Privacy Policy
kiss981 is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and what rights you hold over your own data.
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purposes of Processing
- 6. Legal Basis for Processing
- 7. Data Sharing & Disclosure
- 8. Data Retention
- 9. Data Security
- 10. Cookies & Tracking
- 11. International Data Transfers
- 12. Your Rights
- 13. Protection of Minors
- 14. Policy Amendments
- 15. Contact & Data Enquiries
Introduction
This Privacy Policy (hereinafter "Policy") sets out the data processing practices of kiss981 (hereinafter "kiss981", "the Platform", "we", "us", or "our") with respect to personal data collected from users (hereinafter "Player", "User", "you", or "your") who access, register on, or otherwise interact with the kiss981 online gaming platform available at https://kiss981.cam.
kiss981 takes the privacy of its Players seriously. We collect and process personal data only to the extent necessary to provide our gaming services, comply with applicable legal and regulatory obligations, and maintain the security and integrity of the Platform. We do not sell personal data to third parties and we do not engage in data-driven advertising activities that exploit Player data for commercial gain unrelated to our core services.
By registering an Account or continuing to use the kiss981 Platform, you acknowledge that you have read this Privacy Policy in full and consent to the collection and processing of your personal data as described herein.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, which together form the complete agreement governing your relationship with kiss981.
Definitions
The following definitions apply throughout this Privacy Policy:
- "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to their physical, economic, cultural, or social identity.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction, whether by automated or manual means.
- "Data Controller" — kiss981, being the entity that determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" — any third-party organisation or service provider that processes Personal Data on behalf of kiss981 in connection with the Platform's operations.
- "KYC Data" — identity verification documents and related information (e.g., government-issued photo ID, proof of address, payment method documentation) collected as part of the Know Your Customer compliance process.
- "Cookies" — small text files stored on a Player's device by the Platform for the purposes of session management, analytics, preference retention, and security.
- "Consent" — a freely given, specific, informed, and unambiguous indication by the Player signifying agreement to the processing of their Personal Data for one or more specified purposes.
Data We Collect
kiss981 collects the following categories of Personal Data from Players, the extent of which varies depending on your level of engagement with the Platform:
3.1 Registration & Account Data
When you create an Account, we collect:
3.2 KYC Verification Data
To comply with identity verification and anti-money-laundering obligations, we collect:
- Government-issued photo identification (e.g., Malaysian MyKad, passport, driving licence)
- Proof of residential address (e.g., utility bill, bank statement dated within three months)
- Proof of payment method ownership (e.g., screenshot of e-wallet, partial bank statement)
- Source of funds documentation where required by our compliance obligations
3.3 Financial Transaction Data
We record details of all financial transactions conducted through your Account, including deposit amounts, withdrawal requests, payment method types (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank), transaction timestamps, and processing status. We do not store complete card numbers or full bank account credentials — payment processing is handled by our PCI-DSS compliant payment partners.
3.4 Gaming Activity Data
We collect records of your betting and gaming activity on the Platform, including wagers placed, games accessed, bet amounts, outcomes, session durations, and interaction patterns. This data is used for account management, responsible gambling monitoring, fraud detection, and regulatory reporting.
3.5 Technical & Device Data
Automatically collected when you access the Platform:
- IP address and approximate geolocation
- Browser type, version, and language settings
- Operating system and device type
- Pages visited, time on page, referral source, and clickstream data
- Session identifiers and authentication tokens
3.6 Communications Data
When you contact our support team via live chat or email, we retain records of the communication — including the content of messages, timestamps, and support agent responses — for quality assurance, dispute resolution, and compliance auditing purposes.
How We Collect Data
kiss981 collects Personal Data through the following means:
| Collection Method | Description |
|---|---|
| Direct input | Information you provide during registration, KYC submission, deposit/withdrawal requests, and support interactions. |
| Automated collection | Technical and device data collected automatically when you access the Platform via browser cookies, server logs, and session tracking. |
| Payment processors | Transaction confirmation data received from third-party payment processors (e.g., DuitNow, FPX, Touch 'n Go) after a deposit or withdrawal is initiated. |
| Identity verification partners | Verification results and risk scores provided by third-party KYC and AML screening service providers. |
| Fraud detection systems | Behavioural and device signals processed by our fraud prevention infrastructure to identify suspicious activity patterns. |
Purposes of Processing
kiss981 processes your Personal Data for the following purposes:
- Account creation and management: Creating and maintaining your Player Account, authenticating your identity at login, and managing your Account preferences and settings.
