Kiss189 Privacy Policy – How We Protect the Personal Data of Malaysian Members

Kiss189 ("We", "Platform") operates the website kiss189.best and all related services. We are fully committed to protecting the privacy and data security of every member who entrusts us with their personal information.

This Privacy Policy ("Policy") details how Kiss189 collects, uses, processes, stores and protects your personal data when you: register an account at Kiss189, make a deposit or withdrawal, play games on the platform, contact our customer support, or visit and use any feature on the kiss189.best website.

This policy applies to all Kiss189 members residing in Malaysia and all data processing carried out by Kiss189 in connection with the provision of services to Malaysian members. This Privacy Policy should be read together with Terms & Conditions Kiss189 and together both documents form the complete agreement between you and Kiss189.

Kiss189 only collects data that is genuinely necessary to provide our services, meet legal obligations, and improve the member experience. The categories of data we collect are as follows:

• Registration Data: Username, password (stored in encrypted form), a valid Malaysian phone number and date of birth upon registering a Kiss189 account.
• Identity Verification (KYC) Data: Full name as per identity card, Malaysian identity card number (MyKad), date of birth, residential address, and identity document images when requested for verification purposes.
• Financial Data: Payment method details used (abbreviated e-wallet account numbers or abbreviated bank account numbers) for the purpose of processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX. Full account numbers are never stored by Kiss189.
• Communications: The content of messages you send to the Kiss189 support team via live chat, WhatsApp, or email, for the purpose of resolving your enquiries and issues.

• Technical Data: IP address, web browser type and version, device type, operating system, timezone settings, and general location based on IP.
• Platform Activity Data: Login and logout records, betting and game history, deposit and withdrawal transaction history, pages visited and time spent in each section of the Kiss189 platform.
• Cookie Data: Session cookies, preference cookies, and analytics cookies — further details are provided in Section 7 of this policy.

Kiss189 uses members' personal data only for legitimate, clearly stated purposes. We do not use data for any purpose that has not been disclosed to you. The following are the primary purposes for which Kiss189 uses data:

• Account Management: Creating, verifying, and managing your Kiss189 member account, including secure login processes and password recovery.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, as well as processing winnings withdrawals to members' designated payment accounts.
• Gaming Services Provision: Running game sessions, maintaining betting history for member records, and ensuring a seamless gaming experience across devices.
• Bonus & Promotions Management: Processing bonus claims, monitoring rollover progress, verifying promotional eligibility and crediting rewards to qualifying Kiss189 members' accounts.
• Customer Support: To resolve enquiries, complaints, and technical issues submitted by members through Kiss189's various support channels.
• Security & Fraud Prevention: To identify and investigate suspicious activity, and to prevent fraud, money laundering, and misuse of the Kiss189 platform.
• Legal Compliance: To fulfil legal obligations imposed on Kiss189, including reporting requirements and compliance with applicable regulations.
• Platform Improvement: Analysing aggregated and anonymised usage patterns to improve the performance, usability and overall experience of the Kiss189 platform for all members.
• Service Communications: Sending members important notifications regarding their account, policy updates, transactions and security information via their chosen communication channel.

Kiss189 processes members' personal data based on the following valid legal grounds:

• Performance of Contract: Processing necessary to fulfil the contract between Kiss189 and its members — including account management, deposit and withdrawal processing, and the provision of gaming services requested by members.
• Legal Obligations: Processing required under applicable Malaysian law, including Anti-Money Laundering (AML) requirements and customer identity verification (KYC).
• Legitimate Interests: Processing required for Kiss189's legitimate interests that does not override members' fundamental rights and interests — such as platform security, fraud prevention, and service improvement.
• Consent: For specific purposes such as optional marketing communications, Kiss189 will obtain explicit consent from members, and members may withdraw this consent at any time.

Kiss189 does not sell, rent or disclose members' personal data to third parties for marketing purposes. However, under the limited circumstances outlined below, Kiss189 may share certain data with the following parties:

Kiss189 works with carefully selected third-party service providers to help us operate the platform — including payment processors for Malaysian e-wallets and FPX, server and infrastructure service providers, game studio providers supplying game content on the platform, and fraud detection systems. All such providers are bound by strict confidentiality agreements and may only use data for the specific purposes authorised by Kiss189.

Kiss189 may be required to disclose member data to Malaysian law enforcement authorities if mandated by a court order, regulatory directive or other legal requirement. In such cases, Kiss189 will endeavour to notify the member concerned (where legally permitted to do so) prior to the disclosure.

In the event that Kiss189 is involved in a merger, acquisition, or sale of assets, member data may be transferred as part of that transaction. Members will be notified in advance, and the receiving entity will be required to comply with this Privacy Policy or provide equivalent protection for member data.

