Privacy Policy kiss198 —
Your Data, Our Responsibility

Kiss198 is an online gaming platform serving players in Malaysia. We understand that privacy is of the utmost importance to every user, and we take this responsibility seriously. This Privacy Policy explains in detail how we handle your personal information from the moment you register until you stop using our platform.

This policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out the rights and obligations of both parties regarding personal data. We are committed to ensuring that all information you provide is handled with full integrity, security, and transparency.

Any enquiries regarding this policy may be directed to our privacy team through the support channels available on the kiss198 platform.

We only collect data that is strictly necessary for platform operations and legal compliance. Below is a summary table of the data types collected and their intended purposes:

We do not collect sensitive information such as medical data, political affiliations, or religious beliefs unless required by law.

Kiss198 collects personal data through several different channels depending on how you interact with our platform:

Directly From You

• Account registration form — name, phone number, bank details.
• KYC verification process — identity documents and bank statements.
• Live chat sessions or communications with the support team.
• Feedback, complaints, or suggestions you submit to us.

Automatically During Use

• Server logs recording IP addresses, login timestamps, and account activity.
• Cookies and tracking technologies that collect platform performance data and user behavior.
• Device information including operating system, screen resolution, and browser version.

From Authorised Third Parties

In certain situations, we may receive data from payment service providers to verify transactions, or from enforcement authorities as required by law. All such third-party sources are bound by strict confidentiality agreements with kiss198.

Every piece of data we collect is used solely for legitimate, clearly stated purposes. Below are the primary purposes for processing your personal data at kiss198:

• Account Management: Create, verify, and maintain your member account, including KYC and age verification processes.
• Transaction Processing: Handle deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• Legal Compliance: Meet legal obligations including PDPA compliance, anti-money laundering (AML), and other regulatory requirements.
• Platform Security: Detect and prevent fraud, unauthorized access, account abuse, and any suspicious activity.
• Customer Support: Resolve complaints, technical inquiries, and provide members with more effective assistance.
• Product Improvement: Analyze usage patterns to enhance user experience and improve platform features.
• Marketing Communications: Send promotional information and special offers — only to members who have opted in to receive them.

Kiss198 does not sell or disclose your personal data to third parties for commercial purposes. However, in certain limited situations, we may share data with the following parties:

Authorized Service Providers

We work with trusted third-party service providers to handle specific functions such as payment processing, identity verification, and server hosting. All providers are bound by strict data processing agreements and may only use your data for the purposes we specify.

Legal Requirements

We will disclose personal data when required by Malaysian law, court order, regulatory body directive, or law enforcement agency. In such situations, we will notify you if permitted to do so.

Cross-Border Data Transfers

If data needs to be transferred outside Malaysia — for example, for storage on international servers — we ensure such transfers comply with PDPA requirements and that equivalent or higher protection is applied at the destination.

Protecting your personal data is a top priority at kiss198. We continuously invest in the latest security infrastructure to keep your information safe from both internal and external threats.

Technical Security Measures

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Passwords are stored using strong cryptographic hashing algorithms — your password is never stored in plain text.
• An intrusion detection system (IDS) that monitors network traffic in real time.
• Regular data imaging and backups to a separate secure location.
• Two-factor authentication (2FA) is available for all member accounts.

Access Controls

Access to members' personal data within kiss198's internal systems is strictly limited to staff who require it to perform their duties. All access is logged and audited regularly.

Kiss198 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure account security. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Analytics Cookies: Helps us understand how members interact with the platform for improvement purposes. Data is collected in aggregate form without personal identification.
• Preference Cookies: Save your preferences such as language, display theme, and other settings so you do not need to reconfigure them each time.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the kiss198 platform. For more information on managing cookies, refer to your browser's help documentation.

As a data subject under Malaysia's PDPA, you have the following rights, which you may exercise at any time:

To exercise any of the rights above, contact our privacy team via live chat or support email. We will process your request within 14 working days. In more complex situations, this period may be extended up to 30 days with notice to you.

Kiss198 retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by Malaysian law. Below are our data retention guidelines:

• Active account data: Retained for the duration your account remains active and in use on the platform.
• KYC data and identity documents: Retained for a minimum of 5 years after account closure in line with AML compliance requirements.
• Financial transaction records: Retained for 7 years as required by accounting and tax legislation.
• Support communication logs: Retained for 2 years for complaint management and service improvement purposes.
• Cookie and analytics data: Retained for a maximum of 24 months before being deleted or anonymised.

Once the retention period has ended, data will be securely deleted or anonymised so that it can no longer be linked to your identity.

Kiss198 is a gaming platform strictly restricted to individuals aged 21 years and above only. We do not intentionally collect or retain personal data from individuals below that age limit.

If we find that personal data has been collected from an individual who does not meet our age requirement, the account in question will be terminated immediately and all related data will be deleted from our systems as soon as possible.

If you believe an underage individual has registered on our platform, please notify our support team immediately so that appropriate action can be taken.

Kiss198 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. Whenever a significant amendment is made, we will:

• Update the "Last Updated" date at the top of this page.
• Send notifications to all active members via their registered email or in-account notifications.
• Displays a summary of key changes to help you understand what has been updated.

Continued use of the kiss198 platform after any amendments are published will be considered acceptance of the updated Privacy Policy terms. If you do not agree with the amendments, you have the right to close your account and stop using the platform.

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, the kiss198 privacy team is ready to assist through the following channels:

• 24/7 Live Chat: The fastest way to get immediate help — available around the clock via the chat icon on the platform.
• Privacy Email: [email protected] — for official enquiries regarding data protection and PDPA rights requests.
• General Support: [email protected] — for general enquiries regarding platform usage.
• FAQ: Visit FAQ page for quick answers to frequently asked questions.

We aim to respond to all privacy-related inquiries within 3 working days. For more complex PDPA rights requests, please provide complete and clear information so we can process your application faster.