DATA PROTECTION

Kiss918 Privacy Policy — Member Personal Data Protection

Your privacy is not just a priority — it is our responsibility. This document explains in detail how kiss918 collects, stores, uses, and protects your personal information as a member of our platform in Malaysia.

Updated: January 2026  |  Applicable to all Malaysian members
Our Privacy Commitment
  • 128-bit SSL encryption for all data
  • Data is not sold to third parties
  • Data access restricted to authorised personnel only
  • Data access and deletion rights granted
  • Malaysia PDPA Compliance
  • Notice provided before any changes take effect

1Introduction and Scope of Privacy Policy

This Privacy Policy is issued by kiss918 and applies to all users who access our platform via the website at kiss918.vin or the kiss918 mobile app for iOS and Android. We take our responsibilities seriously under Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international personal data protection standards.

We collect and process your personal data solely for legitimate purposes, including account management, financial transaction processing, fraud prevention, and improving the user experience. Every piece of information you provide us is handled with care and full accountability.

Our Promise: kiss918 will never sell, rent, or trade your personal data to any third party for marketing purposes without your explicit consent. Your privacy is an absolute right that we respect.

2Personal Information We Collect

In operating the platform, kiss918 collects various categories of your personal information. This collection occurs through two main channels — information you provide directly and information collected automatically as you use the platform.

2.1 Information You Provide Directly

  • Identity Information: Full legal name, identity card number (MyKad), date of birth, and gender.
  • Contact Information: Mobile phone number, email address, and mailing address.
  • Financial Information: Bank account number, bank name, and e-wallet account details (Touch 'n Go, Boost, GrabPay) registered in your name.
  • Verification Documents (KYC): MyKad copy, bank statements, or other supporting documents requested during the identity verification process.
  • Account Information: Username, password (stored in hashed form — we cannot view your original password), and security questions.

2.2 Information Collected Automatically

  • Technical Data: IP address, browser type, operating system, device type, and screen resolution.
  • Usage Data: Pages visited, session duration, games played, and platform usage patterns.
  • Transaction Data: History of deposits, withdrawals, claimed bonuses, and game records.
  • Location Data: General location data based on IP address for geographic verification and security purposes.
We only collect information that is strictly necessary for the stated purposes. This data minimisation principle ensures we do not retain excessive or irrelevant information beyond what is needed to operate the platform.

3How We Use Your Personal Data

Kiss918 uses your personal information for the following purposes, disclosed transparently:

Purpose of Use Data Type Legal Basis
Account management and verification Identity, KYC, contact Contract performance
Processing deposits and withdrawals Financial, identity Contract performance
Fraud prevention and anti-money laundering All categories Legal obligations
Sending promotional notices and offers Contact, usage Your consent
Service improvement and analytics Usage, technical Legitimate interests
Customer Support Identity, contact, transactions Contract performance
Regulatory compliance Identity, financial Legal obligations

We will not use your data for any purposes not mentioned above without providing prior notice and, where required, obtaining fresh consent from you.

4Data Storage and Security

4.1 Where Your Data Is Stored

Your personal data is stored on secure servers located in licensed data centres with multi-layered physical and digital protection. All data transfers between your browser and the kiss918 platform are secured by 128-bit SSL encryption — the same standard used by world-class banking institutions.

4.2 Technical Security Measures

  • SSL/TLS encryption for all data communications in transit.
  • Passwords are stored using a one-way hashing algorithm that cannot be decrypted.
  • Two-factor authentication (2FA) is available and encouraged for all accounts.
  • Continuous 24/7 security monitoring by our cybersecurity team.
  • Periodic security audits conducted by qualified, independent third parties.
  • Internal access controls — only authorised personnel can access sensitive data.
  • Regularly encrypted data backups to ensure service continuity.
Data Breach: In the event of any security incident affecting your personal data, kiss918 is committed to notifying you within 72 hours of the incident being identified, in line with international data protection best practices.

4.3 Shared Responsibilities

While we take every reasonable step to protect your data, the security of the password and device you use to access the platform is your own responsibility. We recommend using a strong, unique password that is not shared with anyone.

