Kiss888 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

Kiss888 ("we", "our platform") respects the privacy of every individual who uses our website and services at kiss888.site. This Privacy Policy transparently outlines our practices for collecting, processing, storing, and protecting your personal data as a member or visitor of the Kiss888 platform.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of Kiss888's Terms & Conditions. By registering an account or using any part of the Kiss888 platform, you consent to us processing your personal data in accordance with the terms set out in this Privacy Policy.

This Privacy Policy applies to all information we collect from you across various channels — including account registration, deposits and withdrawals, use of slots, Live Casino, badminton and football Sports Betting, and any communications with the Kiss888 support team.

If you have any questions about this Privacy Policy or how Kiss888 handles your personal data, please contact our support team at support@kiss888.site or via 24/7 live chat within the platform. We are available to assist in Bahasa Melayu at any time.

Kiss888 collects various types of personal data from members to enable us to provide a secure, fair, and high-quality service. We only collect data that is strictly necessary for the stated purposes — this "data minimisation" principle is the foundation of Kiss888's privacy practices.

Kiss888 does not collect sensitive data such as health information, religious beliefs, or political views unless you voluntarily disclose it in a customer service context and only where it is directly relevant to your support needs.

In certain cases, Kiss888 may require additional verification documents such as a copy of your identity card or bank statement as part of the KYC (Know Your Customer) process required under applicable anti-money laundering regulations. These documents are handled with the highest level of security and accessed only by authorised personnel.

Kiss888 processes your personal data on valid legal grounds — whether on a contractual basis (to deliver the services you request), legal obligation (compliance with Malaysian regulations), our legitimate interests (platform security), or consent you have provided. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your Kiss888 account, verifying your identity, processing logins, and enabling access to all platform features.
• Transaction Processing: Processes deposits via DuitNow, FPX Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as withdrawals to your bank account or eWallet in Malaysian Ringgit (MYR).
• Gaming Services: Provides access to slot games, Live Casino, and Sports Betting including BWF World Tour badminton, Thomas Cup, Liga Badminton Malaysia, Liga Super Malaysia football, EPL, and e-sports.
• Bonus Management: Managing bonus eligibility and crediting, cashback, and promotions based on your account activity.
• Security & Fraud Prevention: Monitoring account activity to identify and prevent fraud, money laundering, duplicate account creation, and bonus abuse.
• Customer Support: Provides accurate and effective assistance when you reach out to the Kiss888 support team via live chat or email.
• Responsible Gaming: Monitors gameplay patterns to identify signs of problem gambling and to activate any account limit tools you have set.
• Legal Compliance: Complying with Malaysia's legal obligations, including PDPA, anti-money laundering laws, and applicable licensing regulations.
• Platform Improvements: Analyses usage data in aggregate and anonymised form to improve platform design, technical performance, and the overall user experience.
• Marketing Communications: Sending you relevant promotions, bonus offers, and notifications — but only with your consent, and you may unsubscribe at any time.

Kiss888 does not sell or rent your personal data to any third party. However, we may share your data in the following limited circumstances:

Trusted Service Providers: kiss888 works with third-party service providers that help us operate the platform — including game providers (Pragmatic Play, PG Soft, Evolution Gaming, and others), payment processors for DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as technical infrastructure providers. These providers are only permitted to use your data for specific, limited purposes and are bound by strict data confidentiality agreements with kiss888.

Legal Obligation: kiss888 may disclose personal data if required by Malaysian law, court order, or a law enforcement agency with valid jurisdiction. In all such cases, we will disclose only the minimum amount required by that obligation.

Rights & Security Protection: We may disclose information when we reasonably believe it is necessary to protect the rights, property, or safety of Kiss888, our members, or the public — for example, in cases involving fraud investigations or money laundering.

Business Transfer: In the event of a merger, acquisition, or sale of kiss888 assets, personal data may be transferred as part of that transaction. We will notify members before their data is transferred and before it becomes subject to a different privacy policy.

Kiss888 makes serious investments in cybersecurity infrastructure to ensure members' personal data is protected at every stage — from collection through storage and processing. The following are the security layers we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and kiss888 servers is encrypted using TLS 1.3 with AES-256 encryption — the same standard used by Malaysia's leading banks, including Maybank and CIMB.
• Stored Data Encryption: Sensitive data such as financial information and identity verification documents are encrypted at rest, not only during transmission.
• Strict Access Controls: Only specifically authorised kiss888 staff may access members' personal data, and only to the extent necessary to carry out their duties. Every access is recorded in an audit log.
• 24/7 Monitoring: The kiss888 cybersecurity team continuously monitors systems to detect any unusual activity or intrusion attempts.
• Regular Penetration Testing: Kiss888 conducts regular security testing by independent security experts to identify and remediate any system vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an added layer of account protection.

While Kiss888 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of any security incident affecting your personal data, Kiss888 will notify you promptly and take the necessary remedial action.

Kiss888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required under applicable Malaysian law — whichever is longer.

As a general guide, Kiss888 applies the following data retention periods:

• Active Account Data: For the duration your account remains active and for 5 years following account closure, in order to meet legal compliance requirements.
• Financial Transaction Records: Minimum 7 years in accordance with Malaysia's accounting and tax compliance legal requirements.
• KYC & Identity Verification Records: 5 years after account closure, in accordance with anti-money laundering legal requirements.
• Customer Support Communication Logs: 2 years to allow for the resolution of any pending complaints or disputes.
• Cookie & Analytics Data: Between 30 days and 2 years depending on the type of cookie, as specified in the Cookies section of this document.

You may request the deletion of your personal data ("right to be forgotten") by contacting the Kiss888 support team. However, deletion requests may not be fully fulfilled where the data is required to meet legal obligations, resolve outstanding disputes, or protect Kiss888's legitimate interests.

Kiss888 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, account security, and transaction processing. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collects information about how you use the platform to help us improve Kiss888's speed and technical performance. This data is collected in aggregate and anonymised form.
• Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics Cookies: Helps us understand usage patterns, popular games, and areas of the platform that can be improved. Used internally only for product enhancement purposes.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the kiss888 platform. Session cookies are deleted automatically when you close your browser, while persistent cookies are stored until their set expiry date or until you delete them manually.

As a Kiss888 member and as a data subject under Malaysia's PDPA, you hold the following rights with respect to your personal data. Kiss888 is committed to respecting and facilitating the exercise of all these rights:

To exercise any of the rights above, contact the Kiss888 support team via live chat or email at support@kiss888.site. Please include your account number and a description of the right you wish to exercise. Kiss888 will respond within 14 business days from the date of receipt of a complete request.

Kiss888 is an online gaming platform restricted to individuals aged 18 and above only. We do not knowingly collect or process personal data from anyone under the age of 18.

If kiss888 discovers that personal data belonging to an underage individual has been inadvertently collected — for example, if someone registered by providing false age information — we will take immediate action to:

• Immediately suspending the account in question.
• Permanently deleting all personal data associated with the account.
• Refunding any available balance (upon verification) to the original deposit method.
• Reporting cases to the relevant authorities where required by law.

If you believe that a minor may have accessed the Kiss888 platform, please contact our support team immediately at support@kiss888.site. We will investigate and take appropriate action without delay.

Kiss888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or relevant technological developments. The date of the most recent update will always be displayed at the top of this document.

For significant changes that materially affect how we process your personal data, Kiss888 will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

Your continued use of the kiss888 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated version. If you do not agree with any changes, you have the right to close your account by contacting the kiss888 support team before those changes take effect.

We encourage you to review this Privacy Policy page periodically to stay informed of Kiss888's latest practices in handling your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Kiss888 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week in Bahasa Melayu directly within the kiss888 platform — the fastest way to get help with urgent enquiries.
• Email: support@kiss888.site — for written enquiries requiring documentation, responded to within 24 hours on business days.

For formal privacy-related complaints, please clearly state "Data Privacy Complaint" in the subject line of your email or live chat message. Include your kiss888 account number and a detailed description of your concern. kiss888 is committed to addressing all privacy complaints seriously and within 14 business days.

Kiss888 respects the privacy rights of every member and is committed to resolving all complaints in a fair, transparent, and timely manner. Your privacy is a responsibility we take seriously.