Kiss 9 Privacy Policy — Personal Data Protection for Malaysia's Online Casino Platform

This Privacy Policy is issued by Kiss 9 ("we", "the platform") to describe the personal information management practices we uphold in operating our online casino and betting platform in Malaysia.

This policy applies to all personal information collected through the kiss9.ws website, the Kiss 9 mobile app, and all services, transactions, communications, and interactions associated with the Kiss 9 platform — including account registration, deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX or other methods, gaming activity (slots, live baccarat, blackjack, Sports Betting on Liga Super Malaysia, EPL, badminton, e-sports), and customer service communications.

By registering and using the Kiss 9 platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the Kiss 9 platform.

Kiss 9 collects various types of information depending on how you interact with our platform. The table below outlines the categories of data we collect and the purposes for doing so:

Data we do NOT collect:

• Full credit or debit card numbers (only secure tokens are used by payment processors)
• Passwords in plain text (passwords are stored as non-recoverable hashes)
• Biometric information such as fingerprints or facial recognition
• Sensitive information relating to race, religion, or health unless required by law

Personal information collected by Kiss 9 is used solely for the purposes stated below and will not be used beyond the defined scope without your consent:

• Account Management: Registration, identity verification (KYC), login, and Kiss 9 member account management.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other methods; processing withdrawals to your bank account or e-wallet.
• Service Provision: Gives you access to all games and betting on Kiss 9, including Live Casino, Slots, and Sports Betting.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering, and platform abuse.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to Kiss 9 members.
• Service Communications: Sending important notifications related to your account, transactions, security updates, and changes to our terms.
• Marketing (with consent): Sending promotional offers, bonus information, and platform updates — only where you have provided consent and you may unsubscribe at any time.
• Legal Compliance: To comply with legal obligations under Malaysia's PDPA 2010 and other applicable laws.

Kiss 9 does not sell, rent, or share members' personal information to third parties for their own marketing purposes. We only share your data in limited, necessary situations as outlined below:

• Payment Service Providers: Payment processors handling Touch 'n Go, GrabPay, DuitNow, FPX, and other transactions receive only the minimum information required to complete each transaction. They are bound by strict confidentiality agreements.
• Game Software Providers: Software partners such as Pragmatic Play, Evolution Gaming, and others may receive session data required to run the games, but will not have access to your full identity information.
• Identity Verification (KYC): Approved third-party identity verification services may be used to authenticate your KYC documents, and are bound by confidentiality agreements.
• Legal Authorities: Kiss 9 is required to disclose information to Malaysian authorities (police, courts, MACC, or regulatory bodies) when mandated by law or a valid court order.

Kiss 9 continuously invests in security technologies and procedures to protect your personal information. The following is an overview of the protection measures we employ:

Technical security measures we have implemented include: 256-bit SSL encryption for all data communications, password storage using non-reversible hashing algorithms, two-factor authentication (2FA) available for all accounts, real-time account activity monitoring to detect suspicious access, and regular data backups to secure locations.

Kiss 9 uses cookies and similar technologies to enhance the user experience, maintain session security, and analyse platform performance. The following are the types of cookies we use:

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Kiss 9 platform. For more information on managing cookies, refer to your web browser's help guide.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a Kiss 9 member have the following rights regarding your personal information:

To exercise any of the rights above, please contact us at support@kiss9.ws with the subject line "Data Privacy Request", along with your full name and Kiss 9 account number. We will process your request within 14 business days. For complex cases, processing may be extended to 30 days, and you will be notified accordingly.

Kiss 9 retains your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. The following are general guidelines for data retention periods:

• Active Account Data: For the duration of your active Kiss 9 account, plus 7 years after account closure (for compliance with Malaysian financial regulations).
• Financial Transaction Records: A minimum of 7 years from the date of transaction, in accordance with Malaysia's accounting and Anti-Money Laundering (AMLA) legal requirements.
• Security & Activity Logs: 2 years for fraud detection and security audit purposes.
• Support Communication Data: 3 years from the date of last communication.
• Cookie Data: Session cookies are deleted when the browser is closed; persistent cookies expire between 30 days and 2 years depending on the cookie type.

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked back to you.

The Kiss 9 platform is strictly for users aged 18 years and above. Kiss 9 strictly does not collect, store, or process personal information from individuals under the age of 18.

If Kiss 9 discovers that personal information of a person under the age of 18 has been collected without our knowledge, we will take immediate steps to:

• Permanently deleting all related information from our systems.
• Closing related accounts without prior notice.
• Refunding any deposited funds (where applicable) in accordance with established procedures.

For any questions, concerns, or requests relating to Kiss 9's Privacy Policy or the management of your personal data, please reach us through the following channels: