Privacy Policy kiss819 – Our Commitment to Protecting Your Personal Data

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by kiss819 ("we", "the platform", or "kiss819") and applies to all individuals who use the kiss819 platform, including the kiss819.biz website, mobile applications (where available), and all related services ("Services").

We take our responsibilities as a data controller seriously. At kiss819, we believe that member trust is an invaluable asset — and that trust begins with transparency about how we handle your personal information. This document is written in plain language so that every Malaysian player can clearly understand their rights.

This Privacy Policy explains in detail: the types of personal data we collect, how and why we use it, who we share it with (if anyone), how long we retain it, and what rights you have regarding that data.

2Personal Data Collected

Kiss819 collects various categories of personal data based on your interactions with our platform. Below is an overview of the data we may collect:

We do not collect sensitive category data such as medical information, religious beliefs, or sexual orientation unless specifically required by applicable law.

3Purpose of Data Collection & Processing

Kiss819 uses collected personal data only for legitimate, documented purposes. We do not process data for any purpose not stated in this Privacy Policy without obtaining your additional consent.

• Account Management: Creating, verifying, and managing your member account on the kiss819 platform.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your Malaysian bank account.
• Identity Verification (KYC): Comply with Know Your Customer requirements to prevent fraud, money laundering, and terrorism financing.
• Customer Service: Responding to enquiries, resolving complaints, and providing technical support to members.
• Platform Security: Detecting and preventing fraud, hacking, bot usage, and other unlawful activity.
• Legal Compliance: Fulfilling legal obligations including the Malaysia PDPA 2010 and related reporting requirements.
• Service Improvement: Analysing usage patterns (in aggregated or anonymised form) to improve our products and user experience.
• Marketing Communications: Sending information about promotions, bonuses, and special offers — only to members who have consented to receive such communications.

4Legal Basis for Data Processing

Every personal data processing activity carried out by kiss819 is conducted on the basis of at least one valid legal ground under Malaysia's Personal Data Protection Act (PDPA) 2010:

1. Consent: You have given explicit consent for the processing of your personal data for specific purposes. You may withdraw this consent at any time, though doing so may affect our ability to provide certain services.
2. Contract Performance: Processing is necessary to fulfil the service contract between kiss819 and you as a member — including payment processing and account management.
3. Legitimate Interests: Processing is necessary for kiss819's legitimate interests, such as fraud prevention, platform security, and service improvement — provided those interests do not override your privacy rights.
4. Legal Compliance: Processing is necessary to comply with legal obligations binding on kiss819, such as AML/CFT (Anti-Money Laundering / Combating the Financing of Terrorism) requirements.

5Data Sharing with Third Parties

Kiss819 does not sell, rent, or trade members' personal data to any third party for marketing purposes. However, we may share your personal data with a limited number of third-party categories in specific circumstances:

All third parties with whom we share data are bound by strict data processing agreements and are only permitted to process data for the stated purposes. They are not authorised to use the data for any other purpose.

6Data Security Measures at kiss819

Kiss819 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

The technical security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and kiss819's servers is encrypted using the latest TLS 1.3 protocol.
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256.
• Two-Factor Authentication (2FA): 2FA options are available for all member accounts as an added layer of protection.
• 24/7 Monitoring: A cyber threat monitoring system operates around the clock to detect and respond to suspicious activity.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent third-party security experts.
• Internal Access Controls: Access to members' personal data is restricted to staff who require it on a strictly need-to-know basis.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a data breach that may affect your rights, kiss819 will notify you and the relevant authorities in accordance with applicable legal requirements.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and the kiss819 privacy policy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact us at privacy@kiss819.biz or via the kiss819 platform's live chat. We will process your request within 30 working days from the date of receipt. In complex cases, this period may be extended by up to 60 days, with notice given to you.

8Cookie Policy

The kiss819 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytics data. Below are the types of cookies we use:

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the kiss819 platform.

9Data Retention Period

Kiss819 retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law.

Once the retention period expires, data will be permanently deleted or anonymised so that it can no longer be linked to any specific individual.

10International Data Transfers

In some cases, your personal data may be transferred to and processed in countries other than Malaysia — for example, by game providers such as Evolution Gaming operating from multiple locations worldwide, or by cloud service providers whose servers may be based outside Malaysia.

When transferring personal data outside Malaysia, kiss819 will ensure that:

• Recipients outside Malaysia are bound by data processing agreements that set protection standards equivalent to or higher than Malaysia's PDPA 2010.
• Data transfers are carried out under valid transfer mechanisms, such as approved standard contractual clauses.
• Additional technical controls, such as encryption of data in transit, are applied to all international transfers.

11Child Protection

The kiss819 platform is not intended for individuals under the age of 18. We do not knowingly collect or process personal data from minors. Should we discover that a minor's data has been collected inadvertently, we will take immediate steps to delete it.

12Contact Our Data Protection Officer

Kiss819 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with the Malaysia PDPA 2010 and this Privacy Policy. If you have any questions, concerns, or privacy-related complaints, please reach us through the following channels:

You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your privacy rights have been violated and kiss819 has not adequately addressed your concerns.