Privacy Policy – kiss988 Online Casino & Sportsbook Malaysia

1. About This Privacy Policy

This Privacy Policy ("Policy") applies to kiss988 ("kiss988", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data submitted to or collected by the kiss988 platform at kiss988.org and all associated services (collectively, the "Platform").

By registering an account on kiss988, using the Platform, or interacting with our customer support team, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not use the kiss988 Platform.

This Policy should be read in conjunction with the kiss988 Terms & Conditions and Responsible Gaming Policy, both incorporated herein by reference.

2. Personal Data We Collect

kiss988 collects only the personal data reasonably necessary to provide, maintain, and improve the Platform, comply with legal obligations, and protect the interests of both players and the Platform. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (such as MyKad or passport number) collected during registration and KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address (including postcode).
• Financial Data: Payment method details, transaction history, deposit and withdrawal records, account balance history, and bank account or e-wallet identifiers (such as Touch n Go eWallet or Boost account references) to the extent necessary to process payments.
• Account Data: Username, encrypted password hash, account preferences, login timestamps, session duration data, and account activity logs.
• Technical Data: IP address, device identifiers, browser type and version, operating system, referring URLs, and general geographic location derived from IP address.
• Gaming Activity Data: Game history, wager amounts, win/loss records, bonus usage, and betting patterns, retained for operational, regulatory, and responsible gaming monitoring purposes.
• Communications Data: Records of your communications with kiss988 customer support, including chat transcripts, emails, and call records where applicable.

3. How We Collect Your Data

kiss988 collects personal data through the following primary channels:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical and behavioural data collected automatically when you use the Platform, including through cookies, web beacons, and server-side logging systems.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors, and fraud prevention agencies where you have authorised such sharing or where kiss988 is legally required to conduct such checks.

4. How We Use Your Personal Data

kiss988 uses the personal data it holds about you for the following purposes:

1. To create, verify, and maintain your kiss988 account and deliver the Platform's services to you.
2. To process deposits and withdrawals in MYR via your chosen payment method (Touch n Go eWallet, Boost, FPX, Visa, Mastercard, USDT, etc.).
3. To conduct identity verification (KYC) and age verification to ensure compliance with the 21+ age restriction and applicable regulatory requirements.
4. To detect, investigate, and prevent fraud, money laundering, and other prohibited activities in accordance with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
5. To provide customer support and respond to your queries, complaints, and account requests.
6. To send transactional communications including deposit confirmations, withdrawal receipts, and account security alerts.
7. To monitor gaming activity for responsible gaming purposes and enforce Platform-level responsible gaming controls such as deposit limits and self-exclusion.
8. To improve Platform functionality, personalise your user experience, and develop new features based on aggregated usage analysis.
9. To send promotional communications about kiss988 offers, bonuses, and platform updates — you may opt out of marketing communications at any time by contacting [email protected].

5. Legal Basis for Processing

kiss988 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the contract between you and kiss988, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with AML/CTF laws, regulatory reporting, and licensing conditions imposed by kiss988's gaming authority.
• Legitimate interests: Processing to protect kiss988 and its players from fraud, ensure platform security, and improve Platform services, where these interests are not overridden by your data protection rights.
• Consent: Where you have given explicit consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Sharing Your Personal Data

kiss988 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients where necessary to provide the Platform's services or comply with legal obligations:

• Payment processors: Your financial data is shared with payment service providers (including FPX operators, e-wallet providers such as Touch n Go and Boost, card networks, and crypto payment gateways) solely to process your transactions.
• KYC and fraud prevention providers: Identity verification partners and fraud detection services who assist kiss988 in verifying player identities and detecting suspicious activity.
• Game providers: To the extent technically necessary, certain account identifiers may be passed to third-party game studios (e.g., session tokens) to enable seamless game play. Game providers do not receive your full identity or financial data.
• Regulatory authorities: kiss988 may be required by applicable law, regulatory order, or court order to disclose certain player data to governmental or regulatory authorities. kiss988 will notify you of such disclosures where legally permitted to do so.
• Platform infrastructure providers: Cloud hosting and CDN providers who process data on kiss988's behalf under strict data processing agreements.

All third-party processors engaged by kiss988 are contractually obligated to process your data only as instructed by kiss988 and in accordance with applicable data protection law.

7. Cookies & Tracking Technologies

kiss988 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function, including session authentication cookies that keep you logged in to your kiss988 account.
• Performance cookies: Anonymous analytics data used to understand how players navigate the Platform, identify technical issues, and measure page performance.
• Functional cookies: Cookies that remember your preferences such as language and display settings.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. kiss988 does not use third-party advertising or cross-site tracking cookies.

8. Data Retention

kiss988 retains your personal data for as long as your account remains active and for a minimum period of five (5) years following account closure, in order to satisfy regulatory, AML/CTF, and licensing record-keeping requirements. Financial transaction records may be retained for longer periods where required by applicable law.

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to an individual player.

9. Security of Your Personal Data

kiss988 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and kiss988 servers.
• Encryption of sensitive data fields (including passwords, which are stored as salted hashes and never in plain text) within kiss988 databases.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Player-facing security features including SMS OTP verification for logins from new devices.

10. Your Privacy Rights

As a kiss988 player, you have the following rights in relation to your personal data, subject to applicable law and legitimate overriding interests (such as regulatory retention obligations):

• Right of Access: You may request a copy of the personal data kiss988 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to retention obligations.
• Right to Restriction: You may request that kiss988 temporarily restrict processing of your data while a dispute is resolved.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to kiss988.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. You may withdraw consent to marketing emails at any time.

To exercise any of these rights, contact kiss988 at [email protected]. kiss988 will respond to verified requests within 30 days. We may require identity verification before processing data access or deletion requests.

11. Children's Privacy

The kiss988 Platform is strictly intended for adults aged 21 and above. kiss988 does not knowingly collect personal data from persons under the age of 21. If kiss988 becomes aware that personal data has been collected from a person under 21 years of age, such data will be deleted immediately and the associated account closed. If you believe a minor has registered on kiss988, please notify us immediately at [email protected].

12. International Data Transfers

kiss988 operates under international online gaming authority licensing and utilises cloud infrastructure and third-party service providers that may be located outside Malaysia. Where personal data is transferred internationally, kiss988 ensures appropriate safeguards are in place, including contractual data processing agreements with standard data protection clauses.

By using the kiss988 Platform, you consent to the transfer of your personal data to the countries in which kiss988 and its service providers operate, subject to the protections described in this Policy.

13. Amendments to This Policy

kiss988 reserves the right to update this Privacy Policy at any time. When material changes are made, kiss988 will notify registered players via the email address associated with their account or by prominent notice on the Platform. The "Last updated" date at the top of this Policy will reflect the date of the most recent revision.

Your continued use of the kiss988 Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the kiss988 privacy team. We are available 24 hours a day, 7 days a week.

Email: [email protected]

For responsible gaming and self-exclusion requests, please visit our Responsible Gaming page.