kiss819 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by kiss819 ("kiss819", "we", "us", or "our") in connection with the operation of the kiss819 online gaming platform accessible at kiss819.org ("the Platform") and all associated services and features.

kiss819 is committed to protecting the privacy of its users in a manner that is transparent, lawful, and consistent with internationally recognised data protection principles. This Policy is intended to inform you, as a user or prospective user of the kiss819 Platform, about the categories of personal data we collect from you, the purposes and legal bases for which we process that data, the parties with whom we may share it, your rights in relation to your data, and how to exercise those rights.

By creating a kiss819 account, visiting the Platform, or using any kiss819 service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Policy, you should not use the kiss819 Platform.

For the purposes of applicable data protection legislation, kiss819 is the data controller in respect of personal data collected through the Platform. As data controller, kiss819 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable law.

Questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by kiss819 should be directed to our support team at the contact details set out in Section 14 of this Policy.

kiss819 collects personal data from you in the following categories:

Identity and Contact Data: Full legal name; date of birth; Malaysian IC number or passport number; residential address (including city, state, and postcode); email address; and phone number. This information is collected during the account registration process and is required to verify your identity, comply with age verification requirements (21+ only), and maintain your account.

Financial Data: Payment method details including bank account identifiers, e-wallet account references (such as Touch 'n Go eWallet or Boost), and transaction history. Full payment card numbers are never stored on kiss819's systems — card transactions are processed by certified payment service providers who handle raw card data under applicable payment security standards.

Gaming and Transactional Data: Records of bets placed, games played, outcomes, deposits, withdrawals, bonus activity, and account balance history. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

Technical and Usage Data: IP address; device type and identifiers; browser type and version; operating system; referring URLs; pages visited and time spent on the Platform; and session logs. This data is collected automatically via cookies and server logs.

Communications Data: Records of communications between you and kiss819, including customer support chat transcripts, emails, and in-platform messages.

kiss819 processes your personal data for the following purposes:

• Account management: Creating, maintaining, verifying, and administering your kiss819 account, including password resets and session management.
• Identity verification and KYC: Verifying your identity and age (21+ requirement) in compliance with anti-money laundering (AML) and Know Your Customer (KYC) obligations under applicable international gaming authority requirements.
• Service provision: Processing deposits, withdrawals, bet settlements, bonus allocations, and all other transactions necessary to operate the kiss819 gaming platform.
• Fraud detection and security: Monitoring platform usage to detect and prevent unauthorised access, fraud, money laundering, collusion, and other prohibited conduct.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and administering responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion.
• Customer support: Responding to your queries, complaints, and requests; maintaining records of communications for quality assurance and dispute resolution.
• Legal and regulatory compliance: Fulfilling obligations under applicable laws, regulations, and directions from competent regulatory authorities, including reporting obligations.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform functionality, game selection, and user experience.
• Marketing communications: Sending you promotional offers, newsletters, and bonus notifications where you have opted in to receive such communications. You may opt out at any time.

kiss819 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kiss819 — i.e., to provide the gaming services you have registered for, process transactions, and manage your account.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing necessary for kiss819's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — for example, in relation to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kiss819 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: Your payment details are shared with certified payment processing partners (including e-wallet operators and banking partners) solely for the purpose of processing deposits and withdrawals on your behalf.
• Identity verification providers: Identity and document data may be shared with certified KYC and identity verification service providers for the purpose of confirming your identity and age.
• Game content providers: Limited technical data may be shared with game studios and software providers (such as live casino operators) for the purpose of game delivery, fairness auditing, and dispute resolution.
• Regulatory authorities: kiss819 may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, or courts in response to lawful requests, orders, or legal proceedings.
• IT and infrastructure providers: Data may be accessible to cloud hosting, data storage, and cybersecurity service providers under binding data processing agreements that restrict the use of data to the provision of those services.

All third-party service providers with whom kiss819 shares personal data are required to handle that data in accordance with applicable data protection law and are prohibited from using it for any purpose other than the specific service they provide to kiss819.

The kiss819 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytical data. Cookies are small text files stored on your device by your browser. The types of cookies used on the kiss819 Platform include:

• Essential cookies: Necessary for the operation of the Platform, including session authentication and security. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences and settings to personalise your experience across visits.
• Analytical cookies: Collect aggregated data about how users interact with the Platform to help us understand usage patterns and improve our services. Data collected via analytical cookies is anonymised before analysis.

You may control cookie behaviour through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of the kiss819 Platform, though certain preference-based features may be affected.

kiss819 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such further periods as may be required by applicable law or regulation. In particular:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and KYC regulatory requirements.
• Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Customer support communications are retained for three (3) years following the resolution of the relevant query or complaint.
• Technical and usage data collected via cookies and server logs is retained for a maximum of twenty-four (24) months from the date of collection, after which it is deleted or anonymised.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be used to identify you.

In the course of providing services to Malaysian players, kiss819 may transfer personal data to service providers located in jurisdictions outside Malaysia. Where such transfers occur, kiss819 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable in Malaysia, including the use of contractual data protection clauses, data processing agreements, and transfers to jurisdictions recognised as providing adequate levels of data protection.

If you would like further information about the safeguards applicable to any specific transfer of your personal data to a third country, please contact us using the details in Section 14.

Subject to applicable law, you have the following rights in relation to the personal data that kiss819 holds about you:

• Right of access: You may request a copy of the personal data kiss819 holds about you, together with information about how that data is being used.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data held by kiss819.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to restrict processing: You may request that kiss819 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data, pending verification.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to kiss819, for transmission to another controller where technically feasible.
• Right to object: You may object to processing of your personal data based on legitimate interests, including profiling, and to direct marketing at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact kiss819 at [email protected] with your request. We will respond within thirty (30) calendar days. We may require you to verify your identity before processing your request.

The kiss819 Platform is strictly intended for adults aged 21 years and above. kiss819 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If kiss819 becomes aware that personal data has been collected from a person under 21 years of age without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have created an account on the Platform, please contact us immediately at [email protected].

kiss819 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform; encrypted storage of personal and financial data at rest; role-based access controls restricting data access to authorised personnel only; regular security assessments and penetration testing; and comprehensive intrusion detection monitoring.

While kiss819 takes reasonable and appropriate measures to protect your data, no security system is completely impenetrable. In the event of a data breach, kiss819 will notify affected users and, where required, relevant regulatory authorities within the applicable notification timeframe.

You are responsible for maintaining the security of your kiss819 login credentials. kiss819 will never ask you for your password via email, chat, or any other channel.

kiss819 may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered users via email or an in-platform notification, and update the "Last updated" date at the top of this page.

Your continued use of the kiss819 Platform following notification of any updates to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how your personal data is protected.

If you have any questions, concerns, or requests relating to this Privacy Policy, or wish to exercise any of your data rights, please contact the kiss819 data privacy team. We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 calendar days.

Email: support@kiss819.org (plain text — not a clickable link)

Please include "Privacy Request" in the subject line of your email, along with your registered username and a clear description of your request. For data subject access requests, we may ask you to verify your identity before providing access to your personal data.