- Service delivery: Processing deposits and withdrawals, enabling access to betting markets and casino games, calculating and paying out winnings, and administering promotional offers and bonuses.
- KYC and AML compliance: Verifying your identity and age (21+ requirement), conducting source-of-funds checks where required, and screening against sanctions and politically exposed persons (PEP) databases.
- Fraud prevention and platform security: Detecting and investigating suspected fraud, unauthorised access, money laundering, and collusion. Preventing duplicate account creation and bonus abuse.
- Responsible gambling: Monitoring gaming patterns to identify potential problem gambling behaviours, enforcing deposit limits and self-exclusion requests, and fulfilling our duty-of-care obligations.
- Legal and regulatory compliance: Responding to lawful requests from regulatory or law enforcement authorities, maintaining records required by our licensing obligations, and resolving disputes.
- Customer support: Handling enquiries, resolving account issues, and providing assistance via live chat and email.
- Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, game selection, and payment processing reliability.
Legal Basis for Processing
kiss981 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
| Legal Basis | Processing Activities |
|---|---|
| Contractual necessity | Account registration, transaction processing, service delivery, payout processing. |
| Legal obligation | KYC/AML verification, regulatory reporting, responding to lawful authority requests, age verification enforcement. |
| Legitimate interests | Fraud prevention, platform security, responsible gambling monitoring, abuse prevention, analytics for service improvement. |
| Consent | Marketing communications (where opted in), non-essential cookies. |
Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent withdrawal requests can be submitted via live chat or email to [email protected].
Data Sharing & Disclosure
kiss981 does not sell, rent, or trade your Personal Data to third parties for their independent marketing or commercial purposes. We share Personal Data only in the following circumstances and with the following categories of recipients:
7.1 Service Providers (Data Processors)
We engage third-party service providers to process data on our behalf for specific operational purposes, including:
- Payment processing partners (e.g., operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, Visa/Mastercard networks)
- Identity verification and KYC technology providers
- Fraud detection and AML screening service providers
- Cloud infrastructure and data hosting providers
- Customer support platform providers (live chat software)
- Platform analytics providers (aggregated, anonymised data only)
All Data Processors are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing their contracted services to kiss981.
7.2 Regulatory & Legal Authorities
kiss981 may be required to disclose Personal Data to governmental bodies, regulatory authorities, law enforcement agencies, or courts where required by applicable law or pursuant to a lawful order. We will only disclose the minimum data necessary to satisfy the applicable legal obligation and, where permitted, will notify affected Players of such disclosure.
7.3 Business Transfers
In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of our assets, Personal Data held by kiss981 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any resulting changes to this Privacy Policy.
Data Retention
kiss981 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by our regulatory and legal obligations:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory / AML compliance |
| KYC verification documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial transaction records | 7 years from transaction date | AML / regulatory audit |
| Gaming activity logs | 5 years from date of activity | Regulatory / responsible gambling |
| Support communications | 3 years from last interaction | Dispute resolution / quality assurance |
| Technical / device logs | 13 months from collection | Security / fraud prevention |
Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.
Data Security
kiss981 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:
- 256-bit TLS/SSL encryption on all data transmitted between your browser and the Platform.
- AES-256 encryption at rest for sensitive stored data, including KYC documents and financial records.
- Password hashing using industry-standard one-way hashing algorithms — kiss981 cannot retrieve your plaintext password.
- Two-factor authentication (2FA) available to all Players for enhanced Account security.
- Network-level firewalls and intrusion detection systems monitoring for anomalous access patterns.
- Access controls ensuring that internal staff access to Personal Data is restricted on a strict need-to-know basis, with all access logged and audited.
- Regular penetration testing conducted by independent third-party security specialists.
- PCI-DSS compliant payment infrastructure for all card and payment processing operations.
Despite these measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable 2FA on their kiss981 Account. Report any suspected unauthorised Account access to [email protected] immediately.
Cookies & Tracking Technologies
The kiss981 Platform uses cookies and similar tracking technologies to operate key platform functions and improve the user experience. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing, fraud prevention. Cannot be disabled without breaking core Platform functionality. | No — essential to service |
| Functional | Remembering language preferences, game display settings, and responsible gambling tool configurations. | No — legitimate interest |
| Analytics | Aggregated, anonymised data on Platform usage patterns to support service improvement. No individual Player is identifiable in analytics reports. | Yes — opt-in consent |
You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to access and use the Platform. We do not use third-party advertising or cross-site tracking cookies.
