Security Data Full Protection

GayaKaya Privacy Policy – Malaysia Player Personal Data Protection

GayaKaya takes your privacy seriously. This document explains in detail how we collect, use, store, and protect your personal information every time you use our platform.

Last Updated: 1 January 2026

GayaKaya's Six Promises to Players

Before reading the full policy, here is a summary of how gayakaya protects the information and privacy of every player who trusts our platform.

256-bit SSL Encryption

All data transmitted between your device and gayakaya's servers is protected by the same industry-grade SSL encryption used by leading banks in Malaysia.

Data Not Sold

GayaKaya has never and will never sell, rent, or trade your personal information to any third party for marketing purposes without your explicit consent.

Minimum Required Access

We only collect information that is strictly necessary to provide our services to you. No excessive data collection beyond what is relevant to the platform's purpose.

Right to Amend & Delete

You have the full right to access, correct, or request deletion of your personal data from GayaKaya's systems — easily through our support team.

Controlled Data Retention

Your data is retained only for as long as necessary for the stated purposes or as required by law. After that period, data will be securely deleted.

Data Breach Notice

In the event of any data breach affecting your information, GayaKaya will notify you within the timeframe prescribed by applicable legislation.

This Privacy Policy ("Policy") explains our data protection practices GayaKaya regarding information collected through gayakaya.com and all related services. It should be read alongside Terms and Conditions By using the gayakaya platform, you agree to this Privacy Policy in full.

1Introduction

GayaKaya understands that player trust in our platform depends not only on game and financial security, but also on how we handle their personal information. Privacy is not merely a legal obligation for us — it is a core value that shapes how we operate.

This Policy covers all aspects of your personal data processing — from information you provide when registering, to data collected automatically while you use the platform, through to how we use that information to enhance your experience.

Our Commitment: GayaKaya operates to strict international data protection standards and continuously strives to exceed the minimum legal requirements in safeguarding our players' privacy.

2Personal Data We Collect

GayaKaya collects several categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of the types of data collected:

Data Category Example Information How It Is Collected
Identity Data Full name, date of birth, identification number, KYC document images Account registration & KYC verification
Contact Data Email address, phone number, residential address Account registration & profile updates
Financial Data Bank account number, e-wallet details, transaction history Deposit & withdrawal process
Technical Data IP address, browser type, operating system, session data Collected automatically during use
Gaming Data Game history, game preferences, betting records Platform activity
Communication Data Support chat transcripts, survey responses Interactions with the support team

Data Minimisation Principle: GayaKaya only collects data that is genuinely necessary. We do not collect sensitive information such as political views, religious beliefs, or biometric data beyond what is required for identity verification.

3How Your Data Is Used

GayaKaya uses your personal data for lawful and transparent purposes. Each use of data has a clear objective and will not be used for any other purpose without notifying you.

  • Account Management: Create, verify and manage your GayaKaya account, including the KYC verification process required to ensure security and legal compliance.
  • Transaction Processing: Process your deposits, withdrawals and all financial transactions securely and accurately in Malaysian Ringgit.
  • Service Provision: Provides access to all games and platform features, including personalising your gaming experience based on your preferences and history.
  • Platform Security: Detect and prevent fraud, money laundering and other unlawful activities that could compromise the security of the platform and other players.
  • Customer Support: Provide technical support and resolve any issues or complaints you report to our support team.
  • Platform Communications: Send important information about your account, transactions, platform changes and policy updates relevant to you.
  • Legal Compliance: Fulfil our obligations under applicable laws, including reporting to authorities as required by legislation.
  • Platform Enhancement: Analyse usage patterns in aggregate and anonymised form to improve platform features and overall user experience.

4Legal Basis for Data Processing

GayaKaya processes your personal data on one or more valid legal bases depending on the situation. Transparency on this matter is important to us:

  • Contract Performance: Processing required to fulfil the agreement between you and GayaKaya, such as processing your registration, transactions and withdrawals.
  • Legal Obligation: Processing required to comply with applicable laws, including KYC requirements, anti-money laundering (AML) reporting and other compliance checks.
  • Legitimate Interests: Processing required for GayaKaya's legitimate interests, such as fraud prevention, system security and service improvement, provided these interests do not override your fundamental rights.
  • Consent: For optional marketing communications and certain forms of optional data processing, we will obtain your explicit consent beforehand.

