This Privacy Policy ("Policy") describes how Kyoto98 ("Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "User "Player") who access or use the Kyoto98 website athttps://kyoto98.cam and all associated services, features, and products (collectively, the "Services").
Kyoto98 is committed to protecting the privacy and personal data of all users, with particular attention to the needs of Malaysian players. We recognise that trust is foundational to the relationship between a gaming platform and its members, and we take our data stewardship responsibilities seriously.
By accessing the Kyoto98 platform, registering an account, or otherwise using the Services, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the platform immediately.
For the purposes of this Privacy Policy, the following definitions apply:
Kyoto98 collects personal data through direct submission by the user, through automated technical means, and from third-party service providers where applicable. The categories of data we collect are described below.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Account registration & KYC |
| Contact Data | Email address, mobile number, residential address | Account registration |
| Identity Documents | Malaysian MyKad, passport, utility bills, bank statements | KYC verification |
| Financial Data | Bank account details, e-wallet identifiers (GrabPay, TNG), transaction history | Deposit & withdrawal processing |
| Account Credentials | Username, encrypted password | Account registration |
| Communication Data | Live chat transcripts, email correspondence, support tickets | Customer support interactions |
| Data Category | Examples |
|---|---|
| Technical Data | IP address, browser type, operating system, device type and identifiers |
| Usage Data | Pages visited, session duration, click patterns, game activity logs |
| Location Data | Approximate geographic location derived from IP address |
| Cookie Data | Session tokens, preference settings, analytics identifiers |
Kyoto98 processes your personal data for the following purposes. We process only the minimum data necessary for each stated purpose and do not repurpose data for uses that are incompatible with the original collection purpose.
Kyoto98 processes personal data one or more of the following legal bases, depending on the nature of the processing activity:
Kyoto98 does not sell your personal data to any third party under any circumstances. We share personal data only in the limited circumstances described below:
Kyoto98 engages carefully veted third-party service providers to assist with specific operational functions. These providers act as data processors and are contractually prohibited from using your data for any purpose other than the specific service they provide to Kyoto98. Categories of service providers include:
Kyoto98 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent authorities where we are legally required or compelled to do so under our gaming licence obligations or applicable law. Such disclosures may include suspected money laundering, terrorist financing, or fraud investigations.
In the event of a merger, acquisition, restructuring, or sale of Kyoto98 or its assets, personal data held by the platform may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected users will be notified in advance where reasonably practicable.
Kyoto98 processes payment data in connection with deposit and withdrawal transactions conducted through supported Malaysian payment methods, including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency channels (BTC, USDT).
Full payment card details (where applicable) are processed exclusively by our PCI-DSS compliant payment gateway partners and are never stored on Kyoto98's own servers. Kyoto98 retains only the minimum transaction metadata required for account record-keeping, dispute resolution, and regulatory compliance — such as transaction reference numbers, amounts, timestamps, and payment method type.
E-wallet identifiers (such as your GrabPay account identifier or Touch 'n Go registered number) are stored in encrypted form and are used solely for withdrawal processing and anti-fraud verification purposes.
Kyoto98 uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Required for platform operation, including session authentication, security tokens, and load balancing. Cannot be disabled. | Session / up to 24 hours | |
| Stores user preferences such as language settings, display preferences, and remembered login state. | Up to 30 days | |
| Collects anonymised usage statistics to help us understand how players use the platform and identify areas for improvement. | Up to 12 months | |
| Supports fraud detection and abuse prevention systems, including login anomaly detection and device fingerprinting. | Up to 90 days |
You may control non-essential cookie categories through your browser settings. Please note that disabling certain functional cookies may affect platform features such as saved preferences. Essential and security cookies cannot be disabled as they are required for safe platform operation.
Kyoto98 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data erasure procedures.
Kyoto98 respects your rights in relation to your personal data. Subject to applicable legal limitations, you may exercise any of the following rights by contacting our support team:
Right of Access
Request a copy of the personal data Kyoto98 holds about you, along with information about how it is being used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held your account profile.
