Privacy Policy kiss888 –
Personal Data Protection for Malaysian Members

Kiss888 values the privacy of every member who entrusts their personal information to us. As a trusted online casino platform in Malaysia, we understand that your trust is our most valuable and irreplaceable asset.

This Privacy Policy applies to all users who access kiss888.fun, use our mobile app, or interact with any of our services. It also covers all communication channels between you and the kiss888 support team, including live chat, email, and instant messaging platforms.

We are committed to ensuring that every piece of information you provide us is handled responsibly, securely, and in accordance with applicable laws. This document is written in plain language so you know exactly what happens with your data.

Kiss888 only collects information that is genuinely necessary to provide a quality, secure, and legally compliant service. The following are the categories of information we collect:

Your personal information is collected through several key channels depending on how you interact with the kiss888 platform:

• Account Registration: You directly provide basic information such as your name, email, phone number, and password during the new account registration process.
• KYC Verification: To comply with anti-money laundering legal requirements, you are required to submit identity documents and financial information through our secure KYC process.
• Financial Transactions: Every deposit and withdrawal you make automatically records the relevant payment information in our system.
• Platform Usage: While you play, our system automatically records game activity data, game preferences, and usage patterns for service improvement purposes.
• Device & Browser: Cookie technology, pixels, and server logs collect technical information about the device and browser you use to access the platform.
• Support Communication: When you contact our support team, the content of that conversation is stored for reference and service quality improvement purposes.

All data collection methods are carried out transparently. You will always be informed about the type of data collected at every point of interaction with the kiss888 platform.

Kiss888 uses collected data solely for legitimate, clearly stated purposes. The following are the primary purposes for which your personal data is used:

• Account Management: Creating, verifying, and managing your member account so all platform functions run smoothly.
• Transaction Processing: Processing your deposits, withdrawals, and all financial transactions accurately and securely.
• Identity Verification (KYC): Ensuring that every member is a verified individual aged 18 and above and complies with anti-fraud legal requirements.
• Platform Security: Detecting and preventing any fraudulent activity, hacking, or account misuse that could compromise member security.
• Service Communications: Sending important notifications related to your account, transactions, system updates, and promotions relevant to your preferences.
• Product Improvement: Analysing platform usage patterns in aggregate to improve the gaming experience and develop better new features.
• Legal Compliance: Meeting the reporting and record-keeping obligations set by the relevant authorities.

Kiss888 understands that your trust depends on how we handle your personal information when third parties are involved. We practise a minimum disclosure principle — your data is only shared when truly necessary and with parties who have signed binding confidentiality agreements.

The following parties may receive a portion of your data and the reasons why:

• Payment Service Providers: FPX, DuitNow, Touch 'n Go, GrabPay, Visa, and Mastercard require transaction information to process your deposits and withdrawals. All of these providers are subject to their own strict privacy policies and security standards.
• Game Providers: Third-party game software providers may receive game session data required to deliver a smooth and transparent gaming experience.
• KYC Service Providers: Our identity verification partners use your document information solely for legitimate identity verification purposes.
• Legal Authorities: kiss888 is legally required to disclose information to the relevant authorities when a valid court order or financial crime investigation is in place.

In all of the above situations, kiss888 ensures that only data genuinely necessary for the relevant purpose is shared. We never disclose your game history, account balance, or financial information to any party without a legitimate need to know.

The security of your personal information is kiss888's absolute top priority. We continuously invest in the latest security technologies and practices to ensure your data is always protected from unauthorized access, leaks, or misuse.

• Transmission Encryption: All communications between your device and kiss888 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring data cannot be intercepted during transmission.
• Storage Encryption: Sensitive personal data stored in our database is encrypted using the AES-256 algorithm — the industry standard used by global financial institutions.
• Multi-Layered Access Control: Access to member personal data is granted only to staff who require it for their specific job functions. All access is logged and monitored.
• Two-Factor Authentication (2FA): kiss888's internal systems require two-factor authentication for all staff access to sensitive data, reducing the risk of unauthorised access.
• 24/7 Monitoring: Our automated threat detection system continuously monitors all platform activity and takes immediate action upon detecting any security anomalies.
• Regular Security Audits: kiss888 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

As a kiss888 member, you have full rights over the personal data you have provided to us. These rights are aligned with Malaysia's Personal Data Protection Act (PDPA) and can be exercised at any time through our official support channels.

Kiss888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help the platform remember your preferences and ensure a smoother, more personalised gaming experience.

• Essential Cookies: Required for core platform functions such as session login, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent, and any errors encountered — to help us improve our service.
• Functional Cookies: Saving your preferences such as language, display settings, and location so you do not need to reset them each time you log in.
• Analytics Cookies: Helping us understand platform traffic and usage patterns in aggregate using non-personally identifiable data.

You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the kiss888 platform.

Kiss888 retains your personal data for as long as necessary to fulfil the stated collection purposes and comply with relevant legal obligations. We do not retain your personal data longer than required.

• Active Account Data: Retained for the duration your account is active and for 6 years after account closure for audit and legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and tax legal requirements.
• KYC Documents: Retained for 5 years after the date of last verification or account closure, whichever is later.
• Technical Log Data: Server logs and technical data are retained for 90 days for troubleshooting and security purposes, after which they are automatically deleted.
• Communication Records: Support chat history is retained for 2 years for quality control and dispute resolution purposes.

Once the designated retention period expires, your data will be permanently deleted from all kiss888 systems or fully anonymised so it can no longer be linked to your identity.

Kiss888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we handle personal data.

When significant changes are made to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications via email to the address registered in your account.
• Displaying in-platform notices that highlight key changes that have been made.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, the kiss888 privacy team is ready to assist you through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the kiss888 platform.
• Privacy Email: [email protected] — response guaranteed within 24 hours on business days.
• Telegram: Reach our support agents via kiss888's official Telegram channel for a faster response.
• FAQ: Visit FAQ page us for answers to frequently asked privacy questions.

We are committed to addressing every privacy-related inquiry seriously, transparently, and within a reasonable timeframe. Your trust is our most important responsibility.