Privacy Policy
How kissy918 Collects, Uses & Protects Your Personal Data

This Privacy Policy (hereinafter "Policy") is issued by kissy918 (referred to as "we", "us", "our", or the "Platform"), operated under the domain kissy918.cam. It applies to all personal data collected from individuals (referred to as "you", "the User", or "the Player") who access or use the kissy918 website, mobile interface, and associated services.

kissy918 is committed to protecting the privacy and personal data of all players, including those based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and across Malaysia. We operate in accordance with applicable data protection principles and international gaming regulatory requirements.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. By registering an Account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

For the purposes of this Policy, the following terms have the meanings assigned below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes name, email address, date of birth, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or combination with other data.
• "Data Controller" — kissy918, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party engaged by kissy918 to process Personal Data on our behalf (e.g., payment processors, KYC verification providers).
• "Cookies" — small text files placed on your device by the Platform to enable certain functions, analytics, and session management.
• "KYC" — Know Your Customer; the process by which we verify the identity and age of a Player before permitting withdrawals or in other regulatory circumstances.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

kissy918 collects only the Personal Data that is necessary for the provision of our services, compliance with legal obligations, and the protection of both the Platform and its players. The categories of data we collect are detailed below.

We collect your Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC, make a deposit or withdrawal, contact our support team, or respond to a promotion.
• Automatically — through cookies, log files, and similar tracking technologies when you access and interact with the Platform. This includes technical data such as your IP address, browser type, and session activity.
• From third parties — from payment processors (e.g., FPX, DuitNow, Touch 'n Go eWallet, Boost), identity verification service providers, and fraud detection partners, where their data supplements information already held by us.
• From publicly available sources — where relevant to our compliance obligations, such as sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.

We do not purchase data lists or acquire Personal Data from marketing data brokers. All data collection is purpose-driven and limited to what is operationally and legally necessary.

Your Personal Data is processed by kissy918 for the following specific and legitimate purposes:

• Account creation and management — to register, verify, and maintain your Account, including authentication and access controls.
• Identity verification (KYC) — to confirm your age (21+ requirement), identity, and address in accordance with our responsible gambling and anti-money laundering obligations.
• Payment processing — to process deposits and withdrawals via your chosen payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and USDT TRC20.
• Provision of gaming services — to deliver casino games, sports betting, live dealer tables, and associated features in a functional and personalised manner.
• Customer support — to respond to your enquiries, resolve disputes, and maintain records of interactions for quality assurance purposes.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, and other security threats.
• Legal and regulatory compliance — to comply with applicable anti-money laundering laws, gaming licensing requirements, and other legal obligations, including the reporting of suspicious transactions where required.
• Responsible gambling monitoring — to identify and respond to signs of problem gambling, and to apply account-level controls where warranted.
• Marketing communications — to send you information about promotions, bonuses, and new features, where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Platform improvement — to analyse usage patterns, improve game offerings, and optimise the user experience based on aggregated, anonymised data.

Where applicable data protection law requires a legal basis for processing Personal Data, kissy918 relies on one or more of the following:

• Contractual necessity — processing that is required to enter into or perform the contract between you and kissy918, including account management, payment processing, and service delivery.
• Legal obligation — processing necessary to comply with applicable laws and regulations, including KYC verification, anti-money laundering obligations, and the reporting of suspicious activity to competent authorities.
• Legitimate interests — processing carried out for purposes that are in our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gambling monitoring, and service improvement.
• Consent — where you have provided clear and specific consent to the processing, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kissy918 does not sell your Personal Data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors — entities facilitating your transactions, including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors for USDT TRC20. These processors receive only the transaction data necessary to complete the payment.
• KYC and identity verification providers — licensed third-party providers that assist us in verifying your identity and age in accordance with regulatory requirements.
• Fraud and security service providers — specialist providers engaged to detect fraudulent activity, protect platform integrity, and prevent financial crime.
• Game studios and content providers — licensed providers of the games available on the Platform may receive limited technical data (such as Player ID and session data) to support game functionality and dispute resolution.
• Legal and regulatory authorities — government agencies, law enforcement bodies, and our licensing regulator may receive data where disclosure is required by law, court order, or regulatory direction.
• Professional advisors — lawyers, auditors, and compliance consultants engaged by kissy918 who are bound by professional confidentiality obligations.

kissy918 uses cookies and similar tracking technologies to enable core platform functionality, maintain session states, analyse usage patterns, and enhance your experience on the Platform. Cookies are small text files stored on your device when you visit our site.

