Kiss888 Privacy Policy – How We Protect the Personal Data of Malaysian Members

This Privacy Policy ("Policy") describes how Kiss888 ("we", "Platform") collects, uses, stores, discloses and protects your personal information when you register for, access or use the services provided through kiss888.biz and all associated sub-domains.

Kiss888 is a digital entertainment platform offering online casino, Live Casino, slots, table games, Sports Betting and in-play Live Matches exclusively for Malaysian players. All our services operate in MYR and are backed by a team that understands local users' needs.

This policy is built on the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. Our goal is straightforward – you have the right to know exactly what happens to your information, and we are fully committed to being transparent about it.

Kiss888 collects your personal data through several means — directly when you register and use the platform, automatically through platform technology, and in limited cases, via legitimate third parties. Below is more detail on each category:

2.1 Data You Provide Directly

• Full name as per identity card (MyKad)
• An active Malaysian mobile phone number
• Email address
• Date of birth
• Payment method details – Touch 'n Go eWallet account holder name, DuitNow, GrabPay, Boost, ShopeePay or FPX account number (Maybank2u / CIMB Clicks)
• Identity verification documents when requested for the KYC process
• Information you share when contacting our customer support team

2.2 Automatically Collected Data

• IP address and general geographic location information
• Device type, operating system, and web browser version
• Game history and betting activity within the platform
• Deposit and withdrawal transaction records
• Session duration, pages visited and navigation patterns within the platform
• Cookie data and similar tracking technologies
• Technical error logs and application crash reports

2.3 Data from Third Parties

In limited circumstances, Kiss888 may receive additional information from legitimate third parties for identity verification or fraud prevention purposes, including from our KYC service providers and licensed payment processing partners in Malaysia.

Kiss888 uses your personal data solely for lawful and necessary purposes in the operation of the platform. Below is a full table of our data use purposes:

Kiss888 will not use your data for any purpose not listed in the table above without first obtaining your explicit consent. If you have previously agreed to receive marketing communications from us, you may withdraw that consent at any time by clicking the "unsubscribe" link in any promotional email we send, or by contacting the Kiss888 support team.

This is the section most users are most curious about – who your data may be shared with. The short answer: Kiss888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes.

However, in the day-to-day operation of the platform, Kiss888 may need to share certain information with the following parties, strictly for the purposes stated:

• Malaysian Payment Processors: Information required to process transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX / Maybank2u and CIMB Clicks is shared with the respective providers in accordance with their data agreement terms.
• Game Providers: Session information and player IDs (without full name or financial details) are shared with licensed game providers for technical and game fairness audit purposes.
• KYC Service Providers: During the identity verification process, the document information you provide may be processed by a licensed third-party KYC provider bound by strict confidentiality agreements.
• Competent Authority: Kiss888 will disclose information to legal authorities, regulatory bodies or enforcement agencies when required to do so under applicable Malaysian law, or when we have reasonable grounds to believe that such disclosure is necessary to prevent crime or protect public safety.

Kiss888 takes data security seriously. This is not just words — here are the concrete security measures we have implemented to protect your information:

• 256-bit SSL Encryption: All data transmitted between your device and Kiss888's servers is encrypted using TLS 1.3 with 256-bit keys — the highest standard applied in the digital banking industry.
• Two-Factor Authentication (2FA): An additional security layer is available for all Kiss888 accounts. We encourage all members to enable 2FA through their account settings.
• 24/7 Monitoring: Our systems are monitored around the clock to detect suspicious activity, unauthorised login attempts and other security anomalies.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and identity documents, is encrypted at rest using AES-256 encryption.
• Strict Access Controls: Access to member personal data within our internal systems is restricted to staff who genuinely need it to perform their duties, with all access logged and periodically audited.
• Regular Penetration Testing: Kiss888 conducts regular security testing, including independent penetration testing, to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no technology system can guarantee absolute security. In the event of a significant security breach affecting your data, Kiss888 is committed to notifying you within a reasonable timeframe as required by applicable law.

