Kiss918 Privacy Policy – Your Data Is Protected In accordance with PDPA 2010

This Privacy Policy is issued by kiss918 ("we", "Platform") and applies to all individuals who interact with our platform, including:

• Registered members with an active kiss918 account;
• Individuals currently in the process of registering an account;
• Visitors who browse the kiss918 website without registering;
• Former members whose accounts have been closed but whose data is still retained in accordance with legal obligations.

This policy covers all personal data collected through the kiss918 platform, including the website, mobile app (if applicable), and any interactions with our customer support team via live chat or email.

Kiss918 collects personal data from several sources and across multiple categories. We only collect data that is necessary for clearly stated purposes:

Data you provide directly:

• Full name (as shown on identity card);
• An active Malaysian mobile number;
• Email address (if provided during registration);
• Account username and password (passwords are stored in encrypted form);
• Bank or e-wallet details for withdrawal purposes (account number, account holder name);
• Identity verification documents (KYC) submitted for large withdrawal verification.

Automatically collected data:

• The IP address of the device used to access kiss918;
• Device type, operating system, and web browser;
• Access times and dates, pages visited;
• Game activity history — slots played, bets placed, wins and losses;
• Complete deposit and withdrawal transaction records;
• Interaction logs with the customer support team.

Kiss918 uses your personal data solely for the following purposes. We will not use your data for any other purpose without notifying you in advance:

• Account Management: Creating and maintaining your kiss918 account, processing registrations, OTP verification, and login monitoring;
• Financial Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u and CIMB Clicks, as well as withdrawal of winnings in Malaysian Ringgit (MYR);
• Security & Anti-Fraud: Detecting and preventing fraudulent activity, multiple account ownership, money laundering, and any other misuse of the platform;
• Legal Compliance: Fulfilling obligations under PDPA 2010, anti-money laundering laws (AMLA), and other applicable compliance requirements;
• Customer Support: Helping you resolve account, transaction and game-related issues via live chat or email;
• Platform Improvements: Analysing usage patterns in aggregate (not individually) to improve the kiss918 platform experience;
• Promotional Communications: Sending you information about promotions, new bonuses, and special offers — you may unsubscribe from these communications at any time;
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance where needed.

Under the Malaysian Personal Data Protection Act 2010 (PDPA 2010), kiss918 requires a valid legal basis for processing each category of your personal data. The bases we rely on are as follows:

• Contract Performance: Data processing necessary to deliver the services you have requested — including managing your account, processing deposits and withdrawals in MYR, and providing access to slots, Sports Betting and other games on kiss918;
• Legal Compliance: Processing data required to fulfil our legal obligations under PDPA 2010, AMLA, and other applicable regulations;
• Legitimate Interest: Processing for fraud prevention, platform security, and service improvement purposes — provided these interests do not override your privacy rights;
• Consent: For marketing communications and any processing not covered by the bases above — we will request your explicit consent, which you may withdraw at any time.

Kiss918 does not sell, rent, or transfer your personal data to third parties for commercial purposes. However, there are limited circumstances under which data may be shared with specific parties:

• Payment Providers: Data required to process your financial transactions is shared with the Malaysian payment providers we work with — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks. This is limited strictly to the data needed to complete each transaction;
• Game Software Providers: Minimal technical data may be shared with slots providers such as Pragmatic Play, PG Soft, and Spadegaming for the purposes of game result verification and RTP auditing. No personally identifiable data is shared with game providers;
• Legal Authority: Kiss918 will disclose data when required by Malaysian law or pursuant to a valid court order — including investigations relating to money laundering, fraud, or other financial crimes;
• Internal Service Providers: Companies that support our operations — such as IT infrastructure providers and cybersecurity services — are bound by strict confidentiality agreements and may only use your data for the specific purposes agreed upon.

