kis918 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how kis918 ("Platform", "we", "us", "our"), the operator of the online gaming platform at https://kis918.win ("Site"), collects, uses, discloses, and safeguards personal data relating to individuals who register accounts, use platform services, or interact with the Site in any capacity.

By registering a kis918 account, accessing any part of the Site, or using any service provided through the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy is incorporated by reference into the kis918 Terms & Conditions. Defined terms used in this Policy carry the same meaning as in the Terms & Conditions unless otherwise stated.

2. Data Controller

The data controller responsible for your personal data in connection with the kis918 platform is the kis918 operating entity holding the applicable international gaming licence. For all data-related enquiries, including subject access requests and data deletion requests, players should contact the kis918 support team via the 24/7 live chat facility on the Site, or by email at [email protected].

kis918 is committed to handling all data-related requests in compliance with the obligations applicable under the international regulatory framework governing the Platform's operations.

3. Personal Data We Collect

kis918 collects personal data across several categories depending on how you interact with the Platform. The categories and examples of data collected are set out below:

3.1 Data You Provide Directly

Most personal data is provided directly by you during account registration, KYC submission, payment processing, or communications with the support team. Providing accurate and complete information is a condition of using the kis918 platform.

3.2 Data Collected Automatically

When you access the Site, certain technical and usage data is collected automatically through cookies, server logs, and similar technologies. This data is used for security monitoring, fraud prevention, platform performance analysis, and responsible gaming compliance — not for third-party advertising profiling.

4. How We Use Your Personal Data

kis918 processes personal data for the following purposes:

• Account Management: Creating and maintaining your player account, processing login authentication, and managing account settings.
• Identity Verification (KYC): Verifying your identity and age eligibility as required under our international gaming licence obligations. This includes confirming that you are 21 years of age or older.
• Payment Processing: Processing deposits and withdrawals through your nominated MYR payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfers.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account compromise, money laundering, and other prohibited activities.
• Responsible Gaming Compliance: Monitoring gaming behaviour to identify patterns associated with problem gambling, enforcing self-imposed player limits, and applying self-exclusion where requested.
• Legal Compliance: Fulfilling obligations under the international gaming regulatory framework applicable to kis918, including record-keeping, reporting obligations, and responding to lawful authority requests.
• Customer Support: Responding to enquiries, investigating complaints, and resolving disputes relating to accounts, transactions, and game outcomes.
• Platform Improvement: Analysing aggregated usage data to improve the platform's performance, game catalogue, and user experience.
• Communications: Sending account-related notifications, security alerts, and, where you have opted in, promotional communications regarding offers available on the kis918 platform.

5. Legal Basis for Processing

kis918 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and kis918 — including account registration, payment processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable international gaming licensing requirements, anti-money laundering obligations, and other regulatory requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by your data protection rights.
• Consent: Where we rely on consent for specific processing activities (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

kis918 does not sell personal data. We share personal data only in the following limited circumstances:

• Payment Service Providers: Personal and financial data is shared with payment processors and e-wallet providers (including Touch 'n Go, Boost, GrabPay, FPX, and bank partners) as necessary to process deposits and withdrawals. These providers are contractually bound to data security standards.
• Game Studio Partners: Aggregated, non-personally-identifiable usage data may be shared with game providers (such as Pragmatic Play, PG Soft, Habanero) for the purpose of game performance analytics.
• KYC and Identity Verification Providers: Identity documents and verification data are processed by third-party KYC service providers operating under confidentiality and data security obligations.
• Regulatory Authorities: Personal data may be disclosed to the licensing authority under which kis918 operates, or to law enforcement agencies, where required by applicable legal obligations or lawful official requests.
• Fraud Prevention Services: Data relevant to fraud investigation may be shared with industry fraud prevention networks and security intelligence services for the purpose of protecting the platform and its players.

7. Cookies and Tracking Technologies

The kis918 Site uses cookies and similar tracking technologies for the following purposes:

• Strictly Necessary Cookies: Required for the Site to function — including maintaining your login session, remembering security settings, and enabling core platform features. These cannot be disabled without impairing platform functionality.
• Performance Cookies: Collect anonymised data about how players interact with the Site — pages visited, session duration, error reports — for the purpose of improving platform performance.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and display preferences to personalise your experience.
• Security Cookies: Used for fraud detection, bot prevention, and suspicious activity identification.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect platform functionality. kis918 does not use third-party advertising or behavioural tracking cookies.

8. Data Retention

kis918 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following retention standards:

• Active Account Data: Retained for the duration of your account relationship with kis918 plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documentation: Retained for the period required under the applicable international gaming licensing framework, typically five (5) years from account closure.
• Support Communications: Retained for a minimum of two (2) years from the date of the communication, or longer where the communication relates to an open dispute or regulatory matter.
• Technical and Usage Logs: Retained for up to twelve (12) months for standard analytics; up to five (5) years where logs are relevant to security investigations or regulatory compliance.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with kis918's data destruction procedures.

9. Data Security

kis918 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the kis918 platform.
• Encrypted storage of sensitive data including passwords (hashed with industry-standard algorithms) and identity documents.
• Role-based access controls ensuring that personal data is accessible only to kis918 personnel with a legitimate operational need.
• Two-factor authentication available for player accounts, providing an additional security layer at login.
• Regular security audits and penetration testing by independent security specialists.
• Automatic session timeout after inactivity to prevent unauthorised access on unattended devices.

While kis918 applies rigorous security measures, no transmission over the internet can be guaranteed to be fully secure. Players are responsible for maintaining the confidentiality of their account credentials.

10. Your Data Rights

Subject to applicable law and the regulatory obligations under which kis918 operates, you have the following rights in respect of your personal data:

• Right of Access: Request a copy of the personal data kis918 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: Request that processing of your personal data be restricted in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used machine-readable format.
• Right to Object: Object to processing of your personal data based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact the kis918 support team via live chat or at [email protected]. We will respond to all valid requests within a reasonable timeframe. Identity verification may be required before processing requests.

11. Minors

The kis918 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If kis918 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the personal data will be deleted, and any associated transactions will be voided in accordance with our eligibility policy.

If you believe a minor has registered an account on the kis918 platform, please notify us immediately at [email protected].

12. Third-Party Links

The kis918 platform does not include links to third-party websites for general browsing purposes. Where links to other sites appear (for example, in regulatory or licensing context), kis918 is not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policies of any external sites you visit.

13. International Data Transfers

As an internationally licensed platform serving Malaysian players, personal data processed by kis918 may be transferred to and stored in jurisdictions outside Malaysia in connection with the Platform's operations — including the jurisdiction of the applicable gaming licensing authority and the locations of our technology infrastructure providers.

Where personal data is transferred internationally, kis918 ensures that appropriate safeguards are in place to protect the data, including contractual data protection clauses with service providers operating outside the primary jurisdiction.

14. Changes to This Policy

kis918 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via account notification or the email address registered to their account. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Continued use of the kis918 platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with any revision, you should cease using the platform and contact support to close your account.

15. Contact Us

For all data privacy enquiries — including subject access requests, data correction requests, consent withdrawal, or complaints regarding kis918's data processing practices — please contact the kis918 data team through the following channels:

• Live Chat: 24/7 live chat support available directly on the Site.
• Email: [email protected] (plain text, not a clickable link — copy and paste into your email client).

All requests are logged and tracked. We aim to acknowledge receipt within 48 hours and to provide a full response within 30 days, or sooner where the applicable regulatory framework requires a shorter response period.