🔒

Kiss189 Privacy Policy – Malaysia Member Data Protection

Your privacy is more than a legal obligation to us — it is a commitment we take seriously. This document clearly explains what we collect, why we need it, and how we keep it safe.

Updated: 1 January 2026 PDPA 2010 Compliance 256-bit SSL Encryption

Important Note: This Privacy Policy describes kiss189's data protection practices and applies to all users of our platform, including the website and mobile app. By using the kiss189 platform, you agree to the collection and use of information as described in this document.

1

Introduction

Kiss189 takes the privacy of its members very seriously. As a platform operating in an industry that demands full trust from its users, we understand that how we handle your personal data reflects the overall integrity of our operations.

This Privacy Policy is drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the collection, processing and use of personal data in the country. We are committed to complying with every provision of the PDPA and ensuring your rights as an individual are always respected and protected.

In plain language, this Privacy Policy answers the three key questions our members ask most often: what data we collect about you, why we need it, and who can see it. We are committed to answering all three questions transparently and honestly, without confusing technical jargon.

2

Personal Data We Collect

We only collect data that is genuinely necessary to manage your account and ensure the platform operates safely and effectively. No data is collected merely for the sake of collection.

2.1 Data You Provide Directly

  • Registration Information: Full name, date of birth, identification card number, email address, and phone number.
  • Financial Information: Bank account number, account holder name, and digital wallet details for deposit and withdrawal purposes.
  • KYC Documents: Copies of identity cards, passports, utility bills or other address verification documents submitted during the verification process.
  • Communications: Content from live chat conversations, emails, and any feedback you submit to our team.

2.2 Data Collected Automatically

  • Technical Data: IP address, browser type, operating system, screen resolution and device information.
  • Activity Data: Login records, betting history, game preferences, session duration and platform usage patterns.
  • Location Data: Approximate location based on IP address for legal compliance and security purposes only.
  • Cookies: Session data, user preferences and account identifiers required for core platform functionality.
Data Category Primary Purpose Legal Basis
Identity Information Account verification, KYC compliance Contractual & legal requirement
Financial Information Deposit & withdrawal processing Contractual requirement
Technical Data Security, fraud prevention Legitimate interests
Activity Data Service improvement, auditing Legitimate interests
Communications Customer support, records Contractual requirement
Cookie Data Platform functionality, preferences Consent
3

How We Use Your Data

The data we collect is used exclusively for purposes related to operating the platform and fulfilling our legal obligations. We do not use your data for any other purpose without first obtaining your consent.

3.1 Account and Platform Operations

  • Processing account registration and verifying your identity through the KYC process.
  • Securely processing deposits and withdrawals to and from your account.
  • Providing access to games and platform services.
  • Sending transaction notifications, account updates, and important security information.

3.2 Security and Fraud Prevention

  • Detecting and investigating suspicious or unusual activity on accounts.
  • Preventing unauthorised access and misuse of the platform.
  • Complying with anti-money laundering (AML) legal requirements.
  • Verifying user location for legal jurisdiction compliance.

3.3 Service Improvement

  • Analysing usage patterns to improve platform performance and usability.
  • Evaluating the effectiveness of promotions and tailoring more relevant offers.
  • Identifying and resolving technical issues more quickly.

kiss189 never use your data for third-party ad sales, commercial profiling or any purpose unrelated to the operation of the platform.

4

Data Sharing with Third Parties

Kiss189 does not sell, rent or trade your personal data to any third party for their marketing purposes. Your data is only shared under the following limited and specific circumstances:

  • Payment Providers: DuitNow, FPX, Touch 'n Go, GrabPay and Boost receive only the minimum information necessary to process your transactions.
  • Game Providers: Required game session information is shared with providers to ensure game continuity and fairness.
  • KYC Services: A certified third-party identity verification platform receives your documents for verification purposes in accordance with the highest security standards.
  • Authority: Account information may be disclosed to Malaysian authorities pursuant to a valid court order or legal compliance requirement.
  • Auditors and Advisors: Professionals bound by strict confidentiality obligations for the purpose of independent audits.

All third parties who receive your data are bound by strict data protection agreements and are only permitted to use that information for the specific purposes defined.

5

Data Security

We invest heavily in security infrastructure to ensure your data is always protected using the most effective methods currently available.