We use the following categories of cookies:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication tokens, login persistence, and security cookies. They cannot be disabled without affecting core functionality.
• Functional Cookies — used to remember your preferences such as language settings, display options, and saved game states between sessions.
• Analytical Cookies — used to collect anonymised data on how players interact with the Platform, including pages visited, session duration, and error rates. This data helps us improve performance and game offerings.
• Security Cookies — used to detect and prevent fraudulent sessions, identify suspicious login behaviour, and protect your Account from unauthorised access.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use certain features of the Platform, including maintaining your login session.

kissy918 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory requirements. Our general retention guidelines are as follows:

• Account and identity data — retained for the duration of your active Account, plus a minimum of five (5) years after Account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, in line with applicable financial record-keeping requirements.
• KYC documents — retained for a minimum of five (5) years following the end of your relationship with the Platform.
• Customer support records — retained for up to three (3) years from the date of the interaction.
• Marketing consent records — retained until you withdraw consent, plus a reasonable period to demonstrate historical consent for compliance purposes.
• Technical and log data — typically retained for up to twelve (12) months, or longer where required for security investigations.

Where Personal Data is no longer required for any of the above purposes and no legal obligation requires its continued retention, kissy918 will securely delete or anonymise the data in a manner that prevents its reconstruction.

kissy918 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Passwords and authentication credentials stored using cryptographic one-way hashing with salting. Plaintext passwords are never stored.
• Access to Personal Data within our organisation is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls.
• Two-factor authentication (2FA) available to all Account holders to protect against unauthorised login.
• Real-time fraud monitoring and anomaly detection systems to identify suspicious account activity.
• Regular security assessments and vulnerability testing of our platform infrastructure.

Notwithstanding the foregoing, no method of data transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. In the event of a data breach that is likely to pose a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with our legal obligations.

Subject to applicable law and our legal obligations (particularly those relating to anti-money laundering and regulatory compliance), you have the following rights in respect of your Personal Data held by kissy918:

To exercise any of the above rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We aim to respond to all data rights requests within 30 days, though complex requests may take longer.

The kissy918 Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21.

If we become aware that Personal Data has been submitted by or on behalf of a person under the age of 21, we will immediately close the associated Account, forfeit any winnings in line with our Terms & Conditions, and securely delete the data. If you believe a minor has registered on our Platform, please notify us immediately at [email protected].

The kissy918 Platform does not contain links to third-party websites outside of the payment gateways necessary to process your transactions. Payment processing interfaces (such as those operated by DuitNow, FPX, Touch 'n Go eWallet, Boost, and banking providers) are operated by independent entities under their own privacy policies.

When you are redirected to a third-party payment processor to complete a transaction, kissy918 is not responsible for the privacy practices of that third party. We recommend reviewing the privacy notice of your chosen payment provider before completing any transaction.

kissy918 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Account holders by way of a notice on the Platform or by email to the registered Account address. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and contact us to close your Account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by kissy918, please contact our support and data team using the details below:

Email: [email protected]
Support Hours: 24 hours a day, 7 days a week — including Malaysian public holidays
Languages: English, Bahasa Melayu, Chinese

For data access requests, correction requests, or erasure requests, please include "Data Rights Request" in the subject line of your email, along with your registered Account username and a brief description of your request. We will verify your identity before processing any data-related request.

For responsible gambling concerns or self-exclusion requests, please refer to our Responsible Gambling page where dedicated guidance and contact details are provided.