kiss9 Privacy Policy

Introduction and Scope of Policy

kiss9 ("we", "platform" or "this website") is an online gambling platform operating under international licensing, offering online slot, live casino and sports betting services to users. This Privacy Policy applies to all individuals who access or use kiss9 services, including general visitors and registered members.

This policy specifically describes the types of personal data we collect, the purposes for that collection, the parties who may receive such data, the data retention period, and your rights as a data subject. This Privacy Policy should be read together with the Terms & Conditions of this platform.

Personal Data Collected

In operating the platform, kiss9 may collect various categories of personal data depending on the type of interaction you have with our services. These data categories include the following:

• Identity information: full name, date of birth, MyKad or passport number, gender and nationality.
• Contact information: email address, mobile phone number, and residential address.
• Account information: username, password in hashed form, login history and account activity.
• Financial information: e-wallet details (Touch 'n Go eWallet, ShopeePay), bank account information for DuitNow and FPX online banking, and cryptocurrency wallet information (USDT, BTC, ETH) linked to deposit and withdrawal transactions.
• Technical data: IP address, web browser type, device operating system, cookie data, and activity logs within the platform.
• Communication information: records of message exchanges with our customer support team via live chat or email.

We do not collect special sensitive data such as medical records, religious beliefs or biometric data unless specifically required by legal compliance obligations.

Purposes for Data Collection and Use

Every piece of data we collect has a legitimate and specific purpose. We do not use your personal data for other unrelated purposes without prior notice. The main purposes for data use include:

• Processing new account registrations and member identity verification (KYC — Know Your Customer process) as required by licensing obligations.
• Processing deposit and withdrawal transactions securely through supported payment methods.
• Providing 24/7 customer support in Bahasa Melayu and English.
• Sending important notifications relating to your account, security and platform policy updates.
• Conducting internal analysis for service improvement and user experience enhancement.
• Fulfilling legal compliance obligations including anti-money laundering (AML) and fraud prevention.
• Protecting platform integrity from fraudulent activity, account manipulation and cybersecurity threats.

Legal Basis for Data Processing

The processing of personal data by kiss9 is based on recognised legal grounds. Depending on the context, we process your data on the basis of:

• Contract performance: processing is necessary to fulfil the service agreement between kiss9 and registered members.
• Legitimate interests: we process data for fraud prevention, platform security and ongoing service improvement purposes.
• Consent: in certain situations, we obtain your explicit consent before processing data for optional marketing purposes.
• Legal obligation: processing is carried out when required by applicable legislation or regulatory bodies.

Data Sharing With Third Parties

kiss9 does not sell, rent or disclose member personal data to third parties for independent marketing purposes. However, in delivering our services, we may share data with the following categories of parties on a limited and controlled basis:

• Payment service providers: transaction processing parties that enable deposits and withdrawals to be made through the platform's supported methods.
• Game software providers: minimum technical data required for smooth and secure gaming session operation.
• Technology infrastructure service providers: including cloud and cybersecurity services we use under strict confidentiality agreements.
• Regulatory bodies and competent authorities: when required by law, court order or a legitimate authority investigation.

All third parties we engage are subject to data processing agreements that require them to comply with data protection standards equivalent to our policy.

Data Retention Period

kiss9 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. After an account is closed, we may still retain some data for a reasonable period for the following purposes:

• Compliance with ongoing legal and regulatory obligations.
• Resolution of any outstanding disputes or claims.
• Internal audit requirements and financial records compliance.

Once the retention period ends, data will be deleted or fully anonymised in a secure and irreversible manner.

Cookies and Tracking Technologies

The kiss9 platform uses cookies and equivalent tracking technologies to improve the user experience. Cookies are small text files stored in your web browser when you visit our website. There are several types of cookies we use:

• Essential cookies: required for basic platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: collect anonymous information about how users use the platform to help us improve our services.
• Functionality cookies: allow the platform to remember your preferences such as language and display settings.

You can manage cookie settings through your web browser options. Please note that disabling certain cookies may affect the functionality of some platform features.

Cross-Border Data Transfers

As a platform operating under international licensing, your personal data may be processed or stored outside Malaysia in the context of using global technology infrastructure. Every such data transfer is carried out ensuring that protection equivalent to the standards stated in this policy is fully maintained.

We ensure that every cross-border data transfer is subject to appropriate protection mechanisms, including standard contractual clauses and data processing agreements that bind the receiving party to equivalent protection obligations.

Information Security

kiss9 implements comprehensive technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. Security measures we implement include:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data in databases using industry-recognised algorithms.
• Role-based access controls to ensure only authorised personnel can access specific data.
• Continuous security monitoring and periodic security audits by our technical team.
• Two-factor authentication (2FA) procedures for access to critical internal systems.

Changes to This Privacy Policy

kiss9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technology requirements, or changes in relevant legislation. Any material changes will be communicated to members via in-platform notifications or email.

The effective date of the latest update will always be displayed at the top of this policy. We encourage you to review this policy periodically to ensure you remain informed about how we handle your personal data.