Privacy Policy kiss918 — Our Commitment to Protecting Your Personal Data

1Personal Data We Collect

To provide a safe and quality service, kiss918 collects several categories of information from members. We only collect data that is strictly necessary for clearly defined and legitimate purposes.

A. Information You Provide Directly:

• Full name as shown on your MyKad or passport.
• Active mobile number for OTP verification.
• Date of birth for age verification (18 years and above).
• Bank account or digital wallet details for processing deposits and withdrawals.
• A copy of your MyKad or passport as part of the identity verification (KYC) process.
• Account password (stored in hashed form — we do not store passwords in plain text).

B. Information Collected Automatically:

• IP address and approximate location information derived from IP.
• Device type, operating system, and web browser version used.
• Gaming activity history and financial transaction logs.
• Session start time and duration.
• Website cookie data and tracking technology.

2How We Use Your Personal Data

The personal data we collect is used solely for lawful and transparent purposes. Below is a summary table of data usage purposes:

We do not use your personal data to make automated decisions that significantly impact you without human intervention, except in cases of automated fraud detection that require immediate action to protect the platform and other members.

3Data Sharing with Third Parties

Kiss918 is committed to not selling or disclosing your personal data to third parties without legitimate grounds. However, there are specific circumstances where data sharing is necessary.

Parties that may receive your personal data under certain circumstances:

• Technical service providers: Companies that help us operate the platform — including cloud service providers, payment systems, and customer support platforms — are all bound by strict confidentiality agreements.
• Statutory authorities: In cases where disclosure is required by law, court order, or a legitimate law enforcement agency investigation.
• Industry regulatory body: For licence compliance and audit purposes as required by international gaming regulatory bodies.
• Fraud detection system: Third-party fraud detection and anti-money laundering platforms that help safeguard the security of the platform and all members.

4Data Security Measures

We continuously invest in the latest security infrastructure to ensure your personal data is protected at all times. Below are the security layers we employ.

• Encryption of data in transit: SSL/TLS 256-bit encryption protects all communications between your device and our servers.
• Encryption of data at rest: Sensitive data is stored in encrypted form using the AES-256 algorithm.
• Role-based access control: Our RBAC (Role-Based Access Control) system ensures each staff member can only access the data required for their specific role.
• Two-factor authentication (2FA): Available to all member accounts and mandatory for all internal administrative access.
• 24/7 Monitoring: Our automated monitoring system detects and alerts the security team whenever suspicious activity is identified.
• Regular penetration testing: Security testing (penetration testing) is carried out regularly by independent security experts.

5Cookies and Tracking Technologies

Kiss918 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and ensure the security of your login sessions.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helps us understand how members use the platform so we can continuously improve it. This data is collected in aggregate and does not identify individuals.
• Functional Cookies: Saves your preferences such as language and display settings so you do not have to re-enter them every time you log in.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality and security of the platform.

6Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. kiss918 respects and facilitates the exercise of these rights.

7Data Retention Period

Kiss918 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data: Retained for as long as your account is active and up to 7 years after account closure, to meet AML and audit requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
• KYC Documents: Retained for the lifetime of the account and up to 5 years after account closure.
• Customer support communication logs: Retained for 2 years from the date of last interaction.
• Anonymous analytics data: May be retained for a longer period as it contains no personally identifiable information.

When data is no longer needed and there is no legal obligation to retain it, we will delete or destroy it in a secure manner.

8Amendments to This Privacy Policy

Kiss918 reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, the technologies we use, or applicable legal requirements.

• Significant amendments will be communicated to members via in-account notifications or SMS to the registered phone number at least 7 days before taking effect.
• Minor or editorial amendments may take effect immediately upon publication on the official kiss918 website.
• It is your responsibility to review this Privacy Policy periodically.
• Continued use of the kiss918 platform after any amendments is considered acceptance of the revised terms.