5Data Sharing with Third Parties

GayaKaya does not sell your personal data. We may share certain information with selected third parties only in the following situations and under strict controls:

  • Service Providers: Technical and operational partners who help us deliver our services, such as payment processors, game providers, and customer support platforms. All such parties are bound by strict data protection agreements.
  • Regulatory Authority: The regulatory body that issued our operating license, when required for oversight and compliance purposes.
  • Law Enforcement: Law enforcement agencies or judicial authorities when required by a valid court order or applicable legislation.
  • Fraud Prevention: Fraud prevention organisations and industry platforms to protect GayaKaya and our players from fraudulent activity.

Data Processing Agreement: Every third party that receives your personal data from gayakaya is required to sign a data protection agreement ensuring they handle your information to the same standard of protection we uphold.

6Cookies & Tracking Technologies

GayaKaya uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
  • Analytics Cookies: Helps us understand how players use the platform so we can improve the user experience. This data is collected in aggregate and cannot be used to identify you personally.
  • Functional Cookies: Allows the platform to remember your preferences such as display language and display settings for a seamless ongoing experience.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the GayaKaya platform.

7Data Storage & Security Measures

GayaKaya retains your personal data for as long as your account is active or as needed to provide services to you. After account closure, we may retain certain data for a period prescribed by applicable law for compliance, dispute resolution, and fulfilment of legal obligations.

To protect your personal data, gayakaya has implemented comprehensive technical and organisational security measures:

  • 256-bit SSL encryption for all data transmissions
  • Encrypted databases with strict access controls
  • Real-time security monitoring 24 hours a day
  • Periodic security audits by independent experts
  • Mandatory data security training for all staff handling personal data
  • Secure data backup systems with protection against loss and disasters

Shared Responsibility: While gayakaya takes all reasonable steps to protect your data, the security of your account password is a shared responsibility. Please use a strong password and never share your login credentials with anyone.

8Your Rights as a Data Subject

As a gayakaya player, you have several important rights regarding your personal data. We respect each of these rights and provide straightforward channels for you to exercise them:

Right of Access

Request a copy of the personal data GayaKaya holds about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete data in your records.

Right to Erasure

Request deletion of your personal data, subject to legal retention obligations.

Right to Object

Object to the processing of your data for direct marketing purposes or legitimate interests.

Right to Restrict Processing

Request restriction of your data processing under certain circumstances defined by law.

Right to Data Portability

Receive your personal data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact the gayakaya support team via live chat, available 24/7. We will process your request within 30 days of receipt.

9Cross-Border Data Transfers

In conducting international operations, GayaKaya may transfer your personal data to servers or partners located outside Malaysia. When such transfers occur, GayaKaya ensures that protection equivalent to or greater than Malaysian legal requirements is applied through mechanisms such as:

  • Internationally recognised standard contractual clauses
  • Comprehensive data processing agreements with partners
  • Transfers only to jurisdictions with adequate data protection standards

10Children's Privacy

The gayakaya platform is exclusively for individuals aged 18 and above. We do not intentionally collect, process, or store personal data from individuals under the age of 18.

If gayakaya determines that personal data has been collected from an individual under 18 without proper age verification, that data will be deleted immediately and the associated account will be closed. Parents or guardians who believe their minor child has registered on gayakaya are encouraged to contact us right away.

Age Verification: GayaKaya applies a robust KYC verification process to ensure all members meet the minimum age requirement of 18 years before being permitted to play with real money.

11Links to Third-Party Websites

The gayakaya platform may contain links to partner websites or game providers. This Privacy Policy applies only to information collected through the gayakaya platform. gayakaya is not responsible for the privacy practices or content of third-party websites you visit through those links.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information.

12Privacy Policy Amendments

GayaKaya reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material amendments are made, we will notify you via in-platform notification or email at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page always reflects the currently effective version of the policy. Continued use of the gayakaya platform after any amendment takes effect constitutes your acceptance of the updated policy.

13Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how GayaKaya handles your personal data, our team is ready to assist through several channels:

  • Live Chat: Available 24/7 via the chat icon at the bottom right of the gayakaya platform — the fastest way to get a response.
  • Email: Send your privacy enquiries to [email protected] — we will reply within 48 business hours.
  • FAQ Section: Visit page FAQ for answers to the most frequently asked questions about privacy and data security.

All data rights requests will be processed within 30 calendar days of receipt. We may require identity verification before processing certain requests to ensure the security of your account.

Your Privacy Is Safe with gayakaya

Understanding how we protect your data lets you play with greater peace of mind. Register today and experience a platform that puts your privacy and security first.

Bahasa Melayu