🔒 PERSONAL DATA PROTECTION

Kiss918 Privacy Policy – How We Protect the Personal Information of Malaysian Players

At Kiss918, your privacy is not merely a legal obligation — it is a responsibility we take seriously. This Privacy Policy clearly sets out what data we collect, how it is used, who can access it, and your right to full control over it.

Last Updated: 1 July 2026
Important Note

By using the Kiss918 Platform, you agree to the data collection and usage practices described in this Privacy Policy. Please read this document in full to understand your privacy rights.


Kiss918's Six Privacy Commitments to You

These are not empty promises — each of these commitments is backed by real technical infrastructure and operational procedures on the Kiss918 platform.

256-Bit SSL Encryption at All Times

Every bit of data transmitted between your device and Kiss918's servers — from login credentials to transaction details — is protected by 256-bit SSL encryption. This is the same security standard used by Malaysia's leading banking institutions, such as Maybank and CIMB, to safeguard their customers' data.

Your Data Is Never Sold

Kiss918 has never and will never sell, rent or trade members' personal information to any third party for marketing or commercial purposes. Your data is used solely for the purposes you consented to upon registration — nothing more.

Full Control in Your Hands

You have the right to access, correct, download, and delete your personal data from Kiss918's systems at any time. Requests can be made through your account settings or by contacting our support team — and will be processed within 14 business days.

Limited & Secure Data Retention

Kiss918 only retains data for as long as necessary for the stated purpose. Transaction data is kept for 90 days for customer support purposes, while account records are retained for the duration the account is active and up to 5 years after closure to meet financial compliance requirements.

Malaysia PDPA Compliance

The Kiss918 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means that as a Malaysian player, you have clear legal protections governing how your data is handled on our platform.

Notification & Marketing Controls

You have full control over the notifications you receive from Kiss918 — from promotional emails to in-app push notifications. You can limit, customise or unsubscribe from any marketing communications at any time from your account settings without needing to contact customer support.


Summary of Data We Collect

A quick overview of the types of data collected, the reasons for collection and how long it is retained in Kiss918's systems.

Data Type Example Purpose of Collection Retention Period
Identity Data Name, IC number, date of birth Account verification & KYC Throughout the active account period + 5 years
Contact Data Email address, phone number Communication & customer support Duration of active account + 2 years
Financial Data Deposit, withdrawal, and balance records Transaction processing & compliance 5 years from the transaction date
Gaming Data Betting history, wins, losses Technical support & responsible gambling management 90 days (extendable upon request)
Technical Data IP address, device type, browser Security & Fraud Prevention Rolling 30 days
Cookie Data Language preference, login session A better user experience Up to 12 months (deletable)
Marketing Data Communication preferences, promotional responses Relevant promotions (with consent only) Until unsubscribed

1
Introduction & Scope of Privacy Policy

This Privacy Policy is published by Kiss918 ("we", "the platform" or "Kiss918") to explain how we collect, use, store, disclose and protect the personal information of members and users of the kiss918.express Platform ("Platform"). This document forms part of the overall agreement between you and Kiss918 and should be read together with Terms & Conditions our platform.

Kiss918 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection laws. We recognise that your trust is our most valuable asset, and that protecting your personal data is the foundation of the relationship we build with our player community across Malaysia.

This Privacy Policy applies to all information you provide to us directly — for example when registering an account, making a deposit or contacting customer support — as well as information we collect automatically when you use our Platform. It also covers information we receive from authorised third parties such as payment service providers including Touch 'n Go eWallet, GrabPay, DuitNow and FPX.

Periodic Updates

This Privacy Policy is updated from time to time to reflect changes in our data handling practices or new legal requirements. Any material changes will be communicated to you via your registered email address at least 7 days before they take effect.


