📌 Summary: 918kiss collects personal data to operate the platform, verify your identity, process payments, and communicate with you. We do not sell your data. You have rights over your data. This policy explains everything in full.
1. Introduction
918kiss ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all Members and visitors to the 918kiss website at 918kiss.vu. This Privacy Policy ("Policy") explains what personal data 918kiss collects, why we collect it, how we use it, who we share it with, and what rights you have in relation to your personal data.
This Policy applies to all personal data collected through the 918kiss website, mobile web interface, customer support channels, and any other interaction you have with 918kiss as a Member or prospective member. It should be read alongside the 918kiss Terms & Conditions and Responsible Gaming Policy.
By creating a 918kiss Account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should refrain from using the Platform.
2. Data Controller
For the purposes of applicable data protection legislation, the data controller responsible for your personal data is 918kiss, operating the platform at 918kiss.vu. Queries relating to data protection and privacy should be directed to the 918kiss data protection contact: support918kiss.vu (plain text contact address — not a clickable link).
3. Categories of Personal Data We Collect
918kiss collects the following categories of personal data from Members:
3.1 Identity Data
- Full legal name as provided at registration.
- Date of birth (for age verification purposes).
- Government-issued identification document details (NRIC, passport number) where KYC verification is required.
- Username chosen by the Member at registration.
3.2 Contact Data
- Email address registered on the Account.
- Malaysian mobile telephone number registered on the Account.
- Residential address (where provided for KYC or correspondence purposes).
3.3 Financial Data
- Payment method details (e-wallet account identifiers for Touch n Go eWallet, Boost, GrabPay; bank account details for Maybank, CIMB, Public Bank, Hong Leong Bank where relevant).
- Transaction history including deposits, withdrawals, and wager records.
- Wallet balances and bonus fund status.
3.4 Technical Data
- IP address and approximate geographic location derived therefrom.
- Device type, operating system, and browser type and version.
- Login timestamps and session duration data.
- Cookie identifiers and platform usage analytics.
3.5 Gameplay Data
- Game session records, bet histories, and game outcomes.
- Sportsbook bet history including markets, stakes, and results.
- Responsible gaming tool settings (deposit limits, session timers, self-exclusion periods).
3.6 Communications Data
- Live chat transcripts and support ticket records.
- Email communications between the Member and 918kiss support.
- Responses to surveys or feedback requests (where voluntarily provided).
4. How We Collect Your Personal Data
918kiss collects personal data through the following means:
- Direct provision by the Member — at registration, during KYC verification, when contacting support, or when updating Account details.
- Automated technical collection — via cookies, server logs, and analytics tools as you interact with the Platform.
- Transaction processing systems — financial data generated when you deposit or withdraw funds through integrated payment processors.
- Game provider systems — gameplay data transmitted from certified third-party game providers integrated into the Platform.
- Third-party verification services — identity and age verification data obtained from KYC service providers where applicable.
5. How We Use Your Personal Data
918kiss uses collected personal data for the following purposes:
- Account management — to create, maintain, and administer your 918kiss Account and associated services.
- Identity and age verification — to confirm that Members meet the 21+ age requirement and to comply with KYC obligations.
- Payment processing — to process deposits and withdrawals via your chosen payment method in a secure and accurate manner.
- Service delivery — to provide access to games, sportsbook markets, promotions, rewards, and all other Platform features.
- Customer support — to respond to support requests, complaints, and account queries efficiently.
- Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct.
- Regulatory compliance — to meet obligations imposed by applicable gaming licensing requirements and anti-money laundering regulations.
- Responsible gaming — to operate self-exclusion tools, deposit limits, and session timers in accordance with Member-configured responsible gaming settings.
- Platform improvement — to analyse usage patterns and technical performance data to improve Platform functionality and user experience.
- Marketing communications — to send promotional offers, bonus notifications, and Platform updates to Members who have not opted out of such communications. Marketing communications can be opted out of at any time via Account settings.
6. Legal Basis for Processing
918kiss processes personal data on the following legal bases:
- Contractual necessity — processing required to fulfil the 918kiss Terms & Conditions agreement with the Member, including Account management, payment processing, and service delivery.
- Legal obligation — processing required to comply with applicable laws and gaming licensing requirements, including KYC, AML obligations, and age verification.
- Legitimate interests — processing for fraud prevention, platform security, abuse detection, and analytics conducted in 918kiss's legitimate business interests and not overriding Member privacy rights.
- Consent — processing for marketing communications, where Member consent has been obtained at registration or subsequently. Consent may be withdrawn at any time.