Kiss189 invests seriously in data security infrastructure to ensure members' personal data is consistently protected against both internal and external threats. The key security measures we employ are:

• Transmission Encryption: All communications between your browser or app and Kiss189's servers are protected with 256-bit TLS/SSL encryption. The padlock icon in your browser's address bar confirms a secure connection.
• Stored Data Encryption: Sensitive data such as member passwords is never stored in plain text – it is encrypted using an irreversible one-way encryption algorithm.
• Layered Access Controls: Only Kiss189 staff with a legitimate business need are granted access to member data. All access is controlled through a multi-factor authentication system and logged for audit purposes.
• Regular Security Audits: Kiss189's security systems are regularly assessed by independent security experts to identify and address any potential vulnerabilities before they can be exploited.
• Real-Time Monitoring: Automated monitoring systems operate 24 hours a day to detect unusual activity that may indicate an intrusion attempt or data misuse.
• Secure Backups: Member data is regularly backed up to secure, separate locations to ensure rapid recovery in the event of an unexpected disruption.

While Kiss189 takes all reasonable steps to protect your data, no security system is 100% impenetrable. We encourage members to also take responsibility for the security of their own accounts — use a strong and unique password, do not share your login details, and contact us immediately if you suspect your account has been compromised.

Kiss189 uses cookies and similar tracking technologies to enhance the member experience, maintain platform security and understand how members use our services. The following types of cookies are used:

Temporary cookies that exist only while you are browsing the Kiss189 platform and are automatically deleted when you close your browser. They are essential for core platform functions, such as maintaining your login status during a gaming session and ensuring transactions are processed securely.

Cookies that store your preferences — such as your chosen language, display settings, and game preferences — so Kiss189 can deliver a more personalised experience on every visit. These cookies are stored on your device for a set period and can be deleted through your browser settings at any time.

Cookies that help Kiss189 detect and prevent suspicious activity such as unauthorised login attempts, CSRF attacks, and fraud attempts. These cookies are essential to your account security and cannot be disabled without compromising platform security.

Kiss189 uses analytics cookies to understand how members interact with the platform – which pages are visited most, where usability issues may exist and how we can improve the overall experience. Analytics data is collected in aggregate and is not used to identify any individual member.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the Kiss189 platform, including the ability to stay logged in or process transactions securely. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.

As a Kiss189 member and as an individual whose personal data is processed by us, you hold the following rights, which we are fully committed to respecting:

To exercise any of the above rights, submit a written request to Kiss189 via email at support@kiss189.best with the subject line "Data Privacy Rights Request", along with your account number and a clear description of your request. Kiss189 will process your request within 30 calendar days of receipt. In complex cases, this period may be extended by up to 60 days, with prior notice given to you.

Kiss189 does not retain members' personal data for longer than necessary. Retention periods are determined based on the purpose of collection and applicable legal requirements:

• Active Account Data: Retained for as long as your Kiss189 account is active, plus the minimum period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian legal requirements on financial record-keeping and anti-money laundering.
• Customer Support Records: Retained for 3 years to allow for the resolution of any disputes that may arise.
• Analytics Data: Anonymised platform usage data is retained for a longer period for trend analysis and platform improvement purposes. Anonymised data cannot be re-linked to any specific individual.
• KYC Records: Identity verification documents are retained for a minimum of 5 years after account closure, in line with AML compliance requirements.

When data is no longer needed for its stated purpose and there is no legal obligation to retain it, Kiss189 will securely delete or anonymise that data using industry-standard methods.

The Kiss189 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Kiss189 implements active age verification measures during the registration process to ensure compliance with this age requirement.

If Kiss189 discovers that personal data belonging to a minor has been collected, we will take immediate action to delete that data and close the account in question. If you are a parent or guardian who believes your child has registered an account at Kiss189 while underage, please contact us immediately at support@kiss189.best and we will handle your case with the highest priority.

Kiss189 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or how we operate our services. The latest version of the Privacy Policy will always be available on this page, with an updated "Last Updated" date at the top of the document.

For material changes – that is, changes that significantly alter how we collect or use your data – Kiss189 will notify members via an in-platform notification or registered email at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the Kiss189 platform.

Continued use of the Kiss189 platform after an updated Privacy Policy takes effect constitutes your acceptance of those changes. If you do not agree with the latest version of the Privacy Policy, you should stop using the platform and close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the Kiss189 team is ready to assist through the following channels:

• Privacy Email: support@kiss189.best – send an email with the subject line "Privacy Policy Enquiry" for faster and more efficient handling
• Live Chat: Available 24/7 directly within the Kiss189 platform for general privacy and data enquiries
• WhatsApp: Contact the Kiss189 support team via WhatsApp for a more detailed discussion about your privacy concerns

Response times for data privacy enquiries are within 48 hours for email and within 5–10 minutes via live chat. For formal privacy rights requests (access, correction, deletion), please submit via email with sufficient identity verification details and we will process your request within 30 days.

Kiss189 takes every privacy enquiry and concern very seriously. We are committed to providing clear, accurate and meaningful responses to all questions about how your personal data is managed on our platform.