Kiss888 Privacy Policy — Our Commitment to Protecting Your Personal Data in Malaysia

Welcome to the Kiss888 Privacy Policy. This document is written for Kiss888 members in Malaysia and sets out clearly how we — Kiss888, operating through https://kiss888.click — handle the personal data you share with us when using our online entertainment platform.

Kiss888 is a digital entertainment platform offering slots, Sports Betting, Live Casino, E-Sports, lottery, and jackpot games to adult users in Malaysia. In operating these services, we need to collect and process certain personal data from you. We recognise that personal data is a sensitive matter, and we are committed to handling it with full accountability, transparency, and respect for your privacy rights.

This Privacy Policy applies to all personal data collected by Kiss888 through our platform, including the kiss888.click website, any Kiss888 mobile applications, and our communication channels such as Live Chat, email, and WhatsApp. By registering a Kiss888 account or using any of our services, you confirm that you have read and understood this Privacy Policy.

Kiss888 collects personal data from you in several ways — directly when you interact with our platform, automatically as you use our services, and in some cases through legitimate third parties. Below is a full breakdown of the types of data we collect:

Kiss888 follows the principle of data minimisation — we only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data categories such as your health information, religious beliefs, or political affiliations.

Kiss888 uses collected personal data only for legitimate and specific purposes. We do not process your data for any purpose beyond what is stated here without first obtaining your consent:

• Account Management: Creating, verifying, and managing your Kiss888 account, including the login process, two-factor security verification, and password recovery.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, as well as withdrawals of winnings to your Malaysian bank account.
• Service Delivery: Enables you to access and enjoy all Kiss888 games and services, including slots, Sports Betting, lottery, live matches, jackpots, and e-sports.
• Identity Verification & KYC: Meeting legal compliance obligations including age verification, identity verification, and anti-money laundering (AML) requirements.
• Customer Support: Handling your enquiries, complaints, and support requests via Live Chat, email, or other support channels.
• Platform Security: Detecting and preventing fraud, multi-account usage, bonus abuse, and other security threats to the Kiss888 platform and its members.
• Service Improvement: Analysing aggregated and anonymised usage patterns to understand how users interact with the Kiss888 platform for the purposes of continuous improvement.
• Marketing Communications (with consent): Sending you information about Kiss888 promotions, bonuses, and updates — only if you have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of unhealthy play and to offer support or enforce limits you have set for yourself.

Kiss888 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. However, there are limited circumstances in which Kiss888 may share your personal data with certain parties to enable our services to function or to fulfil legal obligations:

• Payment Processors: Transaction information is shared with recognised payment processors such as DuitNow, Touch 'n Go eWallet, GrabPay, and Malaysian banks to enable deposits and withdrawals to be processed securely.
• Game Providers: The minimum technical data required to run a gaming session is shared with licensed game providers such as Pragmatic Play, PG Soft, and others — solely for the purpose of operating the games.
• IT Service Providers: Providers of technical infrastructure, hosting, and cybersecurity services that support Kiss888's platform operations. All such providers are bound by strict data protection agreements.
• Government Authorities: Kiss888 may be legally required to disclose certain data to Malaysian authorities such as Bank Negara Malaysia, the police, or a court — when lawfully ordered to do so.
• Regulatory Authority: The minimum data required for audit and licensing compliance purposes may be shared with the relevant regulatory authorities.

In all permitted instances of data sharing, Kiss888 ensures that recipients uphold data protection standards equivalent to or higher than our own, and that the data is used solely for the specific purpose that necessitated the sharing.