5Data Sharing with Third Parties

Kiss918 does not share your personal data with external parties except in the following limited and controlled circumstances:

5.1 Authorised Service Providers

We work with trusted third-party service providers to ensure smooth platform operations. These include payment processors (such as FPX, DuitNow, and e-wallet providers), cloud service providers, and analytics platforms. All such providers are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

5.2 Legal Requirements

We may be required to disclose certain information when mandated by law, court order, or a valid request from a law enforcement agency. In such situations, we will disclose only the minimum necessary information and will notify you where legally permitted.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of platform assets, your personal data may be transferred as part of that transaction. We will provide adequate notice and ensure that an equivalent level of data protection is maintained by the receiving entity.

Remember: kiss918 will never sell, rent, or exchange your personal data with other companies for advertising or marketing purposes without your explicit prior consent.

6Cookies and Tracking Technologies

The kiss918 platform uses cookies and similar tracking technologies to enhance your experience and analyse platform performance. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
  • Performance Cookies: Collects information about how you use the platform — most frequently visited pages, time spent on each page, and any error messages. This data is used to improve the platform.
  • Functional Cookies: Saves your preferences such as language, display settings, and game preferences so you do not need to reset them each time you log in.
  • Analytics Cookies: Helps us understand overall usage patterns to plan ongoing platform improvements.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality of some parts of the platform.

7Your Rights Regarding Personal Data

As a kiss918 member, you have the following rights regarding your personal data, in accordance with the provisions of Malaysia's PDPA:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or incomplete information in our records.

Right to Erasure

Under certain circumstances, you may request that your data be deleted once your account is closed and there is no legal obligation to retain it.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another platform.

Right to Restriction of Processing

In certain situations, you may ask us to restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact the kiss918 customer support team via Live Chat within the platform. We will process your request within 14 business days.

8Children's Privacy

The kiss918 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we discover that a minor's information has been collected without our knowledge, we will take immediate action to delete that information and close the relevant account.

If you are a parent or guardian who believes your child has provided us with personal information, please contact our support team immediately so we can take appropriate action.

9Links to Third-Party Sites

The kiss918 platform may contain links to third-party websites including game providers, payment partners, or related information sites. This Privacy Policy applies solely to the kiss918 platform and does not cover the privacy practices of any third-party websites.

We encourage you to read the privacy policy of every third-party website you visit. kiss918 is not responsible for the content, privacy practices, or security policies of any website outside our platform.

10Data Retention Period

Kiss918 retains your personal data for as long as your account is active or as needed to provide services to you. Following account closure, we may retain certain data for the following periods based on applicable requirements:

  • Financial and transaction records: Minimum 7 years in line with Malaysian legal requirements for financial records.
  • KYC and identity documents: Minimum 5 years after account closure for anti-money laundering compliance purposes.
  • Customer support communication logs: 2 years for reference and dispute resolution purposes.
  • Technical data and access logs: 12 months for security and digital forensics purposes.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

11Amendments to This Privacy Policy

Kiss918 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to you via a notice displayed on the platform or to your registered email at least 14 days before the changes take effect.

The "Updated" date shown at the top of this page reflects the effective date of the latest version. Continued use of the platform after that date constitutes your acceptance of the updated Privacy Policy.

12How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

Live Chat
Available 24/7 within the kiss918 platform. The fastest way to get immediate assistance.
Official Email
[email protected] — Response within 24 business hours for privacy-related enquiries.
For requests relating to your data rights (access, correction, deletion), please clearly state the type of request and your account identification details so we can process it more quickly and accurately.
Why Your Privacy Is Safe with kiss918

We invest in the best technologies and procedures to ensure that every piece of information you entrust to us always remains in the right hands.

Bank-Grade Encryption

All data transmitted between your device and kiss918 servers is protected by 128-bit SSL encryption — the same standard used by Malaysia's leading banks.

Strict Internal Access Controls

Sensitive member data is accessible only to authorised personnel with a legitimate business need. All access is logged and continuously monitored.

Regular Security Audits

Our systems undergo regular independent security audits to identify and address any vulnerabilities before they can be exploited.

No Data Sales

Your personal data will never be sold, rented, or traded to any third party for advertising or marketing purposes — this is our absolute commitment.

Malaysia PDPA Compliance

All our data handling practices comply with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international data protection standards.

Immediate Breach Notification

In the event of a security incident affecting your data, we are committed to notifying you within 72 hours — transparently, promptly, and responsibly.

JOIN WITH CONFIDENCE

Your Data Is Secure — Your Gaming Experience Is Protected

Kiss918 protects your privacy with best-in-class technology and transparent policies. Register today and enjoy a safe, fair, and trusted online gaming experience in Malaysia.

Bahasa Melayu