7. Data Sharing and Disclosure
918kiss does not sell, rent, or trade personal data to third parties for marketing purposes. Personal data may be shared with the following categories of recipients for the purposes described in this Policy:
- Payment processors — to facilitate deposit and withdrawal transactions via Touch n Go eWallet, Boost, GrabPay, and integrated Malaysian banking channels.
- Game providers — certified third-party providers of casino games and live dealer services integrated into the Platform, to the extent necessary for game delivery and fairness certification.
- KYC and identity verification services — specialist providers used to verify identity documents and confirm age eligibility.
- IT and platform infrastructure providers — hosting, security, and technical service providers who process data solely on 918kiss's behalf under appropriate data processing agreements.
- Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or gaming regulatory authority instruction.
All third-party service providers who process personal data on behalf of 918kiss are required to do so under contractual terms that impose equivalent data protection obligations.
8. Data Retention
918kiss retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including the following retention periods:
- Active Account data — retained for the duration of the Member's Account being active on the Platform.
- Financial and transaction records — retained for a minimum of 7 years following the relevant transaction, in accordance with financial record-keeping obligations under applicable gaming licensing requirements.
- KYC documentation — retained for a minimum of 5 years following Account closure, in accordance with anti-money laundering regulatory requirements.
- Support communications — retained for 3 years following the resolution of the relevant support interaction.
- Marketing consent records — retained for the duration of the Member's Account to evidence consent status.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.
9. Cookies and Tracking Technologies
918kiss uses cookies and similar tracking technologies to operate the Platform effectively. The following categories of cookies are used:
- Strictly necessary cookies — required for basic Platform functionality including session management, login state, and security features. These cookies cannot be disabled without impairing Platform functionality.
- Performance and analytics cookies — used to collect aggregated, anonymised data on how Members interact with the Platform, enabling 918kiss to identify and resolve technical issues and improve user experience.
- Functional cookies — used to remember Member preferences such as language settings and responsible gaming tool configurations.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform, including the ability to maintain a login session.
10. Data Security
918kiss implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. Security measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and 918kiss servers.
- Encryption of sensitive data fields at rest within 918kiss database systems.
- Strict access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis.
- Regular security assessments and penetration testing conducted by qualified third-party security specialists.
- Multi-factor authentication requirements for internal administrative access to systems holding personal data.
Notwithstanding these measures, no system is entirely immune from security risks. In the event of a data breach that poses a risk to Member rights, 918kiss will notify affected Members and relevant regulatory authorities within the timeframes required by applicable law.
11. Your Data Rights
Subject to applicable law and regulatory retention obligations, Members have the following rights in relation to their personal data:
- Right of access — you may request a copy of the personal data 918kiss holds about you.
- Right to rectification — you may request correction of inaccurate or incomplete personal data.
- Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
- Right to restrict processing — you may request that 918kiss restrict the processing of your personal data in certain circumstances.
- Right to data portability — you may request a machine-readable copy of personal data you have provided to 918kiss.
- Right to withdraw consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to object — you may object to processing based on legitimate interests, including profiling for direct marketing purposes.
To exercise any of these rights, contact 918kiss at: support918kiss.vu. 918kiss will respond to valid requests within 30 days. In complex cases, this period may be extended by a further 60 days, with notification provided to the Member.
12. Children's Privacy
The 918kiss Platform is strictly for adults aged 21 and above. 918kiss does not knowingly collect or process personal data from individuals under the age of 21. If 918kiss becomes aware that personal data has been collected from a person under the minimum age, that Account will be immediately suspended, the data will be deleted, and any balances will be forfeited in accordance with the Terms & Conditions. Parents or guardians who believe a minor has accessed the Platform should contact 918kiss support immediately.
13. International Data Transfers
918kiss may transfer personal data to third-party service providers located outside Malaysia in connection with the provision of Platform services (for example, game providers, hosting infrastructure, or KYC verification services). Where such transfers occur, 918kiss ensures that appropriate safeguards are in place to protect personal data, including contractual data transfer mechanisms that impose equivalent protections to those described in this Policy.
14. Third-Party Links
The 918kiss Platform does not contain links to third-party websites. This Policy applies solely to data collected through the 918kiss Platform at 918kiss.vu and associated 918kiss service interfaces.
15. Amendments to This Policy
918kiss reserves the right to update or amend this Privacy Policy at any time. The "Last updated" date at the top of this page indicates when the most recent revision was made. Members will be notified of material changes via the Platform or by email to the address registered on their Account. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
16. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 918kiss, please contact us at: support918kiss.vu (plain text — not a clickable link). Our data protection team will respond to all privacy-related enquiries within 5 business days.