Privacy Policy

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") is published by kiss988 (hereinafter referred to as "kiss988", "the Platform", "we", "our", or "us") and governs the collection, processing, storage, use, and disclosure of personal data provided by users (hereinafter referred to as "you", "the User", or "the Player") of the kiss988 platform accessible at https://kiss988.cam.

kiss988 is committed to protecting your privacy and handling your personal information with the highest standards of care, transparency, and security. This Policy is designed to inform you clearly and comprehensively about the data practices of kiss988, including the types of data we collect, the purposes for which we use it, how long we retain it, with whom we may share it, and what rights you hold in relation to your personal information.

By accessing or using the kiss988 Platform — including registering an Account, making a deposit, placing a wager, or engaging with any Platform feature — you confirm that you have read, understood, and agreed to this Privacy Policy in its entirety. If you do not agree to the terms of this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following defined terms shall apply:

kiss988 collects personal data from you directly, automatically during your use of the Platform, and in limited cases from third parties. The categories of data we may collect include:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (required for age verification — you must be 21 or older)
• Residential address, including city, state, and postcode
• Email address and mobile phone number
• Username and encrypted account password
• Government-issued identification document details (MyKad, passport, or driving licence) submitted during KYC verification

3.2 Financial and Transaction Data

• Deposit transaction records including payment method, amount in MYR, and timestamp
• Withdrawal request records and payout details
• Payment method identifiers — such as your Touch 'n Go eWallet account reference, Boost Wallet ID, GrabPay reference, Maybank account number (last 4 digits), CIMB or Public Bank account reference, DuitNow registration details, or USDT TRC20 wallet address — where provided for transaction processing
• Account balance history and bonus credit/debit records

3.3 Gaming and Betting Activity Data

• All wager and bet records including game type, stake, outcome, and settlement values
• Sports betting selections (e.g., Liga Super Malaysia, EPL, UFC, and other markets)
• Game session logs, session duration, and in-game activity data
• Bonus usage and promotional participation records

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Platform access timestamps and session duration logs
• Cookies and similar tracking technologies as described in Section 8

3.5 Communications Data

• The content of communications between you and the kiss988 support team via live chat or email
• Responses to promotional communications where you have opted in to receive them
• Dispute, complaint, and feedback records

kiss988 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or claiming a promotion.
• Automated collection: Technical and device data collected automatically when you access or use the Platform, including through cookies, server logs, and analytics tools.
• Payment processors: Transaction reference data and confirmation signals received from payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX partner banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network confirmations — to verify the completion of deposit and withdrawal transactions.
• Identity verification partners: Where applicable, kiss988 may use third-party KYC and identity verification services to validate the accuracy of documents you submit. These partners process data under strict contractual confidentiality obligations.
• Fraud and security screening: Data from fraud detection tools and security monitoring systems used to protect the integrity of the Platform.

kiss988 processes your personal data for the following purposes:

Where international data protection principles require kiss988 to identify a legal basis for each processing activity, we rely on the following grounds:

• Contractual necessity: Processing required to perform our contractual obligations to you — including registering your Account, processing transactions, settling wagers, and providing customer support. Without this processing, we cannot provide the kiss988 services.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, age verification requirements, fraud prevention measures, and responses to lawful regulatory or court orders.
• Legitimate interests: Processing carried out for the legitimate business interests of kiss988, provided those interests do not override your fundamental rights. This includes fraud detection, platform security monitoring, responsible gambling analytics, and Platform analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — for example, the sending of marketing and promotional communications. You may withdraw consent for marketing at any time by contacting our support team or using the unsubscribe function in marketing emails.

kiss988 does not sell, rent, or share your personal data with third parties for their own independent marketing purposes. We may disclose your personal data to third parties only in the following circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, kiss988 must share necessary transaction data with payment service providers including Touch 'n Go eWallet, Boost Wallet, GrabPay, DuitNow, FPX partner banks (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank), and cryptocurrency network operators. These providers receive only the minimum data necessary to complete the transaction and are bound by their own privacy obligations.

7.2 Identity Verification Services

kiss988 may engage third-party KYC and identity verification partners to validate documents submitted during the verification process. Such partners process data under strict data processing agreements and may not use your data for any purpose other than the KYC service they provide to kiss988.

7.3 Technology and Platform Partners

kiss988 uses third-party technology providers for functions including game delivery, platform analytics, fraud screening, and customer support systems. These providers act as data processors under our direction and are bound by confidentiality and data security obligations.

7.4 Legal and Regulatory Disclosure

kiss988 will disclose personal data to legal, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory instruction. We will endeavour to notify you of any such disclosure unless we are legally prohibited from doing so.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of kiss988's business, personal data held by kiss988 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

kiss988 uses cookies and similar tracking technologies on the Platform to enable core functionality, enhance your user experience, and gather analytics data. A cookie is a small text file stored on your device by your browser when you visit the Platform.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, login persistence tokens, and security cookies. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences — such as language settings, preferred currency display, and game category preferences — to personalise your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including page visit frequency, session duration, and navigation paths. This data is used to identify areas for improvement.
• Session Management Cookies: Temporary cookies that expire when you close your browser. These are used to maintain your logged-in state and shopping session during a single visit.

