Kiss88 Privacy
Policy

This Privacy Policy is issued by Kiss88 ("Kiss88", "we", "us", "our") and applies to all personal data collected through the Kiss88 platform, accessible at https://kiss88.cam, including all associated mobile interfaces, account management portals, customer support channels, and related digital services operated by or on behalf of Kiss88.

Kiss88 is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection standards. This Policy describes the types of personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, how long it is retained, and the rights available to you as a data subject.

By registering an Account on Kiss88 or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request Account closure.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes name, identification number, contact details, device identifiers, and financial information.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction, whether by automated or manual means.
• "Data Controller" — Kiss88, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — Any third party engaged by Kiss88 to process personal data on Kiss88's behalf, subject to written data processing agreements.
• "User" / "Player" / "You" — Any natural person who registers an Account on the Kiss88 Platform or accesses its services.
• "Cookies" — Small data files placed on your device by the Platform for the purposes described in Section 9 of this Policy.
• "KYC" — Know Your Customer — identity and age verification procedures conducted by Kiss88 as required by licensing obligations.

Kiss88 collects personal data through the following means: directly from you during registration and account use; automatically through your interaction with the Platform; and from third-party sources where permitted by applicable law. The categories of personal data we collect include:

Kiss88 processes personal data only where a lawful basis exists for doing so. The primary legal bases upon which Kiss88 relies are as follows:

4.1 Contractual Necessity

Processing is necessary to perform the contract between Kiss88 and you as a registered Player — specifically, to create and manage your Account, process deposits and withdrawals in MYR, operate payment channels (including Maybank, CIMB, Touch 'n Go eWallet, Boost, DuitNow, FPX, USDT, and BTC), and provide access to casino games, sports betting markets, and customer support.

4.2 Legal Obligation

Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) identity verification, age verification (minimum 21+ enforcement), fraud prevention, and cooperation with lawful requests from licensing authorities or law enforcement agencies.

4.3 Legitimate Interests

Processing is carried out in pursuit of Kiss88's legitimate business interests where those interests are not overridden by your fundamental rights. This includes fraud detection and prevention, platform security monitoring, responsible gambling monitoring, internal analytics, service improvement, and communicating platform updates to registered users.

4.4 Consent

Where Kiss88 relies on your consent as the legal basis for processing — such as for optional marketing communications or the use of non-essential cookies — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent may be exercised through your account settings or by contacting our support team.

Kiss88 uses collected personal data for the following specific purposes:

• Account Management: Creating, maintaining, securing, and managing your Kiss88 Account and profile.
• Transaction Processing: Executing deposits and withdrawals via supported MYR payment channels, including DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Touch 'n Go eWallet, Boost, and cryptocurrency options (USDT, BTC).
• Identity & Age Verification: Conducting KYC verification to confirm your identity, age (21+ requirement), and eligibility to participate on the Platform.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing assistance via live chat, WhatsApp, and email.
• Fraud & Security Monitoring: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised account access, and other illegal or prohibited conduct.
• Responsible Gambling Monitoring: Identifying players who may be exhibiting signs of problem gambling and applying appropriate protections, including deposit limits, session controls, or self-exclusion where warranted.
• Service Improvement: Analysing usage patterns, game performance data, and technical logs to improve platform functionality, game selection, and user experience.
• Marketing Communications: Where you have provided consent or where permitted under applicable law, sending promotional information about Kiss88 bonuses, new games, and relevant offers. You may opt out at any time.
• Legal & Regulatory Compliance: Meeting Kiss88's obligations under its international gaming licence, including record-keeping, regulatory reporting, and cooperation with lawful investigations.

Kiss88 does not sell your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality protections:

6.1 Service Providers & Data Processors

Third-party companies engaged by Kiss88 to provide services on our behalf — including payment processors (e.g., FPX operators, DuitNow network, e-wallet providers, cryptocurrency custodians), identity verification and KYC service providers, cloud hosting providers, fraud prevention services, and customer support platform vendors. These parties are bound by data processing agreements and may only use personal data as directed by Kiss88 for the specified service purpose.

6.2 Regulatory & Law Enforcement Authorities

Kiss88 may disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where required or permitted by applicable law, including for the purposes of AML compliance, fraud investigations, court orders, or regulatory audit requirements.

6.3 Professional Advisors

Legal counsel, auditors, and compliance consultants who require access to personal data in the course of providing professional advice to Kiss88, subject to professional confidentiality obligations.

6.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of Kiss88's business, personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any material change to the data controller's identity as a result of such a transaction.

