Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how kiss198 ("we", "us", "our" or the "Platform"), accessible at https://kiss198.cam, collects, processes stores, shares and protects personal information relating to users ("you", "your") of the Platform.

kiss198 operates as an English-language online casino and sports entertainment information platform primarily serving adult Malaysian users, including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other cities across Malaysia. We are committed to handling your personal information responsibly and in accordance with the applicable data protection requirements of our operating jurisdiction.

By accessing or using the kiss198 Platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

This Policy should be read alongside theTerms & Conditions and Responsible Gambling guidelines, each of which forms part of the overall framework governing your relationship with kiss198.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, email address, date of birth, financial account details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure and destruction.
• "Data Controller" means the kiss198 entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of kiss198 under a data processing agreement.
• "KYC" (Know Your Customer) refers to identity and age verification procedures applied to registered Platform users.
• "Cookies" means small data files placed on your device by the Platform for purposes described in Section 10.
• "Account" refers to a registered user profile on the kiss198 Platform.
• "MYR" refers to Malaysian Ringgit, the currency used in monetary examples throughout this Platform.

3. Personal Data We Collect

kiss198 collects the following categories of Personal Data, depending on how you interact with the Platform:

4. How We Collect Personal Data

kiss198 collects Personal Data through the following channels:

4.1 Directly from You

You provide Personal Data directly when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team or participate in any Platform communication. This includes information entered into registration forms and documents submitted for identity verification.

4.2 Automatically Through Platform Use

When you access and use the Platform, certain technical and behavioural data is collected automatically. This includes your IP address, device type, browser configuration, session timestamps, pages visited and interactions with Platform features. This data is collected through server logs, cookies and similar technologies described in Section 10.

4.3 From Third-Party Service Providers

kiss198 may receive Personal Data from third-party payment processors (including e-wallet providers such as Touch'n Go eWallet, Boost and GrabPay, bank transfer services via DuitNow, FPX and major Malaysian banks including Maybank, CIMB, Public Bank and Hong Leong, and cryptocurrency processing services), identity verification providers, fraud detection services and analytics partners. Data received from these sources is handled in accordance with this Policy.

5. Data Processing

kiss198 processes your Personal Data for the following purposes:

• Account management: Creating, maintaining and securing your registered Account, including password reset and account recovery procedures.
• KYC and age verification: Confirming that you are aged 21 or above and that the identity and payment method details provided are accurate and authentic.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method and resolving payment disputes.
• Responsible gambling monitoring: Tracking betting activity to identify patterns that may indicate problematic gambling behaviour and applying appropriate interventions, such as deposit limit enforcement or account restrictions.
• Fraud prevention and security: Detecting and preventing unauthorised access, money laundering, bonus abuse and other fraudulent or harmful activity.
• Customer support: Responding to queries, complaints and requests submitted through live chat, email or any other support channel.
• Regulatory compliance: Meeting our obligations under the applicable licensing jurisdiction, including record-keeping and reporting requirements.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, navigation and feature design.
• Marketing communications: Sending promotional material relevant to your Platform activity, where you have provided consent and not subsequently withdrawn it.

6. Legal Basis for Processing

kiss198 relies on the following legal bases for the processing of your Personal Data:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing and KYC verification.
• Legal obligation: Processing required to comply with applicable licensing, anti-money-laundering and responsible gambling regulations imposed on the Platform's operating entity.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gambling monitoring and analytics, where our interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications, non-essential cookies and certain analytics features. You may withdraw consent at any time as described in Section 11.

7. Data Sharing

7.1 Service Providers

kiss198 shares Personal Data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These providers include payment processors, identity verification services, fraud detection platforms, cloud hosting providers and customer support software vendors. Service providers are permitted to use your Personal Data only for the purposes for which it was shared and are contractually obligated to maintain appropriate security standards.

7.2 Regulatory and Legal Disclosure

kiss198 may disclose Personal Data to regulatory authorities, licensing bodies, law enforcement agencies or courts where required to do so by law, court order, regulatory direction or in connection with the investigation of suspected fraud, money laundering or criminal activity.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring or sale of assets involving the kiss198 operating entity, Personal Data held at the time of the transaction may be transferred as part of the business assets, subject to the acquirer maintaining equivalent or superior data protection standards.

7.4 No Sale of Personal Data

kiss198 does not sell, rent or lease your Personal Data to third-party marketers, advertising networks or data brokers. Your information is not a commercial product.

