Privacy Policy

Section 01

Introduction

kiss918app ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at kiss918app.cam. We are committed to protecting the privacy and personal data of every individual who interacts with our Platform — including registered Account Holders, visitors, and prospective players across Malaysia.

This Privacy Policy ("Policy") describes how kiss918app collects, uses, stores, shares, and protects personal data in connection with the Platform and its associated services. It also sets out the rights available to you under applicable data protection principles and explains how to exercise those rights.

By registering an Account, visiting the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not register an Account or continue to use the Platform.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, which together govern your use of kiss918app.

Our Commitment: kiss918app does not sell, rent, or trade your personal data to third-party marketers. Your data is used exclusively for the purposes of operating, securing, and improving the Platform, and for meeting our legal and regulatory obligations.

Section 02

Definitions

The following terms carry the meanings defined below throughout this Policy:

"Personal Data"

Any information that identifies or can reasonably identify a natural person — directly or indirectly — including name, identification number, contact details, financial data, and online identifiers.

"Processing"

Any operation performed on personal data, whether automated or manual — including collection, storage, organisation, structuring, use, disclosure, erasure, or destruction.

"Data Controller"

kiss918app, the entity that determines the purposes and means of processing personal data collected through the Platform.

"Data Processor"

A third party that processes personal data on behalf of kiss918app, such as a payment gateway provider or KYC verification service, subject to a data processing agreement.

"Data Subject"

The natural person to whom personal data relates — in the context of this Platform, typically a registered Account Holder or Platform visitor.

"Consent"

A freely given, specific, informed, and unambiguous indication by which a Data Subject agrees to the processing of their personal data for a stated purpose.

"Cookies"

Small text files placed on a User's device by the Platform to enable technical functionality, session management, and behavioural analytics.

"KYC"

Know Your Customer — the process of verifying a User's identity and source of funds, as required under AML and CTF compliance obligations.

Section 03

Data We Collect

kiss918app collects the following categories of personal data from Users of the Platform:

Data Category	Examples	Required?
Identity Data	Full name, date of birth, nationality, MyKad / passport number	Mandatory (KYC)
Contact Data	Email address, mobile number, residential address	Mandatory
Financial Data	Bank account details, e-wallet IDs (Touch 'n Go, Boost, GrabPay), transaction history, deposit/withdrawal records in MYR	Mandatory
Account Data	Username, encrypted password, Account balance, betting history, game session logs	Mandatory
Device & Technical Data	IP address, browser type, device model, operating system, session timestamps	Automatic
Verification Documents	Scanned MyKad, passport photo page, selfie with ID, proof of address (utility bill, bank statement)	Mandatory (KYC)
Communication Data	Live chat transcripts, support email correspondence, feedback submissions	As applicable
Marketing Preferences	Opt-in / opt-out status for promotional communications	Optional

We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data — except where age verification or responsible gambling assessments require it, in which case only the minimum necessary data is processed.

Section 04

How We Collect Data

Personal data is collected through the following channels and interactions:

Account Registration: When you complete the registration form on the Platform, including submission of your username, email address, mobile number, and date of birth.
KYC Verification: When you submit identity documents, address verification materials, or complete a selfie verification check in connection with withdrawal processing or compliance reviews.
Deposits and Withdrawals: When you initiate or complete a financial transaction via Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB, Hong Leong Bank, 7-Eleven CLiQQ, or USDT TRC20.
Platform Usage: Automatically, through server logs, session tracking, and browser technologies — recording device identifiers, IP address, pages visited, game rounds played, and bet history.
Customer Support Interactions: When you contact our support team via live chat or email, we collect the content of those communications and any personal details you provide during the interaction.
Cookies and Tracking Technologies: Through first-party cookies placed on your device during Platform sessions, as described in Section 10 of this Policy.
Third-Party Verification Services: From KYC data providers and fraud detection partners who supplement the information you have provided directly to us.

You Provide

Platform Collects

Processors Verify

Secure Storage

Section 05

Data Processing & Purpose

kiss918app processes your personal data only for specific, legitimate purposes. The table below maps each processing activity to its purpose and the data categories involved:

Processing Activity	Purpose	Data Categories Used
Account Creation & Management	Establishing and maintaining your player Account	Identity, Contact, Account
Identity Verification (KYC)	AML/CTF compliance; confirming player eligibility and age	Identity, Verification Documents
Payment Processing	Processing MYR deposits and withdrawals via Malaysian payment channels	Financial, Identity
Fraud & Security Monitoring	Detecting and preventing fraudulent activity, multi-accounting, and bonus abuse	Device & Technical, Account, Financial
Customer Support	Resolving Account queries, disputes, and technical issues	Identity, Account, Communication
Responsible Gambling	Monitoring betting patterns; enforcing deposit limits and self-exclusions	Account, Financial, Communication
Regulatory Compliance	Meeting licensing obligations and responding to lawful authority requests	All categories as required
Platform Improvement	Analysing usage patterns to improve game performance and user experience	Device & Technical, Account (anonymised)
Marketing Communications	Sending promotional offers where you have opted in	Contact, Marketing Preferences

Where personal data is used for platform improvement and analytics, we apply aggregation and anonymisation techniques wherever possible so that individual Users cannot be identified from the resulting data sets.

