jayakaya Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") is issued by jayakaya ("we", "us", "our"), the operator of the online gaming platform accessible at jayakaya.lat. It governs the collection, processing, storage, and disclosure of personal data provided by users ("you", "your", "member") when accessing or using any part of our website, mobile platform, or customer support services.

By registering an account or otherwise using jayakaya's services, you acknowledge that you have read and understood this Policy. If you do not agree with its terms, you should not create an account or use our services.

This Policy applies to all personal data processed in connection with jayakaya, whether collected online, over live chat, by email, or through any other interaction you have with our platform. It is intended to meet the disclosure obligations imposed by Malaysia's Personal Data Protection Act 2010 (PDPA) and is consistent with internationally recognised data protection principles.

2 Information We Collect

We collect personal data only to the extent necessary to provide a secure, compliant, and fully functional gaming service. The categories of data we may collect include:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Government-issued identification number (for KYC verification)
• Residential address, including postcode and state within Malaysia
• Email address and mobile phone number

2.2 Financial & Transaction Data

• Bank account details (e.g. Maybank, CIMB, Public Bank, RHB, Hong Leong)
• E-wallet identifiers (e.g. Touch 'n Go eWallet, Boost, GrabPay)
• DuitNow and FPX transaction references
• Deposit and withdrawal history, transaction amounts in MYR
• Bonus redemption and promotional activity records

2.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, session duration, and click-path data
• Login timestamps and session identifiers
• Game history, wagering amounts, and betting preferences

2.4 Communications Data

• Live chat transcripts and support ticket correspondence
• Email communications with our customer support team
• Responses to surveys, feedback forms, or promotional campaigns

2.5 Data Collected Automatically

When you visit jayakaya.lat, certain technical data is collected automatically through cookies, web beacons, and similar technologies. Please refer to Section 6 (Cookies & Tracking Technologies) for full details.

3 How We Use Your Information

jayakaya processes your personal data for the following specific and lawful purposes:

• Account creation and management: To register your account, verify your identity, and maintain your member profile on our platform.
• Age verification: To confirm that you are 21 years of age or older before permitting access to real-money gaming features, as required by our licensing obligations.
• Transaction processing: To facilitate deposits, withdrawals, and bonus payments in MYR through your chosen local payment method.
• KYC and fraud prevention: To comply with Know Your Customer (KYC) obligations, detect suspicious activity, prevent money laundering, and protect the integrity of our platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop new features that enhance your gaming experience.
• Marketing communications: To send you relevant promotions, bonus offers, and product updates — but only where you have provided your explicit consent or where permitted under applicable law. You may opt out at any time.
• Responsible gaming: To monitor betting behaviour, apply self-exclusion or deposit-limit settings you have requested, and flag potentially problematic gaming patterns in accordance with our Responsible Gaming obligations.
• Legal and regulatory compliance: To fulfil our obligations under Malaysian law, our international gaming licence framework, and any lawful requests from competent regulatory authorities.

4 Legal Basis for Processing

jayakaya processes your personal data under one or more of the following legal bases, consistent with the PDPA 2010 and general data protection principles:

• Contractual necessity: Processing is required to perform the contract between jayakaya and you as a registered member — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Certain processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and tax reporting duties.
• Legitimate interests: We may process data where necessary to pursue our legitimate business interests, such as fraud detection, platform security, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent as a legal basis (for example, for direct marketing), we will obtain your explicit consent prior to processing. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

5 Sharing Your Information

jayakaya does not sell, rent, or trade your personal data. We may share your information with third parties only in the following strictly defined circumstances:

5.1 Service Providers

We engage reputable third-party service providers who assist us in operating the platform. These include payment processors, KYC/AML verification providers, cloud infrastructure operators, and customer support technology vendors. All service providers are contractually bound to process data only as instructed by jayakaya and to maintain appropriate security measures.

5.2 Game Studios and Software Partners

Where required to deliver game content, anonymised or pseudonymised session data may be shared with our licensed international game studio partners. These providers do not receive personally identifiable information unless strictly necessary for dispute resolution.

5.3 Regulatory and Legal Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, court order, or to protect the rights, property, or safety of jayakaya, our members, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of our assets, personal data held by jayakaya may be transferred to the successor entity. You will be notified of any such transfer and any material changes to data processing practices before they take effect.

5.5 No Third-Party Marketing

Under no circumstances do we share, sell, or otherwise disclose your personal data to third-party advertisers or data brokers for their own marketing purposes.

6 Cookies & Tracking Technologies

jayakaya uses cookies and similar technologies to operate the platform effectively and deliver a personalised experience. The categories of cookies we deploy are as follows:

• Strictly necessary cookies: Essential for the website to function. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without impairing core functionality.
• Functional cookies: Allow us to remember your preferences, such as language settings and display options, to provide a more consistent experience across sessions.
• Analytics cookies: Used to collect anonymised data on how members navigate the site, which pages are most visited, and where technical errors occur. This data helps us improve the platform for all Malaysian users.
• Marketing cookies: With your consent, we may use cookies to deliver tailored promotional content related to jayakaya products. You may opt out of marketing cookies at any time through your browser settings or our cookie preference centre.