8.2 Managing Cookie Preferences

You may manage or restrict the use of non-essential cookies through your web browser settings. Most browsers allow you to: view currently stored cookies; delete all cookies or specific cookies; block cookies from all or specific sites; and configure alerts when cookies are being placed.

Please note that disabling or deleting certain cookies may affect the functionality of the Platform. Specifically, disabling strictly necessary cookies will prevent you from logging in or accessing Account features.

8.3 Third-Party Analytics

kiss988 may use third-party web analytics services to analyse aggregated and anonymised usage data for platform improvement purposes. These services are configured to anonymise IP addresses and are prohibited from using data collected through kiss988 for any independent commercial purpose.

kiss988 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• Transport Layer Security: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher with 256-bit encryption, preventing interception during transmission.
• Password Security: Account passwords are stored using industry-standard one-way hashing with salting. kiss988 staff cannot view your password in plain text. You are strongly encouraged to use a unique, complex password for your kiss988 Account.
• Access Controls: Internal access to personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal data access is logged and subject to periodic audit.
• Infrastructure Security: Our Platform infrastructure is hosted in secured data centres with physical access controls, network security monitoring, intrusion detection systems, and regular security patching.
• Fraud Monitoring: kiss988 operates continuous automated and manual fraud monitoring to detect and respond to suspicious Account activity, unauthorized access attempts, and payment anomalies.

While kiss988 takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your Account credentials and for notifying kiss988 immediately if you suspect any unauthorised access to your Account.

kiss988 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Retention periods applicable to the main categories of personal data are as follows:

• Account and identity data: Retained for the duration of your Account, and for a period of at least five (5) years following Account closure or the date of your last transaction, in order to comply with anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial regulatory requirements.
• KYC documentation: Retained for a minimum of five (5) years following submission and verification, or longer where required by applicable law.
• Gaming and betting activity logs: Retained for a minimum of three (3) years for dispute resolution, responsible gambling monitoring, and regulatory compliance purposes.
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication, or longer where relevant to an ongoing dispute.
• Technical and device logs: Retained for up to twelve (12) months for security monitoring, fraud analysis, and platform performance improvement purposes.
• Marketing consent records: Retained for as long as your Account remains active and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised such that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Subject to applicable data protection laws, you have the following rights in relation to your personal data held by kiss988. To exercise any of these rights, please contact our support team using the details provided in Section 15.

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this information in a structured format within a reasonable timeframe, subject to identity verification.
• Right to Rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Minor Account details such as your contact email or phone number can be updated directly within your Account settings.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. We will consider all such requests carefully. Please note that some data cannot be deleted where retention is required by law — for example, transaction records subject to anti-money laundering retention obligations.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. Where you object to marketing, we will cease all marketing communications without delay.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kiss988 aims to respond to all data rights requests within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days with written notification to you. Identity verification will be required before any data is disclosed or modified in response to a rights request.

kiss988 operates as an internationally licensed platform. As a result, personal data collected from Malaysian players and users in other jurisdictions may be processed and stored on servers located outside of Malaysia. Where personal data is transferred to third countries, kiss988 takes appropriate measures to ensure that an equivalent level of protection is afforded to that data.

Such safeguards may include: contractual clauses binding data processors to data protection standards equivalent to those described in this Policy; transfer to countries that have been determined to provide an adequate level of data protection; or reliance on other lawful transfer mechanisms as recognised under applicable international data protection frameworks.

By using the kiss988 Platform, you acknowledge that your personal data may be processed in countries outside Malaysia, including countries whose data protection laws may differ from those of your country of residence. kiss988 remains responsible for ensuring that any such transfers are conducted in compliance with applicable obligations.

The kiss988 Platform is strictly intended for persons who are 21 years of age or older. kiss988 does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Age verification is a mandatory component of the Account registration and KYC process.

If kiss988 becomes aware that personal data has been collected from a person under 21 — whether through failure of the age verification process, misrepresentation, or any other means — that Account will be immediately suspended, all funds will be returned subject to verification, and all associated personal data will be deleted as promptly as possible.

kiss988 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform features. Any changes will be effective immediately upon publication of the updated Policy on the Platform.

The "Last Updated" date shown at the top of this Policy will be revised to reflect the date of the most recent amendment. We encourage you to review this Policy periodically to stay informed of how we handle your personal data.

For material changes — those that significantly affect how we collect, use, or share your personal data — kiss988 will endeavour to provide advance notification via email or in-platform notice where reasonably practicable. Continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data kiss988 holds about you, please contact our Data Privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat function on the Platform. Recommended for general enquiries and real-time assistance.
• Email: [email protected] — for data rights requests, privacy complaints, and formal written enquiries. Please include "Privacy Request" in the subject line.

kiss988 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve data rights requests within 30 calendar days. You may also be required to provide proof of identity before we can action a data rights request, in order to prevent unauthorised disclosure or modification of your personal information.

For questions relating to our Terms and Conditions, please visit our Terms & Conditions page. For responsible gambling support tools and resources, please visit our Responsible Gambling page.