Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal data of kiss888 members and site visitors is the operator of the kiss888 platform, operating under international gaming authority licensing and accessible at kiss888.club.

References to "kiss888", "we", "us", or "our" in this Policy refer to that data controller. References to "you" or "your" refer to any individual whose personal data is processed by kiss888, including registered members and unregistered site visitors.

2. Personal Data We Collect

2.1 Registration Data

When you register a kiss888 account, we collect the following information that you provide directly:

• Full legal name (as per your Malaysian IC or passport);
• Date of birth (to verify you are aged 21 or above);
• Email address;
• Malaysian mobile phone number;
• Preferred account currency (MYR);
• Account username and hashed password (passwords are never stored in plaintext).

2.2 Identity Verification (KYC) Data

As required under our international gaming authority licence, we collect identity verification documents when triggered by regulatory or risk-based requirements. This may include:

• Copy of Malaysian MyKad (IC) or passport;
• Proof of address (utility bill, bank statement, or similar document dated within 3 months);
• Source of funds documentation where required for large transactions.

2.3 Financial Transaction Data

We collect data related to your financial transactions on kiss888, including deposit amounts and timestamps, withdrawal requests and processing records, the payment method used (e.g. Touch n Go eWallet, Boost, Maybank FPX), and transaction reference numbers. We do not store full payment account credentials — payment processing is handled by our certified payment partners.

2.4 Gaming Activity Data

We collect records of your gaming and betting activity on the platform, including game sessions, bet amounts, game outcomes, and platform navigation patterns. This data is used for account management, dispute resolution, regulatory reporting, and responsible gaming monitoring.

2.5 Technical & Device Data

We automatically collect certain technical data when you access kiss888, including IP address, browser type and version, device type and operating system, referring URL, session duration, and pages visited. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

We retain records of communications between you and kiss888, including live chat transcripts, email correspondence, and support ticket histories. These records are used for quality assurance, dispute resolution, and fraud investigation.

3. How We Collect Your Data

kiss888 collects personal data through the following means:

• Directly from you — information you provide during registration, KYC submission, deposit and withdrawal transactions, and communications with our support team;
• Automatically — technical and behavioural data collected via cookies, server logs, and platform analytics as you navigate the kiss888 site;
• From third parties — identity verification results from our KYC service providers, fraud signals from payment processors, and risk assessment data from our licensed gaming authority compliance partners.

4. Purposes of Processing & Legal Basis

kiss888 processes personal data for the following purposes, each supported by an appropriate legal basis:

• Account creation and management — necessary for the performance of the contract between you and kiss888;
• Identity and age verification — necessary for compliance with our legal and regulatory obligations under international gaming authority licence requirements (mandatory 21+ enforcement);
• Payment processing — necessary for the performance of the contract (deposit and withdrawal services);
• Fraud and money laundering prevention — necessary for compliance with legal obligations and legitimate interests in platform security;
• Responsible gaming monitoring — necessary for compliance with our licence obligations and our legitimate interests in member welfare;
• Customer support — necessary for the performance of the contract;
• Platform security and technical operations — legitimate interests in maintaining the security, performance, and integrity of the platform;
• Marketing communications — based on your consent, where provided. You may withdraw consent at any time by contacting kiss888 support or updating your account communication preferences.

5. Disclosure to Third Parties

kiss888 does not sell or rent personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors and e-wallet providers — Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, 7-Eleven Cliqq, and USDT processing partners receive the minimum data necessary to process your transactions;
• KYC and identity verification providers — certified third-party KYC services receive identity document data strictly for the purpose of verification;
• Game and platform providers — licensed game studios and live casino operators may receive your member ID and session data for game delivery and RNG auditing purposes. No financial or contact data is shared with game providers;
• Regulatory authorities — our international gaming authority and, where legally required, other competent authorities may receive data as required by law or our licence conditions;
• Legal proceedings — where required by a court order or applicable law, kiss888 may disclose personal data to law enforcement or other governmental bodies.

All third parties with whom kiss888 shares personal data are bound by contractual data protection obligations and are required to process data only for the specified purpose and in accordance with applicable data protection standards.

6. Cookies & Tracking Technologies

kiss888 uses cookies and similar tracking technologies on the kiss888.club website. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function, including authentication session management and security tokens. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Remember your preferences such as language settings and previously visited game categories;
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the kiss888 site, used to improve platform performance and user experience. No personally identifying data is included in analytics reports;
• Security Cookies: Assist in fraud detection and prevention by helping identify unusual access patterns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to and use the kiss888 platform.

7. Data Security

kiss888 implements a multi-layered security framework to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmissions between your device and kiss888 servers;
• Encryption of sensitive data fields at rest in the kiss888 database;
• Password storage using industry-standard bcrypt hashing — passwords are never stored in readable form;
• Network-level firewalls, intrusion detection systems, and DDoS mitigation;
• Access controls ensuring that employee access to personal data is limited to those with a legitimate business need;
• Regular independent security audits as required under our gaming authority licence.

No data transmission over the internet is entirely without risk. While kiss888 takes all reasonable precautions, we cannot guarantee absolute security. In the event of a personal data breach that poses a risk to members, kiss888 will notify affected members and the relevant regulatory authority in accordance with applicable requirements.

8. Data Retention

kiss888 retains personal data for the following periods:

• Active account data — retained for the duration of your membership and for seven (7) years following account closure, in accordance with gaming authority licence requirements and anti-money laundering obligations;
• KYC verification documents — retained for a minimum of five (5) years following the completion of the verification process, or longer if required by regulatory obligation;
• Transaction records — retained for seven (7) years following each transaction;
• Communications records — retained for three (3) years following the resolution of the relevant matter or account closure, whichever is later;
• Technical and device logs — retained for up to 12 months for security and fraud detection purposes, subject to earlier deletion where no longer necessary.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data lifecycle management procedures.

9. Your Data Rights

As a kiss888 member, you have the following rights in relation to your personal data, subject to applicable legal limitations:

To exercise any of these rights, contact kiss888 via live chat support or by email at [email protected]. Requests will be acknowledged within five business days and resolved within 14 business days of receipt, subject to complexity. Identity verification may be required before a request is fulfilled.

10. Children & Minors

The kiss888 platform is strictly restricted to individuals aged 21 and above. kiss888 does not knowingly collect or process personal data of individuals under the age of 21. If kiss888 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account suspended. If you believe a minor has registered a kiss888 account, please contact us immediately via live chat support.

11. Changes to This Privacy Policy

kiss888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal and regulatory requirements. The effective date at the top of this Policy indicates when it was last reviewed. Material changes will be communicated to members via email or on-platform notification prior to taking effect. Your continued use of kiss888 following notification of a material change constitutes your acceptance of the updated Policy.

12. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or kiss888's data practices, please contact our data team:

• Live Chat: Available 24/7 from your kiss888 account dashboard
• Email: [email protected]
• Response Time: Acknowledgement within 5 business days; resolution within 14 business days (MYT)