2
Types of Personal Data We Collect

Kiss918 only collects data that is genuinely necessary to provide the services you use. We do not collect excessive or irrelevant data beyond what is required to operate the platform. Below are the categories of data we collect, along with the context in which they are collected:

A. Data You Provide Directly

  • Registration data: Your full name, Malaysian phone number, email address and date of birth as entered when creating your Kiss918 account
  • Identity verification (KYC) data: A copy of your identity document (MyKad or passport), a verification selfie, and proof of address such as a utility bill or bank statement — collected only when required to verify your identity or process large withdrawals
  • Payment data: Bank account number or digital wallet (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) registered for withdrawal purposes — we do not store any credit card or debit card information
  • Support communications: The content of messages, emails or live chat sessions you send to the Kiss918 support team

B. Automatically Collected Data

  • Technical data: IP address, device type, operating system, web browser version and screen resolution — collected automatically when you access the Kiss918 Platform
  • Usage data: Pages visited within the Platform, time spent in each section, games played, and general navigation patterns — used to improve the user experience
  • Session data: Login tokens, active session timestamps, and in-account activity records — used for security purposes and to detect unauthorised access

C. Data from Authorised Third Parties

  • Payment confirmations from service providers such as DuitNow and FPX confirming the status of deposit and withdrawal transactions
  • Age verification information from third-party KYC services used to comply with the minimum age requirement of 21 years

3
How Kiss918 Uses Your Data

Kiss918 uses your personal data only for legitimate, clearly stated purposes. We do not use your data for any purpose for which you have not given consent, whether explicitly or as implied by the context of your Platform use:

Primary Purposes (Required for Service):

  • Creating and managing your Kiss918 account — the registration process, identity verification and account security management
  • Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals to registered accounts
  • Providing access to all games on the Kiss918 Platform — Live Casino, Table Games, Poker, Lottery, Sports Betting, and Virtual Sports
  • Managing your VIP Rewards programme, including Points calculation, tier upgrades, and daily rebate crediting
  • Providing customer support and resolving any enquiries or complaints you submit
  • Detecting and preventing fraud, money laundering and activities that violate the platform's Terms & Conditions

Secondary Purposes (With Your Consent):

  • Sending information about promotions, bonuses and new offers at Kiss918 — only where you have given consent to receive marketing communications
  • Conducting customer satisfaction surveys to improve the quality of the Kiss918 Platform's services
  • Analysing usage patterns on an aggregate (not individual) basis to plan platform improvements and new game offerings
What We Do NOT Do with Your Data

Kiss918 does not sell your personal data to advertisers or third-party marketing companies. We do not use your gaming data to build psychographic profiles. We do not employ automated decision-making systems that materially affect your rights without human oversight.


4
Data Sharing with Third Parties

Kiss918 understands that your trust depends on the assurance that your data will not be shared arbitrarily. We only share your personal data in limited, clearly defined and lawful circumstances. Below is the complete list of situations in which your data may be shared:

Trusted Service Providers:

  • Payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and banks via FPX need to receive minimum transaction information in order to process your deposits and withdrawals. Only the information necessary to process the specific transaction is shared — not your full profile data
  • KYC providers: The third-party identity verification service we use to verify MyKad and related documents — operating under a strict confidentiality agreement with Kiss918
  • Technical infrastructure providers: Cloud computing and hosting services that store Kiss918 Platform data — all operating under data processing agreements that comply with the PDPA and international standards

Legal Requirements:

  • Kiss918 may be required to disclose your personal data where mandated by Malaysian law, court order, or a lawful request from a competent authority such as the police, the Malaysian Anti-Corruption Commission, or the Inland Revenue Board
  • In such cases, we will notify you of the disclosure where permitted by law to do so

Kiss918 never sell, rent, or disclose your personal data to any party for marketing, advertising, or other commercial purposes without your explicit consent. Every third-party service provider working with us is bound by contractual agreements that prohibit them from using your data for any purpose beyond what is specifically defined.


5
Security & Data Protection

Kiss918 invests significantly in security infrastructure to ensure your personal data is protected from unauthorised access, loss, modification, or disclosure. The following are the layers of protection we employ:

256-bit SSL

Data Encryption in Transit. All communications between your browser or app and Kiss918's servers are encrypted using TLS 1.3 with a 256-bit cipher suite. This ensures that no third party can intercept or read data transmitted during your session.

AES-256

Data Encryption at Rest. Sensitive data stored in the Kiss918 database — including identity information and payment details — is encrypted using AES-256 encryption at rest. Passwords are never stored in plain text.

2FA

Two-Factor Authentication. Kiss918 supports and encourages the use of two-factor authentication (2FA) for all accounts. With 2FA enabled, accessing your account requires both your password and an OTP verified through your registered phone number — protecting you even if your password is ever compromised.

24/7 Monitoring

Real-Time Threat Detection System. The Kiss918 security team uses automated monitoring systems that operate around the clock to detect suspicious activity — including unusual login attempts, abnormal transaction patterns and access attempts from unrecognised locations.

Regular Audits

Independent Security Audit. Kiss918's security infrastructure is regularly audited by iTech Labs and independent cybersecurity firms to identify vulnerabilities and ensure security standards remain current against the latest threats.

While Kiss918 takes comprehensive security measures, no system can guarantee 100% absolute security. You also play an important role in protecting your account — use a strong and unique password, enable 2FA and never share your login credentials with anyone. Report any suspicious account activity to the Kiss918 support team immediately.


6
Cookies & Tracking Technologies

Like most online platforms, Kiss918 uses cookies and similar tracking technologies to enhance the user experience, maintain security, and understand how our Platform is used. The following are the types of cookies we use:

You can manage your cookie preferences at any time through your web browser settings. Disabling essential cookies may affect core Kiss918 Platform functionality such as the ability to stay logged in. Disabling analytics or marketing cookies will not affect your ability to play or use any platform features.

Kiss918 does not use third-party cross-site tracking technologies to monitor your online activity outside of our Platform. Our cookie data is not shared with third-party advertisers.


7
Your Privacy Rights as a Kiss918 Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Kiss918's privacy commitments, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data Kiss918 holds about you. This request can be made through customer support and will be processed within 14 business days. Data will be provided in a readily readable format.

Right to Correction

If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. For basic details such as phone number and email address, this can be done directly from your account settings.

Right to Erasure

You may request the deletion of your personal data from Kiss918's systems upon account closure, provided there are no legal or contractual obligations requiring us to retain it (for example, financial records for tax compliance purposes). Deletion will be carried out within 30 days of request confirmation.

Data Portability Rights

You have the right to receive a copy of your personal data in a machine-readable format (CSV or JSON) for transfer to another service if needed. This request will be processed within 14 business days.

Right to Object to Processing

You can object to the use of your data for direct marketing purposes at any time — simply update your communication preferences in your account settings or click "unsubscribe" in any marketing email you receive from Kiss918.

Right to Restrict Processing

In certain situations — such as when you dispute the accuracy of your data or are assessing whether Kiss918 has a legitimate legal basis to process it — you may request a temporary restriction on data processing while the matter is being resolved.

To exercise any of the rights above, contact the Kiss918 privacy team at support@kiss918.express, stating the specific right you wish to exercise and the information required to verify your identity. We will acknowledge receipt of your request within 48 hours and resolve it within 14 business days.


8
Protection of Children's Data

Kiss918 enforces a minimum age requirement 21 years old for all members and users of the Platform. We do not knowingly collect or process personal data of any individual under the age of 21. This Platform is not designed for or directed at children or minors.

If Kiss918 discovers that personal data of an individual below the minimum age has been collected unintentionally, we will take immediate steps to delete that data from our systems and close the account in question. If you become aware that an underage individual has registered or accessed the Kiss918 Platform, please notify us immediately at support@kiss918.express.