Most web browsers allow you to control cookie behaviour through their settings. Please note that disabling certain cookies may affect the functionality of jayakaya's platform. For further guidance on managing cookies in Malaysian-market browsers, refer to your device's help documentation.

7 Data Retention

jayakaya retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention schedules are as follows:

• Account data: Retained for the duration of the active member relationship and for a minimum of seven (7) years following account closure, in line with our AML and regulatory compliance obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction, consistent with Malaysian financial record-keeping requirements.
• KYC and identity documents: Retained for the period required under our licensing obligations and applicable anti-money laundering legislation.
• Support communications: Retained for up to three (3) years from the date of the last interaction to facilitate dispute resolution and quality improvement.
• Marketing data: Retained until you withdraw consent or request removal from our marketing lists.
• Technical/log data: Typically retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Once the applicable retention period has expired and there is no legal basis for continued processing, your data will be securely deleted or anonymised in a manner that prevents re-identification.

8 Security of Your Data

jayakaya implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3) encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents
• Multi-factor authentication (MFA) requirements for staff accessing member data systems
• Role-based access controls ensuring that only authorised personnel can access specific categories of data
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 security monitoring and automated anomaly detection across our infrastructure
• Strict vendor due diligence and data processing agreement requirements for all third-party service providers

Whilst we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jayakaya will notify affected members and, where required, the relevant regulatory authority, in accordance with applicable data breach notification obligations.

9 Your Rights Under PDPA 2010

As a data subject in Malaysia, you have rights in respect of your personal data under the Personal Data Protection Act 2010. jayakaya is committed to honouring these rights in a timely and transparent manner:

• Right of Access: You may request a copy of the personal data jayakaya holds about you, along with information about how it is being used.
• Right of Correction: If any personal data we hold is inaccurate, incomplete, or out of date, you have the right to request that it be corrected.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal will not affect any processing that occurred prior to the withdrawal.
• Right to Limit Processing: In certain circumstances, you may request that we restrict how we use your data while a correction or objection request is being reviewed.
• Right to Prevent Processing for Direct Marketing: You may opt out of receiving direct marketing communications from jayakaya at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.

To exercise any of the above rights, please contact jayakaya's data protection team by emailing support@jayakaya.lat. We will respond to all verified requests within thirty (30) calendar days. In certain circumstances — for example, where a request is complex or involves a large volume of data — we may extend this period by a further thirty (30) days, and we will notify you accordingly.

Please note that certain rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain under our AML or KYC obligations.

10 Children & Minors

jayakaya's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. Our registration process includes mandatory age verification steps to prevent underage access to real-money gaming features.

If we become aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our platform, please contact us immediately at support@jayakaya.lat so we can investigate and act promptly.

We strongly encourage parents and guardians to monitor the online activities of minors in their care and to make use of parental control software where appropriate.

11 International Transfers

jayakaya operates within an international online gaming licence framework and may utilise service providers or infrastructure located outside of Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to Malaysia's PDPA 2010, jayakaya will implement appropriate safeguards to ensure your data remains adequately protected. Such safeguards include contractual clauses that impose data protection obligations on the receiving party, consistent with applicable legal requirements.

By using jayakaya's services, you acknowledge that your personal data may be transferred to, stored in, or processed in countries outside Malaysia as described in this section. We will always take reasonable steps to ensure that any such transfers are carried out lawfully and securely.

12 Changes to This Policy

jayakaya reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will:

• Update the "Effective Date" at the top of this page
• Display a prominent notice on jayakaya.lat informing members of the update
• Where the changes are significant, send a direct notification to the email address associated with your account

Your continued use of jayakaya's services following notification of any changes constitutes your acceptance of the revised Policy. We encourage you to review this page periodically so that you remain informed about how we protect your personal data.

13 How to Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way jayakaya handles your personal data, please do not hesitate to reach out to us. Our dedicated data protection team is available to assist you:

• Email: support@jayakaya.lat
• Live Chat: Available 24 hours a day, 7 days a week, directly on jayakaya.lat — average response time under 3 minutes
• Response Time: Written requests via email will be acknowledged within 5 business days and fully resolved within 30 calendar days

We are committed to resolving all data-related enquiries fairly and efficiently. If after contacting us you remain dissatisfied with how your concern has been handled, you may also seek guidance from the relevant data protection authority in Malaysia.

For issues related to responsible gaming, self-exclusion tools, or concerns about problematic gambling behaviour, please visit our Responsible Gaming page for dedicated resources and support options.