Privacy Policy kayu33 – Personal Data Protection for Malaysian Members

Kayu33 ("Platform", "We") takes member ("You") privacy very seriously. This Privacy Policy explains transparently and in detail how kayu33 collects, uses, stores, discloses, and protects your personal data when you use the kayu33 platform, accessible at kayu33.best.

By registering an account with kayu33, accessing our platform, or using any of our services — including slots, Live Casino, Sports Betting such as Malaysia Super League and EPL football, BWF badminton betting, MLBB and CS2 e-sports betting, and poker — you agree to the data collection and usage practices described in this Privacy Policy.

If you disagree with any part of this Privacy Policy, please stop using the kayu33 platform and contact our support team to close your account and withdraw any remaining funds where applicable.

Kayu33 collects your personal data through several channels and in various circumstances. Generally, data is collected when you register an account, make financial transactions, use the platform to play or bet, contact our support team, or simply browse the kayu33 platform.

Data you provide directly:

• Registration details: full name, date of birth, Malaysian identity card number (MyKad), phone number, and email address
• Financial information: e-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) or bank account details for processing deposits and withdrawals via DuitNow, FPX Maybank2u, or CIMB Clicks
• Identity verification documents: a copy of your MyKad, bank statement, or other documents required during the KYC (Know Your Customer) process
• Communications: records of your interactions with the kayu33 support team via live chat, WhatsApp, or email

Automatically collected data:

• Technical data: IP address, web browser type, device operating system, screen resolution, and device language
• Activity data: pages visited, session duration, actions taken within the platform, and general usage patterns
• Cookie data: information stored via cookies and session tracking technologies to enhance the user experience

Kayu33 uses the personal data collected solely for legitimate and transparent purposes. Below is the full list of purposes for which your data is used on the kayu33 platform:

• Account management: Creating, verifying, and managing your kayu33 member account
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and processing withdrawals to verified accounts
• Identity verification (KYC): Verifying your age and identity to ensure compliance with legal requirements, including fraud prevention and anti-money laundering obligations
• Service delivery: Gives you access to all kayu33 platform features, including slots, Live Casino, Sports Betting, badminton, e-sports, and poker
• Customer support: Responding to enquiries, resolving technical issues, and providing the assistance you need via live chat, WhatsApp, or email
• Platform security: Detecting and preventing fraud, account abuse, money laundering, and other security threats
• Responsible gambling: Monitoring usage patterns to identify signs of problem gambling and provide appropriate support
• Marketing communications: Sending information about promotions, the latest offers, and platform updates — subject to your communication preferences
• Platform improvements: Analysing aggregated and anonymised usage data to improve kayu33's features, performance, and user experience
• Legal compliance: Complying with applicable legal requirements, including reporting to relevant authorities when legally obligated

Kayu33 does not sell or rent members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, there are certain situations where kayu33 needs to share your data with specific parties:

• Payment providers: Information required to process deposits and withdrawals will be shared with your chosen payment service providers, such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the relevant FPX banks. This sharing is limited strictly to what is necessary to complete the transaction.
• Game providers: Required game session data is shared with licensed game providers such as Pragmatic Play, PG Soft, and others to enable proper game functionality. These providers do not receive your full personally identifiable information.
• Legal authorities: kayu33 will disclose data to Malaysian authorities or law enforcement agencies when required to do so by a court order, court writ, or other legal obligation.
• Internal technical services: Technical service providers working with kayu33 may have limited access to certain data, strictly within the scope required to deliver their services, and are subject to strict confidentiality agreements.

Kayu33 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, disclosure, alteration, or destruction. The key measures we have in place are as follows:

• 256-bit SSL encryption: All communications between your device and kayu33's servers are encrypted using the latest TLS/SSL protocols, ensuring that data in transit cannot be intercepted or read by unauthorised parties
• Two-factor authentication (2FA): kayu33 supports two-factor authentication as an added layer of security for members who wish to use it
• 24/7 monitoring: The kayu33 security team monitors the platform around the clock to detect suspicious activity, unauthorised login attempts, and other security threats
• Internal access controls: Access to members' personal data within the kayu33 organisation is restricted to staff who require it to perform their duties, and all access is logged and audited
• Regular security testing: kayu33 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited
• Data-at-rest encryption: Sensitive data stored in kayu33's databases is also encrypted to provide an additional layer of protection

While kayu33 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to use a strong, unique password for your kayu33 account and never share it with anyone.

Kayu33 retains members' personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law, whichever is longer.

General data retention guidelines at kayu33:

• Active account data: Retained for the duration your account is active and for 7 years after account closure — this is an industry-standard legal compliance requirement
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial regulations and anti-money laundering requirements in Malaysia
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes
• Technical data and session logs: Retained for 90 days for security and fraud detection purposes
• Marketing records: Retained until you withdraw your consent to marketing communications

When data is no longer needed and there is no legal obligation to retain it, kayu33 will delete or anonymise that data in a secure and irreversible manner.

The kayu33 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse general platform usage. The cookies we use fall into several categories:

• Essential cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information about how you use kayu33 — pages visited, time spent, and errors encountered. This data is used to improve the platform and is stored in aggregate form without individual identification.
• Functional cookies: Stores your preferences — such as language, display settings, and game preferences — so you do not have to reconfigure them each time you log in.
• Security cookies: Helps detect and prevent fraud, monitor suspicious sessions, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the kayu33 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

As a kayu33 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

• Right to access: You have the right to request a copy of the personal data kayu33 holds about you. Requests will be processed within 21 business days.
• Right to rectification: If any data we hold about you is inaccurate or out of date, you have the right to request a correction.
• Right to withdraw consent: For data processed on the basis of your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to request erasure: Under certain circumstances, you may request deletion of your personal data, subject to legal obligations that may require us to retain it for a specified period.
• Right to object: You have the right to object to the processing of your data for specific purposes, including direct marketing.
• Right to data portability: You have the right to receive data you have provided to us in a machine-readable format for transfer to another service provider.

To submit any request relating to your privacy rights, please contact the kayu33 support team by email at support@kayu33.best clearly stating the nature of your request. kayu33 will respond within 21 business days and may require identity verification before processing your request.

The kayu33 platform is a service restricted to individuals aged 18 and above. kayu33 does not knowingly collect or process personal data from individuals under the age of 18.

Parents and guardians are encouraged to monitor their children's internet use and apply appropriate parental controls to restrict access to online gambling platforms such as kayu33. Child protection is a shared responsibility that kayu33 takes very seriously.

Kayu33 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or new platform features. The "Updated" date at the top of this document will be revised to reflect the latest version.

For amendments considered significant – meaning changes that materially affect how we use your data – kayu33 will endeavour to provide advance notice through:

• An in-platform notification on your next login to kayu33
• Email notification to the registered address, at least 7 days before the amendments take effect

Your continued use of the kayu33 platform after any revised Privacy Policy is published constitutes your acceptance of the updated privacy terms. If you do not agree with the changes made, you have the right to close your account and request deletion of your data, subject to applicable legal retention requirements.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kayu33 handles your personal data, please reach out to us through the following channels:

• Email: support@kayu33.best – please include "Privacy Inquiry" in the subject line of your email
• Live Chat: Available 24/7 within the kayu33 platform – look for the support icon at the bottom right of your screen
• WhatsApp: Contact the kayu33 support team via WhatsApp, available 24 hours a day

Kayu33 values the trust you place in us when sharing your personal data. We are committed to remaining accountable, transparent, and respectful of the privacy of every Malaysian member using the kayu33 platform.