kiss918 Privacy Policy

kiss918 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the kiss918 website and platform services accessible at kiss918.one ("the Platform").

This Privacy Policy ("Policy") describes the categories of personal data that kiss918 collects from users and visitors, the purposes for which that data is processed, the legal bases upon which processing is carried out, the parties with whom data may be shared, and the rights available to data subjects in relation to their personal data.

This Policy applies to all registered account holders on kiss918, visitors to the kiss918 website who have not registered, and any other individuals whose personal data is processed by kiss918 in connection with the operation of the platform. It applies regardless of the device used to access the platform, whether by desktop browser, smartphone browser, or tablet.

This Policy should be read in conjunction with the kiss918 Terms and Conditions, which are available at kiss918.one/terms-conditions. By accessing the kiss918 platform or creating an account, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of applicable data protection law, kiss918 acts as the data controller in respect of all personal data collected and processed through the kiss918 platform. As data controller, kiss918 determines the purposes and means by which personal data is processed.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to make a complaint about how your personal data is handled, please contact kiss918's data privacy team at:

kiss918 collects the following categories of personal data from users and visitors to the platform:

3.1 Identity Data. This includes your full legal name, date of birth, nationality, and government-issued identification number (such as your Malaysian National Registration Identity Card number or passport number). Identity data is collected during account registration and as part of our Know Your Customer (KYC) verification process.

3.2 Contact Data. This includes your email address and any other contact information you provide to kiss918. Your email address is used as your primary login identifier and as the channel through which kiss918 communicates account notifications, security alerts, and (where you have consented) promotional communications.

3.3 Financial and Transaction Data. This includes details of all deposits, withdrawals, and gaming transactions conducted through your kiss918 account, including transaction amounts in Malaysian Ringgit (MYR), payment method details (such as your e-wallet account identifier or bank account details used for FPX transactions), and transaction timestamps. kiss918 does not store full payment card numbers.

3.4 KYC Verification Documents. Where kiss918 is required to verify your identity before processing your first withdrawal, you will be asked to upload documentary evidence including a copy of your Malaysian National Registration Identity Card or passport, a recent proof of address document, and proof of your payment method. These documents are stored securely and processed solely for identity verification and anti-money laundering compliance purposes.

3.5 Technical and Usage Data. This includes your device's Internet Protocol (IP) address, browser type and version, operating system, device identifiers, referring URL, pages visited on the kiss918 platform, session duration, click data, and in-platform navigation patterns. This data is collected automatically when you access the platform and is used to maintain platform security, detect fraudulent activity, and improve user experience.

3.6 Communications Data. This includes the content of any communications you send to kiss918's support team, including emails, chat messages, and any feedback or complaint submissions. These communications are retained to facilitate ongoing support, for training and quality assurance purposes, and to maintain records of dispute resolution.

3.7 Responsible Gaming Data. Where you make use of kiss918's responsible gaming tools — including deposit limits, cooling-off periods, or self-exclusion — kiss918 retains records of these requests and the settings applied to your account. This data is retained for compliance purposes and to ensure that self-exclusion and cooling-off restrictions are enforced appropriately.

kiss918 collects personal data through the following means:

• Direct provision by you: Data you provide when creating your kiss918 account, completing KYC verification, making deposits or withdrawals, contacting our support team, or responding to surveys or promotions;
• Automated technical collection: Data collected automatically through cookies, web server logs, and similar tracking technologies when you access the kiss918 platform — including IP address, device information, and browsing behaviour on the platform;
• Third-party sources: Data received from identity verification providers engaged by kiss918 to perform KYC checks, fraud prevention services, and payment processors in connection with transaction processing. kiss918 only obtains data from third parties where a legitimate legal basis for such data transfer exists.

kiss918 processes your personal data for the following purposes and on the following legal bases:

5.1 Contract Performance. kiss918 processes your identity data, contact data, and financial transaction data for the purpose of operating and administering your account, processing deposits and withdrawals in MYR, delivering gaming services, and managing your account in accordance with our Terms and Conditions. The legal basis for this processing is the performance of the contract between you and kiss918.

5.2 Legal and Regulatory Compliance. kiss918 processes your identity data, KYC verification documents, and transaction data for the purposes of complying with applicable anti-money laundering laws, age verification obligations, and other regulatory requirements applicable to the operation of an online gaming platform. The legal basis for this processing is legal obligation.

