Privacy Policy

This Privacy Policy ("Policy") describes how kiis918 ("kis918", "we", "us", or "our") collects, processes, stores, and protects personal data submitted by users ("Player", "User", or "you") in connection with access to and use of the kiis918 online gaming and sports betting platform at https://kiis918.cam (the "Platform").

kis918 takes its data protection obligations seriously. We are committed to ensuring that all personal data is handled with the highest standards of confidentiality, integrity, and care. This Policy is designed to give you full transparency over what information we hold about you and to explain your rights in relation to that information.

By registering an Account, accessing the Platform, or submitting any personal data to kis918, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, email addresses, identification numbers, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means kis918, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of kiis918 under a written data processing agreement.
• "Cookies" means small text files placed on a User's device by the Platform for the purpose of session management, preference retention, and analytics.
• "KYC" means Know Your Customer — the identity and age verification process required of all kis918 Account holders.
• "MYR" / "RM" means Malaysian Ringgit, the primary transaction currency on the Platform.
• "Special Category Data" means sensitive personal data categories such as health data or financial vulnerability indicators, which are subject to heightened processing restrictions.

kis918 collects the following categories of personal data in the ordinary course of operating the Platform:

kis918 does not intentionally collect Special Category Data. Where such data is incidentally disclosed in the course of support interactions or responsible gambling procedures, it is handled with heightened care and is not used for any purpose beyond the immediate context in which it was disclosed.

kis918 collects personal data through the following means:

• Direct submission: Data you actively provide during account registration, KYC verification, deposit and withdrawal requests, and customer support interactions.
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including through Cookies and server logs.
• Third-party payment providers: Financial transaction references and confirmation data from payment processors facilitating MYR transactions via Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks.
• Identity verification providers: Results and reports from KYC verification services engaged to confirm the identity and age (21+) of Account holders.
• Fraud prevention and AML providers: Risk screening results shared with kis918 for the purpose of detecting and preventing fraudulent activity and money laundering.

kiis918 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to perform our obligations under the kis918 Terms and Conditions, including operating your Account, processing financial transactions, and providing customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification, and age verification (21+).
• Legitimate interests: Processing for purposes such as fraud detection, platform security, responsible gambling monitoring, and general Platform improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential Cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kis918 uses the personal data we hold for the following purposes:

1. Account management: Creating and maintaining your kis918 Account, authenticating your identity on login, and administering your Account settings and preferences.
2. Financial processing: Processing deposits and withdrawals in MYR through supported Malaysian payment channels, reconciling transaction records, and managing cryptocurrency conversions.
3. Regulatory compliance: Fulfilling KYC and AML obligations, verifying that users are aged 21 or above, and complying with applicable financial and gaming regulations.
4. Fraud and security: Detecting and preventing fraudulent activity, account takeovers, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
5. Customer support: Responding to queries, resolving disputes, investigating complaints, and maintaining records of support interactions for quality assurance purposes.
6. Responsible gambling: Monitoring usage patterns to identify potential signs of problem gambling behaviour, administering self-imposed limits and exclusions, and directing players to appropriate support resources where warranted.
7. Platform improvement: Analysing aggregated usage data to improve game performance, site navigation, payment processing, and the overall player experience.
8. Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

kis918 will not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected, without first providing you with appropriate notice and, where required, obtaining your consent.

kis918 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following limited circumstances:

• Payment service providers: Financial data is shared with payment processors facilitating MYR transactions — including DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay — solely for the purpose of processing your deposits and withdrawals.
• Identity and KYC verification providers: Identity data is shared with third-party KYC service providers engaged to verify your identity and age (21+) as required by regulatory obligations.
• Fraud prevention and AML providers: Technical and transaction data may be shared with fraud detection and anti-money laundering screening services for security and compliance purposes.
• IT and infrastructure providers: Technical data is processed by cloud hosting, database, and security service providers who act as Data Processors under written agreements binding them to equivalent data protection standards.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory obligation, kis918 may disclose personal data to law enforcement agencies, financial regulators, or other competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity, subject to equivalent privacy protections.

kiis918 uses Cookies and similar tracking technologies to operate and improve the Platform. The categories of Cookies used on the Platform are as follows:

You may manage Cookie preferences through your browser settings. Disabling Cookies may affect the functionality of certain Platform features. Consent to analytical and marketing Cookies may be withdrawn at any time by adjusting your browser settings or contacting kis918 support.

kiis918 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The general retention framework is as follows:

• Active Account data: Retained for the duration of your Account and for a period of not less than five (5) years following Account closure, in accordance with standard AML and financial record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years to satisfy financial regulatory and audit requirements applicable to payment processing in MYR and cryptocurrency transactions.
• KYC documents: Retained for the duration of your Account plus five (5) years following closure, or longer where required by applicable law.
• Support interaction records: Retained for three (3) years from the date of the interaction, unless a longer period is required for pending dispute resolution or legal proceedings.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, at which point marketing-specific data is removed from active processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with kis918's data disposal procedures.

kiis918 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for personal data stored in kis918's databases;
• Role-based access controls limiting internal access to personal data to personnel with a demonstrated need;
• Two-factor authentication (2FA) available to all Account holders for login security;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Intrusion detection systems monitoring the Platform infrastructure for anomalous activity;
• Incident response procedures ensuring prompt investigation and, where required by law, notification of any personal data breach.

While kiis918 takes all reasonable precautions to protect your data, no digital system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for promptly reporting any suspected unauthorised access to kis918 support.

As a kiis918 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact kiis918 using the details in Clause 15:

• Right of Access: You may request a copy of the personal data kis918 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by kiis918.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose which it was collected, subject to any overiding legal retention obligations.
• Right to Restriction: You may request that kiis918 restrict processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. kis918 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

The kis918 Platform is strictly intended for adults aged21 years and above. kis918 does not knowingly collect personal data from individuals under the age of 21, and access to the Platform by minors is expressly prohibited.

Where kis918 discovers that personal data has been collected from a person under 21 years of age, all associated Account data will be promptly deleted, the Account will be permanently closed, and any funds held in the Account will be handled in accordance with applicable law and our Terms and Conditions.

If you believe that personal data of a person under 21 has been submitted to kiis918, please contact us immediately at the details provided in Clause 15.

The kis918 Platform engages third-party services for specific operational purposes, including payment processing (DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost,rabPay, cryptocurrency networks), KYC verification, and analytics. These third parties process data in their own right, subject to their own privacy policies.

kiis918 is not responsible for the privacy practices or content of third-party services, and this Policy does not extend to such third parties. We recommend you review the privacy policies of any third-party service providers whose services you use in connection with the Platform.

kis918 does not include third-party advertising networks or social media tracking pixels on the Platform that would allow third parties to profile your behaviour for their own marketing purposes without your explicit consent.

kis918 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that substantially affect your rights or how your data is used — will be communicated to registered Account holders through a notice displayed on the Platform or by email to the address on your Account.

The effective date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following any update constitutes acceptance of the revised Policy. If you do not agree with any amendment, you may close your Account in accordance with our Terms and Conditions.

We recommend reviewing this page periodically to stay informed of how kis918 handles your personal data.

For all privacy-related enquiries, data rights requests, or concerns about how kis918 processes your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available24/7 directly on the Platform, including Malaysian public holidays
• Subject line for data requests: "Privacy / Data Rights Request" to ensure correct routing

kis918 serves players across Malaysia, including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam. All privacy correspondence is handled by our dedicated compliance team, who aim to acknowledge your request within 5 business days and to resolve it within 30 days.

If you are not satisfied with kis918's handling of your privacy concern after following our internal process, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.