Parental & Guardian Responsibility

If you are a parent or guardian, please take the appropriate steps to ensure that individuals in your care do not access the Kiss918 Platform. This includes keeping your devices and accounts protected with strong passwords, and having open conversations with your teenage children about the risks of online gambling.


9
Cross-Border Data Transfers

Part of Kiss918's technical infrastructure may involve transferring personal data to other countries for processing or storage purposes, including the use of international cloud computing services that comply with high security standards. Kiss918 ensures that any such transfers are carried out with adequate safeguards including:

  • Use of cloud service providers with internationally recognised security certifications (ISO 27001, SOC 2)
  • Binding data processing agreements requiring a level of protection equal to or greater than Malaysia's PDPA
  • Data encryption in transit and at rest across all storage locations
  • Strict access controls ensure that only authorised personnel can access your personal data

Kiss918 does not transfer personal data to countries without adequate data protection laws unless appropriate contractual safeguards are in place. If you would like to know more about the data transfer mechanisms we use or the countries where your data may be stored, please contact us at support@kiss918.express.


10
Contact Us About Privacy

Kiss918 takes all privacy and data protection enquiries, concerns, and complaints seriously. If you have any questions about this Privacy Policy or how we handle your personal data, there are several ways to get in touch with us:

  • Privacy email: support@kiss918.express — include "Privacy Enquiry" in your email subject line to help us handle your request more efficiently
  • Live chat: Available 24/7 within the Kiss918 Platform for general privacy enquiries
  • Written enquiries: For formal requests relating to privacy rights such as data access or deletion, email is the most appropriate channel as it creates a clear record

Kiss918 is committed to handling all privacy enquiries seriously and within a reasonable timeframe. We will acknowledge receipt of your enquiry within 48 hours and provide a full response within 14 business days. If the matter raised requires more time for thorough investigation, we will keep you informed of the expected timeline and progress.

If you are not satisfied with how Kiss918 has handled your privacy query or complaint after going through our internal process, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia under the PDPA 2010.


FAQ – Kiss918 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection on the Kiss918 platform.

Absolutely not. Kiss918 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is shared only with the service providers necessary to operate the Platform — such as payment providers Touch 'n Go, GrabPay, or DuitNow to process your transactions — and only the minimum information required for that specific task is shared. All such providers are bound by strict confidentiality agreements.

Yes, you have the right to request deletion of your personal data from Kiss918's systems, particularly upon account closure. However, there are certain exceptions where we are legally required to retain specific data — for example, financial transaction records must be kept for the period stipulated under Malaysian tax and financial compliance laws. For data not subject to any legal retention requirement, deletion will be carried out within 30 days of confirming your request. Contact support@kiss918.express to initiate this process.

Kiss918 retains your betting history for 90 days for the purposes of technical support, dispute resolution, and responsible gambling management. Access to this data within Kiss918's internal systems is restricted to staff with a legitimate business need — such as the customer support team resolving complaints or the security team investigating suspicious activity. This data is not used to make automated decisions that are detrimental to you, and you may request a copy of your own betting history at any time.

Kiss918 does not store your credit card or debit card information on our systems. For payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, the payment process is handled entirely by those service providers — Kiss918 only receives confirmation that the payment was successful, not your financial details. For bank accounts registered for withdrawal purposes, we store only the bank name and account number in encrypted form, used solely to process withdrawals you have requested.

Yes, it is entirely your choice. You can stop receiving promotional emails from Kiss918 in two ways: by clicking the "unsubscribe" link found at the bottom of any marketing email you receive, or by updating your communication preferences directly in your Kiss918 account settings under the "Notifications" section. Changes will take effect within 48 hours. Unsubscribing from marketing emails does not affect important transactional emails such as deposit confirmations, account security notifications or responses from the customer support team — these will continue to be sent as they are part of the core service.

