Privacy Policy

1. Introduction

Kiss9 ("we", "us", "the Platform", or "the Controller") operates the online gaming and sports betting platform accessible at kiss9.cam. This Privacy Policy sets out how Kiss9 collects, uses, stores, discloses, and otherwise processes the personal data of Members and visitors to the Platform.

We understand that the privacy of our Members is a matter of serious trust. We handle all personal data with strict confidentiality, in accordance with applicable data protection legislation and our own internal data governance standards. This Policy is written in plain English to ensure every Member — regardless of background — can understand how their information is treated.

By registering for an Account, making a deposit, or otherwise using the Kiss9 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any provision of this Policy, you should cease using the Platform and contact us to request account closure.

2. Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or indirectly. Examples include full name, email address, phone number, Malaysian MyKad number, IP address, and banking details.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Controller" means Kiss9, the entity that determines the purposes and means of processing Personal Data.
• "Processor" means any third-party service provider that processes Personal Data on behalf of Kiss9 in accordance with our instructions.
• "Member" means any individual who has registered and holds an Account on the Kiss9 Platform.
• "KYC Data" means identity verification documents submitted by a Member, including but not limited to Malaysian MyKad, passport copies, selfie photographs, and proof of address documents.
• "Cookies" means small text files placed on a user's device by the Platform to store session information and support analytics functionality.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including financial information, identity document numbers, and (in applicable jurisdictions) biometric data.

3. Data We Collect

Kiss9 collects Personal Data in several categories, depending on the nature of your interaction with the Platform. The following table summarises the categories of data we may hold about you:

4. How We Collect Your Data

Kiss9 collects Personal Data through the following methods:

4.1 Direct Collection

Data provided directly by you during registration, account verification, deposit and withdrawal processes, promotional opt-ins, and communications with our support team. This includes information entered into forms on the Platform, as well as documents uploaded for KYC purposes.

4.2 Automated Collection

Technical and usage data is collected automatically when you access or use the Platform. This includes log data (IP addresses, browser type, pages visited), device identifiers, and session data generated through cookies and similar technologies.

4.3 Third-Party Sources

In limited circumstances, Kiss9 may receive Personal Data from third-party sources, including identity verification service providers, payment processing partners (such as FPX network operators, Maybank2u, CIMB, and e-wallet platform operators), and fraud prevention agencies. Data from third parties is processed only for the purposes set out in this Policy and with appropriate data sharing agreements in place.

5. Purposes of Data Processing

Kiss9 processes your Personal Data only for specified, legitimate purposes. The key purposes for which we process Member data are set out below:

• Account Management: To create, maintain, verify, and administer your Member Account, including processing deposits and withdrawals in MYR via Touch 'n Go, DuitNow, FPX, and other accepted payment methods.
• Identity Verification (KYC): To comply with anti-money laundering (AML) obligations and verify that you are who you say you are, and that you are of legal age (21+) to use the Platform.
• Service Delivery: To provide access to all gaming, sports betting, live casino, and customer support services on the Platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities.
• Regulatory Compliance: To fulfil our legal obligations, including maintaining records as required by applicable financial crime prevention and data protection laws.
• Marketing and Promotions: To send you information about bonuses, promotions, and Platform updates, where you have opted in to receive such communications. You may opt out at any time by contacting our support team.
• Responsible Gambling: To monitor gambling patterns for signs of problem gambling behaviour and to enforce self-exclusion and deposit limit requests.
• Analytics and Improvement: To understand how Members use the Platform and to improve functionality, user experience, and content offerings.

6. Legal Basis for Processing

Kiss9 processes your Personal Data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a Member — including account management, payments, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, financial record-keeping, and regulatory reporting.
• Legitimate Interests: Processing necessary to protect the security and integrity of the Platform, prevent fraud, conduct analytics, and improve our services — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have expressly opted in. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

Kiss9 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

7.1 Service Providers and Processors

We engage carefully selected third-party service providers who process Personal Data on our behalf as data processors. These include payment processing partners (including FPX network operators, operators of Touch 'n Go eWallet, Boost, GrabPay, and DuitNow integration services, and banking partners such as Maybank, CIMB, and Public Bank), identity verification and KYC service providers, cloud hosting and IT infrastructure providers, and customer support platform providers. All processors are contractually bound to process data only on our instructions and to maintain appropriate security standards.