International Data Transfers
kiss981 operates with infrastructure and service providers located in multiple jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, kiss981 ensures that appropriate safeguards are in place to protect your data, including:
- Data processing agreements incorporating standard contractual clauses recognised under applicable data protection frameworks.
- Transfer only to jurisdictions assessed to provide an adequate level of data protection relative to the purpose of the transfer.
- Encryption of data in transit and at rest regardless of the jurisdiction of the receiving server.
By using the Platform, Malaysian users acknowledge and consent to the transfer of their Personal Data to servers and processors located outside Malaysia for the purposes described in this Policy.
Your Rights
Subject to applicable laws and our legitimate processing obligations, you hold the following rights with respect to your Personal Data processed by kiss981:
Request a copy of the Personal Data we hold about you and information on how it is being processed.
Request correction of any inaccurate or incomplete Personal Data held on your Account.
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Request that we limit how we use your data in specific circumstances, such as while you contest the accuracy of data we hold.
Request a structured, machine-readable export of Personal Data you provided to us on the basis of consent or contract.
Object to processing based on our legitimate interests, including profiling and responsible gambling monitoring, where you believe your individual circumstances warrant an override.
To exercise any of the above rights, please contact our data privacy team via live chat or at [email protected] with a clear description of your request. We will acknowledge your request within five (5) business days and respond substantively within thirty (30) days. Where a request cannot be fulfilled due to a conflicting legal obligation, we will explain the reason in writing.
Protection of Minors
kiss981 operates a strict 21+ age policy. The Platform is not directed at and must not be used by individuals under the age of 21. We do not knowingly collect Personal Data from anyone under 21 years of age.
Where kiss981 has reason to believe that Personal Data has been collected from a Player who is under 21 — whether through the KYC verification process or other means — the relevant Account will be immediately suspended, all data associated with the underage individual will be deleted to the extent not prevented by legal obligations, and any deposits will be returned via the original payment method.
If you believe that a minor has created an Account on kiss981, please notify us immediately via live chat or at [email protected].
Policy Amendments
kiss981 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. Material changes will be communicated to registered Players via a prominent notice on the Platform and/or via email to the address registered on your Account, at least seven (7) days before the revised Policy takes effect.
The "Last Updated" date displayed at the top of this page indicates the date on which the most recent revision came into effect. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy.
Where amendments affect the legal basis on which we process your data or introduce materially new processing purposes, we will seek fresh consent where required by applicable law.
Contact & Data Enquiries
For all privacy-related enquiries, data subject rights requests, consent withdrawal notices, or concerns about how we handle your Personal Data, please contact the kiss981 privacy team through the following channels:
For matters relating to your Account terms, please refer to our Terms & Conditions. For responsible gambling support tools, please visit our Responsible Gambling page.
How kiss981 Protects Your Data
Beyond the legal text, here is a plain-language summary of the core privacy principles that guide how we handle your information at kiss981.
Your Personal Data is never sold, rented, or traded to any third party for their independent commercial use. Full stop. Your information exists on this Platform solely to serve your Account and our legal obligations.
All data transmitted between your device and the kiss981 Platform is protected by 256-bit TLS encryption. Sensitive stored data is encrypted at rest using AES-256 — the same standard used by financial institutions worldwide.
Players hold full data subject rights — access, rectification, erasure, portability, and objection. Submit a request via live chat or email and we will respond substantively within 30 days.
We collect only what is genuinely necessary for account operation, legal compliance, and service delivery. We do not collect data speculatively or maintain profiles beyond what our operational and regulatory obligations require.
Every category of data we collect has a documented retention period. When that period expires, data is deleted or irreversibly anonymised. We do not hold data indefinitely simply because it exists.
We notify Players of material changes to this Policy before they take effect. We do not silently update privacy practices. If something significant changes, you will hear from us directly.
Your Data. Your Rights. Your Platform.
At kiss981 we believe trust is earned through transparency. Review our full terms, then experience Black Diamond VIP gaming built for Malaysian players. For adults aged 21 and above only.
For players aged 21 and above only. Please gamble responsibly. Responsible Gambling Policy