Privacy Policy

1Introduction

kayu33 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at kayu33.cam. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or uses the kayu33 platform ("you", "your", "the User", "the Player").

This Privacy Policy ("Policy") sets out in clear and accessible terms the categories of personal data we collect, the purposes for which that data is processed, the legal basis on which processing is conducted, the parties with whom data may be shared, the rights you hold in respect of your own data, and the measures we employ to keep your information secure.

This Policy applies to all users of the kayu33 platform, including registered players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations from which the platform is accessed. By using the kayu33 platform, you acknowledge that you have read and understood this Policy.

2Definitions

For the purposes of this Policy, the following terms shall have the meanings ascribed to them below:

3Data We Collect

kayu33 collects personal data in three broad categories: data you provide to us directly, data generated automatically through your use of the Platform, and data received from third parties such as payment processors and identity verification services.

Data you provide directly:

• Full legal name and date of birth (required for account registration and age verification)
• Email address and mobile phone number
• Residential address (required for KYC verification)
• Government-issued identity documents, such as MyKad or passport (for KYC purposes)
• Payment method details, including account numbers associated with DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong accounts
• Any communications you send to our customer support team via live chat or email
• Responsible gambling preferences, including deposit limits, loss limits, and self-exclusion requests

Data generated through platform use:

• Login timestamps, session duration, and device identifiers
• IP address and approximate geolocation
• Browser type and operating system information
• Complete transaction history, including deposits, withdrawals, bets placed, and game results
• Gameplay data, including games accessed, wager amounts, and session outcomes
• Cookie and tracking data as described in Section 8 of this Policy

Data received from third parties:

• Identity verification results from KYC and AML screening providers
• Payment confirmation and fraud risk data from payment processing partners
• Responsible gambling self-exclusion status from third-party exclusion registries, where applicable

4How We Collect Your Data

Personal data is collected through the following mechanisms on the kayu33 platform:

• Account Registration Form — When you create a kayu33 account, you provide your core identity and contact information directly.
• KYC Verification Submissions — When completing identity verification, you upload documentary evidence of your identity and address.
• Deposit and Withdrawal Transactions — Every financial transaction on the Platform is logged and associated with your account record.
• Live Chat and Email Correspondence — All support interactions are recorded for quality assurance and compliance purposes.
• Cookies and Tracking Technologies — Automatically when you access the Platform via a web browser. See Section 8 for full details.
• Third-Party Service Providers — We receive data outputs from our KYC, AML screening, and payment gateway partners as part of our compliance processes.

5Legal Basis for Data Processing

kayu33 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

6How We Use Your Data

kayu33 uses the personal data we collect for the following specific purposes:

• To create, verify, and administer your kayu33 account throughout the duration of your membership.
• To process MYR-denominated deposits and withdrawals via your chosen payment method — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian bank transfers.
• To conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) verification as required by our regulatory obligations.
• To deliver the gaming and sports betting services you access on the Platform, including maintaining accurate records of your account balance, wager history, and bonus eligibility.
• To provide 24/7 customer support in English, Bahasa Melayu, and Mandarin Chinese, and to maintain records of support interactions for quality and compliance purposes.
• To detect, investigate, and prevent fraudulent activity, account abuse, and any conduct that violates our Terms & Conditions.
• To administer our responsible gambling programme, including processing deposit limits, loss limits, session reminders, and self-exclusion requests.
• To analyse aggregate, anonymised platform usage data to improve the performance, usability, and features of kayu33 — this analysis does not identify individual users.
• To send you transactional communications relating to your account, including deposit confirmations, withdrawal notifications, and security alerts.
• To comply with any legal, regulatory, or judicial orders that require us to disclose specific data.