Kiss88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to meet legal, regulatory, accounting, or audit obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, as required for AML compliance and licensing audit purposes.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the end of the customer relationship, in accordance with standard international AML record-keeping requirements.
• Transaction Records: Financial transaction records, including deposits and withdrawals in MYR and cryptocurrency, retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Live chat transcripts, email correspondence, and support tickets retained for a period of three (3) years following resolution.
• Technical Logs: Server logs and technical access records retained for up to twelve (12) months for security and fraud monitoring purposes, unless a specific investigation requires longer retention.
• Marketing Consent Records: Records of marketing consent and opt-out preferences retained for a period sufficient to demonstrate compliance with applicable consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with Kiss88's internal data disposal procedures.

Kiss88 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your device and Kiss88 servers.
• Encrypted storage of sensitive personal data and financial records within secured data centres.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Two-factor authentication (2FA) options for player accounts, and internal 2FA requirements for staff accessing administrative systems.
• Formal incident response procedures enabling prompt containment and notification in the event of a confirmed data breach.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Kiss88 takes commercially reasonable steps to protect your data but cannot guarantee absolute security against all conceivable threats. You also bear responsibility for maintaining the security of your own login credentials.

In the event of a material data breach affecting your personal data, Kiss88 will notify affected users in accordance with applicable regulatory requirements and best practices.

Kiss88 uses cookies and similar tracking technologies — including pixel tags, web beacons, and session storage mechanisms — to operate the Platform effectively, remember your preferences, and monitor platform usage for security and performance purposes.

9.1 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security tokens. These cannot be disabled without affecting core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data on how visitors interact with the Platform — including pages visited, time spent, and error events — to help us improve usability and performance.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and notification preferences across sessions.
• Marketing & Targeting Cookies: Where you have provided consent, used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These may involve third-party analytics providers bound by data processing agreements with Kiss88.

9.2 Managing Cookie Preferences

You may control non-essential cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive alerts when new cookies are set. Please note that disabling certain cookies may affect the functionality and performance of the Kiss88 Platform. Browser-level instructions for managing cookies are available through your browser's help documentation.

Kiss88 operates within an international licensing jurisdiction and may transfer personal data to, and store personal data in, countries outside Malaysia. These transfers may include data processed by our hosting providers, KYC verification partners, and payment processing networks operating across multiple jurisdictions in Asia, Europe, and other regions.

Where personal data is transferred internationally, Kiss88 ensures that appropriate safeguards are in place to protect it — including contractual protections in the form of data processing agreements and, where applicable, adequacy decisions or equivalent transfer mechanisms recognised under the data protection frameworks applicable to Kiss88's licensing jurisdiction.

By using the Kiss88 Platform, you acknowledge that your personal data may be processed in jurisdictions other than Malaysia and that the data protection laws of those jurisdictions may differ from those in Malaysia.

As a data subject, you hold the following rights with respect to your personal data processed by Kiss88. Requests to exercise these rights may be submitted to our support team. We aim to respond to all valid requests within thirty (30) calendar days. Where requests are complex or numerous, we may extend this period by a further thirty (30) days with prior notification.

To exercise any of the above rights, please contact the Kiss88 support team via Live Chat or email at [email protected] (plain text — not a clickable link). Please include your registered email address and a description of your request. Kiss88 may request additional information to verify your identity before processing the request.

Kiss88 does not knowingly collect personal data from any person under the age of 21. Participation on the Kiss88 Platform is strictly restricted to individuals aged 21 and above. All account registrations are subject to age verification as part of the KYC process.

If Kiss88 discovers or is notified that personal data has been collected from an individual under the age of 21, it will immediately close the associated Account, delete the collected personal data (subject only to mandatory legal retention obligations), and void any associated transactions or winnings.

Kiss88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or the services we offer. The updated Policy will be posted on this page with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — Kiss88 will take reasonable steps to notify registered users in advance, via email to your registered address or via a prominent in-platform notification.

Your continued use of the Kiss88 Platform following the publication of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree to the revised Policy, you should discontinue using the Platform and may request Account closure as described in our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the Kiss88 data protection team through the following channels. We endeavour to respond to all privacy-related enquiries within five (5) business days.

• Email: [email protected] — please use the subject line "Privacy Request" for faster routing
• Live Chat: Available 24/7 on the Kiss88 platform — mention "Privacy" or "Data Request" at the start of your conversation
• WhatsApp Support: Available 24/7 — details accessible after login to your Kiss88 Account
• Support Languages: English, Bahasa Melayu, and Chinese

Kiss88 treats all privacy requests with confidentiality. You will not be penalised in any way for exercising your data subject rights. Where a request is denied in whole or in part, Kiss88 will provide a written explanation including the reason for the decision and information about available avenues for further recourse.