kissy988 Privacy Policy

1. Introduction

kissy988 ("we", "us", "our", or the "Company") operates the online betting and casino platform accessible at kissy988.org (the "Platform"). We are committed to protecting the privacy and personal data of all players, visitors, and users ("you", "your") who interact with the kissy988 Platform.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you in respect of your personal data. It applies to all interactions with the kissy988 Platform, including account registration, deposit and withdrawal activities, game participation, customer support communications, and browsing activity on our website.

By accessing or using the kissy988 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, you must not use the Platform. This Privacy Policy should be read in conjunction with the kissy988 Terms & Conditions.

2. Personal Data We Collect

2.1 Registration Data

When you create a kissy988 account, we collect the following information: full legal name, date of birth, Malaysian residential address (including postcode and state), email address, and mobile phone number. This data is required to establish your account and to fulfil our Know Your Customer ("KYC") obligations under applicable anti-money laundering regulations.

2.2 Identity Verification Data

In order to verify your identity in accordance with international gaming authority compliance requirements, we may collect copies of government-issued identity documents (such as your Malaysian NRIC / MyKad or passport), proof of address documents (such as a utility bill or bank statement issued within three months), and in some cases, proof of source of funds. These documents are processed securely and retained only for as long as required by law.

2.3 Financial Data

We collect transaction records including deposit and withdrawal amounts, dates, payment methods used (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank), and transaction reference numbers. We do not store full payment card numbers or online banking credentials on our systems.

2.4 Activity Data

We collect records of your game activity on the kissy988 Platform, including betting history, wager amounts, game outcomes, session duration, and bonus usage. This data is used for regulatory compliance, dispute resolution, and personalisation of the player experience.

2.5 Technical Data

We automatically collect technical information when you access the kissy988 Platform, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, and session timestamps. This data is collected via server logs and cookie technology.

2.6 Communications Data

Where you contact kissy988 via live chat, email, or any other support channel, we retain records of that correspondence including content, dates, and outcomes. This data is used to manage your enquiry, improve our support quality, and maintain compliance records.

3. How We Use Your Personal Data

kissy988 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your kissy988 player account, including processing your login, managing your wallet balance, and delivering game access.
• Identity & Age Verification: To verify that you are at least 21 years of age and that you are who you say you are, in compliance with international gaming authority requirements for licensed operators.
• Payment Processing: To process your deposits and withdrawals through your selected local payment methods, including Touch n Go eWallet, Boost, and Malaysian bank transfers.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and responsible gaming regulations — including the maintenance of transaction records and the filing of statutory reports where required.
• Fraud Detection & Security: To monitor account activity for indicators of fraudulent conduct, account takeover, collusion, or abuse of the Platform, and to protect both the Company and other players from harm.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email channels.
• Platform Improvement: To analyse usage patterns and player behaviour (in aggregate and anonymised form where possible) to improve the kissy988 Platform, optimise game performance, and develop new features.
• Marketing Communications: Where you have provided consent, to send you information about new promotions, bonus offers, and platform updates relevant to your kissy988 account. You may withdraw consent at any time via your account settings.
• Responsible Gaming: To monitor player activity for indicators of problem gambling behaviour, apply player-requested limits and self-exclusion orders, and fulfil operator-level responsible gaming obligations.

4. Legal Basis for Processing

kissy988 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and responsible gaming obligations mandated by international gaming authority standards.
• Legitimate interests: Processing for fraud detection, security monitoring, platform improvement, and analytics, where our legitimate business interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where you have provided explicit prior consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

kissy988 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of recipient, strictly for the purposes described in this Policy:

• Game software providers: Licensed third-party studios (such as Pragmatic Play, Evolution, Spadegaming, and PG Soft) receive limited technical data necessary to deliver game sessions on the kissy988 Platform.
• Payment processors: Malaysian payment service providers (Touch n Go, Boost, and banking partners) receive transaction data necessary to process your deposits and withdrawals.
• Identity verification services: KYC and document verification providers engaged to assist with our age and identity verification obligations.
• Regulatory authorities: Applicable gaming regulatory bodies, financial intelligence units, and law enforcement agencies where disclosure is required by law, court order, or regulatory direction.
• Fraud prevention services: Third-party fraud detection platforms used to protect the kissy988 Platform and its players from financial crime and abuse.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged in the normal course of business, subject to professional confidentiality obligations.

All third parties with whom kissy988 shares personal data are contractually required to process that data in accordance with applicable data protection standards and strictly for the purposes for which it was shared.

6. Cookies & Tracking Technologies

The kissy988 Platform uses cookies and similar tracking technologies to operate core website functions, measure performance, and improve the user experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function, including session management, login state, and security token storage. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display settings to personalise your kissy988 experience.
• Analytics cookies: Collect anonymised usage data to help us understand how players interact with the Platform and to identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent login attempts, account sharing, and bot activity on the Platform.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some kissy988 Platform features.

7. Data Retention

kissy988 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years, or longer where required by applicable regulatory obligations.
• Support communications: Retained for three (3) years from the date of last contact, or longer where the correspondence relates to an unresolved dispute or regulatory matter.
• Technical and log data: Retained for up to twelve (12) months for security and fraud detection purposes, after which data is anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to a specific individual.

8. Data Security

kissy988 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your browser and kissy988 servers.
• AES-256 encryption for sensitive data at rest, including stored identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a demonstrable business need can access player personal data.
• Multi-factor authentication required for all administrative access to systems holding player data.
• Regular independent penetration testing and vulnerability assessments of the kissy988 Platform infrastructure.
• Incident response procedures compliant with applicable breach notification obligations.

While kissy988 employs industry-standard security practices, no platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and for notifying kissy988 immediately if you suspect any unauthorised access to your account.

9. Your Rights

Subject to applicable law and regulatory constraints, you have the following rights in respect of your personal data held by kissy988:

• Right of access: You may request a copy of the personal data kissy988 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal and regulatory retention obligations.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, such as while a correction request is being assessed.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact the kissy988 data protection team via the live chat or email support channels available on the Platform. We will respond to all verified requests within thirty (30) days. We may require you to verify your identity before processing any data rights request.

10. Children's Privacy

The kissy988 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately close the relevant account and delete the associated data in accordance with our data retention procedures.

If you have reason to believe that a minor has registered on or is using the kissy988 Platform, please contact our support team immediately so that we can investigate and take appropriate action.

11. Changes to This Policy

kissy988 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Where material changes are made, we will provide notice on the Platform or by email to your registered address at least 14 days prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of the kissy988 Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how kissy988 handles your personal data.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kissy988 handles your personal data, please contact our data protection and compliance team via the 24/7 live chat service on this Platform, or by email at the address displayed in the footer of this page.

We are committed to handling all privacy enquiries promptly and in accordance with the standards expected of a regulated operator complying with international gaming authority data protection requirements. Written enquiries will receive a substantive response within five (5) business days.