8. International Data Transfers

kiss198's operating infrastructure may involve the transfer and storage of Personal Data in jurisdictions outside Malaysia, including jurisdictions in which our cloud hosting, payment processing or identity verification service providers operate. Where such transfers occur, kiss198 takes reasonable steps to ensure that the receiving jurisdiction or service provider maintains data protection standards appropriate to the nature of the data being transferred.

Malaysian users should be aware that their Personal Data may be processed in jurisdictions that do not have data protection laws equivalent to Malaysia's PDPA. By using the Platform, you consent to such transfers, subject to the safeguards described in this Policy.

9. Data Retention

kiss198 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory and licensing obligations. Specific retention periods include:

• Account data: Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in line with standard AML and licensing record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following verification or Account closure, as required by applicable licensing obligations.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Communication and support records: Retained for up to three (3) years following the relevant communication or complaint resolution.
• Analytics and log data: Typically retained in aggregated or pseudonymised form for up to twenty-four (24) months.

When Personal Data is no longer required for the purpose for which it was collected, and no legal or regulatory retention obligation applies, kiss198 will securely delete or anonymise the relevant data.

10. Cookies & Tracking Technologies

10.1 What Cookies Do

Cookies are small data files stored on your device when you visit the kiss198 Platform. They help the Platform function correctly, remember your preferences, maintain your logged-in session and collect anonymised usage information to improve the Platform experience.

10.2 Types of Cookies Used

• Strictly necessary cookies: Required for core Platform functionality, including session management, security tokens and login state. These cannot be disabled without significantly impairing your use of the Platform.
• Functional cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics cookies: Collect aggregated, anonymised information about how users navigate the Platform, helping us identify areas for improvement. kiss198 uses this data internally and does not share individual analytics profiles with third parties.
• Security cookies: Used to detect and prevent fraud, bot activity and unauthorised access attempts.

10.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Most modern browsers provide cookie management options within their settings or preferences menus. Please note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Disabling functional or analytics cookies will not prevent access to the Platform but may affect your user experience.

11. Your Rights

Subject to applicable law and the limitations described in this Policy, you have the following rights in relation to your Personal Data held by kiss198:

• Right of access: You may request a copy of the Personal Data kiss198 holds about you, together with information about how it is being processed.
• Right to rectification: You may request the correction of inaccurate or incomplete Personal Data. You may also update certain Account details directly within your Account settings.
• Right to erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Please note that certain data must be retained for AML and licensing compliance purposes and cannot be erased on request.
• Right to restrict processing: You may request that kiss198 limit the processing of your Personal Data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to data portability: Where processing is carried out on the basis of consent or contractual necessity, you may request that kiss198 provide your Personal Data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests. kiss198 will assess the objection and cease the relevant processing unless compelling legitimate grounds override your rights.

12. Data Security

kiss198 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive Personal Data and financial information at rest;
• Role-based access controls limiting internal access to Personal Data to authorised personnel with a legitimate operational need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication options for Account access;
• Monitoring and logging systems to detect and respond to suspicious access patterns and potential breaches.

While kiss198 takes data security seriously, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying kiss198 promptly if you suspect any unauthorised access to your Account.

13. Minors and Age Restriction

The kiss198 Platform is strictly restricted to individuals aged21 years or above. kiss198 does not knowingly collect or process Personal Data from individuals under the age of 21. Age verification (KYC) is a mandatory requirement for all registered users.

If kiss198 becomes aware that Personal Data has been collected from a person under the age of 21, the relevant Account will be immediately suspended, any balance held will be withheld pending investigation, and the collected data will be securely deleted unless retention is required for investigative or legal purposes.

If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we may take appropriate action.

14. Amendments to This Policy

kiss198 reserves the right to update or amend this Privacy Policy at any time. Changes will be reflected on this page with an updated "Last Updated" date. Where amendments are material, registered users will be notified via their registered email address with reasonable advance notice.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how your Personal Data is being handled.

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the kiss198 data team through the following channels:

• Support and data queries email: [email protected] (plain text — not a clickable link)
• Live chat: Available24 hours a day, 7 days a week via the Platform
• Written response target: We aim to acknowledge all written privacy requests within 5 business days and respond fully within 30 days

For matters relating to responsible gambling, self-exclusion or account restrictions, please visit the Responsible Gambling page. For general Platform terms, see the Terms & Conditions.