Introduction — gaya69's Privacy Commitment
When you register as a Gaya69 member, you entrust us with certain important personal information. We take that trust seriously. Gaya69 operates under a strict data protection framework and complies with the Malaysian Personal Data Protection Act (PDPA) and international online gaming industry standards.
This Privacy Policy applies to all Gaya69 services including the website gaya69.pro, the Android and iOS mobile app, and all communication channels we operate. By registering or using our platform, you agree to the practices described in this document.
We want you to know upfront: Gaya69 does not sell, rent, or transfer your personal data to third parties for marketing purposes. Your information is used solely for platform operations, legal compliance, and improving your user experience.
1 Information We Collect
Gaya69 collects various types of information depending on how you interact with our platform. The table below describes the main data categories we collect:
| Data Categories | Example Information | Requirements |
|---|---|---|
| Personal Identity | Full name, date of birth, identity card or passport number | Mandatory (KYC) |
| Contact Information | Mobile number, email address | Mandatory |
| Financial Information | Bank account number, account holder name, e-wallet | Mandatory (Payment) |
| Usage Data | Game history, total deposits, wagering records | Automatic |
| Technical Data | IP address, device type, operating system, web browser | Automatic |
| Communication Data | Live chat records, support emails, feedback | Where applicable |
We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information, political views, or religious beliefs unless required by law.
2 How We Collect Data
Your personal data is collected through several different channels. Understanding these channels helps you control the information you share with us:
- Account Registration: Information you enter directly when creating a new account — name, phone number, date of birth, and so on.
- KYC Process: Identity verification documents such as copies of your national ID, passport, or bank statement uploaded through our secure portal.
- Financial Transactions: Your bank account or e-wallet details entered when making a deposit or submitting a withdrawal request.
- Platform Usage: Data is collected automatically when you use our website or app — including pages visited, games played, and session duration.
- Cookies & Similar Technologies: Cookie files stored on your device help us recognise you when you return to the platform and improve your experience.
- Support Communications: Information you provide when contacting our support team via live chat or email.
- Authorised Third Parties: Identity verification providers and licensing compliance bodies that share data required for verification purposes only.
3 How We Use Your Data
Gaya69 uses your personal data only for the following legitimate and transparent purposes:
- Create and manage your member account and ensure its security.
- Process deposits, verify transactions and fulfil withdrawal requests promptly.
- Conduct KYC checks and age verification as required by licensing authorities.
- Detect and prevent fraud, money laundering and platform abuse.
- Deliver effective customer support and resolve any complaints or disputes.
- Send important notifications relating to your account, transactions and security.
- Send promotions and special offers — only if you have consented to receive marketing communications.
- Improve products, features and user experience based on aggregated usage patterns (not individual data).
- Comply with legal obligations, regulations and directives from relevant authorities.
You may withdraw your consent to receive marketing communications at any time by contacting our support team or using the unsubscribe link in promotional emails. Withdrawing marketing consent does not affect data processing required for the operation of your account.
4 Data Sharing with Third Parties
We understand how important your trust is. Gaya69 does not sell, rent or transfer your personal data to any third party for commercial or marketing purposes. However, in certain situations, limited and controlled data sharing is necessary to allow the platform to function properly:
- Payment Providers: Transaction information is shared with FPX, DuitNow, Touch 'n Go, GrabPay and card processing providers to facilitate deposits and withdrawals. These providers maintain their own strict data protection policies.
- KYC Verification Services: Identity documents are shared with certified third-party identity verification service providers for KYC verification purposes only.
- Licensing Compliance Body: Gaya69 may be required to report certain data to the relevant licensing authority or regulatory body as required by law.
- Technical Service Providers: Cloud hosting providers, analytics services and platform infrastructure that help us operate the platform securely and efficiently.
- Legal Authority: When required by a court, court order, or lawful request from a law enforcement agency.
