Privacy Policy

1. Introduction

1.1  kissy918 ("we", "us", "our", "kissy918") is committed to protecting and respecting the privacy of all individuals who access or use the kissy918 platform at kissy918.win (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

1.2  This Policy applies to all personal data collected in connection with your use of the kissy918 Platform, including account registration, deposits and withdrawals, game play, customer support interactions, promotional participation, and your general browsing of the kissy918.win website.

1.3  By accessing the Platform or registering a kissy918 account, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein. If you do not agree to this Policy, you should not use the kissy918 Platform.

1.4  This Policy is drafted in awareness of applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection requirements of the international gaming authority jurisdiction under which kissy918 holds its operating licence. Where these requirements differ, we apply the standard that provides greater protection to your personal data.

2. Data Controller

2.1  kissy918 (operated through its licensed entity, kissy918.win) is the data controller in respect of personal data collected through the Platform. As data controller, kissy918 determines the purposes and means of processing your personal information.

2.2  For all data privacy enquiries, requests to exercise your data rights, or complaints relating to how your personal data is handled, please contact us using the details provided in Section 15 of this Policy.

3. Information We Collect

3.1  Registration Information. When you create a kissy918 account, we collect: your chosen username; full legal name; Malaysian MyKad number or passport number; date of birth; nationality; residential address; email address; and mobile telephone number. This information is required to establish your identity, verify your age (21+ mandatory), and comply with our Know Your Customer (KYC) and anti-money laundering (AML) obligations.

3.2  Identity Verification Documents. For KYC compliance, we collect copies of government-issued identification documents, including Malaysian MyKad (front and back) or passport photo page, and in some cases proof of address and proof of source of funds documentation. These documents are processed in accordance with the security standards described in Section 9.

3.3  Financial Information. We collect information about deposits and withdrawals made on your kissy918 account, including the payment method used (e.g., Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, Visa, USDT), transaction amounts, timestamps, and, where applicable, partial payment instrument identifiers. We do not store complete card numbers or full banking credentials on our systems.

3.4  Gaming Activity Data. We collect records of your game sessions and betting activity on the kissy918 Platform, including games played, bets placed, outcomes, session durations, and bonus usage. This data supports fair play verification, responsible gaming monitoring, and dispute resolution.

3.5  Technical and Device Data. We automatically collect certain technical information when you access the Platform, including your IP address, device type and operating system, browser type and version, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud prevention, and platform analytics.

3.6  Communications Data. We retain records of communications between you and the kissy918 support team, including live chat transcripts, email correspondence, and any documents or attachments submitted. These records are maintained for quality assurance and dispute resolution purposes.

3.7  Marketing Preferences. Where you have opted in to receive marketing communications from kissy918, we maintain a record of your contact details and preferences. You may update or withdraw your marketing consent at any time through your account settings or by contacting support.

4. How We Use Your Personal Data

4.1  kissy918 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your kissy918 member account;
• Identity and age verification: To confirm that you meet the 21+ age requirement and to verify your identity for KYC compliance purposes;
• Payment processing: To process deposits and withdrawals in connection with your kissy918 account;
• Platform provision: To provide access to and operation of the games, sportsbook, live casino, and all other features of the kissy918 Platform;
• Regulatory compliance: To comply with our anti-money laundering (AML), counter-terrorism financing (CTF), KYC, and other applicable legal obligations under our international gaming authority licence;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats;
• Responsible gaming: To monitor gaming activity patterns and intervene where necessary to protect members from gambling-related harm, including enforcement of deposit limits, session alerts, and self-exclusion;
• Customer support: To respond to enquiries, resolve complaints, and administer dispute resolution processes;
• Marketing and promotions: Where you have given consent, to send you promotional offers, bonus notifications, and updates about the kissy918 Platform;
• Platform improvement: To analyse usage data and improve the functionality, performance, and user experience of the Platform.

5. Legal Basis for Processing

5.1  kissy918 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kissy918, including account management, payment processing, and platform access;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, CTF, and gaming authority licensing requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform analytics, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1  kissy918 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances and only to the extent necessary:

• Regulatory and law enforcement authorities: Where we are legally required to disclose data to regulatory bodies, gaming authorities, law enforcement agencies, or courts of competent jurisdiction;
• KYC and identity verification providers: We engage regulated third-party KYC verification service providers to assist with identity document validation. These providers are contractually bound to process data only for this purpose;
• Payment processors: Your transaction data is shared with payment service providers (including TnG eWallet, Boost, FPX banking networks, Visa, and USDT network operators) to facilitate deposit and withdrawal processing;
• Game and platform technology providers: Game studios and platform technology partners receive limited technical data (such as session tokens and game event logs) necessary for game delivery and integrity verification;
• Fraud prevention services: We may share data with specialist fraud detection and prevention service providers where we suspect fraudulent activity;
• Professional advisers: Legal, accounting, or audit professionals engaged by kissy918 who are subject to confidentiality obligations;
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant acquiring entity, subject to appropriate data protection safeguards.

