Introduction
kiss999 ("we", "our", "us") is committed to handling personal data responsibly and transparently. This Privacy Policy ("Policy") describes how kiss999 collects, processes, stores, shares and protects Personal Data submitted by registered users, visitors and any other individuals who interact with the kiss999 Platform at https://kiss999.cam ("Platform").
By registering an account, accessing the Platform or providing personal information through any kiss999 channel, you acknowledge that you have read, understood and agree to the data practices described in this Policy. If you do not agree with any part of this Policy, you should not use the Platform.
This Policy is part of the broader kiss999 agreement and should be read alongside our Terms & Conditions and Responsible Gambling guidelines.
Important notice for Malaysian users: kiss999 may be subject to applicable data protection laws and regulations depending on its operational and licensing jurisdiction. Users in Malaysia are advised to review this Policy carefully to understand what data is collected and how it may be used in connection with their Account activity.
Definitions
The following definitions apply throughout this Policy unless context otherwise requires.
Data We Collect
kiss999 collects Personal Data through several channels: account registration forms, KYC document uploads, payment transactions, customer support interactions, Platform usage and cookies. The categories of Personal Data we may collect include, but are not limited to, the following.
3.1 Identity and Contact Data
- Full legal name as it appears on a government-issued identity document.
- Date of birth (used to confirm that the user is aged 21 or above).
- Residential address, which may include city references such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam.
- Email address and contact telephone number.
- Malaysian national identity card (MyKad) number or passport details where required for KYC.
3.2 Financial and Payment Data
- Bank account details submitted in connection with deposits or withdrawals, including account numbers associated with Maybank, CIMB, Public Bank or Hong Leong.
- E-wallet identifiers linked to Touch 'n Go eWallet, Boost or GrabPay, where used to fund or receive payment from an Account.
- Transaction records including amounts in MYR, dates, payment method identifiers and transaction reference numbers.
- DuitNow or FPX transaction data generated during fund transfers.
3.3 Technical and Usage Data
- IP address and approximate geographic location at the time of each Platform access.
- Device type, operating system, browser version and screen resolution.
- Session duration, pages visited, features accessed and betting or game activity logs.
- Login timestamps and access frequency.
3.4 Communications Data
- Records of support chat sessions and email correspondence submitted through official kiss999 channels.
- Feedback, dispute submissions or responsible gambling self-declaration information provided voluntarily.
kiss999 does not collect full payment card numbers, CVV codes or other primary account numbers. Payment card processing, where available, is handled by compliant third-party payment processors. kiss999 receives only a tokenised reference.
How We Use Your Data
kiss999 processes Personal Data only for legitimate purposes directly connected to the operation of the Platform and delivery of Services to users. The primary purposes for which your data may be used are described below.
- Account administration: Creating, maintaining and securing user Accounts; delivering platform notifications and service updates.
- Identity verification (KYC): Confirming user age, identity and eligibility before permitting deposits, withdrawals or bonus activations.
- Payment processing: Facilitating MYR deposits and withdrawals through Malaysian banking channels and e-wallets; reconciling transaction records.
- Legal and compliance obligations: Satisfying anti-money laundering (AML), counter-terrorism financing (CTF) and applicable regulatory requirements.
- Fraud and security monitoring: Detecting and preventing unauthorised account access, fraudulent transactions and prohibited conduct as described in the Terms & Conditions.
- Responsible gambling: Operating deposit limits, session controls, cooling-off tools and self-exclusion programmes for users who request them.
- Customer support: Responding to queries, resolving payment disputes and escalating compliance concerns.
- Platform improvement: Analysing aggregated, anonymised usage data to identify performance issues and enhance the user experience.
- Marketing communications: Sending relevant promotional information to users who have provided consent, subject to the right to opt out at any time.
Legal Basis for Processing
kiss999 processes Personal Data on one or more of the following legal bases, depending on the purpose and applicable law.
- Contractual necessity: Processing required to perform the Account agreement, including registration, payment execution and support delivery.
- Legal obligation: Processing required to comply with KYC, AML, CTF or other mandatory regulatory requirements imposed on the Platform.
- Legitimate interests: Processing for fraud detection, platform security, product analytics and responsible gambling monitoring, where those interests are not overridden by user rights.
- Consent: Processing for optional marketing communications and non-essential cookies, where explicit consent has been collected and may be withdrawn at any time.
Data Sharing & Disclosure
kiss999 does not sell Personal Data to third parties. Personal Data may be disclosed only in the following circumstances and to the following categories of recipient.
- Payment and banking partners: Malaysian banks, FPX network operators, DuitNow scheme participants and e-wallet providers receive the minimum data necessary to process a requested transaction.
- KYC and identity verification providers: Third-party services engaged to confirm document authenticity and perform background screening as required by applicable compliance obligations.
- Cloud infrastructure and technology partners: Hosting, data storage and platform delivery services operating under data processing agreements that restrict use of Personal Data to authorised purposes.
- Regulatory and law-enforcement authorities: Where kiss999 is required by law, court order or regulatory direction to disclose Personal Data, it will do so to the minimum extent required.
- Professional advisers: Legal, audit, accounting or compliance professionals engaged by kiss999 under strict confidentiality obligations.
All third-party Data Processors engaged by kiss999 are required to maintain appropriate technical and organisational security measures and to process Personal Data only on documented instructions from kiss999.
Data Retention
kiss999 retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal, regulatory and audit requirements. General retention principles are set out below.
- Account and identity data is retained for the duration of the active Account relationship and for a minimum period thereafter as required by applicable AML and regulatory obligations.
