Privacy Policy

1. Introduction

kiss918 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all registered players and website visitors. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by kiss918 in connection with the operation of the kiss918 online gaming platform accessible at kiss918.lat.

This policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By creating an account or continuing to use the kiss918 platform following any update to this policy, you confirm your acceptance of the data practices described herein.

kiss918 acts as the data controller in respect of personal data processed for the purposes described in this policy. We take our obligations under applicable data protection legislation seriously and maintain internal procedures designed to ensure that personal data is handled responsibly, securely, and in accordance with the rights of data subjects.

2. Data We Collect

kiss918 collects personal data from you in the following categories, depending on how you interact with the platform:

We do not collect sensitive personal data (such as health information, racial or ethnic origin, or political opinions) unless this is directly relevant to a responsible gaming or regulatory obligation and you have provided explicit consent.

3. How We Use Your Data

kiss918 uses the personal data we collect for the following purposes:

• Account management: To register your account, verify your identity, and manage your ongoing relationship with kiss918, including processing deposits and withdrawals in MYR.
• Service delivery: To provide you with access to casino games, sportsbook markets, live dealer tables, and all other kiss918 platform features.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access.
• Regulatory compliance: To comply with our obligations under applicable gaming regulations, anti-money laundering legislation, and any requests from competent regulatory authorities.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to administer player protection tools including deposit limits, cooling-off periods, and self-exclusion requests.
• Customer support: To respond to your queries, complaints, and requests through our support channels.
• Platform improvement: To analyse aggregated usage data and improve the performance, features, and design of the kiss918 platform.
• Marketing communications: To send you relevant promotional offers and platform updates, where you have provided consent to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

kiss918 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kiss918 — specifically, operating your account and delivering gaming services.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and gaming licence conditions.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and internal analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing and certain cookie-based analytics, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Disclosure

kiss918 does not sell your personal data to third parties. We may share your data with carefully selected third parties in the following circumstances:

• Licensed game providers: Game suppliers integrated into the kiss918 platform may receive limited session and gameplay data necessary to operate their games. All such providers are contractually bound to process data only for the purpose of game delivery.
• Payment processors: Payment service providers including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency processing services receive the transactional data necessary to process your deposits and withdrawals.
• Identity verification services: Third-party KYC (Know Your Customer) providers may receive identity documents and verification data when account verification is required.
• Regulatory and law enforcement authorities: kiss918 will disclose personal data to competent regulatory bodies, gaming authorities, or law enforcement agencies where required to do so by law, court order, or gaming licence obligation.
• Professional advisers: Legal, financial, and audit advisers engaged by kiss918 may access relevant data on a strictly need-to-know basis and under appropriate confidentiality obligations.

Any third party to whom kiss918 discloses personal data is required to maintain appropriate technical and organisational security measures and to process the data only for the specific, documented purpose for which it was shared.

6. Cookies and Tracking Technologies

kiss918 uses cookies and similar tracking technologies on the kiss918.lat website to support essential platform functionality, enhance your experience, and gather aggregated analytics data. The categories of cookies used include:

• Strictly necessary cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login state where you have selected "Remember Me".
• Analytics cookies: Collect aggregated, anonymised data about how visitors interact with the kiss918 platform to help us improve functionality and content. Used only where you have consented.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the kiss918 platform, including the ability to remain logged in between sessions.

7. Data Retention

kiss918 retains personal data for as long as is necessary for the purposes for which it was collected and to comply with applicable legal obligations. As a general principle:

• Account and identity data is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of seven (7) years following the date of the transaction.
• Support communications are retained for up to three (3) years from the date of the last interaction.
• Technical logs and session data are retained for up to twelve (12) months for security and fraud investigation purposes.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

8. Data Security

kiss918 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kiss918 platform — the same standard used by Malaysian internet banking services.
• Encrypted storage of sensitive data including passwords (stored as irreversible hashes) and financial information.
• Access controls ensuring that personal data is accessible only to kiss918 personnel and systems with a documented, legitimate operational need.
• Regular security assessments and penetration testing of platform infrastructure.
• Multi-factor authentication options for both player accounts and internal system access.

While kiss918 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your kiss918 login credentials and for promptly notifying us if you suspect any unauthorised access to your account.

9. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by kiss918:

• Right of access: You may request a copy of the personal data kiss918 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances while a dispute is pending.
• Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our data protection team at [email protected]. We will respond to all valid requests within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days, with prior notification.

10. Children's Privacy

The kiss918 platform is strictly intended for individuals aged 21 years and above. kiss918 does not knowingly collect, process, or store personal data relating to persons under the age of 21. If we become aware that an account has been registered by or on behalf of an underage individual, the account will be closed immediately and any associated personal data will be deleted, subject to any mandatory retention obligations under applicable law.

Parents and guardians who believe that a minor may have accessed or registered on the kiss918 platform should contact us immediately at [email protected] so that appropriate action can be taken without delay.

11. International Data Transfers

In the course of providing its services, kiss918 may transfer personal data to service providers or infrastructure located outside Malaysia. Where such transfers occur, kiss918 ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to provide a level of protection equivalent to that applicable within Malaysia.

By using the kiss918 platform, you acknowledge and consent to the transfer of your personal data to third countries as described in this policy, subject to the safeguards outlined above.

12. Changes to This Privacy Policy

kiss918 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The date of the most recent revision is displayed at the top of this page. Where changes are material, we will notify registered players via email or a prominent platform notification prior to the changes taking effect.

Continued use of the kiss918 platform following publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you should discontinue use of the platform and contact us to close your account.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kiss918 handles your personal data, please contact our support team:

• Email: [email protected]
• Live Chat: Available within the kiss918 platform after login, 24 hours a day, 7 days a week.

We are committed to resolving all privacy-related queries promptly and transparently. Formal data subject access requests will be acknowledged within 5 business days and responded to in full within 30 days of receipt.