7Data Sharing & Disclosure

kayu33 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary:

• KYC and Identity Verification Partners — We engage specialist third-party KYC providers to process identity documents and perform AML screening. These providers act as data processors under binding data processing agreements and are not permitted to use your data for any other purpose.
• Payment Processing Partners — Transaction data is shared with payment gateways and financial institutions (including those facilitating DuitNow, FPX, and e-wallet transactions) to the extent required to process payments.
• Game Technology Providers — Certain gameplay data may be transmitted to our licensed game software suppliers for the purpose of delivering and rendering games. These providers do not receive your identity or financial data.
• Regulatory and Legal Authorities — We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or as necessary to protect the rights and safety of kayu33, its users, or the public.
• Corporate Restructuring — In the event of a merger, acquisition, or sale of all or substantially all of the assets of kayu33, personal data held by the Platform may be transferred to the acquiring entity. Users will be notified of any such transfer in advance.

8Cookies & Tracking Technologies

kayu33 uses cookies and similar tracking technologies to operate the Platform effectively and to improve the user experience. The following categories of cookies are used:

kayu33 does not use advertising cookies or place cookies on behalf of third-party advertisers. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in to your account.

9Data Security

kayu33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption on all data transmitted between your browser and our servers.
• Encrypted data storage for sensitive records, including payment details and identity documents.
• Role-based access controls limiting internal access to personal data strictly to staff whose job functions require it.
• Multi-factor authentication on administrative systems and staff access accounts.
• Regular third-party security audits and penetration testing conducted by independent cybersecurity specialists.
• 24/7 intrusion detection monitoring on all Platform infrastructure.

Notwithstanding these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that poses a risk to your rights, kayu33 will notify affected users and, where required, the relevant regulatory authority, without undue delay.

You also play a role in keeping your data secure. You are responsible for maintaining the confidentiality of your kayu33 login credentials. kayu33 will never ask for your password via live chat, email, or telephone. If you suspect your account has been compromised, please contact our support team immediately.

10Data Retention

kayu33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention principles we apply are set out below:

• Account data (name, contact details, login records) is retained for the duration of your account and for a period of up to 5 years after account closure, as required for AML compliance and legal dispute purposes.
• KYC identity documents are retained for a minimum of 5 years from the date of verification, in accordance with standard AML regulatory requirements.
• Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of 5 years from the date of the transaction.
• Customer support correspondence is retained for 2 years from the date of the interaction.
• Cookie and analytics data is anonymised or deleted within 13 months of collection.

When the applicable retention period expires, personal data is securely and permanently deleted or anonymised such that it can no longer be attributed to any individual. Where it is not technically feasible to delete data immediately, we will ensure it is isolated from further processing until deletion is possible.

11Your Rights

In respect of the personal data that kayu33 holds about you, you are entitled to exercise the following rights. To submit a request to exercise any of these rights, please contact our support team using the details provided in Section 15.

We will acknowledge all data rights requests within 5 business days and aim to fulfil them within 30 calendar days. In exceptional cases involving complex requests, we may extend this period by up to a further 30 days, with prior notification to you. All data rights requests are handled free of charge.

12International Data Transfers

Some of the third-party service providers engaged by kayu33 — including KYC verification platforms and game technology suppliers — may process personal data in jurisdictions outside Malaysia. Where such transfers occur, kayu33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used for international transfers include standard contractual clauses that bind the recipient to process your data only as permitted under this Policy, and to implement security standards that meet or exceed those described in Section 9 of this Policy.

If you would like specific information about the safeguards applicable to a particular data transfer, please submit your request to our support team using the contact details in Section 15.

13Children's Privacy

The kayu33 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we discover that personal data has been submitted by an individual under 21 — whether through registration or any other means — we will immediately suspend the relevant account and delete all associated personal data.

If you are a parent or guardian and believe that a minor in your care has submitted personal data to kayu33, please contact our support team immediately at the address provided in Section 15. We will investigate and act promptly.

Age verification forms a mandatory component of our KYC process. No withdrawal will be processed for any account that has not successfully completed age verification.

14Policy Updates

kayu33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, we will update the "Last Updated" date displayed at the top of this page, and — where appropriate — notify registered users via the email address associated with their account.

Your continued use of the kayu33 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this Policy periodically to stay informed of how we protect your data. The most current version of this Policy will always be accessible at kayu33.cam/privacy-policy.

15Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data kayu33 holds about you, please reach our support team through the following channels. All data rights requests, privacy enquiries, and related correspondence are handled by our dedicated data compliance team.