🔒 kiss919 Privacy Policy

1. Introduction

This Privacy Policy describes how kiss919 ("we", "us", "our") collects, processes, uses, and protects personal data relating to individuals ("you", "your") who use the kiss919 website at kiss919.org, the kiss919 mobile application, and all associated services (collectively, the "Platform").

kiss919 is committed to handling personal data responsibly and in accordance with applicable data protection legislation. By registering an account or using the kiss919 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the kiss919 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions with respect to privacy matters, this Privacy Policy shall prevail.

---

2. Personal Data We Collect

kiss919 collects personal data in the following categories:

2.1 Registration & Account Data

• Full name, date of birth, and gender
• Email address and mobile phone number
• Username and encrypted password
• Country and state of residence (e.g., Selangor, Penang, Johor)
• Preferred language and currency (MYR)

2.2 Identity Verification (KYC) Data

• Government-issued identity documents (Malaysian MyKad, passport)
• Proof of address documentation (utility bills, bank statements)
• Selfie or live verification imagery where required for enhanced KYC
• Payment method ownership documentation

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• Payment instrument details (e-wallet identifiers, bank account references — card numbers are never stored in full)
• Transaction history and balance records

2.4 Platform Usage Data

• Games played, bet amounts, session durations, and game history
• Login times, IP addresses, and device identifiers
• Browser type, operating system, and screen resolution
• Referral source and navigation paths within the Platform

2.5 Communications Data

• Records of support conversations conducted via kiss919 live chat
• Email correspondence with the kiss919 support team
• Responses to surveys, promotions, or feedback requests

---

3. How We Use Your Personal Data

kiss919 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, verify, and administer your kiss919 account, including processing login sessions and password resets.
• Service Delivery: To provide access to the games, sportsbook markets, live casino, and all other features of the kiss919 Platform.
• Payment Processing: To process deposits and withdrawals in MYR via your selected payment method (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, or other supported methods).
• Identity & Age Verification: To comply with our obligation to verify that all members are aged 21 or over and that their identity matches their account registration details.
• Legal & Regulatory Compliance: To fulfil obligations under applicable anti-money-laundering (AML) regulations, responsible gaming requirements, and any other legal obligations applicable to kiss919's operations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account compromise, and platform abuse.
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, design, and features of the kiss919 Platform.
• Marketing Communications: Where you have given consent, to send you information about kiss919 promotions, bonuses, and new features. You may withdraw this consent at any time.
• Responsible Gaming: To monitor gambling patterns for indicators of problem gambling behaviour and to facilitate the application of player-requested limits, cooling-off periods, or self-exclusion.

---

4. Legal Basis for Processing

kiss919 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and kiss919 under the Terms & Conditions, including account operation and payment processing.
• Legal obligation: Processing required to comply with applicable law, including AML obligations, age verification requirements, and regulatory reporting.
• Legitimate interests: Processing necessary for kiss919's legitimate business interests, including fraud detection, platform security, and service analytics, where such interests are not overridden by your fundamental rights.
• Consent: Where you have given specific, informed consent to processing — most notably for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

---

5. Data Sharing with Third Parties

kiss919 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of third parties solely to the extent necessary to deliver our services:

• Payment processors: Financial institutions and e-wallet providers (including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank) to process your transactions.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with legal obligations.
• Game content providers: Certified third-party game studios (such as Pragmatic Play and Evolution Gaming) whose games are integrated into the kiss919 Platform. These providers may receive anonymised session data for game performance purposes.
• Technology infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under data processing agreements that require them to maintain appropriate safeguards.
• Regulatory and law enforcement authorities: Where kiss919 is required by law to disclose personal data to a regulator, court, or law enforcement agency.

All third-party service providers engaged by kiss919 are contractually required to maintain the confidentiality and security of any personal data processed on our behalf and to use such data only for the purposes specified by kiss919.

---

6. Cookies & Tracking Technologies

The kiss919 Platform uses cookies and similar tracking technologies including web beacons and local storage to enhance your experience and analyse usage patterns. The categories of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Performance cookies: Used to collect anonymised data about how you use the Platform, helping us identify areas for improvement.
• Functional cookies: Used to remember your preferences, such as language settings and preferred game categories.
• Marketing cookies: Used where you have consented, to measure the effectiveness of kiss919 promotional campaigns.

You can manage cookie settings through your browser preferences. Disabling certain categories of cookies may affect the functionality of the kiss919 Platform.

---

7. Data Retention

kiss919 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention requirements. In practice:

• Account and transaction data is retained for a minimum of 5 years following account closure to comply with AML record-keeping obligations.
• KYC identity documents are retained for the duration of your account plus any legally mandated post-closure retention period.
• Support communications are retained for 2 years from the date of the interaction.
• Marketing consent records are retained until you withdraw consent and for a reasonable period thereafter as proof of prior consent.

---

8. Data Security

kiss919 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include 256-bit SSL/TLS encryption for data in transit, encrypted storage for sensitive data at rest, multi-factor authentication for administrative access to production systems, and continuous monitoring for suspicious access patterns.

Notwithstanding the above, no transmission of data over the internet can be guaranteed to be completely secure. If you believe your kiss919 account has been compromised, contact our support team immediately via in-app live chat.

---

9. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by kiss919:

• Right of access: You may request a copy of the personal data kiss919 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Most account details can be updated directly within kiss919 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that kiss919 restricts the processing of your data in certain circumstances.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing), you may withdraw that consent at any time.

To exercise any of the above rights, please contact kiss919 support at [email protected]. We will respond to all data rights requests within 30 days of receipt.

---

10. Children and Minors

---

11. International Data Transfers

kiss919's infrastructure may involve the processing of personal data in jurisdictions outside Malaysia. Where such transfers occur, kiss919 ensures that appropriate safeguards are in place — including contractual data processing agreements that require receiving parties to apply equivalent data protection standards to those described in this Privacy Policy.

---

12. Changes to This Privacy Policy

kiss919 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or service offerings. Material changes will be communicated to registered members via email to the address on file and/or a prominent notice on the Platform. We encourage you to review this Policy periodically. Continued use of the kiss919 Platform following notification of any change constitutes your acceptance of the updated Policy.

---

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kiss919 handles your personal data, please contact our data protection team:

[email protected]

We endeavour to acknowledge all privacy-related enquiries within 2 business days and to resolve them within 30 calendar days.