5.1 Technical Measures

  • 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS protocols, ensuring no third party can intercept or read your information in transit.
  • Secure Storage: Sensitive data such as passwords is stored in a hashed format that cannot be decrypted, meaning even our staff cannot view your actual password.
  • Two-Factor Authentication (2FA): An additional layer of protection is available on all accounts to prevent unauthorised access even if your password is compromised.
  • Continuous Monitoring: An intrusion detection system (IDS) operates 24/7 to identify and respond to any security threats in real time.

5.2 Internal Access Controls

Access to members' personal data within our organisation is strictly limited on a need-to-know basis. Staff who do not require access to specific data to carry out their duties are not granted that permission. All internal access is logged and audited regularly.

6

Cookies and Tracking Technologies

The kiss189 platform uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better experience for you.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login sessions, language preferences and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Help us understand how members use the platform so we can continuously improve the overall user experience.
  • Functional Cookies: Storing your personal preferences such as favourite game selections and display settings.

6.2 Managing Cookies

You can manage and delete cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect your ability to log in or use certain platform features properly.

7

Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold:

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete data in your records.

Right to Erasure

Request deletion of your personal data when it is no longer needed for its original purpose.

Right to Object

Object to the processing of your data for specific purposes, including direct marketing.

Right to Data Portability

Receive your data in a structured format that can be transferred to another platform.

Right to Restrict Processing

Request that we restrict how we use your data under certain circumstances.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We aim to respond to all data-related requests within 14 working days.

8

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

  • Active Account Data: Retained for the duration of your active membership on the kiss189 platform.
  • Financial Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's financial legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after account closure, in line with anti-money laundering requirements.
  • Communication Logs: Retained for 2 years for customer support and audit purposes.
  • Account Closed: Basic data is retained for the minimum period required by law, after which it is securely deleted or anonymised.
9

International Data Transfers

In some cases, your personal data may be processed or stored on servers located outside Malaysia, specifically for data backup and service continuity purposes. Any such data transfer is carried out with adequate safeguards to ensure a level of security equivalent to Malaysia's PDPA standards is maintained.

We ensure that all parties receiving your data outside Malaysia are bound by data transfer agreements that comply with recognised international standards, including applicable Standard Contractual Clauses.

10

Child Protection

The kiss189 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that data from a minor has been collected inadvertently, we will take immediate action to delete that data and close the account in question.

Parents or guardians who become aware that their child has registered on this platform are requested to contact us immediately so that appropriate action can be taken without delay.

11

Changes to This Privacy Policy

Kiss189 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technology used. Members will be notified of any material changes via their registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

12

Contact Us

If you have any questions, concerns or complaints regarding how we handle your personal data, we strongly encourage you to contact us directly. Our data protection team is ready to assist and committed to resolving every issue in a transparent and satisfactory manner.

  • Live Chat: The fastest way – available 24/7 on the kiss189 app and website.
  • Email: [email protected] – we aim to respond within 24 hours.
  • Email Subject: Please state "Data Privacy Inquiry – [Your Username]" in the subject line for faster processing.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels established by the Department of Personal Data Protection.

Why Your Data Is Safe with kiss189

Six layers of protection keeping your privacy secure at all times on the kiss189 platform.

256-bit SSL Encryption

All data transmitted between your device and kiss189's servers is encrypted using the strongest protocols available. No third party is able to intercept your information in transit.

PDPA 2010 Compliance

All our data handling operations are governed and reviewed in accordance with Malaysia's Personal Data Protection Act 2010 — not merely as a formality, but as our everyday practice.

Controlled Internal Access

Your data is accessible only to staff who genuinely need it. Every access is logged and audited – there is no room for internal misuse.

No Data Sales

Your data has never been and will never be sold to any third party for marketing or advertising purposes. We do not generate revenue from our members' data.

You Are in Control

You may request access, correction or deletion of your data at any time. Your rights as a data subject are fully respected without any bureaucratic barriers.

24/7 Threat Monitoring

Our intrusion detection system operates around the clock to detect and block any unauthorised access attempts before they become a real problem.

Your Privacy Protected, Your Experience Assured

Create your kiss189 account with confidence – your data is fully protected and your gaming experience is always secure.

Bahasa Melayu