Section 06

Legal Basis for Processing

All personal data processing by kiss918app is carried out on one or more of the following recognised legal bases:

Contractual Necessity: Processing required to perform the contract between you and kiss918app — including Account setup, payment processing, and service delivery. Without this processing, we cannot provide the Platform to you.
Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF legislation, KYC obligations, and lawful requests from regulatory or law enforcement authorities.
Legitimate Interests: Processing carried out in furtherance of kiss918app's legitimate business interests — such as fraud detection, security monitoring, and platform improvement — where such interests are not overridden by your fundamental rights and freedoms.
Consent: Where you have given explicit, informed consent to a specific processing activity — most notably for receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Withdrawing Consent: To withdraw consent for marketing communications, contact our support team via live chat or email at any time. Withdrawal will be actioned within 5 business days. Note that withdrawing marketing consent does not affect the Platform's ability to process your data on the other legal bases listed above.

Section 07

Data Sharing & Disclosure

kiss918app does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Your data is shared only in the following circumstances and only to the extent strictly necessary:

Payment Service Providers: Sharing financial and identity data with Malaysian payment processors — including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and RHB — solely to facilitate deposit and withdrawal transactions.
KYC and Identity Verification Partners: Sharing identity documents and personal details with certified third-party KYC providers to complete mandatory verification checks in compliance with AML obligations.
Fraud Detection Services: Sharing device and behavioural data with fraud prevention and risk management providers to detect multi-accounting, bonus abuse, and other prohibited conduct.
Regulatory and Licensing Authorities: Disclosing personal data to our licensing authority or other competent regulatory bodies where required by law or regulation, or in response to a lawful order or request.
Law Enforcement Agencies: Disclosing data to police, financial intelligence units, or other law enforcement bodies where kiss918app is legally compelled to do so or where disclosure is necessary to prevent serious harm or criminal activity.
IT Infrastructure and Hosting Providers: Sharing data with cloud hosting and infrastructure providers who store Platform data on secure servers, subject to contractual data processing agreements that meet applicable data protection standards.
Professional Advisers: Sharing data with lawyers, auditors, and other professional advisers where necessary for legal proceedings, compliance reviews, or corporate governance purposes, under strict confidentiality obligations.

Every third party to whom kiss918app discloses personal data is required to maintain appropriate technical and organisational security measures and to process that data solely for the purpose for which it was disclosed.

Section 08

Data Retention

kiss918app retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, accounting, and reporting requirements. The following retention periods apply:

Data Category	Retention Period	Basis
Account & Identity Data	Duration of Account + 5 years post-closure	AML / regulatory obligation
KYC Verification Documents	Duration of Account + 5 years post-closure	AML / regulatory obligation
Financial Transaction Records	7 years from transaction date	Legal / accounting obligation
Betting & Game History	Duration of Account + 3 years	Dispute resolution / audit
Customer Support Records	3 years from last interaction	Legitimate interest / dispute
Device & Technical Logs	13 months from collection	Security monitoring
Marketing Preference Data	Until consent withdrawn + 1 year	Consent / legitimate interest

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to technical constraints, the data will be quarantined and rendered inaccessible pending secure deletion at the earliest opportunity.

Section 09

Data Security

kiss918app implements a multi-layered information security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

Encryption in Transit: All data transmitted between your device and the Platform is encrypted using TLS 1.2 / 1.3 (256-bit SSL). Look for the padlock icon in your browser address bar as confirmation of an active secure connection.
Encryption at Rest: Sensitive Account and financial data stored in our systems is encrypted at rest using AES-256 encryption standards.
Password Security: Account passwords are never stored in plain text. They are hashed using industry-standard one-way hashing algorithms with salting applied to resist brute-force attacks.
Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and subject to periodic audit.
Two-Factor Authentication: Account Holders are encouraged to enable two-factor authentication (2FA) as an additional layer of Account security.
Penetration Testing: The Platform's infrastructure undergoes regular independent security assessments to identify and remediate vulnerabilities.
Incident Response: kiss918app maintains a formal data breach response procedure. In the event of a data breach affecting your personal data, we will notify affected Users and relevant regulatory authorities in accordance with applicable legal obligations.