Kiss918 invests seriously in security infrastructure to ensure the personal data of every Malaysian member is protected against unauthorised access, theft, and breaches. Key security measures we have in place include:

• AES-256 Encryption: All data stored in the kiss918 database is encrypted using AES-256 — the same encryption standard used by financial institutions and governments worldwide;
• SSL/TLS 256-bit: All communications between your device and kiss918's servers are transmitted via a secure HTTPS connection with a 256-bit SSL certificate, ensuring your data cannot be intercepted in transit;
• Two-Factor Authentication (2FA): OTP SMS is used to verify your identity during registration and sensitive operations such as password changes or withdrawals;
• Internal Access Controls: Only kiss918 staff with a legitimate business need are granted access to member data, and all such access is logged and continuously monitored;
• 24/7 Security Monitoring: Automated security monitoring systems operate around the clock to detect suspicious activity, intrusion attempts, or unusual access patterns;
• Regular Security Audits: The kiss918 platform undergoes periodic independent third-party security audits to identify and address any potential vulnerabilities.

Even with all these measures in place, no security system is completely impenetrable. We encourage you to play your part in keeping your account safe — use a strong password, never share your login credentials with anyone, and contact kiss918 support immediately if you notice any suspicious activity on your account.

Kiss918 retains your personal data for as long as necessary to fulfil the purposes described in this policy, or for as long as required under Malaysian law. Retention periods for key data categories are as follows:

• Active Account Data: For the duration your account remains active, plus any additional retention period required by law following account closure;
• Financial Transaction Records: A minimum of 7 years from the transaction date, in accordance with Malaysian financial and tax regulatory requirements;
• Support Communication Logs: 2 years from the date of last interaction for dispute resolution purposes;
• KYC Data (Verification Documents): For the duration of the active account plus 5 years following account closure, in accordance with AMLA requirements;
• Technical Data & Access Logs: 12 months for security and fraud detection purposes.

Once the retention period expires, your data is securely deleted using methods that ensure it cannot be recovered. For data in digital format, deletion follows certified security-grade overwriting standards.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to the personal data we hold:

To exercise any of the rights above, please contact the kiss918 privacy team by email at support@kiss918-jit.com or via live chat within the platform. Please include your registered account number and a clear description of your request. We will respond within 14 business days.

The kiss918 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small files stored on your device when you visit our website.

Types of cookies we use:

• Session Cookies: Temporary cookies that keep you logged in during your current session. These are automatically deleted when you close your browser. They are the most essential cookies required for the kiss918 platform to function — without them, you would need to log in again each time you load a new page;
• Preference Cookies: Saving your preferences such as display language, last-used game settings, and recent browsing history to make your next visit to kiss918 smoother;
• Analytics Cookies: Collecting usage data in aggregated, anonymised form to help us understand how players use the kiss918 platform and where improvements can be made. This data is not linked to your personal identity;
• Security Cookies: Used to identify suspicious activity, bot attacks, and unauthorised login attempts — these cookies are essential to keeping your account secure.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the kiss918 platform — particularly session cookies required to stay logged in.

Kiss918 takes the protection of minors very seriously. Our platform is strictly for individuals aged 18 and above.

We do not knowingly accept, process, or store personal data from individuals under the age of 18. If we discover that someone under 18 has registered an account by misrepresenting their age:

• The account will be closed immediately;
• All data associated with that account will be promptly deleted;
• Any balance or winnings in that account will not be refunded, as they were obtained through fraudulent means;
• Such cases may be reported to the relevant authorities if deemed necessary.

Kiss918 reserves the right to amend, update, or modify this Privacy Policy at any time. Changes may arise from updates to Malaysian privacy laws, operational changes to the kiss918 platform, or in response to new technological developments.

When significant amendments are made to this Privacy Policy:

• A notification will be displayed on the kiss918 platform upon your next login;
• Notifications may be sent to your registered phone number or email address for changes that affect your fundamental rights;
• This page will be updated with the latest amendment date.

Continued use of the kiss918 platform after the stated amendment date constitutes acceptance of the updated privacy terms. We encourage you to review this page from time to time, particularly before making significant financial transactions.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way kiss918 handles your personal data, we encourage you to reach out to us directly. We prefer to resolve any privacy issues informally and directly in the first instance.

How to contact the kiss918 privacy team:

• Email: support@kiss918-jit.com — please include the words "Privacy Enquiry" in your email subject line along with your registered account number (if applicable);
• Live Chat: Available directly on the kiss918 platform, 24 hours a day, 7 days a week, including Malaysian public holidays;
• Response Time: Privacy-related enquiries are typically responded to within 2–5 business days. For more complex cases, we may require up to 21 business days.

If you are not satisfied with how we have handled your privacy concerns after contacting us, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP) or any other relevant regulatory authority in Malaysia.