Privacy Policy kiss916 – Our Commitment to Data Protection Malaysian Players

1. Introduction & Scope of Privacy Policy

This Privacy Policy is published by kiss916 ("we", "the platform" or "kiss916.xyz") and applies to all individuals who access or use our online casino platform, including registered members and website visitors. This Policy explains how we handle your personal information in the context of online casino services, Sports Betting, poker and all digital entertainment activities available through kiss916.xyz.

We understand that trust is the foundation of our relationship with every Malaysian player. When you register at kiss916, you entrust us not only with your money but also with sensitive personal information. We take that responsibility seriously. This Privacy Policy is more than a legal document — it is a transparency agreement between kiss916 and every one of our members.

Our practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. In the event of any inconsistency between the Bahasa Malaysia version and any other version of this policy, the Bahasa Malaysia version shall prevail for Malaysian members.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register or use kiss916's services, we collect information you provide directly, including:

• Full name, date of birth, and IC or passport number (for KYC identity verification)
• Email address and mobile number
• Residential address in Malaysia
• Payment method information – e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX bank account details (Maybank2u, CIMB Clicks) used for deposits and withdrawals
• Identity verification documents such as a copy of your MyKad or passport
• Information you provide when contacting kiss916 customer support

2.2 Data Collected Automatically

When you use the kiss916 platform, our systems automatically record certain technical information required for safe and smooth platform operation:

• Your device's IP address and network information
• Device type, operating system and web browser used
• Login history including time, date, and device location
• Gaming activity history – games played, bet amounts, game outcomes, and session duration
• Financial transaction history – deposits, withdrawals and bonuses received
• Cookie and session token data to maintain a seamless user experience

2.3 Data Category & Collection Purpose Schedule

3. How We Use Your Data

Kiss916 uses your personal data only for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

• Account Operations: Creating and managing your kiss916 account, processing deposits and withdrawals via your preferred Malaysian payment methods, and managing your VIP programme and bonuses.
• Identity Verification (KYC): Meet anti-money laundering (AML) compliance requirements and adhere to Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• Platform Security: Detecting and preventing fraudulent activity, multi-account usage, bonus abuse and other cybersecurity threats.
• Responsible Gaming: Monitor gaming activity patterns to identify signs of problem gambling and carry out appropriate interventions to protect the well-being of our members.
• Service Improvements: Analysing platform usage patterns to improve the user experience, introduce new features and ensure kiss916 remains relevant to Malaysian players.
• Communications: Sending you important account-related information, the latest promotions, security updates and system notifications.
• Legal Compliance: Providing records and reports required by lawful authorities in Malaysia where mandated by law.

4. Data Sharing & Disclosure

4.1 No Data Sale Policy

Kiss916 explicitly states that we never sells, rents, exchanges or trades member personal information to any third party for marketing, advertising or commercial purposes. This is an absolute commitment that remains unchanged regardless of any change in company leadership or ownership.

4.2 Permitted Disclosures

There are limited situations in which kiss916 may need to share your data with trusted third parties:

• Service Providers: Third parties that assist with platform operations – including payment service providers (Touch 'n Go, GrabPay, DuitNow, FPX), gaming software providers, and cloud service providers – are all bound by strict confidentiality agreements.
• Legal Compliance: Malaysian government authorities or law enforcement bodies presenting a legally valid request. kiss916 will notify you of such requests unless prohibited by law from doing so.
• Key Interest Protection: In circumstances where disclosure is necessary to protect someone's life or prevent serious fraud.
• Business Transfers: In the event that kiss916 is involved in a merger, acquisition, or asset sale, user data may be transferred to the new entity, provided that equivalent or higher privacy protections are maintained.

5. Data Security

5.1 Technical Security Measures

Kiss916 implements multiple layers of technical protection to safeguard our members' personal data:

• 256-bit SSL encryption for all data communication between your device and kiss916 servers
• Passwords stored using one-way hashing algorithms that cannot be decrypted
• Two-factor authentication (2FA) for account access and high-risk transactions
• Real-time monitoring of suspicious activity with automated alert systems
• Separation of financial data from gaming data using a dedicated, independent system architecture
• Regular penetration testing by independent security experts
• Encrypted data backups stored at separate, secure locations

5.2 Organisational Security Measures

In addition to technical controls, kiss916 also implements strict internal controls:

• Access to member data is restricted on a need-to-know basis – only staff who genuinely require access to carry out their duties are permitted to do so
• All staff with access to personal data are required to sign confidentiality agreements and undergo regular data protection training
• Internal audits are conducted regularly to ensure compliance with this privacy policy

5.3 Incident Response Plan

Despite all security measures in place, no system can guarantee 100% absolute security. In the event of a data breach, kiss916 has a comprehensive incident response plan in place — covering immediate containment, forensic investigation, notification to affected members and reporting to the relevant authorities within the stipulated timeframe.

6. Cookies & Tracking Technologies

6.1 Types of Cookies Used

The kiss916 platform uses cookies and similar tracking technologies to enhance the user experience and platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations – login, session authentication, and account security. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as language, display settings and saved login details for a more convenient return experience.
• Performance/Analytics Cookies: Collects information about how you use the platform — including pages visited, time spent, and navigation paths — to help us improve the overall user experience.
• Marketing Cookies: Used to display relevant kiss916 promotions to you based on your interests and gaming activity. You may opt out of these cookies through your browser settings.

6.2 Managing Cookies

You can manage and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and your experience on the kiss916 platform. Essential cookies cannot be disabled without compromising your session security.

7. Your Rights Regarding Personal Data

As a data subject under Malaysia's PDPA, you have the following rights in relation to the personal information held by kiss916:

8. Data Retention Period

Kiss916 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law:

• Active Account Data: Retained for the duration that your kiss916 account remains active.
• KYC & Identity Data: Retained for a minimum of 5 years after account closure or the date of the last transaction, in accordance with Malaysia's AMLA requirements.
• Financial Transaction Records: Retained for 7 years after each transaction in accordance with Malaysia's accounting and tax legislation.
• Security Logs: Retained for 12 months for security investigation and audit purposes.
• Customer Support Data: Support communication records are retained for 2 years for reference and quality assurance purposes.

Once the retention period has ended, data is securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to any individual.

9. Protection of Children's Data

The kiss916 platform is a service intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

10. Amendments to the Privacy Policy

Kiss916 reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements or member feedback. Any significant amendments will be communicated to members via in-platform notifications or email at least 14 days before taking effect.

The latest version of this Privacy Policy is always available at kiss916.xyz/privacy-policy. The "Updated" date at the top of this document indicates when changes were last made. By continuing to use the kiss916 platform after any amendments take effect, you are deemed to have accepted the revised Privacy Policy.

11. Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kiss916, please contact us via:

We encourage you to contact us directly first if you have any privacy-related concerns. Our team will make every effort to resolve any issues within a reasonable timeframe. If you feel your complaint has not been resolved to your satisfaction, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia.