Privacy Policy JayaKaya

1 Introduction

JayaKaya ("we", "Platform") is committed to protecting the privacy of every player who uses our services. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and details how we handle your personal data from the moment you register until you stop using the platform.

We understand that your trust is our most valuable asset. That is why every decision related to data management is made with your best interests as a player in mind. There are no compromises here — your data belongs to you, and we are simply its custodian.

This policy applies to all channels through which you interact with JayaKaya, including account registration, gaming activity, financial transactions, communications with our support team, and use of our mobile app.

2 Data We Collect

Jayakaya only collects data that is strictly necessary to provide a safe, fair, and legally compliant service. The categories of data we collect are as follows:

3 How We Use Your Data

Collected data is used solely for clear and legitimate purposes. We do not use your data for purposes unrelated to JayaKaya's services. Data use purposes include:

• Account Management: Creating, verifying, and managing your player account, including the KYC process required by law.
• Transaction Processing: Processing deposits and withdrawals securely via your chosen payment method.
• Service Delivery: Giving you access to all games, bonuses, promotions, and features on the jayakaya platform.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account.
• Responsible Gaming: Monitoring gameplay patterns to identify and support players who may need responsible gaming assistance.
• Communication: Sending transaction notifications, service updates, and relevant promotional information.
• Legal Compliance: Fulfilling reporting obligations to relevant authorities as required by Malaysian law.
• Platform Improvement: Analysing usage patterns to improve the overall jayakaya platform experience.

4 Third-Party Data Sharing

Jayakaya does not sell or rent your personal data to any third party. However, in the context of legitimate business operations, we share only the necessary data with the following parties:

• Payment Service Provider: Required transaction details are shared with payment processors, banks, and e-Wallet providers to complete your transactions.
• Game Provider: Minimum technical data is shared with game software providers for the purpose of game round verification and dispute resolution.
• Identity Verification Provider: Data required for the KYC process is shared with approved and trusted third parties for identity verification purposes.
• Governing Authority: We will disclose data when required by law, court order, or upon a valid request from law enforcement authorities.

5 Data Security

We continuously invest in security infrastructure to ensure your data remains protected at all times. The security measures we have implemented include:

• 256-bit SSL/TLS encryption for all data transmitted over the network.
• Sensitive data stored in our database is encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA) is available for all player accounts.
• Round-the-clock security monitoring by our internal cybersecurity team.
• Regular penetration testing conducted by accredited independent third parties.
• Role-based access control — only authorised staff can access specific data.
• Automated data backups with encryption to ensure rapid recovery in the event of an incident.

While we take all reasonable precautions, no security system is entirely foolproof. Should a data breach occur that materially affects you, we are committed to notifying you within the timeframe required by the PDPA.

6 Cookies & Tracking Technologies

Jayakaya uses cookies and similar technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, time zone, and display settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand how players use the platform so we can continue improving it. This data is collected in aggregate and does not identify you individually.
• Marketing Cookies: Used to display relevant advertisements. You can opt out of these cookies through your browser settings.

7 Your Rights as a Data Subject

Under Malaysia's PDPA, you have several important rights regarding your personal data. JayaKaya respects and facilitates the exercise of the following rights:

To exercise any of the above rights, please contact our privacy team by email at [email protected] or via the platform's live chat. We will process your request within 14 business days.

8 Data Retention Period

Jayakaya retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure for financial record-keeping and legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and financial legal requirements.
• Security & Access Logs: Retained for 2 years for security incident investigation purposes if required.
• KYC Records: Retained for 6 years after the business relationship ends, in line with Malaysia's AML/CFT requirements.
• Support Communication Data: Retained for 3 years for reference and service improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-approved methods.

9 International Data Transfers

In the course of platform operations, your data may be processed on servers located outside Malaysia. JayaKaya ensures that any such data transfers are carried out with adequate safeguards in place, including:

• Ensuring that recipient countries maintain a level of data protection equivalent to or higher than Malaysia's PDPA.
• Implementing approved standard contractual clauses to protect your data during transfers.
• Obtaining security assessments from international partners before any data transfer is approved.

10 Children's Privacy

Jayakaya services are exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on our platform are encouraged to contact our support team right away.

11 Links to Third-Party Sites

The jayakaya platform may contain references or information relating to third-party services. This Privacy Policy applies solely to the jayakaya platform and does not cover the privacy practices of any third party.

We recommend reading the privacy policy of each platform you visit separately. jayakaya is not responsible for the privacy practices or content of third-party sites that are not under our control.

12 Amendments to the Privacy Policy

Jayakaya reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When material changes occur, we will notify you through:

• In-platform notification upon your next login.
• Email to the address registered to your account.
• A prominent notice on the jayakaya homepage for an appropriate period.

The "Updated" date at the top of this policy indicates when changes were last made. Continued use of the jayakaya platform after any amendments take effect constitutes your acceptance of the updated policy.

For any privacy-related questions, concerns, or complaints, please contact our Privacy Officer at [email protected]. We are committed to addressing every inquiry seriously within the designated timeframe.