kayu33 Privacy Policy

1. Introduction

1.1 This Privacy Policy applies to kayu33.win and all services, features, and functionality offered through the kayu33 platform ("Platform"), including the kayu33 live casino, slots, sportsbook, account management, payment processing, and customer support services.

1.2 kayu33 ("we", "us", "our") is the data controller responsible for the personal data of Members ("you", "your") collected and processed in connection with your use of the kayu33 Platform.

1.3 kayu33 is committed to protecting the privacy and personal data of all Members. This Privacy Policy sets out the types of personal data we collect, the purposes for which we process it, the legal bases we rely on, the parties with whom we may share it, how long we retain it, the security measures we apply, and the rights you have in respect of your personal data.

1.4 This Privacy Policy should be read alongside the kayu33 Terms & Conditions, which govern your use of the kayu33 Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions in relation to data protection matters, this Privacy Policy shall prevail.

2. Personal Data We Collect

2.1 kayu33 collects the following categories of personal data in connection with your use of the Platform:

2.1.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth;
• Nationality;
• Email address;
• Mobile telephone number (Malaysian number);
• Residential address.

2.1.2 Identity Verification Data

• Government-issued identity document number (e.g., MyKad number);
• Copy of government-issued identity document (front and back);
• Selfie or facial verification image where required for enhanced verification;
• Proof of address documentation where applicable.

2.1.3 Financial and Transaction Data

• Deposit and withdrawal transaction records;
• Payment method details (e.g., Touch 'n Go eWallet account identifier, bank account details linked to FPX or DuitNow transactions);
• Account balance and transaction history;
• Bonus and promotional activity records.

2.1.4 Gaming Activity Data

• Game history, betting records, and wager amounts;
• Session start and end times;
• Responsible gaming tool usage (deposit limits, loss limits, self-exclusion records);
• In-play betting activity and sportsbook selections.

2.1.5 Technical and Device Data

• IP address and geolocation data derived from IP address;
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens;
• Platform access logs and error reports.

2.1.6 Communications Data

• Records of your communications with kayu33 customer support via Live Chat, WhatsApp, or email;
• Feedback, complaints, and dispute records.

3. How We Collect Your Personal Data

3.1 Directly from you when you register for a kayu33 account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings.

3.2 Automatically through the kayu33 Platform as you interact with it, including through cookies, session tracking, and technical logging of your activity on the Platform.

3.3 From third-party service providers engaged by kayu33 for specific purposes, including identity verification service providers, payment processors (including Touch 'n Go eWallet, Boost, and Malaysian banking FPX infrastructure), and fraud detection services. Data received from these third parties is treated with the same standard of care as data collected directly from you.

3.4 From publicly available sources where permitted by applicable law and where relevant to fraud prevention, responsible gaming compliance, or identity verification purposes.

4. How We Use Your Personal Data

4.1 kayu33 processes your personal data for the following purposes:

• Account creation and management: To register your kayu33 account, verify your identity, and maintain your account in accordance with applicable standards;
• Platform service delivery: To provide you access to the kayu33 live casino, slots, sportsbook, and all associated platform features;
• Payment processing: To process deposits and withdrawals via your chosen Malaysian payment method, including Touch 'n Go eWallet, Boost, DuitNow, and bank transfer services;
• Regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and international gaming authority standards applicable to kayu33's operations;
• Responsible gaming: To monitor gaming activity for indicators of problem gambling behaviour, to administer deposit limits, loss limits, and self-exclusion requests, and to contact Members regarding responsible gaming support where warranted;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct;
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and user experience of the kayu33 Platform;
• Marketing communications: To send you information about kayu33 promotions, bonuses, and platform updates where you have provided consent or where we have a legitimate interest in doing so, subject to your right to opt out at any time.

5. Legal Basis for Processing

5.1 kayu33 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the kayu33 Platform services to you in accordance with our Terms & Conditions;
• Legal obligation: Processing required to comply with applicable AML, KYC, and regulatory requirements;
• Legitimate interests: Processing for fraud prevention, security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for direct marketing communications, where your prior consent has been obtained. You may withdraw this consent at any time by contacting kayu33 customer support.

6. Data Sharing and Disclosure

6.1 kayu33 does not sell, rent, or trade your personal data to third parties for commercial purposes under any circumstances.

6.2 kayu33 may share your personal data with the following categories of recipients for the purposes described in this Privacy Policy:

• Payment processors: Including Touch 'n Go eWallet (TnG Digital), Boost, DuitNow/PayNet infrastructure, and Malaysian banking institutions, for the purpose of processing your deposits and withdrawals;
• Identity verification providers: Third-party KYC and identity verification services engaged to verify your identity documents and age;
• Fraud and AML screening services: To screen your account activity against sanctions lists and fraud databases as required by applicable standards;
• Customer support tools: Service providers who assist kayu33 in delivering Live Chat and WhatsApp support services;
• Regulatory and law enforcement authorities: Where kayu33 is required by applicable law, court order, or regulatory authority to disclose your personal data.

