Privacy Policy App Kiss918
for Malaysian Users

When you register and use the app kiss918 platform, we collect several categories of personal data necessary to ensure a safe, seamless gaming experience that complies with Malaysia's legal requirements. The data we collect falls into two main categories.

Data you provide directly:

• Full name as per Identity Card (MyKad) or passport
• An active and verifiable email address
• Registered Malaysian mobile number
• Date of birth (for age verification of at least 18 years)
• Bank account number and account holder name for deposit and withdrawal processing
• Copy of identification document during the KYC (Know Your Customer) process
• Account passwords are encrypted and unreadable by any of our staff

Data collected automatically:

• IP address and network information during login and throughout gaming sessions
• Device type, operating system, and web browser version used
• Gaming activity data: wagering, wins, losses, session duration, and transaction records
• General location data based on IP address (country/city level only, not GPS)
• Cookie data and session identifiers to maintain login status and user preferences

Your personal data is collected through various methods as you interact with the app kiss918 platform. We ensure every collection method is transparent and that you are always kept informed.

• Registration form: When you create a new account, you voluntarily provide basic personal information required to verify your identity.
• KYC Process: When you submit identification documents for identity verification prior to your first withdrawal, we store copies of those documents in an encrypted environment.
• Platform activity: Every action you take on the platform — deposits, wagering, withdrawals, and support requests — is automatically logged for security and audit purposes.
• Payment providers: When you make a deposit or withdrawal via FPX, DuitNow, Touch 'n Go, GrabPay, or ShopeePay, the payment provider may share basic transaction information with us for verification and fraud prevention purposes.
• Customer support: When you contact us via live chat or email, those conversations are recorded for reference and service quality improvement.

We never purchase or obtain your personal data from third-party data brokers or public sources without your knowledge. All data we hold is obtained directly through your interactions with the platform.

App kiss918 uses collected personal data for lawful and specific purposes only. We do not use your data for any purpose not stated in this policy without first obtaining your consent.

App kiss918 does not sell, rent, or trade your personal data to any third party for profit. However, in operating the platform, we may share limited data with the following categories of parties under certain circumstances:

• Payment providers: FPX, DuitNow, Touch 'n Go, GrabPay, ShopeePay, and crypto providers receive the transaction information required to process your payments. These providers are bound by strict data protection agreements.
• Game providers: Slot, Live Casino, and bingo providers may receive anonymized player identifiers for technical purposes to ensure smooth gameplay.
• Cloud services and infrastructure: Cloud server providers storing our platform data operate under strict confidentiality agreements and compliance with international security standards.
• Legal authority: We will disclose personal data when required by court order, law enforcement directive, or valid Malaysian legal compliance obligations.
• We does not share your personal data with advertising companies, data brokers, social media platforms, or any third parties not mentioned above.

All third parties we work with are required to sign data processing agreements ensuring they use your data only for specified purposes and protect it to a standard equivalent to ours.

The security of your personal data is our highest priority. app kiss918 invests in industry-grade security infrastructure to ensure your information is always protected against unauthorized access, breaches, or misuse.

• 256-bit SSL encryption: All data transmitted between your device and our servers is encrypted using the latest TLS protocol, ensuring no third party can intercept your information in transit.
• AES-256 encryption at the database level: All sensitive data stored — including banking information and KYC documents — is encrypted using the AES-256 standard, the same used by leading financial institutions worldwide.
• 24/7 threat monitoring: Our automated monitoring system detects and responds to suspicious activity in real time, including unauthorised login attempts.
• Two-factor authentication (2FA): Players can enable 2FA through account settings for an additional layer of security when logging in from a new device.
• Internal access controls: Only staff who require access to specific data to perform their duties are permitted to do so, with a full audit log maintained for every access.

Data retention period: Financial transaction data is retained for 7 years in accordance with Malaysian legal requirements. Active account data is retained for the duration your account remains active. After account closure, non-financial personal data will be deleted within 90 days, unless the law requires a longer retention period.

App kiss918 uses cookies and similar tracking technologies to enhance your experience on the platform and ensure technical functions operate correctly. Cookies are small text files stored on your device when you browse our platform.

• Session cookies (required): Used to maintain your login status and language preferences during a session. These cookies are deleted automatically when you close your browser.
• Functional cookies (required): Stores your preferences such as display format, preferred betting limits, and other account settings you have configured.
• Analytics cookies (optional): Collects anonymized usage data to help us understand which pages are most visited and how players interact with the platform.
• Security cookies (required): Helps us identify suspicious login attempts and protect your account against cyberattacks such as CSRF.

You can manage or delete cookies through your browser settings at any time. Please note that deleting essential cookies may affect certain platform functions, such as automatic login verification and saved account settings. Analytics cookies can be disabled without any impact on your gaming experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. app kiss918 fully respects and facilitates the exercise of these rights.