918kissth Privacy Policy – Your Personal Data Protection

1 Information We Collect

918kissth collects various types of information depending on how you interact with our platform. This collection is carried out transparently and only for legitimate purposes.

Information You Provide Directly:

• Full name as shown on your official identification document.
• Date of birth for the purpose of age verification (minimum 18 years old).
• Email address for account communications and important notifications.
• Phone number for two-factor authentication and customer support.
• Bank account or digital wallet details for processing deposits and withdrawals.
• Identity documents (MyKad, passport) submitted during the KYC verification process.
• Residential address provided during registration or account verification.

Automatically Collected Information:

• IP address and general location information based on your network.
• Device type, operating system, and web browser version used.
• Activity logs include pages visited, session duration, and actions taken within the platform.
• Gaming data includes betting history, wins, and losses.
• Financial transaction details including amounts, dates, and payment methods.

2 How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. The table below explains exactly how your data is used:

We do not use your data for automated decisions that significantly affect your rights without human review. Any account-related decisions involving personal data are subject to manual review by our team.

3 Sharing Information with Third Parties

918kissth does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may share limited information with the following categories of partners:

• Payment Processors: Required transaction information is shared with licensed payment processors to facilitate secure deposits and withdrawals.
• Game Providers: Required session data is shared with game software providers to enable games to function correctly.
• Regulatory Authority: Certain information may be disclosed to financial authorities or law enforcement when required by law or court order.
• IT Service Providers: Technical infrastructure providers such as cloud computing and cybersecurity services operating under strict confidentiality agreements.

All third parties we work with are required to comply with data security standards equal to or higher than our own. Contractually binding data processing agreements are signed with all partners who handle our members' personal data.

We will not share your personal information with advertisers, marketing companies, or any commercial entity for promotional purposes without your explicit prior consent.

4 Cookies & Tracking Technologies

918kissth uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use our platform to help us improve our services. All data is anonymized and aggregated.
• Functional Cookies: Storing your preferences such as language and display settings to deliver a more personalized experience.
• Analytics Cookies: We use internal analytics tools to understand general usage patterns. No individual data is sent to external third-party platforms.

You may manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to fully use certain features of our platform. Detailed instructions for managing cookies are available in your respective web browser's support documentation.

5 Data Security

Protecting your personal data is a top priority for 918kissth. We implement multiple layers of technical and organizational security controls to keep your information safe at all times.

• Encryption of Data in Transit: All communications between your device and our servers are secured with TLS 1.3 protocol, ensuring data cannot be intercepted in transit.
• Encryption of Data at Rest: Sensitive data stored in our databases is encrypted using AES-256, including financial information and identity documents.
• Two-Factor Authentication: 2FA is available and encouraged for all accounts to prevent unauthorised access even if your password is compromised.
• 24/7 Monitoring: Our security team continuously monitors the platform to detect and respond to any security threats in real time.
• Regular Penetration Testing: Independent security audits and penetration testing are conducted periodically by certified third-party cybersecurity firms.
• Role-Based Access Control: Staff access to user data is restricted based on individual job requirements, with all access logged and monitored.

6 Data Retention & Deletion

918kissth retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by law.

• Active Account: Data is retained for the duration your account remains active and for 5 years after account closure for AML and tax compliance purposes.
• Transaction Records: Financial records are retained for a minimum of 7 years in compliance with Malaysia's financial regulatory requirements.
• Security Logs: Access and activity logs are retained for 12 months for security investigation and fraud prevention purposes.
• Marketing Data: If you withdraw consent for marketing communications, the relevant data will be deleted within 30 days.

Once the relevant retention period expires, your data will be securely deleted or converted into an anonymised format that cannot be linked back to you personally. We use deletion methods that meet NIST standards to ensure deleted data cannot be recovered.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our support team via in-platform live chat. We will process your request within 14 working days. In complex cases, this period may be extended up to 30 days, with prior notification to you.

8 Children's Privacy

918kissth is an online gambling platform strictly restricted to individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

If we determine that personal data from an underage child has been collected inadvertently, we will immediately take the following steps:

• Suspending the account immediately while an investigation is conducted.
• Permanently deleting all associated personal data from our systems.
• Returning any remaining account balance to the original payment method used.
• Reporting incidents to the relevant authorities where deemed necessary.

If you believe that someone under the age of 18 has registered an account on our platform, please contact our support team immediately so that appropriate action can be taken.

9 Third-Party Links

The 918kissth platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies only to the 918kissth platform and does not cover the privacy practices of any external websites you may visit.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. 918kissth is not responsible for the content, privacy policies, or security practices of any third-party websites.

Third-party game providers offering games on our platform may collect certain technical data required to run their games. This data is governed by data processing agreements we have in place with them, and they are not permitted to use it for any other purpose.

10 Amendments to This Privacy Policy

918kissth reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technical requirements, or applicable legal changes. All material amendments will be communicated to you via:

• In-platform notification when you next log in after the amendment takes effect.
• Email to your registered address at least 7 days before the effective date.
• Announcements displayed on our homepage for a period of no less than 14 days.

The "Updated" date at the top of this document will always reflect the date of the most recent amendment. Your continued use of our platform after the amendment's effective date will be considered your acceptance of the updated policy.