7.2 Legal and Regulatory Authorities

Kiss9 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law, court order, or binding regulatory direction. We will seek to notify you of any such disclosure where legally permissible.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of Kiss9's assets, Personal Data held by Kiss9 may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms of the successor entity.

8. Data Retention

Kiss9 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law.

• Active Account Data: Retained for the duration of your active membership with Kiss9, plus any mandatory statutory retention period thereafter.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable anti-money laundering and financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by a regulatory authority.
• Marketing Preferences: Retained until you withdraw your consent or until your Account is closed, whichever is earlier.
• Technical and Log Data: Typically retained for up to twelve (12) months for security and analytics purposes.

Upon expiry of the relevant retention period, Personal Data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Cookies and Tracking Technologies

Kiss9 uses cookies and similar tracking technologies to support the operation, performance, and security of the Platform. Cookies do not contain your personally identifiable information in isolation, but in combination with other data we hold they may constitute Personal Data.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session authentication, fraud prevention, and load balancing. These cannot be disabled.
• Functional Cookies: Used to remember your preferences (such as language settings and responsible gambling limit configurations) to enhance your experience.
• Analytics Cookies: Used to collect aggregate, anonymised data about how Members navigate and use the Platform, enabling us to make data-driven improvements.

9.2 Managing Cookies

You may configure your browser to decline non-essential cookies. Please be aware that disabling cookies may impair certain Platform features, including session persistence and personalised settings. Strictly necessary cookies cannot be disabled without preventing you from accessing core Platform functions.

10. Data Security

Kiss9 implements a comprehensive set of technical, organisational, and physical security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including financial details and KYC documents, at rest.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access Personal Data.
• Regular security audits and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to data systems.
• Comprehensive incident response procedures to detect, respond to, and notify affected parties of any data breach in accordance with applicable law.

11. Your Rights as a Data Subject

Subject to applicable data protection law, Kiss9 Members have the following rights with respect to their Personal Data. To exercise any of these rights, please contact our support team at [email protected].

Kiss9 will respond to all data subject requests within a reasonable timeframe and, where required by applicable law, within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, with prior notification.

12. Minors and Age Restrictions

Kiss9 does not knowingly collect Personal Data from individuals under the age of 21. The Platform is strictly an adults-only gaming service and participation is prohibited for anyone below 21 years of age.

All new Members are required to confirm their date of birth during registration, and Kiss9 employs KYC verification procedures specifically to confirm that Members have attained the minimum age of 21. If Kiss9 becomes aware that Personal Data has been collected from a person under 21 without verifiable parental consent, the Account will be immediately closed, all associated funds forfeited, and the data deleted in accordance with applicable law.

If you believe a person under 21 has registered on the Platform, please contact our support team immediately at [email protected].

13. Third-Party Links and Services

The Kiss9 Platform may reference or facilitate connections to third-party payment service providers and financial institutions (such as Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go, Boost, and GrabPay) in the course of deposit and withdrawal processing. These services are operated by independent third parties and are subject to their own privacy policies and terms of service.

Kiss9 is not responsible for the privacy practices or data security standards of any third-party service. We encourage you to review the privacy policies of any external service you interact with in connection with your Kiss9 Account. Data shared with payment processors is limited strictly to what is necessary to complete the relevant transaction.

14. Changes to This Privacy Policy

Kiss9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. Where amendments are material, we will notify registered Members via email or a prominent notice on the Platform homepage prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised each time a new version of the Policy is published. We encourage Members to review this Policy periodically to stay informed of how we handle their data. Continued use of the Platform after the publication of an updated Policy constitutes your acceptance of the revised terms.

15. Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your Personal Data, please contact Kiss9's support team through any of the following channels. All privacy-related enquiries are treated with strict confidentiality.

When submitting a data subject request, please provide your full registered name and Account username to help us locate your records promptly. All requests will be handled in accordance with applicable data protection law and with full respect for your privacy.