918kiss2 Privacy Policy

1.Introduction

918kiss2 ("we", "us", "our", "the Company") operates the online gaming platform accessible at 918kiss2.co. In the course of providing our services to registered players and visitors across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Kota Kinabalu, and Kuching — 918kiss2 collects and processes certain personal information.

This Privacy Policy ("Policy") sets out in clear and transparent terms: what personal data 918kiss2 collects, why we collect it, how we use and store it, with whom we share it, how long we retain it, and what rights you hold in relation to your personal data.

This Policy applies to all personal data processed by 918kiss2 in connection with: the 918kiss2 website and platform; all associated gaming products including the sportsbook, live casino, slots, e-sports, and Sic Bo; the 918kiss2 cashier and payment processing functions; customer support interactions; and marketing communications where you have opted in to receive them.

By registering for a 918kiss2 account, logging in to the 918kiss2 platform, or otherwise providing your personal information to 918kiss2, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2.Personal Data We Collect

2.1 Registration and Account Data

When you create a 918kiss2 account, we collect the following information:

• Full legal name as it appears on your national identity card (MyKad) or passport
• Date of birth (used to verify that you meet the 918kiss2 minimum age requirement of 21 years)
• Email address (used as your primary account identifier and for account communications)
• Malaysian mobile telephone number (used for two-factor authentication and account recovery)
• Preferred username and password (password stored in irreversibly hashed form only — 918kiss2 cannot access your plaintext password)
• State of residence in Malaysia (used for responsible gaming and platform localisation purposes)

2.2 Identity Verification (KYC) Data

As part of 918kiss2's Know Your Customer (KYC) compliance obligations, we may request and collect:

• A copy of your national identity card (MyKad), passport, or other government-issued identification document
• A selfie or photograph for identity matching purposes
• Proof of address (utility bill, bank statement, or similar document issued within the past three months)
• Proof of payment method ownership (screenshot or statement confirming that the bank account or e-wallet used for deposits is registered in your name)

2.3 Transaction and Financial Data

918kiss2 records all financial transactions conducted on the platform, including:

• Deposit amounts, timestamps, and FPX or DuitNow transaction reference numbers
• Withdrawal requests, amounts, processing status, and destination payment method identifiers
• Betting and wagering history, including game type, stake amount, odds, and outcome
• Bonus and promotion redemption history
• Account wallet balance records

2.4 Technical and Usage Data

When you access the 918kiss2 platform, our systems automatically collect certain technical information, including:

• IP address at the time of login and platform use
• Device type, operating system, and browser version
• Session timestamps, login history, and duration of platform sessions
• Pages and game categories accessed within the 918kiss2 platform
• Referral URL (the web address from which you arrived at 918kiss2, if applicable)

3.How We Use Your Personal Data

918kiss2 uses your personal data only for the purposes set out in this Policy. The primary uses of your data are as follows:

• Account Management: To create and maintain your 918kiss2 account, authenticate your identity at login, and manage your account settings and preferences.
• Service Delivery: To provide you with access to all 918kiss2 gaming products — sportsbook, live casino, slots, e-sports, and Sic Bo — and to process your bets, calculate results, and credit winnings to your wallet.
• Payment Processing: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, and other connected Malaysian payment channels in compliance with our payment processor agreements.
• Identity and Age Verification: To verify that you are aged 21 or above and are who you claim to be, in fulfilment of our KYC obligations under our international gaming licence and applicable financial regulations.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behaviour, and to administer responsible gaming tools including deposit limits, session time reminders, cooling-off periods, and self-exclusion requests.
• Legal and Regulatory Compliance: To meet our anti-money laundering (AML), counter-terrorism financing (CTF), and licensing obligations, including maintaining transaction records for the periods required by applicable regulations.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, and other conduct that violates our Terms and Conditions.
• Customer Support: To respond to your queries, complaints, and dispute submissions efficiently and accurately.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the 918kiss2 platform, identify technical issues, and optimise the player experience.
• Marketing Communications: Where you have separately opted in to receive marketing communications, to send you information about 918kiss2 promotions, bonus offers, and new features. You may opt out at any time.

4.Legal Basis for Processing

918kiss2 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 918kiss2 — including account creation, game provision, payment processing, and customer support — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing carried out to comply with KYC, AML, CTF, and other regulatory requirements to which 918kiss2 is subject under its international gaming licence is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, IT system maintenance, and internal analytics is conducted on the basis of 918kiss2's legitimate interests in operating a secure and functional platform, provided those interests are not overridden by your privacy rights.
• Consent: Processing of data for direct marketing communications is conducted on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5.Sharing of Personal Data

918kiss2 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes under any circumstances. Your data may be shared with the following categories of third parties only where necessary and only to the extent required:

• Payment Service Providers: Licensed Malaysian payment processors including PayNet (FPX operator), DuitNow-connected financial institutions, Touch 'n Go eWallet, and Boost — solely for the purpose of processing your deposit and withdrawal transactions.
• Game Content Providers: Licensed online gaming software providers whose games are hosted within the 918kiss2 platform, to the extent that game session data must be transmitted to their servers to facilitate gameplay.
• KYC and Identity Verification Services: Third-party identity verification providers engaged by 918kiss2 to assist with document authentication and liveness checks, subject to confidentiality agreements.
• Regulatory and Law Enforcement Authorities: Where 918kiss2 is required by law, court order, or licensing authority instruction to disclose player data, we will comply with such obligations. We will notify affected players where legally permitted to do so.
• Fraud Prevention and AML Screening Services: Third-party screening services used to check player details against sanctions lists and fraud databases as required by our compliance obligations.