Kiss888 invests seriously in security systems and procedures to protect your personal data from unauthorised access, loss, damage, or disclosure. Below is an overview of the technical and organisational security measures we have in place:

• Data-in-Transit Encryption: All communications between your device and Kiss888's servers are protected with 256-bit SSL/TLS encryption — the highest encryption standard used in the financial and banking industry.
• Data-at-Rest Encryption: Sensitive data — including financial details, KYC documents, and passwords — is stored in encrypted form within the Kiss888 database, never as plain text.
• Role-Based Access Control: Only Kiss888 staff with a legitimate business need are granted access to member personal data, and only to the data relevant to their role.
• Two-Factor Authentication: Kiss888 provides and encourages the use of two-factor authentication (2FA) for all member accounts as an additional layer of security.
• Continuous Security Monitoring: Kiss888's automated monitoring system operates around the clock to detect suspicious access attempts, cyberattacks, and other security anomalies in real time.
• Regular Security Audits: Kiss888 conducts regular internal and external security audits to identify and address any vulnerabilities in our systems before they can be exploited.
• Staff Training: All Kiss888 staff who handle personal data undergo comprehensive data protection training that is reviewed and updated on a regular basis.

Kiss888 uses cookies and similar tracking technologies to enhance your user experience, ensure the platform runs smoothly, and understand how users interact with our platform. Here is a straightforward breakdown of the cookies we use:

• Essential Cookies (Required): These cookies are required for the Kiss888 platform to function — including login session cookies, security tokens, and cookies that store your language preferences. Without them, you will not be able to use our platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred currency, favourite game types, and display settings — to deliver a more personalised experience.
• Analytics Cookies: We use aggregated, anonymised analytics data to understand which pages are most visited, how long users spend in certain sections, and where they encounter difficulties — all for the purpose of improving the Kiss888 platform.
• Security Cookies: Specialised cookies that help Kiss888's security systems detect suspicious login attempts, CSRF attacks, and other security threats.

You can manage your cookie preferences through your web browser — most modern browsers allow you to view, delete, and block cookies from specific websites. However, blocking essential cookies may prevent you from accessing certain features of the Kiss888 platform in full.

Kiss888 does not retain your personal data for longer than is necessary for the purposes for which it was collected, or longer than required under applicable Malaysian law. The following is a general guide to our data retention periods:

• Active Account Data: Retained for the duration your Kiss888 account remains active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian tax and anti-money laundering legislation.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with AML/KYC compliance requirements.
• Support Communication Logs: Support conversation records are retained for 2 years for training and quality assurance purposes.
• Security Log Data: Technical security logs are retained for 12 months for the purposes of security incident investigation where necessary.

When data is no longer needed and there is no legal obligation to retain it, Kiss888 will securely delete or anonymise it in accordance with industry-standard procedures.

As a Kiss888 user in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). Kiss888 respects and facilitates the exercise of these rights:

To exercise any of the rights above, contact Kiss888's Data Protection Officer at support@kiss888.click with the subject line "Data Privacy Rights Request". Please include your full name, Kiss888 account number, and a brief description of your request. We will process your request within 21 business days.

Kiss888 is an exclusive entertainment platform for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Protecting children and young people is our highest priority.

Steps Kiss888 takes to prevent underage access include:

• An age verification process during registration that requires a valid date of birth.
• KYC verification, which may require a copy of your MyKad to confirm a member's age.
• An automated monitoring system that detects usage patterns indicative of a potential underage user.
• Immediate account termination procedure upon confirmation that an account is held by a minor.

If you have any questions, concerns, or complaints about how Kiss888 handles your personal data, we encourage you to reach out to us directly. Kiss888 takes every privacy complaint seriously and is committed to resolving them promptly and fairly.

You may reach the Kiss888 Data Protection Officer through the following channels:

• Email: support@kiss888.click — please use the subject line "Data Privacy Complaint" to expedite the process.
• Live Chat: Available 24/7 within the Kiss888 platform — reach out to support and indicate that you wish to raise a data privacy complaint.
• Response Time: Kiss888 aims to acknowledge all privacy complaints within 48 hours and resolve issues within 21 business days.

If you are not satisfied with Kiss888's response to your privacy complaint, you have the right to escalate the matter to the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia, which is the country's PDPA regulatory authority.

Kiss888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to members via email or in-platform notification. The "Updated" date at the top of this page reflects the latest version of the Kiss888 Privacy Policy.