Your Responsibility: While we invest heavily in Platform-side security, you also play a role. Keep your password confidential, do not reuse it across multiple services, and contact our support team immediately if you suspect your Account has been compromised. kiss918app will never request your password by email or live chat.

Section 10

Cookies & Tracking Technologies

kiss918app uses first-party cookies and similar technologies to operate the Platform, maintain session continuity, detect fraud, and understand how Users interact with our services. We do not use third-party advertising cookies or behavioural tracking technologies for cross-site advertising purposes.

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login state, CSRF protection, security tokens	Session (deleted on close)
Functional	Remembering language preferences, display settings, and last-visited game	Up to 12 months
Analytics	Aggregated page-view and navigation data for internal platform improvement; data is anonymised	Up to 13 months
Fraud Detection	Device fingerprinting and IP consistency checks to detect multi-accounting and suspicious activity	Up to 12 months

You can control cookie behaviour through your browser settings. Disabling strictly necessary cookies will impair Platform functionality, including your ability to log in. Disabling analytics or functional cookies will not affect your ability to place bets or process transactions.

Section 11

User Rights

As a Data Subject whose personal data is processed by kiss918app, you hold the following rights in relation to your personal data. These rights may be exercised by contacting our support team at any time:

Right of Access

Request a copy of all personal data we hold about you and information about how it is processed.

Right to Rectification

Request correction of any inaccurate or incomplete personal data held in your Account.

Right to Erasure

Request deletion of your personal data where there is no longer a lawful basis to retain it, subject to our regulatory retention obligations.

Right to Restriction

Request that we restrict processing of your data — for example, while a data accuracy dispute is being resolved.

Right to Portability

Request your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Object

Object to processing based on legitimate interests or to the use of your data for direct marketing purposes.

Requests to exercise any of the above rights will be acknowledged within 5 business days and actioned within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you promptly. kiss918app does not charge a fee for reasonable rights requests.

Please Note: Certain rights are subject to legal limitations. For example, the right to erasure cannot override our obligation to retain KYC and transaction records for the periods stipulated under AML regulations. Where a right cannot be fully exercised due to a legal obligation, we will explain the specific restriction in our response.

Section 12

Minors & Age Verification

The Platform is strictly intended for individuals aged 21 and above. kiss918app does not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is conducted as part of the KYC process for all Account Holders.

If kiss918app becomes aware that personal data has been inadvertently collected from a minor, that data will be deleted immediately, the associated Account will be permanently closed, and any funds deposited will be returned to the source payment method following a compliance review.

Parents and guardians who have reason to believe that a minor in their care has accessed the Platform or submitted personal data should contact our support team without delay. We will take immediate steps to investigate and remediate the situation.

🔞 For Players Aged 21 and Above Only. By using kiss918app, you confirm that you are at least 21 years of age. Misrepresentation of age during registration is a serious breach of our Terms & Conditions and will result in permanent Account closure and forfeiture of funds.

Section 13

International Data Transfers

kiss918app operates servers and engages service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Such transfers occur in the following contexts:

Cloud Infrastructure: Platform data is hosted on servers managed by our infrastructure partners, which may be located outside Malaysia. All hosting arrangements are governed by data processing agreements that require equivalent data protection standards to those applied within Malaysia.
KYC Verification Services: Identity verification checks may be processed by partners operating in jurisdictions with recognised data protection frameworks.
Licensing Authority Reporting: Regulatory reports submitted to our licensing authority may involve transfer of data to the jurisdiction in which that authority is based.

Where personal data is transferred internationally, kiss918app ensures that appropriate safeguards are in place — including contractual clauses and data processing agreements that impose obligations on recipient parties equivalent to those applicable to kiss918app itself. By using the Platform, you consent to the international transfer of your personal data on this basis.

Section 14

Policy Amendments

kiss918app reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised upon any material amendment.

Where changes are significant, we will notify registered Account Holders via email to their registered address or through a prominent notice on the Platform prior to the changes taking effect. Minor clarifications or non-material amendments may be made without individual notification.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you must cease using the Platform and request Account closure as described in our Terms & Conditions.

Section 15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kiss918app, please reach out to our support team through the following channels:

Live Chat: Available 24 hours a day, 7 days a week via the Platform interface. Average first-response time: under 90 seconds.
Email (plain text): [email protected] — responses within 2–4 hours during operational hours.

All data-related enquiries and rights requests should include your registered Account username and email address to allow us to verify your identity and locate the relevant records efficiently. Support communications are conducted in English and are available to players across Malaysia including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other states.

Data Rights Requests: To formally exercise any right described in Section 11 of this Policy — including requests for data access, rectification, erasure, restriction, portability, or objection — please contact us via live chat or the support email address above, referencing "Data Rights Request" in your message subject or opening line so that your request is routed to the correct team promptly.