kiss916 Privacy Policy

1. Introduction

kiss916 ("we", "us", "our") operates the online gaming platform at kiss916.co (the "Platform"), offering casino games, live dealer tables, sportsbook, crash, and arcade products to players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Bangsar.

This Privacy Policy ("Policy") describes how kiss916 collects, uses, stores, discloses, and protects the personal data of users ("you", "your") who register accounts, access content, or otherwise interact with the kiss916 Platform. It applies to all personal data processed in connection with your use of kiss916 services, regardless of the device or channel used to access them.

This Policy should be read together with the kiss916 Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

kiss916 collects the following categories of personal data, depending on how you interact with the Platform:

Category	Examples
Identity Data	Full legal name, date of birth, gender, MyKad or passport number, selfie/photo for KYC verification
Contact Data	Malaysian mobile number, email address, residential address (for KYC purposes)
Account Data	Username, encrypted password, account preferences, language settings, communication preferences
Financial Data	Deposit and withdrawal amounts, payment method details (e.g. Touch n Go eWallet account reference, bank account name for verification), transaction history
Gaming Data	Bet history, game session logs, win/loss records, bonus usage, sportsbook bet slips, active game preferences
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session timestamps, geolocation (approximate)
Usage Data	Pages visited, time spent on platform, clickstream data, search queries within platform, feature usage patterns
Communications Data	Live chat transcripts, support ticket content, emails sent to or received from kiss916 support

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than document photos for KYC), or health information, except where required by law or with your explicit consent.

3. How We Collect Your Data

kiss916 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Data collected automatically as you use the Platform, including via cookies, server logs, and analytics tools. See Section 9 (Cookies) for further details.
• Third-party sources: Data received from payment processors (e.g. Touch n Go eWallet, Boost, GrabPay), identity verification services, fraud prevention providers, and game software providers where necessary for account management and regulatory compliance.

4. Legal Basis for Processing

kiss916 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the services described in the kiss916 Terms & Conditions — including account management, game access, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, service improvement, and analytics, where our interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. How We Use Your Personal Data

kiss916 uses personal data for the following purposes:

• Creating and managing your kiss916 account, including authentication and security.
• Processing deposits and withdrawals via your chosen payment method (Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, USDT TRC20, 7-Eleven Cliqq).
• Verifying your identity and age as part of our KYC and AML compliance obligations.
• Providing access to all Platform products: live casino, slots, sportsbook, crash, and arcade games.
• Delivering, personalising, and improving our services — including game recommendations, bonus targeting, and interface optimisation based on your usage patterns.
• Detecting, investigating, and preventing fraud, money laundering, account sharing, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Administering responsible gaming tools including deposit limits, loss limits, session reminders, and self-exclusion as requested by or applied to your account.
• Communicating with you regarding account matters, security alerts, promotional offers (where you have opted in), and service updates.
• Maintaining records required by applicable gaming regulations and financial laws.
• Conducting internal analytics and research to improve the kiss916 Platform and the quality of services offered to Malaysian players.

6. Sharing Your Personal Data

kiss916 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: Touch n Go eWallet, Boost, GrabPay, and other payment partners require transactional data to process deposits and withdrawals on your behalf.
• Game software providers: Certified providers such as Pragmatic Play, Evolution Gaming, and PG Soft receive session tokens and stake data necessary to deliver game services. They do not receive your identity or financial data beyond what is strictly required for game operation.
• Identity verification services: Third-party KYC and AML service providers process identity document data and liveness checks to support our compliance obligations.
• Fraud prevention and security providers: Specialist firms that assist in identifying and blocking fraudulent activity, account takeover attempts, and prohibited betting patterns.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, kiss916 may be required to disclose personal data to government bodies, tax authorities, or law enforcement agencies.
• IT and infrastructure service providers: Cloud hosting providers, database operators, and cybersecurity vendors who process data on our behalf under strict data processing agreements.

All third-party processors engaged by kiss916 are contractually bound to process personal data only for the specified purpose and in accordance with applicable data protection standards.

7. International Data Transfers

The kiss916 Platform serves Malaysian users and processes data in facilities that may be located outside Malaysia. Where personal data is transferred internationally, kiss916 takes all reasonable steps to ensure that such transfers are conducted in compliance with applicable data protection regulations, including the use of standard contractual clauses or equivalent safeguards approved by relevant data protection authorities. By using the kiss916 Platform, you acknowledge and consent to such international transfers where required for the provision of services.

8. Data Retention

kiss916 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Account data is retained for the duration of your active account relationship with kiss916, plus a minimum of 5 years following account closure to satisfy AML, tax, and gaming regulatory requirements.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of 7 years in accordance with applicable financial record-keeping obligations.
• KYC and identity verification documents are retained for the period required by applicable AML regulations, typically 5 years post-relationship termination.
• Support communications (live chat logs, email correspondence) are retained for 2 years from the date of the last communication unless a longer period is required for dispute resolution or legal proceedings.
• Cookie and analytics data is retained for periods specified in the Cookie section below.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

kiss916 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a functional and personalised experience. The following types of cookies may be used:

• Strictly necessary cookies: Required for the Platform to function — authentication sessions, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and communication options.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the Platform — which games are most played, session durations, error occurrences. This data is used solely to improve Platform performance.
• Marketing cookies (opt-in only): Used to deliver relevant promotional communications where you have explicitly consented to receive such communications from kiss916.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the kiss916 Platform. Analytics and marketing cookies require your consent and can be withdrawn at any time through your account communication settings.

10. Your Privacy Rights

Subject to applicable law, you have the following rights with respect to your personal data held by kiss916:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where no legitimate legal basis for continued retention exists. Note that erasure requests may be limited where data must be retained for regulatory compliance (e.g. AML records).
• Right to restrict processing: Request that we limit how we use your data in certain circumstances, such as while a dispute is being resolved.
• Right to data portability: Request a structured, machine-readable copy of personal data you have provided to us, where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent (e.g. marketing communications, non-essential cookies), withdraw consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact kiss916 support via live chat or by emailing [email protected]. We will respond to your request within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days with prior notification.

11. Data Security

kiss916 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kiss916 servers — the same encryption standard used by major Malaysian financial institutions.
• Encrypted storage of sensitive data including passwords (using industry-standard hashing algorithms) and payment credentials.
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits by independent cybersecurity specialists.
• Two-factor authentication available for all user accounts and enforced for all kiss916 administrative personnel.
• Automated detection of suspicious login activity and account takeover attempts.

Despite these measures, no system is entirely immune to security incidents. In the event of a data breach that affects your personal data, kiss916 will notify affected users and, where required by law, the relevant regulatory authority, within the timeframes prescribed by applicable data protection regulations.

12. Minors and Age Restriction

The kiss916 Platform is strictly intended for individuals aged 21 and above. kiss916 does not knowingly collect personal data from minors. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the Platform, please contact kiss916 support immediately.

13. Changes to This Privacy Policy

kiss916 reserves the right to update or amend this Privacy Policy at any time. Changes will be published on this page with an updated effective date. Where changes are material, kiss916 will provide notice to registered users via email or an in-platform notification at least 7 days before the changes take effect. Your continued use of the kiss916 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how kiss916 is protecting your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kiss916, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the kiss916 Platform after logging in to your account.
• Email: [email protected] — plain text only, not a clickable link.

All privacy-related requests and complaints will be acknowledged within 24 hours and addressed substantively within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.