Privacy Policy

1. Introduction

1.1 kiss88 takes the privacy of its members seriously. This Policy applies to all personal data collected through the kiss88 website, mobile browser interface, customer support channels, and any other interaction you have with the Platform.

1.2 kiss88 operates under an international gaming authority licence, which imposes specific obligations on us regarding the collection, processing, and protection of member data. Compliance with those obligations is not discretionary — it is a condition of our continued operation.

1.3 This Policy should be read alongside the kiss88 Terms & Conditions. Defined terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

1.4 If you have any questions about this Policy or your personal data, please contact the kiss88 Data Protection team via the support channels described in Section 12.

2. Data We Collect

2.1 Registration Data

When you create a kiss88 account, we collect the personal information you provide during the registration process, including:

• Full legal name as it appears on your identity document;
• Date of birth (for age verification — you must be 21 or older to use the Platform);
• Email address and Malaysian mobile phone number;
• Residential address;
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering requirements, we may collect copies of identity documents, including your Malaysian MyKad, passport, and proof of address or payment method. These documents are processed solely for the purpose of verifying your identity and are handled with the highest level of security.

2.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, wagers, and bonuses associated with your account. This includes payment method identifiers (eWallet accounts, bank account references), transaction amounts in MYR, timestamps, and transaction status. We do not store full card numbers or bank account credentials — payments are processed through secure third-party payment processors.

2.4 Gaming Activity Data

We maintain records of your gaming activity on the Platform, including game sessions played, wagers placed, outcomes, win and loss history, and session durations. This data is used for account management, bonus tracking, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access the kiss88 Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device identifiers, referring URL, and pages visited. This information is used for security, fraud prevention, and Platform performance optimisation.

2.6 Customer Support Data

When you contact kiss88 customer support via live chat or email, we retain records of the communication, including the subject matter, timestamps, and any personal information you provide in the course of the interaction. These records are retained to resolve disputes and improve service quality.

3. How We Use Your Data

kiss88 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, KYC documents
Processing deposits and withdrawals	Financial and transaction data
Providing gaming services	Gaming activity data, account data
Identity and age verification	KYC documents, registration data
Anti-money laundering compliance	Transaction data, KYC documents
Responsible gaming monitoring	Gaming activity, session data
Fraud prevention and security	Technical data, transaction data
Customer support	Support communications, account data
Regulatory reporting	All categories as required by licence
Marketing communications (where consented)	Email, phone number

We do not use your personal data for purposes incompatible with those listed above. Where we intend to use your data for a new purpose, we will notify you in advance and, where required by law, seek your consent.

4. Legal Basis for Processing

4.1 kiss88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the gaming and financial services you have contracted with us to receive, including account management, deposits, withdrawals, and game access.
• Legal obligation: Processing required to comply with our licensing authority's requirements, anti-money laundering legislation, and other applicable regulatory obligations — including identity verification, transaction monitoring, and responsible gaming tool provision.
• Legitimate interests: Processing for fraud prevention, Platform security, customer support quality assurance, and aggregate analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have expressly opted in. You may withdraw marketing consent at any time via your account settings or by contacting customer support.

5. Data Sharing & Third Parties

5.1 kiss88 does not sell your personal data to third parties. We do not share your data with third parties for their independent marketing purposes.

5.2 We share personal data with third parties only in the following circumstances:

• Payment processors: Malaysian eWallet operators (Touch n Go eWallet, Boost) and banking partners require transaction data to process deposits and withdrawals. These processors operate under their own privacy policies and security certifications.
• Game software providers: Game studios whose titles are hosted on the kiss88 Platform may receive session data necessary to deliver the game service. These providers are contractually bound to process data solely for game delivery purposes.
• KYC and AML service providers: Third-party identity verification and fraud screening services may process your identity documents and transaction data on our behalf, under strict data processing agreements.
• Regulatory authorities: We will disclose personal data to our licensing authority, law enforcement agencies, or other regulatory bodies where required by law or by our licence conditions.
• Professional advisers: Legal, audit, and compliance advisers engaged by kiss88 may access personal data on a need-to-know basis under professional confidentiality obligations.

5.3 All third parties with whom kiss88 shares personal data are required to implement appropriate security measures and to process data only for the specified purpose.

6. Cookies & Tracking Technologies

6.1 The kiss88 Platform uses cookies and similar technologies to operate certain Platform functions, maintain your login session, detect fraud, and gather aggregate analytics on Platform usage.

6.2 The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Remember your preferences such as preferred language, currency display, and game lobby filters.
• Analytics cookies: Aggregate, anonymised data about page visits, session duration, and feature usage, used to improve Platform performance. No individual user is identifiable from analytics data.

6.3 You may control non-essential cookies through your browser settings. Note that disabling cookies may affect Platform functionality.

7. Data Retention

7.1 kiss88 retains personal data for as long as your account is active and for the periods required by our regulatory obligations thereafter. Our licensing authority requires us to retain transaction records and identity verification documents for a minimum of five (5) years following account closure.

7.2 Customer support communications are retained for two (2) years from the date of the interaction. Technical and device data is retained for twelve (12) months from collection.

7.3 Where data is retained solely on the basis of our legitimate interests and is no longer required for any regulatory purpose, it will be securely deleted or anonymised at the end of the applicable retention period.

8. Data Security

8.1 kiss88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL / TLS 1.3 encryption for all data in transit between your browser and the Platform;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Bcrypt hashing for all account passwords — passwords are never stored in plaintext;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• 24/7 security monitoring for unusual access patterns and potential intrusions;
• Regular third-party security assessments of the Platform infrastructure.

8.2 Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. If you have reason to believe your kiss88 account has been compromised, please contact our support team immediately so we can take protective action.

9. Your Data Rights

9.1 Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by kiss88:

• Right of access: You may request a copy of the personal data kiss88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most account details directly via your account settings.
• Right to erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations. Some data cannot be deleted while regulatory retention requirements apply.
• Right to restriction: You may request that processing of your data be restricted in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or contract performance, you may request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, contact the kiss88 support team via live chat or at the email address set out in Section 12. We will respond to all requests within thirty (30) days. Identity verification may be required before we can action your request.

10. Children & Minors

10.1 The kiss88 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration requires age verification, and kiss88 reserves the right to request documentary proof of age at any time.

10.2 If kiss88 becomes aware that personal data has been collected from an individual under 21 years of age, we will promptly close the account, return any balance remaining, and securely delete all associated data to the extent permitted by our regulatory obligations.

10.3 Parents and guardians who are concerned about underage access to gambling platforms are encouraged to use parental control software and to contact kiss88 immediately if they suspect a minor has registered an account.

11. Changes to This Policy

11.1 kiss88 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes will be communicated to registered members via email or a prominent Platform notice at least seven (7) days before the updated Policy takes effect.

11.2 The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically. Your continued use of the Platform following an update constitutes acceptance of the revised Policy.

12. Contact & Data Enquiries

12.1 For any privacy-related enquiries, requests to exercise your data rights, or concerns about how kiss88 handles your personal data, please contact our support team via the live chat feature available on the Platform 24 hours a day, 7 days a week.

12.2 Written data protection enquiries may be directed to: [email protected] — please include "Privacy Enquiry" in the subject line for routing to the appropriate team.

12.3 kiss88 aims to acknowledge all data-related requests within 5 business days and to fully respond within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or to the dispute resolution channel established by kiss88's licensing authority.