Kiss918kiss Privacy Policy – Malaysia Member Personal Data Protection

As a trusted platform that adheres to industry standards, kiss918kiss only collects data that is strictly necessary to provide our services. The categories of data we collect are as follows:

We do not collect any sensitive information such as biometric data (except fingerprints for app login voluntarily enabled by you), health information, or religious beliefs.

Kiss918kiss uses your personal data solely for lawful and transparent purposes. Your data will not be used for any purpose other than those stated in this policy without first obtaining your consent.

The primary purposes for which your data is used include:

• Service Provision: Enabling you to register, login, play games, make deposits and withdrawals, and use all features of the kiss918kiss platform.
• Identity Verification (KYC): Verifying your identity to comply with anti-money laundering legal requirements and to confirm member eligibility.
• Account Security: Detecting and preventing fraud, unauthorised access, and suspicious activity that could compromise your account.
• Communications: Sending important information about your account, platform updates, and transaction notifications.
• Customer Support: Handling enquiries, complaints and assistance requests more effectively.
• Platform Improvements: Analysing usage patterns in aggregate to improve platform features and performance.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to our operations.

Kiss918kiss does not sell members' personal data to any third party for commercial purposes. However, there are limited situations where we may need to share certain information with approved third parties:

• Payment Providers: Information required to process deposits and withdrawals is shared with DuitNow, FPX, Touch 'n Go, Boost and other payment providers integrated into the platform. These providers have their own privacy policies and security standards.
• Identity Verification Providers: KYC documents are shared with approved third-party verification services to ensure the accuracy of the verification process.
• Technical Service Providers: Companies that help us operate the platform, including cloud and cybersecurity services, may have limited access to certain data based on operational requirements.
• Legal Authority: We will disclose information to the relevant authorities when required to do so by law, court order, or official investigation.

All third parties that receive data from kiss918kiss are bound by strict data protection agreements and are only permitted to use that information for the specified purposes.

Kiss918kiss invests seriously in security infrastructure to ensure that members' personal data is always protected. The security measures we implement include:

• Data in Transit Encryption: All communication between your device and our servers is secured by TLS 1.3 protocol with 256-bit SSL encryption.
• Data at Rest Encryption: Personal and financial data stored in our databases is encrypted using AES-256 encryption.
• Layered Access Control: Access to member data within our internal systems is governed by role-based access control (RBAC), ensuring each staff member can only access data relevant to their responsibilities.
• 24/7 Monitoring: Continuous security monitoring systems detect and respond to any suspicious activity or security threats in real time.
• Regular Security Audits: Independent security testing is conducted regularly by certified third-party cybersecurity firms.

The kiss918kiss platform uses cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and maintain platform security. The types of cookies we use are:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Saving your preferences such as language, display settings and dark mode to make your visits more comfortable.
• Analytics Cookies: Helping us understand how members use the platform so we can make meaningful improvements. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Helping to detect and prevent fraud and suspicious activity by identifying unusual access patterns.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some kiss918kiss platform features.

Kiss918kiss only retains your personal data for as long as necessary to fulfill the stated purposes of collection or to comply with applicable legal requirements. Our retention policy is as follows:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the period required by law, typically 5 to 7 years.
• Technical and Security Logs: Retained for between 90 days and 2 years depending on the security importance of the record.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires or upon a valid request from you, personal data will be securely deleted or anonymised in accordance with established procedures.

To exercise any of the privacy rights outlined in this policy, you may contact the kiss918kiss Data Protection team through the following channels:

• In-app live chat on kiss918kiss (available 24/7)
• Email the support address listed at the bottom of this website
• Via the "My Account" section in your kiss918kiss platform settings

When submitting a request, please include your full name, account number, and a clear description of your request. We may need to verify your identity before processing certain requests to ensure the security of your data.

Kiss918kiss is committed to addressing all privacy requests within 30 days from the date of receipt. For more complex cases, this period may be extended by up to 60 days with prior notice to you.

The kiss918kiss platform is restricted to individuals who are of age 18 years and above only. We do not intentionally collect or process personal data of individuals under the age of 18.

If we find that we have inadvertently collected data from someone under the age of 18, we will immediately take the following steps:

• Suspending the related account immediately.
• Deleting all personal data collected from that individual.
• Returning any outstanding financial balance in accordance with established procedures.
• Notifying the relevant authorities where required by law.

If you suspect that someone under the age of 18 has registered or is using the kiss918kiss platform, please contact our support team immediately so that appropriate action can be taken.

Kiss918kiss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform improvements. We are committed to informing our members of any significant changes.

When material changes are made to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the kiss918kiss website home page.
• Sending a notification to your registered email for significant changes.
• Displaying in-app notifications on the kiss918kiss mobile app.

Continued use of the kiss918kiss platform after an amended policy takes effect is considered acceptance of the revised terms. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how kiss918kiss handles your personal data, we encourage you to contact us directly. Our Data Protection team is ready to assist you.

Ways to reach the kiss918kiss privacy team:

• Live Chat: Available 24 hours a day, 7 days a week on the kiss918kiss mobile app and website. The fastest option for an immediate response.
• Support Email: Send privacy-related enquiries to our support email address. We aim to respond within 24 hours on business days.
• Account Portal: Log in to your account and use the "Contact Us" section to submit privacy-related enquiries securely.

We take every privacy concern seriously and are committed to addressing it carefully and within a reasonable timeframe. If you are not satisfied with how we handle your concern, you have the right to refer the matter to the relevant data protection authority.