Privacy Policy kiss998 – Your Personal Data Protection

1 Personal Information We Collect

Kiss998 only collects personal information that is strictly necessary to provide our services safely and efficiently. The following are the categories of information we collect:

Account Registration Information:

• Full name as per official identification document.
• An active and reachable email address.
• Registered Malaysian mobile phone number.
• Date of birth for age verification (18 and above).
• Username and password chosen by you.

KYC Verification Information:

• A valid copy of MyKad or passport.
• Proof of current address – bank statement or utility bill within the last 3 months.
• Proof of ownership of the payment method used (screenshot or statement).
• A selfie holding your identification document, if required for further verification.

Financial Transaction Information:

• Deposit and withdrawal records including amounts, dates, and payment methods.
• Bank account number, digital wallet number, or crypto wallet address used.
• Wagering history and gaming activity on the platform.

Automatic Technical Information:

• IP address, browser type, operating system, and device model.
• Login session data including time, approximate location, and session duration.
• In-platform activity logs for security and fraud prevention purposes.

2 How We Use Your Personal Data

Every piece of information we collect is used for clear and lawful purposes. We do not use your data for any purpose other than those stated below:

3 Legal Basis for Data Processing

All personal data processing by kiss998 is based on one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You provide explicit consent during account registration and for optional marketing communications.
• Contract Performance: Processing is required to fulfil our contractual responsibilities to you as a platform member.
• Legitimate Interest: We process data to prevent fraud, maintain platform security, and protect the interests of all users.
• Legal Obligations: Certain data processing is required by Malaysian law, including AML and KYC requirements.

4 Data Sharing and Disclosure

Kiss998 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is only shared in the following limited situations:

• Trusted Service Providers: Payment processing companies, cloud service providers, and technical vendors that help us operate the platform — all bound by strict confidentiality agreements.
• Legal Authority: When required by Malaysian law, court order, or a lawful request from a law enforcement agency.
• Fraud Prevention: Minimum required information may be shared with integrated fraud prevention networks to protect all parties.
• Business Restructuring: In the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity subject to prior notice to you.

5 Data Security and Protection

Kiss998 invests seriously in security infrastructure to ensure your data is always protected. The security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmissions between users and servers.
• Data-at-rest encryption using AES-256 for all records stored in the database.
• Role-based access controls – only authorised personnel may access sensitive data.
• Regular security audits by independent third parties to identify and address vulnerabilities.
• A real-time threat detection system that monitors platform traffic 24/7.
• A comprehensive data incident response plan to address any breach swiftly.

While we take all reasonable precautions, no online system can guarantee 100% absolute security. We encourage you to also protect your account by using a strong password and enabling two-factor authentication.

6 Data Retention Period

Kiss998 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law:

• Active Account Data: Retained for the duration your account is active plus 5 years after account closure to meet legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with the Companies Act and Malaysian tax laws.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required under AML laws.
• Support Communication Logs: Retained for 2 years for service quality and dispute resolution purposes.
• Marketing Data: Deleted within 30 days of consent withdrawal.

7 Your Rights Under PDPA

As an individual protected under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us:

To exercise any of the above rights, please contact our privacy team via Live Chat customer support or email. We do not charge any fees for reasonable requests.

8 Cookies and Tracking Technologies

Kiss998 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login session management and security settings. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised information on how users interact with the platform to help us improve functionality and site speed.
• Functional Cookies: Storing your preferences such as preferred language, display theme, and account settings for a more personalised experience.
• Marketing Cookies: Used to display offers and promotions relevant to your interests. You can disable these cookies without affecting core platform functionality.

You can manage your cookie settings through your internet browser at any time. Please note that disabling certain cookies may affect some features on the kiss998 platform.

9 Cross-Border Data Transfers

In operating our platform, some of your personal data may be processed or stored outside Malaysia by our cloud service and technical infrastructure providers. When this occurs, kiss998 ensures:

• The recipient country or entity maintains a level of data protection equivalent to Malaysia's.
• A legally binding data transfer agreement exists between kiss998 and its recipients.
• Additional protective measures such as encryption are applied during transfers.
• You will be informed of any significant changes to the location where your data is processed.

10 Children's Privacy

The kiss998 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered an account on our platform are encouraged to contact us promptly.

11 Amendments to the Privacy Policy

Kiss998 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or service improvements. When significant changes are made:

• The "Last Updated" date at the top of this document will be revised accordingly.
• A notice will be displayed on the kiss998 homepage at least 7 days before the changes take effect.
• Members will be notified via their registered email of any changes that materially affect their privacy rights.

Continued use of the platform after updated policy terms take effect constitutes your acceptance of those terms.

12 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how we handle your personal data, please do not hesitate to contact us:

We are committed to handling all privacy-related enquiries with seriousness and transparency. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.