Kiss91 Privacy Policy – Personal Data Protection for Malaysian Players

Kiss91 ("we," "the platform," or "kiss91") respects the privacy of every individual who uses our services. This Privacy Policy ("Policy") describes how we collect, use, store, protect, and in certain circumstances disclose your personal information when you use the kiss91 website, mobile app, and all related services.

This policy applies to all users of the kiss91 platform — whether you are visiting our website for the first time, in the process of registering, or an active member who regularly plays slots, bets on Malaysia Super League football, or enjoys our live casino. By using any part of the kiss91 platform, you agree to the practices described in this Policy.

Kiss91 collects your personal data through several channels — directly from you during registration and platform use, automatically via web tracking technologies, and in some cases through legitimate third parties. The categories of data we collect are as follows:

Kiss91 uses the personal data collected for the purposes listed below. Each purpose has a clear legal basis, such as contract performance, legal compliance, or legitimate interest:

Account & Platform Operations

• Creating and managing your kiss91 member account
• Verifying your identity and age to ensure legal compliance (KYC)
• Processing deposits and withdrawals via your preferred Malaysian payment methods
• Provides access to slots, Live Casino, Sports Betting, jackpots, and virtual sports

Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and platform abuse
• Monitoring unusual usage patterns to protect your account from unauthorised access
• Complying with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements

Service Improvement & Player Experience

• Analysing usage patterns to improve the kiss91 platform's interface and features
• Personalising your gaming experience based on your gameplay preferences
• Sending account-related notifications, relevant promotions, and important updates

Customer Support

• Responding to your enquiries and complaints effectively
• Maintaining communication records for reference and dispute resolution

Kiss91 does not sell, rent, or trade your personal data. However, we may share data with certain parties under limited circumstances and for legitimate purposes:

• Payment Service Providers — Payment processors that facilitate transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks. They only receive the data necessary to process your transaction.
• Licensed Game Providers — Third-party gaming platforms that provide slots, live casino, and other games on kiss91 may receive minimal session data to operate the games securely.
• Regulatory Authorities — Kiss91 will disclose data when required by law, court order, or a legitimate enforcement agency in Malaysia.
• Technical Service Providers — Companies that provide infrastructure services, cloud hosting, and analytics tools to support the operation of the kiss91 platform, subject to strict confidentiality agreements.

Protecting your personal data is a core priority at kiss91. We implement multiple layers of technical and organisational security to ensure your data remains protected at all times:

Technical Security

• 256-bit SSL/TLS Encryption for all data in transit between your device and kiss91's servers
• Data encryption at rest for all sensitive data stored in our databases
• Network segregation with firewalls and intrusion detection systems that monitor traffic 24 hours a day
• Two-factor authentication available to all kiss91 member accounts as an added layer of protection
• Regular security testing including penetration testing by independent cybersecurity experts

Organisational Security

• Minimum access principle — kiss91 staff may only access data required for their specific role
• Mandatory cybersecurity awareness training for all kiss91 staff
• A clearly defined and tested incident response procedure to address any data breaches

Kiss91 retains your personal data only for as long as necessary for the stated purposes or as required by law. Our general data retention guidelines are as follows:

• Active account data — Retained for as long as your kiss91 account remains active
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and AML
• Customer support communication records — Retained for 3 years from the date of last interaction
• Activity & security logs — Retained for 2 years for digital forensics and dispute resolution purposes
• Closed account data — The minimum required data is retained for the period mandated by law following account closure

Once the applicable retention period has expired, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

Under Malaysia's PDPA 2010 and kiss91's Privacy Policy, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at privacy@kiss91.ws:

Kiss91 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and help us understand how the platform is used. There are four types of cookies we use:

The kiss91 platform is strictly for individuals aged 18 years of age and above. We do not intentionally collect or process personal data from minors. Should we discover that a child's personal data has been inadvertently collected, we will take immediate steps to delete that information and close the account in question.

Parents and guardians who believe their child has registered on kiss91 without permission are urged to contact us immediately at support@kiss91.ws or via our live chat. We will handle such cases with the highest priority.

We recognise that financial data is among the most sensitive. Kiss91 takes a multi-layered approach to protecting your payment information:

• Kiss91 does not store your full e-wallet or banking account details — only reference tokens processed by authorised payment providers
• All financial transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u FPX, and CIMB Clicks FPX are processed directly by the respective providers using their own security infrastructure
• Transaction records retained by kiss91 contain only completion/failure status, the amount in RM, and a timestamp — not full account details
• Any detected attempt at financial fraud will be reported to the relevant authorities, including BNM (Bank Negara Malaysia), in accordance with our legal obligations

Kiss91 reserves the right to amend this Privacy Policy at any time to reflect changes in law, technology, or our operational practices. When significant amendments are made, we will:

• Updating the "Last Updated" date at the top of this Policy
• Displaying clear notifications on the kiss91 platform homepage
• Sending email notifications to all active members for amendments that materially affect their privacy rights

Continued use of the kiss91 platform after an amended Privacy Policy has been published constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you may close your account and request data deletion in accordance with the stated procedure.

If you have any questions, concerns, or wish to exercise any of your privacy rights, the kiss91 data protection team is here to help:

• Privacy Email: privacy@kiss91.ws (response within 3 working days)
• General Support Email: support@kiss91.ws
• 24/7 Live Chat: Available within the kiss91 platform, operated in Bahasa Melayu

For requests to exercise data rights (access, rectification, deletion), please state the type of request and include sufficient identifying information so we can verify your identity before processing. This is a security measure to protect your data from unauthorised requests.