Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how kiss918th ("we", "us", "our", "the Platform") collects, processes, stores, and uses the personal information of individuals who access and use the kiss918th website at kiss918th.cam and all associated services ("Platform").

kiss918th is committed to protecting the privacy and personal data of all users, including registered players and visitors who browse the Platform without registering. This Policy is drafted in accordance with internationally recognised data protection principles and reflects the obligations we have accepted under our operating licence.

By registering an account on kiss918th, depositing funds, participating in games, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

02 Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, alteration, and deletion.
• "Data Controller" — kiss918th, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of kiss918th, acting under our documented instructions and bound by contractual data protection obligations.
• "KYC" — Know Your Customer; the identity, age, and source-of-funds verification process applied to all registered accounts.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Sensitive Data" — personal data that requires heightened protection, including government-issued identity document numbers, financial account information, and documentation submitted for KYC purposes.

03 Data We Collect

kiss918th collects personal data through several channels. The categories of data we collect are described below, along with the primary source for each category:

We do not knowingly collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, health data, or religious beliefs) beyond what is strictly necessary for age and identity verification purposes under our licensing obligations.

04 Purposes of Processing

We process personal data only for specific, legitimate purposes. The primary purposes for which we use your data are:

• Account Management: Creating and maintaining your kiss918th account, including login authentication, account security, and profile management.
• Identity & Age Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming your identity in accordance with our licensing obligations and anti-money laundering requirements.
• Payment Processing: Facilitating deposits via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Boost, GrabPay) and cryptocurrency (BTC, ETH, USDT, BNB), and processing withdrawal requests to your verified payment method.
• Game Delivery & Platform Operation: Delivering games, calculating outcomes, maintaining game integrity, and operating the Platform's technical infrastructure.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other prohibited conduct.
• Responsible Gambling Compliance: Monitoring account activity for indicators of problem gambling behaviour, enforcing self-exclusion and deposit limit requests, and administering our responsible gambling programme.
• Customer Support: Responding to your enquiries, resolving disputes, and processing formal complaints.
• Legal & Regulatory Compliance: Meeting our obligations under applicable licensing conditions, responding to lawful requests from regulatory authorities, and maintaining records required by law.
• Marketing (where consented): Sending promotional communications about kiss918th bonuses, game launches, and special offers — only where you have provided explicit opt-in consent.

05 Legal Basis for Processing

We process your personal data on the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable licensing conditions, anti-money laundering regulations, and other mandatory legal requirements — including KYC verification and record-keeping obligations.
• Legitimate Interests: Processing conducted to pursue our legitimate operational interests, including fraud prevention, security monitoring, platform improvement, and responsible gambling programme administration — provided that such processing does not override your fundamental privacy rights.
• Consent: Processing for which you have provided clear, explicit consent — specifically, the sending of direct marketing communications. You may withdraw this consent at any time.

06 Data Sharing & Disclosure

kiss918th does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Service Providers: We share necessary financial data with payment processors and e-wallet operators (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, and Public Bank) to process transactions. These entities process your data as independent data controllers and are governed by their own privacy policies.
• KYC & Identity Verification Services: We use licensed third-party KYC providers to verify the identity and age of account holders. Identity documents and verification data are processed by these providers under strict contractual data protection obligations.
• Cryptocurrency Payment Networks: Cryptocurrency deposit and withdrawal transactions are broadcast to public blockchain networks (Bitcoin, Ethereum, Tron, Binance Smart Chain) as part of the transaction confirmation process. Blockchain transactions are publicly visible by their nature.
• Game Software Providers: We share session and gameplay data with our licensed international game studio partners to facilitate game delivery and integrity. These providers are contractually prohibited from using player data for their own independent purposes.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to prevent or investigate suspected criminal activity.
• Professional Advisors: We may share personal data with legal advisors, accountants, and auditors where necessary for the provision of professional services, subject to binding confidentiality obligations.

We do not share your personal data with any third party for that party's own independent marketing or commercial purposes.

07 Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing conditions. Our standard retention periods are outlined below:

• Account Data: Retained for the duration of your active account plus a minimum of 5 years following permanent account closure, in accordance with our anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of account closure or the last transaction, whichever is later, as required under international licensing and AML compliance standards.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction for financial audit and regulatory compliance purposes.
• Support Communications: Retained for 3 years from the closure of a support ticket or complaint, unless a longer period is required for ongoing legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent, plus a reasonable period thereafter as evidence of the consent record, in the event of a regulatory query.
• Technical & Log Data: Typically retained for 12 months, subject to operational security requirements.