- Transaction records, including MYR deposit and withdrawal histories, are retained for a minimum period sufficient to satisfy financial record-keeping requirements.
- Support correspondence is retained for the period reasonably necessary to resolve the matter and to manage any follow-on dispute or compliance review.
- Marketing preferences and consent records are retained until consent is withdrawn, after which they are archived to demonstrate prior compliance.
- Technical logs and session data are retained for shorter periods appropriate to their security monitoring and analytics purposes.
Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified individual.
Security Measures
kiss999 implements technical and organisational security measures appropriate to the risk associated with each category of Personal Data processed on the Platform. These measures include, but are not limited to, the following.
- Transport layer encryption (TLS/SSL) applied to all data transmitted between users' browsers and Platform servers.
- Access controls that restrict internal access to Personal Data on a need-to-know basis, with role-based permissions and activity logging.
- Secure storage of identity documents submitted for KYC, with access limited to authorised compliance personnel.
- Monitoring tools that detect anomalous login activity, unusual transaction patterns and potential security incidents in near real time.
- Regular internal and external security assessments of Platform infrastructure.
User responsibility: No technical measure can fully eliminate the risk associated with a compromised user credential. You are responsible for keeping your Account password confidential, using a strong and unique password, logging out of shared devices after every session and reporting any suspected unauthorised Account access to kiss999 support promptly. kiss999 staff will never ask for your password through any channel.
Cookies & Tracking
The kiss999 Platform uses cookies and similar tracking technologies to support core Platform functionality, maintain user sessions and, where consent has been given, to analyse aggregated usage patterns. The main categories of cookies used are described below.
- Strictly necessary cookies: Required for the Platform to function. These include session management, authentication state and security tokens. They cannot be disabled without breaking core functionality.
- Functional cookies: Remember user preferences such as language or display settings to improve the experience on subsequent visits.
- Analytical cookies: Collect anonymised data about how users navigate the Platform to help us identify technical issues and improve content structure. These are deployed only where the user has consented.
- Marketing cookies: Used to deliver relevant promotional information to users who have given consent for marketing communications.
Most browsers allow users to control cookie settings. Disabling certain cookies may limit access to some features of the Platform. Consent for non-essential cookies may be withdrawn at any time through browser settings or the Platform's cookie preference controls where provided.
Your Rights
Subject to applicable data protection law, you may have the following rights in respect of your Personal Data held by kiss999. The availability and scope of each right may vary depending on the legal basis on which the data is processed and the jurisdiction applicable to your Account.
| Right | What it means |
|---|---|
| Access | Request a copy of the Personal Data kiss999 holds about you and information about how it is processed. |
| Rectification | Request correction of inaccurate or incomplete Personal Data without undue delay. |
| Erasure | Request deletion of Personal Data where it is no longer required for the purpose collected, subject to legal retention obligations. |
| Restriction | Request that processing of your data be limited to storage only pending resolution of a rectification or objection request. |
| Portability | Receive a copy of Personal Data provided by you in a structured, machine-readable format where technically feasible. |
| Objection | Object to processing based on legitimate interests, including direct marketing, where you have grounds relating to your particular situation. |
| Withdraw consent | Withdraw consent for consent-based processing (such as marketing emails) at any time without affecting the lawfulness of prior processing. |
To exercise any of these rights, submit a written request to the kiss999 support team using the contact details in Clause 14. kiss999 will acknowledge your request within a reasonable period and respond substantively within a timeframe consistent with applicable law. We may need to verify your identity before processing a request relating to Personal Data.
Age Restrictions
The kiss999 Platform is strictly intended for adults aged 21 and above. kiss999 does not knowingly collect or process Personal Data from persons under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of an individual under 21 years of age, that data will be promptly deleted and the associated Account will be suspended pending a compliance review.
If you are a parent or guardian and believe a person under 21 has provided Personal Data to kiss999, please contact our support team immediately using the details provided in Clause 14 so that appropriate action can be taken without delay.
International Data Transfers
kiss999 may store or process Personal Data on servers or systems located outside Malaysia. Where such transfers occur, kiss999 takes steps to ensure that an appropriate level of data protection is maintained, including through contractual arrangements with receiving parties that impose data protection obligations equivalent to those applied within the Platform's primary operating jurisdiction.
Users in Malaysia acknowledge that their Personal Data may be transferred to and processed in countries whose data protection laws differ from those applicable in Malaysia. By using the Platform, you acknowledge this possibility and agree that kiss999 may make such transfers subject to the safeguards described in this Policy.
Policy Amendments
kiss999 may revise this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, Platform functionality or regulatory guidance. Material changes will be communicated through the Platform or by email to registered Account holders. Minor clarifications or corrections may be made without advance notice.
The "Last reviewed" date shown at the top of this page indicates when the current version was published. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms. Users who do not accept a material change should cease using the Platform and may request voluntary Account closure in accordance with the Terms & Conditions.
Contact Us
If you have questions about this Privacy Policy, wish to exercise a data rights request, or want to report a data protection concern, please contact the kiss999 support team using the details below.
kiss999 Data & Privacy Support
Email address (plain text): [email protected]
Support availability: 24 hours a day, 7 days a week via live chat and email.
When submitting a data rights request, please include your registered Account username (not your password), the nature of your request, and any reference details that may help us locate the relevant data efficiently.
For questions about responsible gambling account controls, please visit our Responsible Gambling page, which provides details on deposit limits, self-exclusion tools and other player protection features.