Privacy Policy kiss91 – Personal Data Protection for Malaysian Members

1. Introduction & Scope of Privacy Policy

Welcome to the kiss91 Privacy Policy page. At kiss91, we understand that your trust in our platform begins with the confidence that your personal data is in safe hands. We do not take this responsibility lightly – protecting member privacy is not merely a legal obligation for us, but a core value we have held since the very first day this platform launched.

This Privacy Policy sets out in detail, and in plain language, how kiss91 as the data controller ("we", "kiss91") collects, processes, uses, stores and protects your personal information ("you", "member") when you use the kiss91 platform, including the kiss91.my website and the kiss91 mobile app.

This Privacy Policy is drafted in accordance with the Personal Data Protection Act 2010 (PDPA Malaysia) and international best-practice data protection principles. We are committed to ensuring that all processing of kiss91 members' personal data is carried out lawfully, fairly and transparently at all times.

2. Types of Personal Data We Collect

Kiss91 only collects personal data that is genuinely necessary to provide you with a quality and secure service. The following are the categories of data we may collect:

Kiss91 does not collect unnecessary sensitive data such as your medical information, religious beliefs or political views. We only request information that is directly required for platform operations and compliance with applicable Malaysian law.

3. How We Collect Your Personal Data

Kiss91 collects members' personal data through several distinct channels, all in a lawful and transparent manner:

• Account registration: When you register a new kiss91 account, you provide basic information such as your username, Malaysian phone number and password. Additional information may be requested during the identity verification (KYC) process thereafter.
• Financial transactions: Each time you make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), or submit a withdrawal request, the relevant financial information is securely recorded by our systems for accountability and legal compliance purposes.
• Platform usage: kiss91's systems automatically record technical and usage data as you interact with the platform – including games played, bet amounts, session duration and win/loss records. This data is used solely to enhance your gaming experience and ensure platform fairness.
• Communication with support: When you contact the kiss91 support team via live chat or email, conversations may be recorded for staff training purposes and to ensure consistent service quality.
• Cookies and tracking technologies: The kiss91 website and app use cookies and similar technologies to enhance your user experience, remember your preferences and analyse usage patterns in aggregate. Further details are provided in Section 9.
• Third-party sources: In certain cases, kiss91 may receive information about you from third-party service providers we work with, such as payment providers, identity verification services, or fraud detection systems. All such third-party providers are bound by strict data protection agreements.

4. Purposes for Processing Your Personal Data

Kiss91 processes your personal data only for legitimate and necessary purposes. We will not use your data for any other purpose without informing you in advance and obtaining your consent where required. The primary purposes for data processing at kiss91 are as follows:

• Account management and maintenance: Creating, verifying, maintaining and securing your kiss91 account, including processing logins, profile updates and withdrawal requests.
• Financial transaction processing: Processing all deposits and withdrawals securely, maintaining accurate financial records and ensuring that every MYR entering and leaving your account is properly recorded.
• Identity verification and compliance (KYC/AML): Verifying member identities in compliance with Malaysian legal requirements, including Anti-Money Laundering (AML) and counter-terrorism financing measures.
• Security and fraud prevention: Monitoring account activity to detect and prevent fraud, unauthorised access, bonus abuse and any other illegal activity that could harm the platform or other members.
• Provision of support services: Providing effective technical assistance and customer support in Bahasa Melayu to kiss91 members who require it.
• Marketing communications: Sending you information about kiss91 promotions, new bonuses, the latest games and exclusive offers – subject to your consent, and you may unsubscribe at any time.
• Responsible gaming: Monitoring gameplay patterns to identify members who may benefit from responsible gaming support, and providing appropriate self-control tools.
• Platform improvements: Analysing aggregated and anonymised usage data to understand how members interact with the kiss91 platform and make ongoing improvements to the user experience.
• Legal compliance: To fulfil applicable legal and regulatory obligations, including the PDPA 2010, financial reporting requirements, and directives issued by the relevant Malaysian authorities.

5. Sharing Data with Third Parties

Kiss91 does not sell, rent or disclose your personal data to third parties for commercial marketing purposes without your explicit consent. However, in certain legitimate and necessary circumstances, we may share some of your data with the following parties:

• Payment service providers: When you make a deposit or withdrawal, the necessary transaction information is shared with the relevant payment provider — such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or an FPX provider — to process the transaction. These providers are governed by their own privacy policies and data protection agreements.
• Game providers: Third-party game providers that supply slots and casino games to the kiss91 platform may receive the minimum technical data required to operate their games within the kiss91 environment.
• Identity verification services: Third-party KYC service providers used to verify members' identities during the registration process or for large withdrawal requests.
• Malaysian authorities: Where required by law or a valid court order in Malaysia, kiss91 may be required to disclose members' personal data to law enforcement agencies, regulatory bodies or relevant Malaysian authorities. We will notify you of any such disclosure where permitted by law to do so.
• IT and security services: Technology service providers that help us maintain, protect and improve the kiss91 platform, such as cloud computing providers, cybersecurity services and fraud detection systems. All such providers are bound by strict data processing agreements.

In all circumstances where data is shared with legitimate third parties, kiss91 ensures that adequate data protection agreements are in place and that the relevant third parties use your data only for permitted purposes. We do not allow third parties to use your data for their own marketing purposes.

