kissy988 Privacy Policy

This Privacy Policy ("Policy") describes how kissy988 ("we", "us", "the Platform") collects, uses, stores, and shares personal data obtained from users ("you", "Member") of the kissy988 website at kissy988.club and all associated services (collectively, the "Services").

By registering a kissy988 account or otherwise using our Services, you confirm that you have read and understood this Policy. This Policy forms part of our Terms & Conditions and should be read alongside them. Where we are required to obtain your consent for a specific processing activity, we will do so separately and explicitly.

We are committed to handling your personal data with transparency, care, and in full compliance with applicable data protection legislation. If you have any questions about how kissy988 handles your data, please contact us at [email protected].

kissy988 collects personal data through several channels. The categories of data collected and their sources are summarised in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data, unless specifically required for identity verification purposes under applicable regulatory obligations.

kissy988 processes your personal data for the following purposes:

• Account management: Creating and maintaining your kissy988 member account, including authentication and security monitoring.
• KYC & age verification: Verifying that you meet the minimum age requirement (21+) and confirming your identity as required under international gaming authority licensing obligations.
• Payment processing: Facilitating deposits and withdrawals via your registered payment instruments, including verification of payment method ownership.
• Fraud prevention & security: Detecting and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct.
• Game provision: Delivering the games, sportsbook, and other platform features you access through your kissy988 login.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Responsible gaming: Monitoring your activity to identify potential problem gambling indicators and enabling self-exclusion or limit-setting where relevant.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — where you have opted in to receive these.
• Legal compliance: Complying with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.

kissy988 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to provide the Services under our Terms & Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC obligations, anti-money laundering requirements, and gaming licence conditions.
• Legitimate interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, and improving our Services — where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kissy988 does not sell your personal data. We may share your data with the following categories of recipient, strictly for the purposes set out in this Policy:

• Payment processors: To facilitate deposits and withdrawals via Maybank2u, CIMB Clicks, Public Bank, FPX, Touch 'n Go eWallet, Boost, GrabPay, and DuitNow.
• KYC & identity verification providers: Third-party services used to verify your identity and age as required under our gaming licence.
• Game software providers: Licensed game studios whose software is integrated into the kissy988 platform may receive limited gameplay data necessary to deliver the game experience.
• Fraud prevention services: Specialist providers that assist kissy988 in detecting and preventing fraudulent transactions and suspicious activity.
• Regulatory & law enforcement authorities: Where required by law, court order, or lawful request from a competent authority, kissy988 may disclose personal data to the relevant body.
• IT & infrastructure providers: Cloud hosting, data backup, and cybersecurity service providers engaged to support the operation of the kissy988 platform.

All third-party processors engaged by kissy988 are contractually bound to process personal data only as instructed and to maintain appropriate security standards.

kissy988 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit kissy988.club. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the kissy988 platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your chosen language and display settings, to personalise your experience on kissy988.
• Analytics cookies: Used to collect aggregate data on how members use the platform — which pages are visited, how long sessions last, and which features are most used — to help us improve kissy988.
• Marketing cookies: Used to deliver relevant promotional content based on your activity on kissy988. These are only set where you have provided consent.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent certain kissy988 features from functioning correctly.

kissy988 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations.

Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering and gaming licence requirements.
• Transaction records are retained for a minimum of five (5) years following the relevant transaction date.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter for compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

kissy988 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and kissy988 servers.
• Encryption of personal data and financial data at rest.
• Role-based access controls, limiting access to personal data to authorised personnel with a legitimate business need.
• Regular security assessments and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for internal administrative access.

Notwithstanding the above measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, kissy988 will notify you in accordance with applicable law.

Subject to applicable law, you have the following rights in relation to your personal data held by kissy988:

• Right of access: You may request a copy of the personal data kissy988 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no longer a lawful basis for us to retain it. This right is subject to our legal and regulatory retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances, for example while the accuracy of the data is disputed.
• Right to data portability: You may request a copy of personal data you have provided to kissy988 in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing certain requests.

kissy988 strictly prohibits use of its Services by anyone under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a minor, the relevant account will be closed immediately and all associated data will be deleted, subject to any mandatory retention obligations arising from the circumstances.

If you believe that a minor has registered an account with kissy988, please contact our support team immediately at [email protected].

kissy988 may transfer your personal data to servers or service providers located outside Malaysia. Where such transfers occur, kissy988 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect your data to a standard at least equivalent to that required under applicable law.

By using the kissy988 platform, you acknowledge that your personal data may be transferred to and stored in jurisdictions other than Malaysia for the purposes described in this Policy.

kissy988 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify you via email to your registered address or by a prominent notice on the kissy988 platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects when the most recent revisions were made. Your continued use of the kissy988 Services after the effective date of any update constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kissy988 handles your personal data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 within the kissy988 platform

Formal data subject requests and privacy-related complaints will receive a written response within 30 calendar days of receipt. For urgent account security matters, live chat is the fastest channel available.