Kiss918 Privacy Policy – Malaysian Player Data Protection

Player privacy is one of the matters taken most seriously by kiss918. We understand that when you register an account and deposit funds to play — whether it's baccarat at a live casino table, jackpot slots, or EPL and Malaysia Super League football betting — you are entrusting us with sensitive personal and financial information. We take that trust seriously.

This Privacy Policy applies to all players who access or use the kiss918 across any device — Android or iOS smartphone, tablet, laptop, or desktop computer. This covers all your interactions with the platform, including account registration, deposits via Touch 'n Go eWallet or DuitNow, gaming activity, Sports Betting, and any communications with our customer support team.

This policy has been drafted in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. We are committed to ensuring that all personal data processing is carried out lawfully, fairly, and transparently.

Kiss918 collects various categories of personal information depending on the nature of your interactions with our platform. Below is a detailed breakdown of the data we may collect:

We no collect credit or debit card information directly — all payments are processed through authorised third-party payment service providers such as the Touch 'n Go, GrabPay, and FPX gateways, which maintain their own security standards.

Kiss918 use personal data collected solely for legitimate and necessary purposes. The following are the specific purposes for which your data is used:

• Account Management: Registering, verifying, and maintaining your player account. Ensuring that only the rightful account owner can access and use it.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing fund withdrawals in Malaysian Ringgit (RM) securely and accurately.
• Service Delivery: Granting access to all games including slots, baccarat, Live Casino, Sports Betting covering the EPL, Malaysia Super League, badminton, and e-sports.
• Platform Security: Identify and prevent fraud, money laundering, multiple account registrations, and any activity that violates kiss918's Terms & Conditions.
• Customer Support: Handling complaints, enquiries, and support requests more efficiently when we have a record of your interaction history.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need help or support regarding their gambling habits.
• Marketing Communications: Sending relevant promotional information, bonuses, and special offers — but only to players who have opted in to receive such communications. You may unsubscribe at any time.
• Legal Compliance: Fulfil applicable legal obligations, including financial reporting requirements and cooperation with competent authorities when required under proper legal procedure.

Kiss918 will not use your data for any purpose beyond those listed above without first obtaining your explicit consent.

Kiss918 does not sell, rent, or disclose players' personal information to third parties for their own marketing purposes. However, in the course of operating the platform, we may share data with a limited set of third-party categories as follows:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions — including Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX-participating banks such as Maybank2u and CIMB Clicks. They receive only the data necessary to process the relevant transaction.
• Game Providers: Casino studios and software providers such as Evolution Gaming, Pragmatic Play Live, SA Gaming, and Microgaming require minimum technical data to be shared in order to grant access to their games. They are bound by strict confidentiality agreements with kiss918.
• Technical Infrastructure Providers: Server hosting companies and cloud service providers that store our platform data. All such providers are selected based on high security and data protection standards.
• Competent Authority: Where a valid legal obligation exists, kiss918 may be required to disclose information to the relevant authorities in Malaysia. This is done strictly in accordance with proper legal procedures and never on a voluntary basis.

Should kiss918 be involved in any future acquisition, merger, or sale of business assets, player data may be transferred as part of those assets. In such circumstances, players will be notified via a clear notice and given the option to withdraw their consent if they wish to do so.

Protecting player personal data is a top technical priority for kiss918. We implement multiple layers of security to ensure your data remains protected at all times:

• 256-bit SSL/TLS Encryption: All data communications between your device and kiss918's servers are encrypted using the latest SSL/TLS protocols. You can verify this by looking for the padlock icon in your browser's address bar.
• Data-at-Rest Encryption: Sensitive data such as passwords is not stored in plain text — it is encrypted using a strong hashing algorithm before being stored in our database.
• Two-Factor Authentication (2FA): Players who want an extra layer of security for their kiss918 account have the option to enable two-factor authentication.
• Real-Time Activity Monitoring: Our automated monitoring system operates 24/7 to detect any suspicious login activity, unauthorised access attempts, or unusual transaction patterns.
• Internal Access Controls: Access to player data among kiss918 staff is strictly limited based on job requirements. Not all staff can access all data — the need-to-know principle is fully enforced.
• Regular Security Audits: The kiss918 platform undergoes regular security assessments and penetration testing to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be completely impervious to every threat. In the event of a data breach affecting your personal information, kiss918 is committed to notifying you in a timely manner in accordance with applicable legal requirements.

