Privacy Policy

1. Overview

kaya56 ("we", "us", "our") operates https://kaya56.cam as a premier online gaming platform serving players primarily in Indonesia. In providing this service, we necessarily collect and process certain personal data about you ("Player", "User", "you"). This Privacy Policy sets out a transparent account of how that data is handled, consistent with applicable Indonesian data-protection principles and internationally recognised best practice.

We do not sell your personal data. We do not use it for purposes incompatible with those stated here. We retain it only for as long as necessary and protect it with industry-standard technical and organisational safeguards. This Policy should be read alongside our Terms & Conditions, which form the broader contractual framework governing your use of kaya56.

2. Data We Collect

We collect personal data in several categories depending on your interaction with the Platform. Below is a structured overview:

The following data types may be present in our records:

3. How We Collect Data

kaya56 collects personal data through the following channels:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated Technologies: When you browse or use the Platform, we automatically collect Technical and Usage Data via cookies, server logs, web beacons, and similar tracking technologies. See Section 10 (Cookies & Tracking) for full details.
• Third-Party Service Providers: We may receive data from identity-verification partners (e.g., document-scanning services), fraud-detection providers, and payment processors when they return results of checks initiated by us. We also receive aggregated analytics data from platform performance tools.
• Publicly Available Sources: In limited circumstances related to fraud prevention or compliance, we may cross-reference data against publicly available registers, sanctions lists, or court records.

4. Purposes of Processing

kaya56 processes your personal data for the following defined purposes only. We do not use data for any purpose materially different from those listed here without providing prior notice and, where required, obtaining fresh consent.

5. Legal Basis for Processing

Under applicable data-protection principles, kaya56 must have a lawful basis for processing your personal data. Our processing is justified on the following grounds:

• Contractual Necessity: Most data processing is necessary to perform the contract between you and kaya56 (i.e., our Terms & Conditions). Without processing Identity, Contact, and Financial Data, we cannot open your account or process your wagers and withdrawals.
• Legal Obligation: We are required by applicable laws to verify your identity (KYC), prevent money laundering (AML), and retain transaction records for prescribed audit periods.
• Legitimate Interests: kaya56 has a legitimate interest in protecting the Platform from fraud, ensuring fair play, optimising user experience, and maintaining the security and integrity of our systems. Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and determined that processing is proportionate.
• Consent: For certain marketing activities and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Sharing & Third-Party Recipients

kaya56 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We do, however, share data with carefully selected service providers and partners strictly for the purposes described in this Policy:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, we share your Financial Data with our payment gateway partners and the relevant financial institutions. These processors are bound by strict data-protection and confidentiality agreements.
• Identity Verification Providers: To complete KYC checks, we share Identity and Verification Documents with specialised third-party identity-verification services. These providers process the data solely to return a verification result and do not retain it for their own purposes.
• Fraud Prevention & Security Services: We share Technical and Usage Data with fraud-detection platforms that help identify anomalous behaviour, multi-accounting, and other security threats.
• Game and Software Providers: Certain games on the Platform (such as live casino titles from Evolution Gaming, slots from Pragmatic Play, Microgaming, NetEnt, and others) are delivered via third-party software integrations. Limited Technical and Usage Data may be shared with these providers to enable game delivery and ensure fair-play auditing.
• Analytics & Performance Tools: We use web analytics services to understand how the Platform is used and to optimise performance. These tools receive anonymised or pseudonymised Technical and Usage Data.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement, regulators, courts, or other governmental bodies where required by applicable law, court order, or regulatory request, or where necessary to protect the rights, property, or safety of kaya56, our users, or others.

7. International Data Transfers

kaya56 primarily stores and processes data within secure data centres located in jurisdictions that provide adequate data-protection standards. However, certain third-party service providers (such as cloud infrastructure providers, content delivery networks, and payment processors) may store or process data in countries outside Indonesia. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by data-protection authorities;
• Adequacy decisions recognising the recipient country's data-protection framework as equivalent;
• Binding corporate rules or certification schemes where applicable.

In all cases, we require that the recipient complies with data-protection obligations equivalent to those set out in this Policy.