6.3 All third-party service providers engaged by kayu33 are contractually required to handle your personal data in accordance with applicable data protection standards and may only process your personal data for the specific purpose for which it was shared.

7. Cookies and Tracking Technologies

7.1 kayu33 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality;
• Performance cookies: Used to collect aggregated, anonymised data on how Members use the Platform, enabling kayu33 to identify and resolve technical issues and optimise Platform performance;
• Functional cookies: Used to remember your preferences and settings, such as language preferences and responsible gaming limit settings;
• Analytics cookies: Used to understand aggregate usage patterns on the Platform. Analytics data is anonymised and used solely for Platform improvement purposes.

7.2 You may manage your cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the kayu33 Platform.

8. Data Retention

8.1 kayu33 retains your personal data for as long as your kayu33 account remains active and for such further period as is required by applicable regulatory and legal obligations.

8.2 Following closure of your kayu33 account, kayu33 will retain your personal data for a minimum period of five years in order to comply with applicable AML record-keeping requirements and to resolve any disputes or legal claims that may arise in relation to your account.

8.3 Where personal data is no longer required for any lawful purpose, kayu33 will securely delete or anonymise it in accordance with our internal data retention schedule.

8.4 Transaction records, including deposit and withdrawal history, are retained for a minimum of seven years from the date of the relevant transaction in accordance with applicable financial record-keeping standards.

9. Data Security

9.1 kayu33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL encryption for all data transmissions between your device and the kayu33 Platform;
• Encryption of stored sensitive personal data and payment credentials at rest;
• Salted cryptographic hashing of account passwords — plaintext passwords are never stored;
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the kayu33 Platform infrastructure;
• Anomaly detection and intrusion prevention systems monitoring the Platform in real time.

9.2 Notwithstanding the above, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that affects your personal data, kayu33 will notify affected Members as required under applicable data protection standards and will take immediate steps to contain and remediate the breach.

10. Your Data Protection Rights

10.1 Subject to applicable law, you have the following rights in respect of your personal data held by kayu33:

• Right of access: To request a copy of the personal data kayu33 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to kayu33's legal retention obligations;
• Right to restriction: To request that kayu33 restrict the processing of your personal data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract performance;
• Right to object: To object to processing of your personal data where kayu33 relies on legitimate interests as the legal basis;
• Right to withdraw consent: To withdraw any consent you have given for the processing of your personal data, without affecting the lawfulness of processing carried out before withdrawal.

10.2 To exercise any of the above rights, please contact kayu33 via Live Chat (available 24/7) or by email at [email protected]. kayu33 will respond to your request within 30 days. We may require proof of your identity before processing certain requests.

11. Children's Privacy

11.1 The kayu33 Platform is strictly intended for adults aged 21 and above. kayu33 does not knowingly collect personal data from any person under the age of 21.

11.2 If kayu33 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete the associated personal data, and return any deposited funds to the source payment method where technically feasible.

11.3 If you have reason to believe that a person under the age of 21 has registered for a kayu33 account, please contact kayu33 customer support immediately at [email protected].

12. Third-Party Links

12.1 The kayu33 Platform does not contain links to third-party websites or services other than those directly necessary for the provision of payment processing services (e.g., redirects to the Touch 'n Go eWallet or Boost authentication screens during deposit flows). kayu33 is not responsible for the privacy practices or content of any third-party services to which you may be redirected in the course of a transaction.

12.2 Any personal data you provide directly to a third-party payment processor (such as your TnG eWallet PIN or Boost authentication credentials) is processed by that third party in accordance with their own privacy policies, and not by kayu33.

13. Changes to This Privacy Policy

13.1 kayu33 reserves the right to update or amend this Privacy Policy at any time. The most current version of the Privacy Policy will be published on the kayu33 Platform with the date of the most recent revision noted at the top of the document.

13.2 Where kayu33 makes material changes to this Privacy Policy, we will use reasonable efforts to notify Members via the email address registered to their kayu33 account. Your continued use of the kayu33 Platform following any posted amendment constitutes your acceptance of the revised Privacy Policy.

13.3 If you do not accept any amendment to this Privacy Policy, you should close your kayu33 account and cease using the Platform.

14. Contact Us

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kayu33, please contact us:

14.2 For information on your rights as a kayu33 Member more broadly, including responsible gaming tools, deposit limits, and self-exclusion, please visit our Responsible Gaming page.

14.3 The full terms governing your use of the kayu33 Platform are set out in the Terms & Conditions.