Privacy Policy — kiss888

1. Introduction

kiss888 ("the Company", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with the kiss888 platform, located at kiss888.cam ("the Platform"). This Privacy Policy ("Policy") has been prepared in accordance with internationally recognised data protection principles and applicable regulatory requirements.

This Policy applies to all personal data collected from registered users, prospective users, and visitors to the Platform, regardless of their location. By accessing the Platform or creating an account, you ("the User", "you", or "your") acknowledge that you have read this Policy and consent to the data practices described herein.

kiss888 processes personal data only to the extent necessary to deliver its gaming services, fulfil legal obligations, and maintain the integrity and security of the Platform. We are transparent about what we collect, why we collect it, and how long we retain it.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, whether directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the Company, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of the Company under contractual instruction.
• "KYC Data" means identity verification documents and information collected during the Know Your Customer process, including government-issued identification, proof of address, and selfie photographs.
• "Transaction Data" means records of deposits, withdrawals, bets placed, game outcomes, bonus redemptions, and related financial activity on the Platform.
• "Cookies" means small data files placed on your device by the Platform for purposes including session management, preference storage, and analytics.

3. Personal Data We Collect

kiss888 collects the following categories of personal data, depending on your interaction with the Platform:

4. How We Collect Personal Data

Personal data is collected through the following channels:

• 4.1 Direct Submission: Data you provide voluntarily during account registration, KYC document submission, support contact, or promotional participation.
• 4.2 Automated Technical Collection: Data collected automatically as you interact with the Platform, including IP addresses, session data, click-stream behaviour, and device identifiers collected via cookies and similar technologies.
• 4.3 Payment Processing Partners: Transactional confirmation data shared by our payment processing partners, including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other supported Malaysian payment providers, limited to information necessary to verify and reconcile your transactions.
• 4.4 Identity Verification Services: In certain cases, we may use third-party identity verification service providers to assist in KYC document authentication. Such providers act as data processors under contractual agreements with the Company.

5. Purposes of Data Processing

kiss888 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and administering your user account, including authentication and access control.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) in accordance with anti-money laundering and responsible gambling obligations.
• Payment Processing: Facilitating deposits and withdrawals in MYR through supported Malaysian payment channels and verifying the legitimacy of financial transactions.
• Service Delivery: Providing access to games, sports betting markets, live dealer experiences, and all associated Platform features.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support service.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity account abuse, and security threats.
• Regulatory Compliance: Meeting legal obligations under applicable international online gaming regulations, anti-money laundering laws, and data protection frameworks.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw consent at any time.
• Platform Improvement: Analysing anonymised usage patterns to enhance Platform performance, game offerings, and user experience.

6. Legal Basis for Processing

kiss888 processes your personal data on the following legal bases:

• 6.1 Contractual Necessity: Processing required to perform our contract with you — including account operation, payment processing, and service delivery.
• 6.2 Legal Obligation: Processing required to comply with applicable laws including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• 6.3 Legitimate Interests: Processing carried out to protect the Platform and its users from fraud, abuse, and security threats, and to maintain the technical operation and improvement of the Platform.
• 6.4 Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

kiss888 does not sell personal data. We may share your personal data with the following categories of recipients, only to the extent necessary and under appropriate contractual safeguards:

• Payment Service Providers: Malaysian e-wallet operators, banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), and payment gateway providers, solely for transaction processing purposes.
• Identity Verification Providers: Third-party KYC service providers engaged to assist in document authentication and age verification, acting as data processors under written data processing agreements.
• Technology and Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data on our behalf under strict data processing agreements prohibiting independent use of your data.
• Regulatory and Law Enforcement Bodies: Where required by law, court order, or regulatory direction, we will disclose personal data to the relevant authorities. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where access to personal data is necessary in the course of their professional engagement with the Company.

8. Data Retention

Personal data is retained for no longer than is necessary for the purposes for which it was collected, subject to the following retention guidelines:

• Account and Identity Data: Retained for the duration of your account plus five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and Financial Data: Retained for seven (7) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for five (5) years from the date of submission or account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the interaction.
• Technical and Session Data: Retained for up to twenty-four (24) months for security monitoring and analytics purposes, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent.

On expiry of the relevant retention period, personal data is securely deleted, anonymised, or pseudonymised in accordance with our internal data disposal procedures.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by kiss888:

To exercise any of the above rights, please contact our support team via live chat or email. We will respond to all verified requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days with prior notification. We may request proof of identity before processing your request.

10. Cookies and Tracking Technologies

kiss888 uses cookies and similar technologies to ensure the proper functioning of the Platform and to improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to operate, including session management, authentication tokens, and security features. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Store your preferences such as language settings, game preferences, and responsible gambling configurations to personalise your experience across sessions.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation paths — to help us identify areas for improvement. No personally identifiable information is contained in analytics cookie data.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. For analytics cookies, you may opt out through your account preferences.

11. Data Security Measures

kiss888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including KYC documents and financial information.
• Multi-factor authentication (MFA) required for all internal administrative access to systems containing personal data.
• Role-based access controls ensuring only authorised personnel can access personal data, limited to what is necessary for their specific function.
• Continuous automated monitoring for anomalous access patterns, data exfiltration attempts, and security incidents.
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure.
• Formal data breach response procedures with defined escalation paths and notification timelines.

12. Minors and Age Restriction

The kiss888 Platform is strictly prohibited to individuals under the age of 21 years. We do not knowingly collect personal data from any individual below this age threshold. The Platform implements mandatory age verification as part of the KYC process to enforce this requirement.

If we become aware that personal data has been collected from an individual who has misrepresented their age during registration, we will immediately suspend the relevant account, delete the associated personal data, and return any funds deposited in accordance with our standard procedures for underage account closure.

Parents and guardians who become aware that minor may be using the Platform are requested to contact our support team immediately so that appropriate action can be taken without delay.

13. International Data Transfers

As an internationally licensed online gaming operator, certain elements of data processing may involve the transfer of personal data to service providers located in jurisdictions outside Malaysia. Where such transfers occur, kiss888 ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses, to ensure that your personal data receives a level of protection equivalent to that afforded within Malaysia and consistent with applicable international data protection standards.

14. Changes to This Privacy Policy

kiss888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material, we will notify you by email to your registered address and by prominent notice on the Platform at least fourteen (14) days prior to the updated Policy taking effect. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should discontinue use of the Platform and may request account closure.

All prior versions of this Policy are archived and available upon request from our support team.

15. Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how kiss888 handles your personal information, please contact us using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface. This is the fastest way to reach our support team.
• Email: [email protected] (plain text — not a clickable link) — we target a response within 2 business hours during Malaysian business hours (MYT, GMT+8).

When submitting a data rights request, please include your registered account email address and a description of your request. We may proof of identity before processing requests that involve access to or deletion of personal data.

For further information about your rights on the Platform, please also review our Terms & Conditions, our Responsible Gambling page, and our FAQ.