All third parties that receive gaya69 member data are required to sign a data protection agreement and may only use that information for permitted purposes.
5 Data Security — Our Layers of Protection
Gaya69 continuously invests in the most advanced cybersecurity infrastructure to keep your data safe at all times. The following are the layers of protection we apply:
While we take all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role — ensure your password is strong, unique and not shared with anyone. If you suspect your account has been compromised, contact our support immediately via live chat.
6 Data Storage & Deletion
Your personal data is retained for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. For closed accounts, we retain certain records for seven (7) years after account closure, as required by Malaysia's financial and anti-money laundering laws.
Once the mandatory retention period expires, your data will be securely deleted or anonymised using methods that ensure the information cannot be recovered. You may request deletion of your personal data that is not subject to legal retention obligations by contacting our team.
- Login and activity data: 12 months after the last session.
- Financial transaction records: 7 years (legal requirement).
- KYC documents: 5 years after account closure.
- Support communication records: 3 years.
7 Your Rights as a Member
Under the Malaysian Personal Data Protection Act (PDPA) and Gaya69's internal policies, you have the following rights regarding your personal data:
To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will process your request within 14 working days. In complex cases, this period may be extended by up to 30 days, with prior notification to you.
8 Cookies & Tracking Technologies
Gaya69 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
- Essential Cookies: Required for core platform functions such as login, game sessions, and security. Cannot be disabled.
- Performance Cookies: Help us understand how visitors interact with the platform so we can improve it. Data is collected in aggregate and does not identify individuals.
- Functional Cookies: Save your preferences such as language, display settings and login details for your convenience.
- Analytics Cookies: We use internal analytics tools to understand usage patterns and identify technical issues.
You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. We do not use third-party cookies for advertising or cross-site tracking purposes.
9 Child Data Protection
The gaya69 Platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18. If you believe we have collected information from a minor, please contact us immediately and we will take the necessary steps to delete that information.
Gaya69 employs a multi-layered age verification system including date-of-birth checks during registration and identity document verification through the KYC process. Any account suspected of belonging to a minor will be suspended immediately pending completion of verification.
10 Privacy Policy Amendments
Gaya69 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, updated legal requirements, or new platform features. When we make significant amendments, we will notify you via:
- In-platform notification the next time you log in.
- Email to the address registered on your account.
- Update the "Last Updated" date at the top of this page.
Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you disagree with any amendment, you have the right to close your account by contacting our support team.
11 Contact Our Privacy Team
If you have any questions, concerns, or wish to exercise your data rights, our team is ready to assist through the following channels:
- Live Chat 24/7: The fastest way — directly within the Gaya69 platform or app.
- Privacy Email: [email protected] — response within one business day.
- FAQ Page: Visit FAQ page us for quick answers to common privacy questions.
For issues related to self-exclusion or responsible gaming involving your data, please refer to the Responsible Gaming us.
Why Your Privacy Is Safe at gaya69
Banking-Grade Multi-Layer Encryption
All data transmitted between your device and gaya69 servers is protected by 256-bit SSL/TLS encryption — the same security standard used by the world's leading banks.
Secure & Efficient KYC
Your identity documents are processed through a fully encrypted KYC portal. Our verification team completes checks within 24 hours and documents are not retained any longer than necessary.
No Data Sales to Advertisers
Gaya69 has never and will never sell member personal data to advertisers or third-party marketing companies. Your data belongs to you — it is not our business commodity.
Two-Factor Authentication (2FA)
Every login is secured by an OTP sent to your registered phone number. Even if your password is compromised, no one can access your account without your phone.
Real-Time Fraud Monitoring
Our AI system monitors all account activity around the clock to detect any suspicious access or unusual transactions. You will be notified immediately if anything out of the ordinary is detected.
Malaysia PDPA Compliance
Gaya69 operates in accordance with the Malaysian Personal Data Protection Act (PDPA). Our compliance team ensures all data handling practices meet current legal requirements at all times.