Right to Erasure
Request deletion of your personal data where it is no longer required for the purposes it was collected, subject to legal retention obligations.
Right to Restriction
Request that we limit processing of your data in certain circumstances, such as while data accuracy dispute is being resolved.
Right to Portability
Request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
Object to processing of your personal data where we rely on legitimate interests, including opting out of direct marketing communications.
To exercise any of the above rights, please contact our support team via live chat or email. We will respond to all verified requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, with notice provided to you.
Please note that certain rights may be subject to limitations where data processing is required for compliance with our legal obligations, such as anti-money laundering retention requirements under our gaming licence.
Kyoto98 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
In the event of a personal data breach that poses a risk to your rights and freedoms, Kyoto98 will notify affected players without undue delay, and will report the breach to the relevant regulatory authority within the timeframe required by our licensing obligations.
The Kyoto98 platform is strictly intended for individuals aged21 years and above. Kyoto98 does not knowingly collect, process, or retain personal data belonging to persons under the age of 21.
Where Kyoto98 becomes aware that personal data has been submitted by or collected from a person under the age of 21, we will take immediate steps to delete that data and deactivate the associated account. Any funds deposited by an underage user will be returned to the original payment source after appropriate verification.
Parents and guardians of minor children are encouraged to use parental control and internet filtering software to prevent minors from accessing online gambling websites. If you believe a minor has accessed the Kyoto98 platform through your account or device, please notify us immediately via live chat.
The Kyoto98 platform may reference or integrate with third-party services — such as payment gateways (GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX) — for the purpose of processing transactions. These third-party services operate under their own independent privacy policies and data practices.
Kyoto98 is not responsible for the privacy practices, data handling, or content of any third-party service. We recommend that you review the privacy policies of any third-party payment provider or service you interact with when using the Kyoto98 platform. Our contractual arrangements with payment processors include data protection clauses, but their collection and use of your data is ultimately governed by their own terms.
Kyoto98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The effective date of the current version is displayed at the top of this page and is updated with each material revision.
Where changes are material — for example, where we introduce a new category of data collection or change how we share data with third parties — we will provide advance notice to registered players via email notification and/or a prominent notice on the Kyoto98 homepage. For non-material changes, the updated Policy will take effect upon publication.
Your continued use of the Kyoto98 platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you disagree with any amendment, you have the right to close your account and withdraw balance in accordance with our Terms and Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Kyoto98, please contact us through the following channels:
For formal data access requests or erasure requests, please provide your registered email address and a brief description of your request. We may be required to verify your identity before processing the request to protect against unauthorised access to account data.
We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests within 30 calendar days of receipt.
Six concrete commitments we make to every Malaysian player on this platform — not just policy language, but operational standards we hold ourselves to.
Zero Data Selling
Your personal data is never sold to any third party — not to advertisers, not to data brokers, not under any commercial arrangement. Full stop.
AES-256 Encryption
Sensitive data at rest — including identity documents and financial identifiers — is encrypted using AES-256, the same standard used by major global financial institutions.
Your Rights, Honoured
Access, rectify, port, restrict, or erase your data — all rights are available to you and will be actioned within 30 days of a verified request via live chat or email.
Minimal Data Principle
We collect only the data we genuinely need. Every data field collected has a documented operational or legal purpose — we don't collect data speculatively.
Defined Retention Limits
Data is deleted or anonymised at the end of its defined retention period. We don't hold personal data indefinitely — structured deletion schedules are enforced.
Breach Notification
In the event of a data breach affecting your personal information, Kyoto98 will notify you without undue delay and outline the steps we are taking to protect your data.
Our support team is available 24/7 and can handle data access requests, privacy concerns, and account queries. Ready to explore the platform? Head back to the homepage or check our FAQ.
Back to Homepage Visit FAQPlay Responsibly