes.

Frequently Asked Questions About Kaya918's Privacy Policy

Answers to the most frequently asked questions about privacy and personal data at Kaya918

Kaya918 retains the information you provided during registration (name, email, phone number, date of birth), identity documents submitted during the KYC process, financial transaction records (deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, or FPX), your gaming and betting history on the platform, and customer support communication logs. For a full list, you may request a copy of all your data by contacting us at support@kaya918.best. We will fulfil the request within 14 business days.

Kaya918 does not sell or rent your data to any third party for marketing purposes. Data sharing occurs only in limited circumstances: with payment providers such as Touch 'n Go and GrabPay to process your transactions, with game providers to enable access to games, with KYC services to verify identity, with legal authorities when required under Malaysian law, and with professional consultants bound by confidentiality obligations. All sharing is kept to the minimum necessary for the stated purpose.

You may request deletion of your personal data by emailing support@kaya918.best with the subject line "Data Deletion Request" along with your account details. We will process your request within 14 business days. Please note that some data cannot be deleted immediately due to legal obligations β€” for example, financial transaction records must be retained for 7 years under Malaysian law. In such cases, we will inform you which data will be deleted and which must be retained, along with the reasons.

When you close your Kaya918 account, data not subject to legal obligations will be deleted within a reasonable timeframe. However, financial transaction records and KYC information must be retained for the period required under Malaysian law (typically 5–7 years) for anti-money laundering compliance purposes. Data retained after account closure is accessible solely for legal compliance and is stored in a secure, isolated environment.

To opt out of promotional emails, you may: (1) Click the "Unsubscribe" link found at the bottom of any promotional email we send; or (2) Contact our support team via Live Chat or email at support@kaya918.best and indicate that you wish to withdraw consent for marketing communications. Your request will be processed within 5 business days. Opting out of promotional emails does not affect your account β€” you will still receive important operational emails such as transaction confirmations and account security notices.
Kaya918 Privacy & Security Commitment

Kaya918 is fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010. All data is encrypted using 256-bit SSL. This platform is intended for individuals aged 18 and above. For more information, visit Terms & Conditions, Responsible Gaming, and About Us. Contact us: support@kaya918.best.

πŸ”’βœ…πŸŽ°

Your Data Is Safe with Kaya918 – Ready to Get Started?

Register a free account and enjoy a safe, fair, and fully protected online casino and Sports Betting experience. Deposits are easy via Touch 'n Go, DuitNow, or Maybank2u. A welcome bonus of up to RM 888 awaits you.

Bahasa Melayu