7. Cookies & Tracking Technologies

7.1  The kissy918 Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your login session, and support platform analytics and security functions. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your login state and security cookies that support fraud detection. These cannot be disabled.
• Performance and analytics cookies: Used to collect aggregate, anonymised data about how visitors use the Platform, which pages are visited, and how long sessions last. This helps us improve the Platform experience.
• Functional cookies: Used to remember your preferences, such as language settings, and to personalise your experience on the Platform.
• Marketing cookies: Used where you have consented to receive personalised promotional content and to measure the effectiveness of kissy918 marketing campaigns. These may be set by kissy918 directly or by approved third-party advertising technology partners.

7.2  You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the kissy918 Platform. Your consent preferences for optional cookies can be updated at any time through the cookie settings accessible on the Platform.

8. Data Retention

8.1  kissy918 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation.

8.2  The following indicative retention periods apply:

• Account and KYC records: Retained for a minimum of 5 years following account closure, as required by AML regulations and gaming authority licensing conditions;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of 3 years following the session date, for dispute resolution and regulatory audit purposes;
• Customer support records: Retained for 3 years from the date of the last interaction;
• Marketing data: Retained until you withdraw consent or close your account, whichever occurs earlier.

8.3  Where data is no longer required and no legal retention obligation applies, kissy918 will securely delete or anonymise it in accordance with our data destruction procedures.

9. Data Security

9.1  kissy918 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kissy918 Platform;
• Encrypted storage of sensitive personal data at rest, including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for timely detection and response to data security events.

9.2  While kissy918 takes all reasonable measures to protect your data, no internet transmission or electronic storage system is completely secure. You are also responsible for maintaining the security of your kissy918 account credentials. Do not share your password with any third party, including persons claiming to be kissy918 support staff.

10. Your Data Rights

10.1  Subject to applicable law and regulatory limitations, you have the following rights in respect of your personal data held by kissy918:

• Right of access: You may request a copy of the personal data kissy918 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restriction: You may request that we restrict processing of your data in certain circumstances;
• Right to data portability: You may request a copy of data you have provided to us in a structured, machine-readable format, where processing is based on consent or contract;
• Right to object: You may object to processing based on legitimate interests, or to processing for direct marketing purposes at any time;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2  To exercise any of the above rights, please submit a written request to kissy918 using the contact details in Section 15. We will respond within 30 days of receipt of a valid request. In some cases we may require identity verification before processing a data rights request.

10.3  Please note that certain data rights may be limited or restricted where the personal data in question is required to be retained for legal, regulatory, or contractual reasons — for example, KYC and transaction records subject to AML retention requirements.

11. Children & Minors

11.1  Age verification is a mandatory part of the kissy918 registration and KYC process. If you are a parent or guardian and have reason to believe that a minor has registered or accessed the kissy918 Platform, please contact us immediately at [email protected] so that we can take prompt action.

12. International Data Transfers

12.1  As kissy918 operates under an international gaming authority licence, your personal data may be processed in and transferred to jurisdictions outside Malaysia. This includes data processed by technology and payment service providers located in other countries.

12.2  Where we transfer personal data internationally, we ensure that appropriate safeguards are in place, including contractual data protection clauses that impose data processing obligations equivalent to applicable data protection standards. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

13. Third-Party Links

13.1  The kissy918 Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies only to the kissy918 Platform and does not extend to the data practices of any linked third-party site. kissy918 has no control over the content or privacy practices of third-party sites and accepts no responsibility or liability in respect of their data handling. You should review the privacy policies of any third-party site you visit.

14. Changes to This Privacy Policy

14.1  kissy918 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes — those that significantly affect how we collect or use your data — will be communicated to you via your registered email address or via a prominent notice on the Platform, with a minimum of 7 days' advance notice where reasonably practicable.

14.2  The current version of this Policy will always be accessible at kissy918.win/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was published. Your continued use of the kissy918 Platform following the effective date of any update constitutes your acknowledgment of the revised Policy.

15. Contact Us

15.1  If you have any questions, concerns, or requests relating to this Privacy Policy or the way kissy918 handles your personal data, please contact our Data Privacy team:

15.2  If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the applicable data protection authority or the supervisory body of the international gaming authority jurisdiction under which kissy918 operates.