When personal data is no longer required, we securely delete or anonymise it in accordance with our data disposal procedures.

08 Data Security

kiss918th implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption-at-rest for sensitive stored data, including identity documents and financial information.
• Multi-factor authentication requirements for account access.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures with defined timelines for identifying, containing, and notifying affected parties in the event of a data breach.

While we take reasonable and appropriate precautions to protect your data, no digital system can guarantee absolute security. You are also responsible for maintaining the security of your account credentials and should contact our support team immediately if you suspect unauthorised access to your account.

09 Cookies & Tracking Technologies

kiss918th uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for core Platform functionality, including session management, login authentication, and security features. These cannot be disabled without impacting your ability to use the Platform.
• Functional Cookies: Used to remember your Platform preferences, such as language settings, preferred deposit method, and session configuration.
• Analytics Cookies: Used to collect aggregate data about Platform usage patterns, page performance, and user journeys, helping us improve the Platform experience.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

We do not use third-party advertising cookies or permit third-party advertisers to set cookies on the Platform. You may manage cookie preferences through your browser settings; however, disabling essential cookies may prevent certain Platform features from functioning correctly.

10 International Data Transfers

kiss918th operates under international licensing and uses technology infrastructure and service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia.

When we transfer personal data internationally, we take appropriate steps to ensure that such transfers are conducted with adequate protections in place. These protections may include contractual data transfer agreements incorporating standard contractual clauses, adequacy decisions applicable to the recipient jurisdiction, or other recognised transfer mechanisms.

11 Your Rights

Subject to applicable law and certain limitations, you hold the following rights in relation to your personal data held by kiss918th. You may exercise any of these rights by contacting us using the details in Section 15:

We will respond to all valid data subject requests within 30 days of receipt. Where requests are complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We reserve the right to request proof of identity before processing any data subject request to ensure we are not disclosing data to unauthorised parties.

We will not charge a fee for handling data subject requests unless requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

12 Marketing Communications

kiss918th may send you promotional communications about platform features, bonus offers, game launches, and special promotions only where you have provided explicit opt-in consent at the time of registration or subsequently through your account settings.

You may withdraw consent for marketing communications at any time by:

• Using the unsubscribe link included in any marketing email we send you.
• Contacting our support team at [email protected] and requesting removal from marketing lists.
• Updating your communication preferences through your account settings (where available).

Opt-out requests will be processed within 5 working days. Please note that withdrawal of marketing consent will not affect the processing of service communications — such as transaction confirmations, account security alerts, and important policy updates — which are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

13 Minors & Age Restriction

kiss918th is strictly an adults-only platform. The minimum age for registration and participation in real-money play is 21 years. We do not knowingly collect personal data from individuals under the age of 21.

We employ active KYC verification processes to confirm the age of all account holders. If we become aware or have reasonable grounds to suspect that an account is held by a person under the age of 21, we will immediately suspend the account, freeze any associated balance, and conduct a full age verification review before taking any further action.

If you are a parent or guardian and have reason to believe that a minor has provided personal data to kiss918th or has accessed our platform, please contact us immediately at [email protected]. We will investigate promptly and take all appropriate steps, including deletion of the minor's data and return of any deposited funds to the verified payment method.

14 Policy Amendments

kiss918th reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. When we make material changes to this Policy, we will:

• Update the "Last updated" date at the top of this page.
• Provide notice to registered account holders via email or in-platform notification where practicable.
• Where changes affect the legal basis for processing or introduce new purposes, seek fresh consent where required.

Your continued use of the Platform following the effective date of an amended Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to remain informed of how we protect your personal data.

15 Contact & Complaints

If you wish to exercise any of your data subject rights, have a question about how kiss918th processes your personal data, or wish to raise a privacy-related complaint, please contact our data protection team using the details below.

If you believe that kiss918th has failed to handle your personal data in accordance with this Policy or applicable data protection law, you have the right to raise a complaint directly with the relevant supervisory authority in your jurisdiction. Malaysian residents may contact the Department of Personal Data Protection Malaysia (JPDP) for guidance on exercising rights under Malaysia's Personal Data Protection Act 2010 (PDPA).

We always prefer to have the opportunity to address any concerns directly before a formal regulatory complaint is filed, and we commit to investigating all privacy-related complaints promptly, fairly, and transparently.