6.Payment Data and Malaysian Banking Privacy

918kiss2 handles payment-related data with particular care, given that financial information is among the most sensitive categories of personal data. The following specific principles apply to payment data processed on the 918kiss2 platform:

• 918kiss2 does not store complete bank account numbers, credit or debit card numbers, or full banking credentials on its own servers. Payment authentication is handled by licensed payment gateways (FPX via PayNet, DuitNow via participating Malaysian banks, and e-wallet processors).
• FPX and DuitNow transaction reference numbers are stored in the 918kiss2 transaction ledger for purposes of reconciliation, dispute resolution, and AML compliance. These references do not enable 918kiss2 to initiate transactions from your bank account.
• Where a Player's bank account or e-wallet is linked to their 918kiss2 account for withdrawal purposes, only the account identifier (e.g., masked account number or registered mobile number) is stored — not the full account credentials.
• Payment data is retained for the period required by applicable Malaysian financial regulations and our international licensing obligations — typically a minimum of five years from the date of the transaction.

7.Cookies and Tracking Technologies

The 918kiss2 platform uses cookies and similar browser-based storage technologies to provide essential platform functionality and to understand how players use the platform. The categories of cookies used on 918kiss2 are:

• Essential Cookies: Required for the platform to function. These include session cookies that maintain your login state while you navigate the 918kiss2 platform, security cookies that prevent cross-site request forgery, and cookies that remember your preferences within a single session. These cookies cannot be disabled without impairing the functionality of the platform.
• Analytics Cookies: Used by 918kiss2's internal analytics system to collect aggregated, anonymised data about how players navigate the platform — which sections are visited most frequently, where users encounter difficulties, and how platform changes affect user behaviour. This data does not identify individual players and is used solely to improve the 918kiss2 platform.
• Functional Cookies: Used to remember your platform preferences between sessions — such as your preferred game category, selected language, or last-used payment method display. These cookies improve convenience but are not essential to platform access.

918kiss2 does not use third-party advertising cookies, retargeting pixels, or social media tracking cookies on the 918kiss2 platform. You can manage cookie preferences through your browser settings, though disabling essential cookies will impair your ability to use the platform.

8.Data Retention

918kiss2 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active 918kiss2 account is retained for the duration of the account's active status.
• Closed Account Data: Following account closure (whether initiated by the player or by 918kiss2), basic account records and transaction history are retained for a minimum of five (5) years to satisfy AML, licensing, and dispute resolution obligations.
• KYC Documents: Identity verification documents are retained for the duration of the account plus five years post-closure, in line with financial compliance requirements.
• Support Interactions: Customer support correspondence is retained for three years from the date of the interaction.
• Marketing Data: Where you have opted in to marketing communications, your contact data for marketing purposes is retained until you opt out or request deletion, whichever is earlier.
• Technical Logs: Server and access logs (IP addresses, session data) are retained for 90 days for security monitoring purposes, after which they are deleted or anonymised.

9.Your Data Rights

As a 918kiss2 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 918kiss2 support team with your registered username and the specific right you wish to exercise. 918kiss2 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of the personal data that 918kiss2 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your 918kiss2 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to AML and licensing retention requirements cannot be deleted prior to the expiry of the applicable retention period.
• Right to Restrict Processing: You may request that 918kiss2 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being considered.
• Right to Object: You may object to the processing of your personal data where that processing is based on 918kiss2's legitimate interests. You also have the right to object at any time to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10.Security Measures

918kiss2 implements a multi-layered approach to data security, reflecting the sensitivity of the financial and identity data we process on behalf of Malaysian players:

• Encryption in Transit: All data transmitted between your device and the 918kiss2 platform is encrypted using TLS 1.2 or higher. The 918kiss2 login page, cashier, and all sensitive sections of the platform operate exclusively over HTTPS.
• Encryption at Rest: Sensitive data fields — including identity document files, hashed passwords, and payment identifiers — are stored in encrypted form in 918kiss2 databases.
• Access Controls: Access to personal data within 918kiss2's internal systems is restricted on a need-to-know basis. Staff members are granted access only to the data necessary for their specific roles, and all access is logged.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication on their 918kiss2 account. Internal 918kiss2 staff access to systems containing player data requires multi-factor authentication.
• Security Monitoring: 918kiss2's systems are monitored continuously for unusual access patterns, potential intrusions, and anomalous data access events. Suspected security incidents are investigated promptly.
• Incident Response: In the event of a confirmed data breach that is likely to result in risk to affected players, 918kiss2 will notify affected players and relevant authorities as required by applicable data protection obligations.

11.Children and Minors

The 918kiss2 platform is strictly intended for adults aged 21 years and above. 918kiss2 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If 918kiss2 becomes aware that a person under 21 has provided personal data or created a 918kiss2 account, the account will be immediately closed, all associated data will be securely deleted, and any deposited funds will be returned to the originating payment method subject to verification.

If you are a parent or guardian and believe that your child may have provided personal information to 918kiss2, please contact us immediately at support@918kiss2.co and we will take prompt action to remove the data and close any associated account.

12.Updates to This Privacy Policy

918kiss2 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, regulatory requirements, or applicable law. When material changes are made to this Policy, 918kiss2 will notify registered players via email to their registered address, or via a prominent notification within the 918kiss2 platform, with reasonable advance notice where practicable.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. The current version of this Privacy Policy is always the version published at https://918kiss2.co/privacy-policy. We encourage you to review this page periodically to stay informed about how 918kiss2 is protecting your personal information.

Your continued use of the 918kiss2 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any revision, you may request account closure via the 918kiss2 customer support team.

13.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 918kiss2 handles your personal data, please contact our support team:

For responsible gaming concerns, please visit our Responsible Gaming page.

For the full terms governing your use of the 918kiss2 platform, please review our Terms & Conditions.