You also play an important role in keeping your account secure. Make sure your Kiss888 password is strong and unique, never shared with anyone and updated regularly. Never log in to Kiss888 over an unsecured public Wi-Fi network.

Cookies are small text files stored by your web browser when you visit the Kiss888 platform. We use cookies and similar technologies for several distinct purposes. Below are the categories of cookies we use:

• Essential Cookies (Required): These cookies are required for the basic functioning of the platform — including login session authentication, security, and core platform preferences. Without them, the Kiss888 platform cannot operate properly. These cookies cannot be disabled.
• Performance Cookies (Optional): These cookies collect information about how you use the Kiss888 platform – which pages are visited most often, page load times and any errors you encounter. This helps us improve platform performance. No personally identifiable information is collected through these cookies.
• Functional Cookies (Optional): These cookies allow the platform to remember your preferences — such as language, display settings, and game preferences — to deliver a more personalised experience.
• Analytical Cookies (Optional): We use analytics tools to understand overall platform usage patterns for product improvement purposes. Analytics data is processed in aggregate and cannot be used to identify any specific individual.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Kiss888 platform. For further details on how to manage cookies in your browser, please refer to your browser's help documentation.

Kiss888 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required to meet applicable legal obligations. The following are our general data retention guidelines:

• Active Account Data: Retained for as long as your Kiss888 account is active, plus a further 5 years after account closure for AML and tax compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian accounting and financial regulatory requirements.
• Support Communication Logs: Retained for 2 years from the date of last interaction for service quality assurance purposes.
• Technical Data & System Logs: Retained for a maximum of 12 months for technical troubleshooting and security analysis purposes.
• KYC Documents: Retained in accordance with applicable legal requirements, typically not exceeding 5 years after account closure.

Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. You may also request early deletion — see Section 8 for your rights in this regard.

As a Kiss888 member, you hold important rights regarding your personal data. We fully respect these rights and make it easy for you to exercise them:

The Kiss888 platform is for adults aged Aged 18 and above only. Kiss888 does not knowingly collect, process or store personal data belonging to individuals under the age of 18.

Should we discover that personal data belonging to a minor has been collected inadvertently, we will take the following steps immediately:

• Immediate closure of the account in question
• Deletion of all related personal data from our systems
• Forfeiture of all remaining funds in the relevant account in accordance with our Terms & Conditions
• Reporting incidents to the relevant authorities where necessary

In the course of operating the Kiss888 platform, some of our technical service providers may store or process data on servers located outside Malaysia. When this occurs, Kiss888 ensures that such data transfers are carried out with appropriate safeguards, including:

• Data processing agreements that comply with international data protection standards
• Use of cloud service providers with recognised security certifications such as ISO 27001 and SOC 2
• Standard data protection clauses that bind third-party suppliers to protection standards equivalent to those we apply in Malaysia

We ensure that any country or organisation receiving your data provides an adequate level of protection equivalent to the standards required under Malaysian law. If you would like to know more about the specific safeguards applied to any data transfer, please contact us at support@kiss888.biz.

The Kiss888 platform may contain links to certain third-party websites or services – such as our licensed game providers or payment partners. This Privacy Policy applies solely to the Kiss888 platform and does not cover the privacy practices of any such third-party websites or services.

Kiss888 is not responsible for the content, privacy policies, or practices of any third-party websites you may access through links on our platform. We encourage you to read the privacy policy of each website you visit separately before providing them with any personal information.

Kiss888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements to our services. The "Updated" date at the top of this page will always reflect the date of the most recent revision.

When we make significant changes to this policy, we will notify you through:

• You will receive a prominent notification on the Kiss888 platform during your next login session
• Email to the address registered on your account, at least 14 days before the change takes effect
• A notice prominently displayed on the kiss888.biz homepage

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out to our team. We take every privacy enquiry seriously and are committed to providing clear, helpful responses.