Should Kiss918 need to cease operations or be transferred to another entity, we are committed to notifying all active members at least 30 days in advance. In such a case, you will be given the option to download a copy of your personal data, request data deletion, or provide consent for your data to be transferred to a successor entity where applicable. All account balances will be processed and returned to members prior to the cessation of operations. Kiss918 is committed to ensuring an orderly transition that protects the rights and interests of all members under any operational change scenario.

Why Data Privacy Matters for Online Casino Players in Malaysia

When you register an account with any online casino platform, you provide more sensitive information than most other online sign-ups — your full name, identity card number, bank or digital wallet details, and detailed financial activity records. This means the platform you choose is not just about which games are available or how large the welcome bonus is. It is also about how seriously that platform takes your privacy and data security.

At Kiss918, we understand that most Malaysian players have very valid concerns about their data privacy in the context of online gambling. You may not want family members, employers, or acquaintances to know about your online casino activity — and you have every right to enjoy this form of entertainment privately, as long as it is done responsibly and on your own terms. This is why personal data protection is at the core of how Kiss918 is designed and operated.

A Privacy Policy Written in Plain Language

One of the most common complaints from online casino players is that the privacy policies of the platforms they use are too lengthy, too technical, and nearly impossible to understand without a legal background. Kiss918 takes a different approach — we have written this Privacy Policy in language that any ordinary Malaysian player can understand, without compromising the legal accuracy required to comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

This is not merely a design choice — it is a statement of values. When Kiss918 uses plain language to explain how your data is handled, we are acknowledging that you have the right to make informed decisions about your own data. Transparency is not optional — it is the foundation of the trust we are working to build with our player community.

Malaysia's PDPA and What It Means for You

The Personal Data Protection Act 2010 (PDPA) is Malaysia's primary law governing how companies collect and use the personal data of Malaysians. Under the PDPA, every Malaysian individual has the right to access data held about them, request correction of inaccurate data, be informed of the purpose for which their data is collected and object to their data being used for direct marketing.

Kiss918 has designed this Privacy Policy to be fully compliant with all PDPA requirements. This means that when you register an account with Kiss918, you have clear legal protections over your data — not just a company's promise. If at any point you feel that Kiss918 has violated your privacy rights under the PDPA, you have a formal avenue to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Payment Security in Malaysia's Digital Ecosystem

Malaysia's digital payment ecosystem has grown rapidly over the past few years. Many Kiss918 players use Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay as their primary payment method — the same platforms they use to pay tolls, order food, or shop online. Integrating these payment methods into the Kiss918 platform offers tremendous convenience, but it also carries serious security responsibilities.

Kiss918 manages these payment integrations on a "minimum necessary data" basis — we only receive confirmation that a payment has been successfully processed from the service provider, not your full financial details. This means that even in the unlikely event of a security incident on Kiss918's systems (which has never occurred), your complete digital wallet or bank account information would not be exposed from our end.

Finally, Kiss918 wants to make clear that this Privacy Policy is not a static document written once and forgotten. We review and update it regularly to reflect changes in technology, legislation and industry best practices. Each new version comes with a clear summary of changes so you always know what has changed and why. Your trust is something we work to earn every day — and transparency in data handling is a big part of that effort within the kiss918 community.


Read Alongside Kiss918 Terms & Conditions

This Privacy Policy should be read together with Kiss918 Terms & Conditions and Responsible Gambling Policy us for a full understanding of your rights and responsibilities as a platform member. These three documents together form the framework of Kiss918's commitment to the Malaysian player community.


🔒 YOUR DATA IS SAFE WITH KISS918

Play with Confidence on a Platform That Respects Your Privacy

Over 500,000 Malaysian players have trusted Kiss918 with their personal information — and we take that trust seriously every single day. Register for free now and enjoy an online casino experience that is safe, fair, and respectful of your privacy.

Age limit 21 and above. Bet responsibly. Learn more.

Bahasa Melayu