8. Data Retention Periods

kaya56 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, tax, accounting, or reporting requirements. Retention periods vary by data category:

• Identity & KYC Data: Retained for the duration of your account plus a minimum of 5 years after account closure to comply with anti-money laundering (AML) and financial-record retention obligations.
• Transaction & Financial Data: Retained for the duration of your account plus 7 years to meet tax and financial audit requirements.
• Communications Data: Support transcripts and correspondence are retained for up to 3 years for quality assurance and dispute resolution.
• Usage & Technical Data: Aggregated and anonymised usage data may be retained indefinitely for analytics. Identifiable session logs are typically retained for 12–24 months.
• Marketing Consent: If you withdraw consent for marketing, we will suppress your contact details and cease marketing within 7 days, though we retain the suppression record to ensure compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

9. Security Measures

kaya56 employs a range of technical and organisational safeguards designed to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS. Sensitive data at rest (such as KYC documents and financial records) is encrypted using industry-standard algorithms.
• Access Controls: Personal data is accessible only to authorised kaya56 personnel and service providers who require it to perform their duties. Access is granted on a need-to-know basis and is logged and audited regularly.
• Authentication & Account Security: We enforce strong password policies and offer two-factor authentication (2FA) to all users. Accounts are monitored for unusual login activity.
• Infrastructure Security: Our data centres employ physical security controls (restricted access, surveillance, environmental monitoring) and logical controls (firewalls, intrusion detection, regular vulnerability scanning).
• Incident Response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable breach-notification timelines.

While we implement robust security measures, no system is entirely immune to risk. You also have a responsibility to protect your account by keeping your password confidential, logging out after each session, and notifying us immediately if you suspect unauthorised access.

10. Cookies & Tracking Technologies

kaya56 uses cookies and similar technologies (web beacons, pixels, local storage) to enhance your experience, analyse Platform usage, and deliver personalised content. A cookie is a small text file placed on your device that allows us to recognise you on return visits.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function. These enable core features such as account login, session management, and secure transaction processing. You cannot opt out of essential cookies without losing access to the Platform.
• Performance & Analytics Cookies: Help us understand how visitors use the Platform by collecting aggregated, anonymised data on page views, session duration, and navigation paths. This allows us to identify and fix performance issues.
• Functional Cookies: Remember your preferences (language, currency display, game filters) to provide a more personalised experience.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies may track you across websites. You can opt out via your browser settings or our cookie-consent banner.

Managing Cookies: Most browsers allow you to refuse or delete cookies through their settings menu. Note that disabling certain cookies may impair Platform functionality. For more granular control, you may use browser extensions or visit third-party opt-out pages such as the Network Advertising Initiative opt-out tool.

11. Your Data Protection Rights

Under applicable data-protection principles, you have the following rights in relation to your personal data held by kaya56. You may exercise these rights by contacting our Data Protection Officer (see Section 15).

How to Exercise Your Rights: Submit a request by emailing our Data Protection Officer at [email protected] with the subject line "Data Subject Request". We will verify your identity and respond within 30 days. There is no fee for exercising your rights unless your request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or refuse the request.

12. Protection of Minors

kaya56 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform is designed exclusively for adults. During KYC verification, we rigorously confirm that all account holders meet the minimum age requirement.

If we become aware that we have inadvertently collected data from a person under 21, we will immediately suspend the account, securely delete the data, and return any deposited funds to the verified legal guardian or account holder. Parents and guardians are encouraged to monitor the online activities of minors under their care and to contact us immediately if they believe a minor has accessed the Platform.

13. Third-Party Links & Services

The kaya56 Platform may contain links to third-party websites or services (such as payment processors, social media platforms, or game providers). This Privacy Policy applies only to data collected by kaya56. We are not responsible for the privacy practices or content of third-party sites.

We encourage you to review the privacy policies of any third-party service you visit or use. kaya56 does not endorse or assume liability for third-party data handling.

14. Policy Amendments

kaya56 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or Platform features. When we make material changes that reduce your rights or significantly alter how we process your data, we will notify you by email and display a prominent notice on the Platform at least 14 days before the changes take effect.

Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the changes. We recommend reviewing this Policy periodically. The version date is displayed at the top of this document and in the "Last Updated" badge on the page hero.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO):

We will acknowledge receipt of your inquiry within 48 hours and provide a substantive response within 30 days. For urgent matters related to data breaches or unauthorised access, contact us immediately via the email above with "URGENT – DATA SECURITY" in the subject line.