Privacy Policy kayagaya — Your Personal Data Protection

01Introduction & Scope of Privacy Policy

Kayagaya is fully committed to protecting the privacy and data security of all its users. This Privacy Policy has been established to fulfil our responsibilities to users and to comply with applicable data protection laws.

This policy clearly explains how we handle your personal information throughout its lifecycle — from the moment you register an account, through your use of the platform, and after you close your account. We believe transparency is the foundation of trust, and trust is at the heart of our relationship with every user.

This policy covers all data processing carried out by kayagaya through:

• Kayagaya's official website at kayagaya.onl
• Kayagaya mobile app for Android and iOS
• All customer support services including live chat and email
• Deposit, withdrawal, and account management systems

02Types of Personal Data We Collect

Kayagaya only collects data that is strictly necessary to deliver high-quality services, ensure account security, and meet regulatory requirements. We do not collect data excessively or without a legitimate purpose.

Data you provide directly:

• Registration Information: Full name, email address, phone number, date of birth, and account password.
• Identity Verification (KYC): Copy of national ID or passport, proof of residential address, and an identity verification selfie.
• Financial Information: Bank account details for deposit and withdrawal purposes — stored in encrypted form.
• Communications: Records of conversations with our customer support team via live chat or email.

Data collected automatically:

• Technical Data: IP address, device type, operating system, web browser type and version.
• Usage Data: Pages visited, time spent on the platform, and in-platform search history.
• Location Data: General location based on IP address — used for unauthorised access detection and geographic compliance.
• Cookie Data: Session tokens, user preferences, and anonymised analytics data.

03How We Use Your Personal Data

Every use of personal data by kayagaya has a valid legal basis and a clear purpose. We will not use your data for any purpose beyond what is stated here without first obtaining your consent.

• Account Management: Creating, verifying, and maintaining your user account on the kayagaya platform.
• Service Provision: Processing deposits and withdrawals, and providing access to all games and platform features.
• Identity Verification (KYC): Verifying user identity to prevent fraud, money laundering, and access by underage individuals.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, and suspicious activity on the platform.
• Customer Support: Addressing enquiries, resolving complaints, and providing technical assistance.
• Service Communications: Sending important notifications related to your account, security, and platform updates.
• Responsible Gaming: Monitoring gameplay patterns to identify and support users who may need responsible gaming assistance.
• Legal Compliance: Fulfilling applicable legal obligations and regulatory compliance requirements.

04Third-Party Data Sharing

Kayagaya takes an extremely cautious approach to data sharing. Our core principle is simple: we do not sell your data, and we do not share your data except where strictly necessary and legally justified.

Your personal data may be shared with the following parties, solely for the purposes stated:

• Payment Provider: Information required to process deposits and withdrawals — only the data necessary for the relevant transaction.
• KYC Provider: A certified identity verification partner that securely processes document checks.
• Game Software Provider: Minimum technical data required to run games on the platform.
• Legal Authorities: When required by a court order, writ, or directive from a competent authority.
• Audit & Compliance: Independent auditors are appointed to verify the platform's compliance with industry standards.

All third parties receiving data from kayagaya are bound by strict data protection agreements and are required to meet security standards equal to or exceeding our own.

05Data Security & Protection Measures

Kayagaya continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. Our security system is built in layers — meaning even if one layer is compromised, subsequent layers continue to safeguard your data.

Technical security measures we employ:

• Data-at-Rest Encryption: All sensitive data is encrypted using AES-256 when stored on our servers.
• Transmission Security: All data transmitted between your device and kayagaya servers is protected with TLS 1.3.
• Two-Factor Authentication (2FA): Users are encouraged to enable 2FA for an additional layer of account security.
• Continuous Monitoring: A real-time threat detection system operates 24 hours a day, 7 days a week.
• Strict Access Controls: Only authorised staff with legitimate job requirements may access user data, and all access is logged.
• Regular Penetration Testing: The kayagaya platform undergoes regular independent security testing by certified cybersecurity professionals.

06User Rights Regarding Personal Data

As a kayagaya user, you have the following rights regarding your personal data. All rights requests may be submitted through our customer support team and will be processed within 14 business days.

• Right to Access: You have the right to request a copy of all personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data — subject to our legal obligations to retain certain data.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data under certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your data for specific purposes such as direct marketing.

07Cookie Usage Policy

Kayagaya uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. The following are the types of cookies we use:

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the kayagaya platform.

08International Data Transfers

In the course of its operations, kayagaya may need to transfer users' personal data to servers or partners located outside Malaysia. Any such transfer is carried out with strict safeguards to ensure your data remains protected to a standard equivalent to Malaysian requirements.

Steps we take for international data transfers:

• Data is only transferred to countries or organisations with adequate data protection standards.
• Binding recipient partners with a Data Processing Agreement (DPA) that sets minimum protection standards.
• Ensuring all data transfers are encrypted in transit using TLS 1.3.
• Conducting Data Protection Impact Assessments (DPIA) prior to high-risk new data transfers.

09Changes to This Privacy Policy

Kayagaya reserves the right to update or revise this Privacy Policy from time to time in line with changes in law, technology, or our operations. All updates will be published on this page with a clear revision date.

For significant amendments that affect how we use your personal data, we will notify you via an in-account notification or your registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

10Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the kayagaya privacy team is here to help:

• 24/7 Live Chat: The fastest way to get help — directly via the chat icon on the kayagaya platform.
• Privacy Email: [email protected] — for specific inquiries related to data protection and user rights.
• General Support Email: [email protected] — for general inquiries related to your account and services.

Our team is committed to responding to all privacy-related enquiries within 3 business days, and to resolving data rights requests within 14 business days upon verification of the requester's identity.