Kayabet Privacy Policy – Personal Data Protection for Malaysian Members

Kayabet is an online sports betting and casino platform built specifically for Malaysian players. We understand that member trust is the foundation of our business — without your trust, Kayabet means nothing.

This Privacy Policy is designed to give you a clear and transparent understanding of how Kayabet manages your personal data. We are in full compliance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and international data security standards.

This policy applies to all information you provide to Kayabet through the website, mobile app, email, live chat, or any other channel Kayabet makes available. Whenever you register an account, make a deposit, place a bet on the Malaysia Super League, or play slots on Kayabet — certain data may be processed in accordance with this policy.

Kayabet collects your personal data through various means depending on how you interact with our platform. Below is a summary of the data we collect:

Kayabet does not collect sensitive data such as your medical information, political views, or religious beliefs. Financial data such as full credit card numbers is never stored in Kayabet's systems — it is processed directly through licensed payment providers.

Kayabet uses your personal data solely for legitimate and necessary purposes. Below are the primary purposes for which your data is used:

• Account Management: To create, verify, and manage your Kayabet account, including a secure login process.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, as well as withdrawals of winnings to your account.
• Identity Verification (KYC): To comply with anti-money laundering (AML) legal requirements and to verify the age and identity of members.
• Fraud Prevention: To detect and prevent fraudulent activity, bonus abuse, multi-account usage, and other security threats.
• Customer Support: To help you resolve issues, answer enquiries, and provide effective support.
• Platform Improvement: To analyse usage patterns and improve the quality of Kayabet's products and services.
• Marketing Communications: To send you the latest promotional information and bonuses — only if you have consented to receive them.

Kayabet does not sell, rent, or disclose your personal data to any third party for their own marketing purposes. However, in the following limited circumstances, Kayabet may need to share your data:

• Payment Providers: Required transaction data is shared with licensed payment providers such as DuitNow, FPX, and e-wallet platforms to process your deposits and withdrawals using Malaysian payment methods.
• Game Providers: Limited account information is shared with Kayabet's licensed game providers (live casino, slots, sports) solely to enable your gameplay.
• Regulatory Authority: Where required by Malaysian law or a valid court order, Kayabet will disclose the necessary data to the relevant authorities.
• Fraud Prevention: In cases involving serious fraud, data may be shared with the relevant law enforcement agencies.

All third parties working with Kayabet are bound by strict confidentiality agreements and are required to uphold data protection standards equivalent to or higher than those of Kayabet.

Kayabet continually invests in the latest security technologies and procedures to ensure your personal data remains protected at all times. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your browser and Kayabet's servers is encrypted using HTTPS with bank-grade SSL certificates.
• Secure Password Storage: Your password is never stored in plain text. We use robust cryptographic hashing algorithms.
• Two-Factor Authentication (2FA): Available and recommended for all Kayabet accounts as an added layer of security.
• 24/7 Monitoring: Kayabet's security systems operate around the clock to detect and prevent unauthorised access, cyberattacks, and anomalies.
• Restricted Access: Only authorised Kayabet staff with a legitimate business need may access member personal data.
• Regular Security Audits: Kayabet conducts regular security audits and independent penetration testing.

Kayabet uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for core Kayabet platform functions such as login sessions and security. Cannot be disabled.
• User Preference Cookies: Stores your preferences such as language, theme, and display settings.
• Analytics Cookies: Helps us understand how members use the Kayabet platform so we can continuously improve it. This data is collected in aggregate and cannot be used to identify you individually.
• Performance Cookies: To ensure the Kayabet platform runs quickly and smoothly while you place bets or play games.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Kayabet platform. Please note that disabling cookies does not mean you will stop receiving ads — you may simply receive less relevant ones.

Kayabet retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under Malaysian law.

• Active account data: Retained for the duration your account is active and for 7 years following account closure, in accordance with Malaysian financial regulations.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legal requirements.
• Support communication logs: Retained for 3 years for reference and service improvement purposes.
• Marketing data: Deleted immediately upon opting out of marketing communications.

Kayabet's primary servers operate in jurisdictions that comply with international data protection standards. Where data needs to be transferred across borders, Kayabet ensures adequate protection through lawful data transfer agreements.

As a Kayabet member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If your personal data is inaccurate or incomplete, you may request that we correct it.
• Right to Erasure: In certain circumstances, you may request that Kayabet erase your personal data (the "right to be forgotten"), subject to our legal obligations.
• Right to Restrict Processing: You may request that we restrict how we use your data under certain circumstances.
• Right to Withdraw Consent: You may withdraw consent for marketing communications at any time without affecting your use of the Kayabet platform.

Kayabet takes its social responsibility towards child protection seriously. The Kayabet platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that personal data of an underage individual has been collected without our knowledge, we will immediately delete that data and terminate the account in question. Parents or guardians who suspect their child has a Kayabet account are urged to contact us immediately at support@kayabet.click.

Kayabet employs age-verification technology and requires a valid identity document during the KYC verification process to ensure all members meet the minimum age requirement prescribed under Malaysian law.

Kayabet reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or business practices. You will be notified of any material changes through:

• A prominent notice on the Kayabet homepage
• Notification email to all registered members
• In-platform Kayabet notifications

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. Your continued use of the Kayabet platform after any amendments take effect constitutes your acceptance of the latest version of this Privacy Policy.