Live / Casino
At go2kaya, your account data — from login credentials to transaction records tied to Touch 'n Go eWallet, DuitNow, and FPX — is handled with clear, documented practices you can review at any time. This policy sets out exactly what we collect, why we collect it, and what choices you have over your own information.
This policy applies to personal information collected when you register an account, log in, navigate the lobby, or complete a transaction through any of our supported payment channels — Touch 'n Go eWallet, DuitNow, and FPX. The information we collect falls into three broad categories: identity data you supply during registration (your name, email address, contact number), transaction data generated when you move funds through your account wallet, and device or session data gathered automatically to keep your account secure and your session consistent across mobile and desktop. We do not sell your personal data to third parties. Sharing happens only where it is necessary to process a payment through a supported local rail, to verify your account under applicable rules, or where we are required to comply with a lawful request. Any third-party service that receives your data under these circumstances is bound by its own applicable obligations, which we document in the scope section below. Access to your data within our team is limited to personnel whose role requires it. Your data is retained for as long as your account remains active and for a further period as required by applicable law in supported regions. Availability of this service depends on local law and is accessible only where local law permits.
Transaction data from Touch 'n Go eWallet deposits and withdrawals is processed through the payment rail and recorded in your account wallet history. This record is visible to you in your account dashboard after login.
DuitNow transfers generate a transaction reference that appears in your wallet history. We retain this reference to support dispute resolution and account reconciliation as required.
FPX online banking transactions are processed through the FPX network. We record the transaction status and reference number; your bank account details are not stored on our platform.
Where Boost is used as a payment method, the same data-handling principles apply — transaction reference and status only, with full details remaining with the Boost platform.
Not every service you touch through your go2kaya session is covered by this policy. Understanding the boundary helps you know where to direct a question about your data.
Covered. Registration data, login history, session tokens, and device recognition signals are all governed by this policy. Review them via the account security section after login.
Covered. Funds moved through your account wallet — whether you are funding a session or reviewing your balance — fall within this policy's scope, including the payment rail record.
Partially covered. Game session metadata (what you played, session duration) is included. Game content itself — titles from Microgaming, JDB, PlayStar, Spadegaming — is delivered by those studios and governed by their own practices for game-side data.
Not covered. Once a transaction moves to Touch 'n Go eWallet, DuitNow, FPX, or Boost, the data held by that platform is governed by its own privacy terms. We record only the reference and status on our side.
Your account at go2kaya is yours to manage. Several practical actions are available to you at any point. You can review the personal information held against your account by logging in and checking the account profile section — name, contact details, and linked payment methods are all visible there. If something is wrong, the same section lets you submit a correction request; our support team reviews it and confirms the update by email. Beyond corrections, you can raise a question about how a specific piece of data is used — send it to our support channel and include your registered email so we can match the enquiry to your account record. Data that you believe is no longer necessary can be flagged for review through the same channel; we will assess the request against our retention obligations and reply with the outcome. All requests are acknowledged, and where local law in supported regions grants a specific right — access, correction, or deletion — we process those within the timeframe that law requires.
Log in and open the account profile page. Your registered details and linked payment methods are listed there. Transaction history is in the wallet section.
Submit a correction through the account profile page or contact support with your registered email. Updates are confirmed to you once processed.
Email our support team with your registered account email in the subject line. Questions about specific data points — why it was collected, who can see it — are answered in writing.
If you believe we hold data that is no longer necessary, flag it through support. We review against applicable retention obligations and reply with what can and cannot be removed.
Questions about your data, a correction request, or a specific privacy concern can all be directed to the channels below. Include your registered account email in every message so we can locate your record quickly.
Send your privacy question or data request to our support email address. Responses cover your specific account record, not generic policy text.
Log in and use the in-account help section to raise a data query. The current state of your account details and payment history is shown there immediately after login.
Live chat is available for account-related questions including data and privacy matters. Provide your registered email at the start of the conversation so the agent can pull up your record.
The practical controls behind this policy are what make it real rather than just text on a page. Here is how each area works in the account you hold with us.
We use session cookies to keep your login active across the mobile browser and desktop, so moving between a lobby session on your phone and a review on desktop does not require a fresh login each time. You can manage cookie preferences through your browser settings.
Access to your account is protected by the credentials you set at registration. We flag unusual login patterns for review. If your account shows a sign-in from an unrecognised device, check the security section in your account dashboard and contact support if needed.
We keep your account data for as long as your account is active. Where local law in supported regions requires a minimum retention period — for transaction records, for example — we hold data for that period and no longer. After that window, data is deleted or anonymised.
When this policy changes, the updated version is posted at this URL. If a change materially affects how your data is used, we notify you via the email address on your account before the change takes effect. The current version is always the one shown here.
These are the questions we hear most often about data and privacy. If yours is not here, send it through the support channels listed above.
At registration we collect your name, email address, and contact number. Once you fund your account using Touch 'n Go eWallet, DuitNow, or FPX, a transaction reference and status are also recorded in your wallet history. No payment credential details are stored on our platform.
Yes. Log in and check your account profile page — your registered details are listed there. Wallet history, including transaction references for DuitNow and FPX, is in the wallet section. If you want a full summary, contact support with your registered email and request a data access review.
Sharing happens only when necessary: to process a transaction through Touch 'n Go eWallet, DuitNow, FPX, or Boost, to verify your account as required, or to comply with a lawful request. We do not sell your data. Each third party that receives data for payment processing is subject to its own applicable obligations.
Log in and use the account profile section to update details directly, or contact support with your registered email and describe the correction needed. Our team reviews it and confirms the change to you by email. Corrections to payment method records may require an additional verification step.
Data is kept while your account is active. Transaction records may be held for a further period where local law in supported regions requires it — typically to support dispute resolution or regulatory compliance. Once the required window passes, data is deleted or anonymised. The current policy reflects the retention periods we apply.
Check the security section in your account dashboard after login — it shows recent sign-in activity. If something looks wrong, contact our support team immediately via live chat or email with your registered account email. We investigate flagged access events and advise on next steps from there.