KayaGaya Privacy Policy — Your Personal Data Protection

1 Introduction and Scope of This Policy

KayaGaya ("we", "Platform", or "company"), operating through the official website kayagaya.vu and our mobile app, is fully committed to protecting the privacy of every individual who interacts with our services. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information.

This policy applies to all users of the KayaGaya platform, including website visitors, prospective members in the registration process, active members, and former members whose accounts have been closed. It covers all our interaction channels — the website, Android app, iOS app, and communications via live chat and support email.

We believe transparency is the foundation of trust. That is why we do not use confusing language or hidden terms in this policy. What you read here is an accurate reflection of how we handle your personal data.

2 Types of Personal Data We Collect

2.1 Data You Provide Directly

During the account registration process and while using the platform, you provide us with the following information:

• Identity information: full name, national ID or passport number, date of birth, gender, and nationality.
• Contact information: email address, mobile number, and residential address.
• Financial information: bank account number, bank name, and digital wallet details for deposit and withdrawal processing purposes.
• Verification documents: copy of ID card, latest bank statement, or proof of address document submitted during the KYC process.
• Preference information: language preferences, account settings, and feedback you share with our support team.

2.2 Data Collected Automatically

While you use our platform, our systems automatically record certain technical information:

Data Type	Example	Purpose
Device data	Device model, operating system, browser version	Platform optimisation
Network data	IP address, connection type, general location	Security & Verification
Usage data	Pages visited, session duration, clicks	UX Improvement
Transaction data	Deposit, betting, and withdrawal records	Compliance & Audit
Cookie data	Session token, user preferences	Functionality & personalization

3 How We Use Your Personal Data

Kayagaya uses your personal data only for legitimate and necessary purposes. The main purposes for using your data are as follows:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process required by regulatory authorities.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions carried out through our platform securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and any suspicious activity.
• Customer support: Responding to enquiries, resolving complaints, and providing the technical assistance you need.
• Legal compliance: Meeting legal and regulatory obligations, including reporting to relevant authorities as required by law.
• Service improvement: Analysing usage patterns to improve the design, performance, and content of our platform.
• Marketing communications: Sending information about promotions, new offers, and platform updates — only to members who have given their consent.

4 Data Sharing and Disclosure

Kayagaya does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is only shared in the following situations:

4.1 Trusted Service Providers

We work with selected third-party service providers to support platform operations, including payment processors, cloud service providers, identity verification companies, and analytics platforms. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.

4.2 Legal Obligations

We may be required to disclose your personal data to government authorities, regulatory bodies, or law enforcement agencies when mandated by Malaysian law or a valid court order. In such cases, we will endeavor to notify you in advance unless prohibited by law.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of company assets, member personal data may be transferred as part of the business assets. You will be notified in advance of any changes in ownership or use of your data, along with the options available to you.

5 Data Security and Protection

We implement comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure.

KayaGaya's security infrastructure includes:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers.
• Encryption of data at rest using AES-256 standards for all data stored in our databases.
• Two-factor authentication (2FA) available to all member accounts as an added layer of security.
• 24/7 Monitoring by our intrusion detection systems and cybersecurity team.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Internal access controls strict controls ensure that only authorized personnel can access members' personal data.

While we take all reasonable measures, no security system can be guaranteed 100% safe. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials with anyone.

6 Use of Cookies and Tracking Technologies

The kayagaya platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Helping us understand how users interact with the platform through anonymised usage data.
• Functional cookies: Saving your preferences such as language and display settings for a more personalised experience.
• Analytics cookies: Used to analyze traffic and usage patterns for the purpose of continuous platform improvement.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality and user experience of our platform.

7 Data Retention Period

Kayagaya retains your personal data for as long as needed to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. Generally:

• Active account data is retained for the duration your account remains active and for an additional period following account closure as required by law.
• Financial transaction records are retained for a minimum of 7 years in line with Malaysia's legal requirements relating to anti-money laundering.
• Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
• Marketing data is retained until you withdraw your consent or request its removal.

When personal data is no longer required, we will delete or anonymize it in a secure and permanent manner.

8 Your Rights Under the PDPA

As an individual whose personal data is processed by kayagaya, you have the following rights under Malaysia's Personal Data Protection Act 2010:

To exercise any of the rights above, please contact our privacy team by email at [email protected]. We will process your request within 21 business days.

9 Children's Data Protection

The kayagaya platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children under the age of 18. Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

10 Amendments to This Privacy Policy

KayaGaya reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. Any amendments will be published on this page along with the latest update date.

For material and significant amendments, we will notify members via their registered email or in-account notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes your acceptance of the amended policy.

11 Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the platform.
• FAQ: Browse section FAQ us for more information.

We are committed to addressing every privacy-related inquiry seriously and thoroughly within the stipulated timeframe.