Kiss918 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. As a general guide, our data retention policy is as follows:

• Active Account Data: Retained for the duration your account is active on kiss918 and for a defined period after account closure, for the purpose of resolving any pending disputes or meeting legal obligations.
• Financial Transaction Records: Records of deposits, withdrawals, and winnings in Malaysian Ringgit (MYR) are retained for a minimum of seven (7) years in accordance with Malaysian financial regulatory requirements.
• Support Communication Logs: Records of chat sessions and emails with the kiss918 support team are retained for three (3) years for reference and dispute resolution purposes.
• Technical Log Data: System access logs, IP addresses, and device information are retained for a maximum of twelve (12) months for security and fraud detection purposes.
• Game Records: Detailed game history is retained for three (3) years for the purposes of dispute resolution and responsible gaming programmes.

Once the retention period has ended and there is no longer any legal requirement to keep the data, kiss918 will securely delete or anonymise your personal data using industry-recognised methods.

As a player kiss918 and data subjects under Malaysia's Personal Data Protection Act 2010, you hold the following rights with regard to your personal information:

To exercise any of the above rights, please submit a written request to support@kiss918.life with the subject line "PRIVACY RIGHTS REQUEST". Please include your account number and the details of your request. We will acknowledge receipt within 24 hours and process your request within a reasonable timeframe.

Platform kiss918 uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. Below are the categories of cookies we use:

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the kiss918 platform. For more information on how to manage cookies on your device, refer to your web browser's documentation.

Platform kiss918 is strictly limited to individuals aged 18 years and above. We do not knowingly collect, process, or store the personal data of children under the age of 18.

Should we discover that an individual under the age of 18 has successfully registered an account on kiss918 — whether through the provision of false information or by other means — that account will be terminated immediately and all associated personal data will be deleted from our systems within a reasonable timeframe.

If you are a parent or guardian concerned that your child may have accessed the kiss918 platform, please contact us immediately at support@kiss918.life. We will investigate and take appropriate action without delay.

Platform kiss918 uses a number of third-party services in its operations — most notably payment gateways such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX via Maybank2u and CIMB Clicks, as well as game studios such as Evolution Gaming and Pragmatic Play Live.

When you interact with these third-party services — for example, when you confirm a payment through the Touch 'n Go or GrabPay app — you will be subject to the respective privacy policies of those providers, not kiss918's. We recommend reading the privacy policy of whichever payment provider you use.

Kiss918 is not responsible for the privacy practices or content of third-party platforms. That said, we carefully select our third-party partners and only work with providers whose data protection standards we consider adequate and trustworthy.

Kiss918 reserves the right to amend, update, or modify any part of this Privacy Policy at any time to reflect changes in business practices, legal requirements, or technological improvements. All changes take effect upon publication on this page.

For significant and material changes — those that meaningfully alter how we handle your personal data — we will endeavour to provide clearer notice, such as through in-platform notifications or an email to your registered address. Nevertheless, it remains your responsibility to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kiss918 handle your personal data, please reach out to us through the following channels:

• Privacy Email: support@kiss918.life (use the subject line "DATA PRIVACY ENQUIRY")
• Response Time: We acknowledge receipt within 24 hours and provide a full response within 14 business days for privacy-related requests.
• Language: Enquiries may be submitted in Malay or English.
• Support Operating Hours: 24 hours a day, 7 days a week, including Malaysian public holidays.

We take all privacy-related feedback seriously and are committed to handling every inquiry with professionalism and care. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia in accordance with the established procedures.