6. Data Security Measures at kiss91

The security of your personal data is a responsibility we take extremely seriously. kiss91 employs a comprehensive range of technical and organisational security measures to protect your data from unauthorised access, loss, misuse or inadvertent disclosure:

• 256-bit SSL Encryption: All communications between your device and kiss91's servers are protected using 256-bit Secure Socket Layer (SSL) encryption — the same highest industry standard used by Malaysia's major banks. This means all data transmitted to and from the kiss91 platform cannot be read by any unauthorised third party.
• Data encryption at rest: Sensitive personal data stored in kiss91's databases is encrypted at rest using robust encryption algorithms, ensuring data remains secure even in the event of an unexpected system breach.
• 24/7 security monitoring: The kiss91 cybersecurity team monitors the platform continuously around the clock to detect and respond promptly to any threats or suspicious activity.
• Strict access controls: Only kiss91 staff with a legitimate business need are permitted to access members' personal data. Access is controlled through a layered authorisation system, and every instance of access is logged for audit purposes.
• Two-factor authentication (2FA): kiss91 offers two-factor authentication for member accounts as an added layer of protection against unauthorised access.
• Regular security testing: kiss91's systems undergo periodic penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.
• Staff training: All kiss91 staff who handle member data receive comprehensive data protection training and are bound by strict confidentiality agreements.

7. Data Retention Period

Kiss91 does not retain your personal data for longer than is necessary for the purposes set out in this Privacy Policy or as required by applicable Malaysian law. The general principles we follow are as set out below:

• Active account data: For as long as your kiss91 account remains active, your personal data will be retained to enable the continued and seamless delivery of services to you.
• Data after account closure: After your account is closed, we retain certain data for the period prescribed by Malaysian law — typically between five and seven years for financial records, in line with corporate accountability and legal compliance requirements.
• Transaction record data: All financial transaction records are retained for a minimum of seven years in accordance with Malaysian accounting and financial legislation and the compliance requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Support communication data: Communication records with the kiss91 support team are retained for two years after the last interaction for service quality and dispute resolution purposes.
• Marketing data: If you have given your consent to receive marketing communications, your data will be retained for this purpose until you withdraw your consent or unsubscribe.

Upon expiry of the applicable retention period, kiss91 will securely delete or anonymise your personal data in accordance with established procedures. Anonymised data (where all personal identifiers have been fully removed) may be retained indefinitely for analytics or statistical reporting purposes.

8. Your Rights under Malaysia's PDPA

As a kiss91 member based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA Malaysia). kiss91 respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact the kiss91 Data Protection Officer at [email protected], stating the right you wish to exercise and the identity verification details required. We will aim to process your request within 30 days of receipt. For complex cases or those requiring additional information, we will inform you within 30 days of the status of your request.

9. Cookies, Analytics & Tracking Technologies

The kiss91.my website and kiss91 mobile app use cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

• Essential cookies: These cookies are essential for the basic operation of the kiss91 platform – including login authentication, session management and core security features. The platform cannot function properly without them and they cannot be disabled.
• Preference cookies: These cookies allow the kiss91 platform to remember your preferences, such as your interface language, favourite games and display settings, making the platform more convenient for you to use.
• Analytics cookies: We use analytics cookies to understand how members interact with the kiss91 platform in aggregate — including the most visited pages, average session duration, and navigation patterns. This data helps us improve the platform's design and content. Analytics data is collected in aggregate and is not used to identify you personally.
• Security cookies: Specialised cookies that help kiss91's security systems identify and prevent fraud, brute-force attacks and other malicious activity that could compromise your account security.

You can manage cookie settings through your web browser preferences. Please note, however, that disabling certain cookies may affect the functionality or your user experience on the kiss91 platform. For further enquiries about kiss91's use of cookies, please contact us at [email protected].

10. Children's Data & Protection of Minors

The kiss91 platform is intended solely for individuals aged 18 and above. We do not knowingly collect, process or store personal data from individuals under the age of 18.

Should we discover that personal data belonging to a child or underage minor has been inadvertently collected, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect that their child has registered for or used the kiss91 platform without permission are urged to contact our support team at [email protected] without delay.

Kiss91 employs age verification during registration and throughout the KYC process to identify and prevent access by underage individuals. We take the protection of young people very seriously as part of our commitment to responsible gaming and the wellbeing of the Malaysian community.

11. Changes to This Privacy Policy

Kiss91 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, service requirements or relevant developments in Malaysian law. You will be notified of any material changes to this Privacy Policy through the following channels:

• A prominent notice on the kiss91.my homepage
• In-app notifications on the kiss91 mobile app when you open the app
• Email to the address registered with your kiss91 account (for significant changes)

We encourage you to review this Privacy Policy page periodically to ensure you remain informed about kiss91's latest privacy practices. Continued use of the kiss91 platform after any changes are published will be considered acceptance of the updated Privacy Policy.

12. Contact the kiss91 Data Protection Officer

If you have any questions, concerns or complaints regarding how kiss91 handles your personal data, or wish to exercise any of your privacy rights, please contact our Data Protection Officer through the following channels:

If you are dissatisfied with how kiss91 has handled your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for enforcing the PDPA 2010 in Malaysia.