5.3 Fraud Prevention and Platform Security. kiss918 processes technical and usage data, identity data, and transaction data for the purposes of detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct on the platform. The legal basis for this processing is legitimate interest — specifically, the legitimate interest of kiss918 and its users in maintaining a secure and fair gaming environment.

5.4 Improvement of Platform Services. kiss918 processes aggregated and anonymised usage data for the purposes of analysing platform performance, identifying user experience issues, and improving the features and functionality of the kiss918 platform. The legal basis for this processing is legitimate interest.

5.5 Marketing Communications. Where you have given your consent during registration or subsequently, kiss918 may process your email address to send you information about promotions, bonuses, and new features on the platform. The legal basis for marketing communications is consent. You may withdraw your consent at any time as described in Section 12 of this Policy.

5.6 Responsible Gaming Compliance. kiss918 processes responsible gaming data — including records of deposit limits, cooling-off periods, and self-exclusion requests — for the purpose of enforcing these restrictions on your account and fulfilling our responsible gaming obligations. The legal basis for this processing is legal obligation and legitimate interest.

kiss918 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. kiss918 may share your personal data with the following categories of third parties in the circumstances described below:

6.1 Payment Processors. kiss918 shares necessary financial and identity data with payment service providers — including e-wallet operators such as Touch 'n Go eWallet, Boost, and GrabPay, and FPX banking intermediaries — for the purpose of processing your deposit and withdrawal transactions in MYR. These processors are bound by contractual data processing obligations and are not permitted to use your data for any purpose other than processing your transactions.

6.2 KYC and Identity Verification Providers. kiss918 may share your identity documents and personal data with third-party identity verification service providers engaged to perform KYC checks on behalf of kiss918. These providers are bound by confidentiality and data processing agreements.

6.3 Fraud Prevention Services. kiss918 may share technical and identity data with fraud detection and prevention service providers for the purpose of identifying and investigating suspicious account activity, money laundering, and other prohibited conduct.

6.4 Regulatory and Law Enforcement Authorities. kiss918 may disclose your personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where required to do so by applicable law, court order, or regulatory directive. kiss918 will notify you of such disclosure where permitted by applicable law.

6.5 Professional Advisers. kiss918 may share personal data with legal advisers, auditors, or other professional service providers where necessary for the conduct of legal proceedings, compliance audits, or the exercise or defence of legal claims.

In the course of providing the kiss918 platform and services, your personal data may be transferred to and processed in countries outside of Malaysia. This may occur where kiss918 engages service providers — including KYC verification providers, fraud prevention services, or cloud infrastructure providers — whose operations are based outside Malaysia.

Where personal data is transferred outside of Malaysia, kiss918 takes appropriate measures to ensure that such transfers are conducted in accordance with applicable data protection law and that your data receives a standard of protection equivalent to that which it receives within Malaysia. Such measures may include the implementation of contractual data protection clauses between kiss918 and the receiving party.

If you would like further information about the international transfers of your personal data or the safeguards in place, please contact kiss918's data privacy team at [email protected].

kiss918 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, to comply with anti-money laundering and record-keeping obligations;
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping requirements;
• KYC verification documents: Retained for the minimum period required by applicable anti-money laundering legislation, typically five (5) years from account closure or the end of the business relationship;
• Technical and usage data: Retained for up to twelve (12) months from collection, unless longer retention is required for fraud investigation purposes;
• Support communications: Retained for up to three (3) years from the date of the communication, unless the communication relates to an ongoing dispute or legal claim;
• Responsible gaming records: Retained for the duration of any active restriction and for five (5) years after the restriction expires, to prevent circumvention of self-exclusion periods.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with kiss918's data disposal procedures.

kiss918 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that allow the platform to recognise your browser and remember certain information about your session and preferences.

9.1 Essential Cookies. These cookies are necessary for the operation of the kiss918 platform. They enable core functions such as maintaining your login session, processing transactions, and applying your account settings (including responsible gaming limits). Essential cookies cannot be disabled without significantly impairing platform functionality.

9.2 Analytical Cookies. kiss918 uses analytical cookies to collect aggregated, anonymised data about how users navigate and interact with the platform. This data helps us identify areas where the user experience can be improved. Analytical cookies do not identify you personally.

