Privacy Policy — 918kiss2

918kiss2 ("Company", "we", "us", "our") operates the online gambling and sports betting platform accessible at 918kiss2.cam ("Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and protect the personal data of individuals ("you", "Player", "User") who visit or register on the Platform.

We are committed to handling your personal information responsibly, in accordance with applicable data protection principles and any relevant laws and regulations governing the jurisdictions in which we operate. This Policy should be read alongside our Terms & Conditions, which form a binding agreement between you and 918kiss2.

By accessing the Platform or registering a player account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the Platform.

The following terms have the meanings assigned to them below throughout this Policy:

The categories of personal data we collect from you depend on how you interact with the 918kiss2 Platform. We collect only what is genuinely necessary for the purposes described in this Policy.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data (beyond identification photographs required for KYC), or health information, except where expressly required by our responsible gambling obligations (e.g. self-declared problem gambling status for self-exclusion administration).

918kiss2 collects personal data through the following primary channels:

• Direct submission. Data you provide actively when registering your account, completing KYC verification, submitting a deposit or withdrawal request, contacting our support team, or participating in a promotion.
• Automated technologies. Data collected automatically when you access the Platform, including your IP address, device identifiers, browser configuration, cookie data, and session activity logs.
• Third-party sources. Identity and fraud-check data received from KYC verification service providers; transaction confirmation data from payment gateways (FPX, DuitNow, e-wallet operators); and AML screening results from compliance data providers.
• Publicly available sources. In limited circumstances related to AML or fraud investigation, we may supplement our records with information from publicly available databases or sanctions lists.

We process your personal data for the following specific purposes:

• Account creation and management — to register and maintain your player account, verify your identity, and provide access to all platform features.
• Payment processing — to process MYR deposits and withdrawals through your chosen payment method, including Touch 'n Go eWallet, FPX, DuitNow, Boost, GrabPay, Maybank, CIMB, and other supported channels.
• KYC and AML compliance — to verify your identity, assess financial risk, fulfil anti-money-laundering obligations, and maintain records required by our regulatory framework.
• Platform delivery and improvement — to operate, maintain, and improve the 918kiss2 Platform, diagnose technical issues, and conduct analytics to enhance user experience.
• Responsible gambling administration — to implement deposit limits, session controls, self-exclusion tools, and age verification; to identify and respond to potential signs of problem gambling behaviour.
• Bonus and promotion management — to administer promotions, apply eligible bonuses to your account, and detect or prevent bonus abuse.
• Customer support — to respond to your enquiries, resolve disputes, and provide technical assistance via live chat and email.
• Security and fraud prevention — to detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other forms of abuse.
• Legal and regulatory compliance — to meet our obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.
• Direct communications — to send you important account notifications, transaction confirmations, security alerts, and, where you have consented, promotional communications about offers relevant to your activity on the Platform.

918kiss2 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity — processing required to fulfil our obligations under the player account agreement, including account registration, payment processing, and delivery of gaming services.
• Legal obligation — processing required to comply with applicable AML, CTF, data protection, and gambling regulatory requirements.
• Legitimate interests — processing carried out for fraud prevention, platform security, abuse detection, and analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent — where you have given explicit consent for a specific processing activity, such as receiving promotional marketing communications. You may withdraw consent at any time by contacting our support team or using the unsubscribe function in any marketing email.

918kiss2 does not sell, rent, or commercially trade your personal data. We may share your information with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers — e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), FPX, DuitNow, and banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank) to facilitate deposit and withdrawal processing.
• Identity verification providers — third-party KYC and AML screening services engaged to conduct identity document checks, biometric face-match verification, and sanctions screening.
• Technology and infrastructure providers — cloud hosting, content delivery, and security service providers that process data on our behalf under strict contractual obligations.
• Game software providers — where technically necessary, limited session and account data is shared with third-party game studios to facilitate seamless game delivery and fair play audit trails.
• Regulatory and law enforcement authorities — where we are legally compelled to disclose information by court order, regulatory directive, or lawful request from a competent authority.
• Fraud prevention agencies — where we have reasonable grounds to suspect fraudulent activity affecting the platform or our players.

The 918kiss2 Platform uses cookies and similar tracking technologies to ensure the site functions correctly, to maintain your login session, and to gather anonymised analytics that help us improve the platform experience.

Most modern browsers allow you to control or block cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform — in particular, you may be unable to maintain a logged-in session. Blocking analytics or functional cookies will not prevent you from accessing core gaming and account features.

918kiss2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit — all data exchanged between your browser or device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all account pages, cashier functions, and support interfaces.
• Encryption at rest — sensitive personal data and financial records stored on our servers are encrypted using AES-256 encryption.
• Access controls — access to personal data within 918kiss2 is granted on a strict need-to-know basis. All staff with data access undergo regular security training and are bound by confidentiality obligations.
• Two-factor authentication — account security is reinforced through optional two-factor authentication (2FA) for player logins. Players are strongly encouraged to enable 2FA on their accounts.
• Continuous monitoring — our security infrastructure includes real-time intrusion detection, anomalous activity alerting, and regular independent penetration testing.
• Password security — player passwords are stored as salted cryptographic hashes. We cannot retrieve your plain-text password; if it is lost, a reset is required.

918kiss2 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention schedule applies:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Certain data may be retained for longer periods where required by a court order, ongoing legal proceeding, or extended regulatory investigation.

Subject to applicable law and certain regulatory limitations (particularly where data must be retained for AML compliance), you have the following rights in relation to the personal data 918kiss2 holds about you:

To exercise any of the above rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity. We will respond to all rights requests within 30 days of receipt, or notify you if an extension is required.

The 918kiss2 Platform is intended solely for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the associated account, reverse any deposits made, and delete or anonymise the data collected.

If you are a parent or guardian and believe that a minor in your care has registered on the Platform or provided personal data to 918kiss2, please contact us immediately at [email protected] so that we can take appropriate action without delay.

As an internationally operating platform, 918kiss2 may transfer your personal data to third-party service providers located outside of Malaysia. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data, including:

• Execution of data processing agreements with all third-party processors that include standard contractual clauses or equivalent protections;
• Restricting transfers to jurisdictions with adequate data protection frameworks or to recipients that have implemented equivalent security measures;
• Conducting due diligence on all international data processors before engaging their services.

By using the 918kiss2 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where required, we will obtain your explicit consent for such transfers.

918kiss2 reserves the right to amend this Privacy Policy at any time. When material changes are made, we will notify you through one or more of the following channels: a prominent notice on the Platform homepage, a notification within your player account, or an email to your registered address.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Where changes require your renewed consent — for example, where a new processing purpose is introduced — we will seek that consent before the change takes effect.

Your continued use of the Platform following notification of any changes to this Policy will constitute your acceptance of those changes. If you disagree with the revised Policy, you must cease use of the Platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact the 918kiss2 Data Privacy team through the following channels:

• Live Chat: Available 24/7 via the on-site chat widget — mention "Privacy Request" for priority routing to the relevant team.
• Email: [email protected]
• Response time: Privacy-related requests will be acknowledged within 2 business days and resolved within 30 calendar days, or we will notify you of the expected timeline if additional time is required.

For questions about our Terms & Conditions, visit our Terms & Conditions page. For responsible gambling tools and support resources, visit our Responsible Gambling page.