kiss98 Privacy Policy

1. Who We Are

This Privacy Policy is issued by the operator of kiss98, accessible at https://kiss98.win (referred to in this document as "kiss98", "we", "us", or "our"). kiss98 is an English-language online gaming platform operated under an international gaming authority licence and designed for the Malaysian market.

kiss98 is the data controller in respect of personal data collected through the Platform. If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact us at [email protected].

2. Personal Data We Collect

kiss98 collects personal data in the following categories:

kiss98 does not collect sensitive categories of personal data (such as health data, racial or ethnic origin, or political opinions) except where required by law or responsible gaming obligations (for example, where a player discloses a gambling-related vulnerability to our support team).

3. How We Use Your Personal Data

kiss98 uses your personal data for the following purposes:

• Account administration: creating and managing your kiss98 Account, verifying your identity, and communicating important account-related information.
• Service delivery: enabling you to access the Platform, place wagers, participate in promotions, and use all features of kiss98 including the live casino, slots, and sportsbook.
• Payment processing: facilitating deposits and withdrawals via your chosen Malaysian payment method and maintaining accurate financial records.
• Regulatory compliance: fulfilling our obligations under anti-money laundering (AML) legislation, our gaming licence conditions, and know-your-customer (KYC) requirements. This includes identity verification and transaction monitoring.
• Fraud prevention and security: detecting and preventing unauthorised account access, fraudulent transactions, and other security incidents.
• Responsible gaming: monitoring wagering patterns to identify potential problem gambling behaviour and contacting players where appropriate.
• Platform improvement: analysing aggregate usage data to improve the performance, features, and user experience of the kiss98 Platform.
• Marketing communications: sending you promotional offers and product updates by email or SMS, where you have consented to receive such communications or where we have a legitimate interest to do so. You may opt out at any time.

4. Legal Basis for Processing

kiss98 processes your personal data on the following legal bases under applicable data protection law:

• Contract performance: processing necessary to provide you with the kiss98 service as described in our Terms & Conditions.
• Legal obligation: processing required by AML legislation, gaming licence conditions, and KYC regulatory requirements.
• Legitimate interests: fraud detection, platform security, responsible gaming monitoring, and service analytics, where these interests are not overridden by your rights and interests.
• Consent: where we send you direct marketing communications beyond transactional messages, we rely on your consent, which you may withdraw at any time.

5. Data Sharing

kiss98 does not sell or rent your personal data. We share your data only with the following categories of recipients, and only to the extent necessary:

• Payment processors: Malaysian payment providers including banks (Maybank, CIMB, Public Bank), e-wallet operators (Touch n Go, Boost, GrabPay, DuitNow), and FPX, for the purpose of processing transactions.
• Game providers: third-party studios such as Evolution Gaming and Pragmatic Play receive session data necessary to operate their games on the kiss98 Platform.
• KYC and identity verification partners: regulated third-party providers used to verify the identity and age of players in compliance with our licence obligations.
• Technology and hosting providers: infrastructure providers who process data on our behalf under data processing agreements with equivalent data protection obligations.
• Regulatory and law enforcement authorities: where we are required by law, court order, or gaming authority direction to disclose player data.

All third parties with whom kiss98 shares personal data are required to process that data in a manner consistent with this Privacy Policy and applicable data protection law.

6. International Data Transfers

The kiss98 Platform is operated by an internationally licensed entity, and some of the service providers used by kiss98 (including game studios and technology infrastructure providers) may process data outside of Malaysia. Where personal data is transferred internationally, kiss98 ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms, to protect your data to a standard consistent with this Privacy Policy.

7. Data Retention

kiss98 retains your personal data for as long as your Account is active and for a period thereafter as required by law and our regulatory obligations. Specifically:

• Transaction and financial records are retained for a minimum of 5 years from the date of the transaction, as required by AML regulations.
• KYC and identity documents are retained for the duration of your Account and for 5 years following Account closure.
• Account and usage data are retained for the duration of your Account and for 2 years following closure, unless a longer period is required by law.
• Support communications are retained for 3 years for quality assurance and dispute resolution purposes.

Following the expiry of the applicable retention period, kiss98 will securely delete or anonymise your personal data.

8. Cookies and Tracking Technologies

kiss98 uses cookies and similar technologies on the Platform for the following purposes:

• Essential cookies: required for the Platform to function, including session management, login state, and security. These cannot be disabled.
• Analytics cookies: aggregate, anonymised data used to understand how players navigate and use the Platform, to inform product improvements. These do not identify individual users.
• Preference cookies: remembering your settings and preferences such as language and display options.

kiss98 does not use third-party advertising or tracking cookies. Most browsers allow you to control cookie settings through the browser preferences menu. Disabling essential cookies may affect your ability to use the kiss98 Platform.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data held about you by kiss98:

• Right of access: to receive a copy of the personal data kiss98 holds about you.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to restriction: to request that we limit our processing of your data in certain circumstances.
• Right to object: to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: to receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact kiss98 support at [email protected]. We will respond to all verified requests within 30 days. We may need to verify your identity before processing any request.

10. Children and Minors

The kiss98 Platform is strictly for persons aged 21 years and over. kiss98 does not knowingly collect personal data from any person under the age of 21. If kiss98 becomes aware that personal data has been collected from a person under 21, that Account will be closed immediately, the data deleted, and any Account Balance returned in accordance with our Terms & Conditions.

Parents and guardians who believe a minor may have accessed the Platform should contact [email protected] immediately.

11. Security Measures

kiss98 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and the kiss98 Platform;
• AES-256 encryption for personal data stored in kiss98 databases;
• Role-based access controls limiting data access to authorised personnel;
• Regular security assessments and penetration testing;
• Multi-factor authentication requirements for internal platform administration.

No security system is impenetrable. In the event of a data breach affecting your personal data in a manner likely to result in a risk to your rights, kiss98 will notify you and the relevant regulatory authority in accordance with applicable law.

12. Third-Party Services

The kiss98 Platform integrates with third-party services including game studios and payment providers. These third parties operate their own privacy practices. kiss98 is not responsible for the privacy practices of third-party services. All third-party providers used by kiss98 are assessed for compliance with data protection standards before integration and are required to operate under data processing agreements where applicable.

13. Policy Updates

kiss98 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Where changes are material, we will notify registered Players via the email address associated with their Account at least 14 days before the revised Policy takes effect. The current version of the Privacy Policy is always available on this page, and the "Last Updated" date at the top of the document reflects any revision. Continued use of the kiss98 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kiss98 processes your personal data, please contact us:

• Email: [email protected]
• Support Hours: Mon–Sun, 10:00am – 10:00pm (GMT+8)

Please include your registered email address and a description of your query or request. We aim to respond to all data-related enquiries within 30 calendar days. Identity verification may be required before we can process data access or deletion requests.