9.3 Preference Cookies. These cookies remember your platform preferences — such as language settings and display options — so that the platform presents consistently on repeat visits.

9.4 Managing Cookies. You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a cookie is placed. Note that disabling essential cookies will impair your ability to use the kiss918 platform. Disabling analytical or preference cookies will not affect your ability to access core platform features.

kiss918 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the kiss918 platform — including login credentials, personal data, and financial transaction data — is protected by SSL/TLS encryption;
• Access controls: Access to personal data held by kiss918 is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations;
• Password hashing: Your kiss918 account password is stored as a cryptographic hash and is not accessible in plaintext by any kiss918 personnel;
• Secure data storage: Personal data and KYC documents are stored in secure environments with access logging and intrusion detection;
• Regular security reviews: kiss918 conducts periodic reviews of its data security practices and infrastructure to identify and address potential vulnerabilities.

While kiss918 takes all reasonable steps to protect your personal data, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you suspect that your account has been compromised, please contact our support team immediately at [email protected].

Subject to applicable data protection law, you have the following rights in relation to your personal data held by kiss918:

• Right of access: You have the right to request a copy of the personal data that kiss918 holds about you, together with information about how it is processed;
• Right of rectification: You have the right to request that inaccurate or incomplete personal data held by kiss918 be corrected or completed without undue delay;
• Right to erasure: In certain circumstances, you have the right to request that kiss918 delete your personal data. Note that this right is subject to limitations where kiss918 is required by law to retain certain data (for example, for anti-money laundering compliance);
• Right to restrict processing: In certain circumstances, you have the right to request that kiss918 restrict the processing of your personal data — for example, while the accuracy of data is being verified;
• Right to data portability: Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to object: You have the right to object to processing of your personal data where kiss918 relies on legitimate interest as the legal basis, unless kiss918 can demonstrate compelling legitimate grounds that override your rights;
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to kiss918's data privacy team at [email protected] with the subject line "Data Subject Request." kiss918 will respond to all requests within thirty (30) calendar days of receipt. We may ask you to verify your identity before processing your request.

kiss918 will only send marketing communications to you — including promotions, bonus offers, and platform updates — where you have given your prior consent to receive such communications. Your consent to receive marketing communications may be given during account registration or at any subsequent time through your account settings.

You may withdraw your consent to receive marketing communications at any time by: (a) clicking the "Unsubscribe" link included in any marketing email from kiss918; or (b) updating your communication preferences in your account settings on the platform; or (c) contacting kiss918's support team at [email protected] and requesting removal from marketing lists.

Withdrawal of consent to marketing communications does not affect your ability to continue using the kiss918 platform or to receive service-related communications (such as account security notifications, transaction confirmations, and deposit or withdrawal status updates), which are sent on the basis of contract performance and are not subject to marketing opt-out.

The kiss918 platform is strictly for adults aged twenty-one (21) years and above. kiss918 does not knowingly collect personal data from individuals under the age of 21. If kiss918 becomes aware that personal data has been collected from a person under the age of 21, kiss918 will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered an account on kiss918 or provided personal data to kiss918, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

kiss918 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable data protection law, changes in our data processing activities, or improvements to our privacy practices. Amended versions of this Policy will be published on this page with an updated effective date.

Where amendments are material — meaning they significantly alter how we collect, use, or share your personal data — kiss918 will endeavour to notify registered users by email to their registered email address with reasonable notice before the amended Policy takes effect. Your continued use of the kiss918 platform following publication of an amended Policy constitutes your acknowledgement of, and where applicable consent to, the updated data processing practices described therein.

We encourage you to review this Policy periodically to remain informed about how kiss918 protects your personal data. The date at the top of this page indicates when the Policy was most recently updated.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how kiss918 is handling your personal data, please contact our data privacy team:

If you are not satisfied with kiss918's response to your privacy complaint or data subject request, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. kiss918 encourages you to contact us directly in the first instance so that we may attempt to resolve your concern before you escalate to a regulatory authority.

For enquiries related to your account, transactions, or technical support matters unrelated to data privacy, please also contact our general support team at [email protected]. Our support team is available 24 hours a day, 7 days a week, including Malaysian public holidays.