Privacy Policy

This Privacy Policy ("Policy") is issued by ikiss918 ("ikiss918", "we", "us", "our"), the operator of the online gaming platform accessible at ikiss918.cam and its associated subdomains and mobile interfaces (the "Platform"). This Policy describes our practices regarding the collection, use, storage, protection, sharing, and eventual deletion of personal data belonging to individuals ("Users", "Players", "you") who access or use the Platform.

ikiss918 is committed to maintaining the highest standards of data privacy and information security. All personal data processed by ikiss918 is handled in accordance with applicable data protection principles, including the Malaysian Personal Data Protection Act 2010 (PDPA) and such other applicable laws as govern our operations.

By registering an Account on the Platform, making a deposit, placing a wager, or otherwise interacting with ikiss918's services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, and any other form of handling.
• "Data Controller" means ikiss918, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of and under the instruction of ikiss918.
• "Sensitive Personal Data" means a subset of Personal Data that is subject to heightened protection, including financial account details, identity document numbers, and data relating to health or physical condition.
• "KYC Data" means identity and address verification documentation collected pursuant to Know Your Customer obligations, including copies of government-issued identification documents and proof of address.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "PDPA" means the Malaysian Personal Data Protection Act 2010, as amended or supplemented from time to time.

ikiss918 collects the following categories of Personal Data from Users of the Platform:

ikiss918 collects Personal Data through the following channels:

• Direct Submission: Data you voluntarily provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional opt-ins.
• Automated Collection: Technical Data collected automatically when you access the Platform, including via cookies, web beacons, session tracking scripts, and server logs.
• Payment Processors: Transaction confirmation data received from our integrated Malaysian payment providers — including DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, Public Bank Online, and Hong Leong Connect — when you initiate a deposit or withdrawal.
• Identity Verification Providers: Data returned by third-party KYC and document verification services engaged by ikiss918 to authenticate identity documents and confirm liveness.
• Fraud Prevention & AML Partners: Screening results and risk signals received from anti-fraud and anti-money laundering screening services with which ikiss918 works to protect the integrity of the Platform.
• Device and Browser Signals: Device fingerprint data, geolocation signals (where permitted), and behavioural analytics collected passively during Platform interaction to detect suspicious activity and improve user experience.

ikiss918 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to open your Account, execute transactions, deliver gaming services, and otherwise perform our obligations under the Terms & Conditions you have accepted.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, anti-money laundering requirements, and responsible gambling mandates.
• Legitimate Interests: Processing carried out in pursuit of ikiss918's legitimate business interests, including fraud detection and prevention, platform security, business analytics, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly in relation to direct marketing communications and non-essential cookies. You may withdraw consent at any time by contacting our support team or updating your account settings, without affecting the lawfulness of prior processing.

Personal Data collected by ikiss918 is used for the following purposes:

• Registering and administering your Account, including verifying your identity and age (21+ requirement) in accordance with our Terms & Conditions;
• Processing deposits and withdrawals through your chosen Malaysian Ringgit (MYR) payment methods;
• Delivering and improving the gaming products and services available on the Platform, including live casino, sports betting, slots, and other content;
• Monitoring gaming activity to identify and act on responsible gambling indicators, applying deposit limits, session warnings, or self-exclusion where appropriate;
• Fulfilling our anti-money laundering (AML) and counter-terrorist financing (CTF) compliance obligations, including transaction screening and suspicious activity reporting;
• Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and other prohibited conduct as defined in our Terms & Conditions;
• Responding to your customer support queries, resolving complaints, and maintaining records of all interactions for quality assurance purposes;
• Sending you transactional communications — including account confirmations, payment receipts, security alerts, and policy update notifications — which are essential to the operation of your Account;
• Sending you promotional communications about bonuses, offers, and new Platform features, where you have provided consent to receive such communications;
• Conducting internal business analytics to understand Platform usage patterns and inform product development decisions;
• Complying with any lawful request, court order, or regulatory direction from a competent authority.

ikiss918 does not disclose your Personal Data to third parties except in the circumstances described below. All third-party Data Processors engaged by ikiss918 are contractually bound to process your data solely under our instruction and in accordance with applicable data protection law.

• Payment Service Providers: We share necessary transaction data with our integrated Malaysian payment processors (including DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, Public Bank Online, and Hong Leong Connect) to facilitate deposits and withdrawals. Each provider operates under its own privacy terms for data it independently holds.
• Identity Verification & KYC Providers: We engage third-party identity verification services to authenticate documents and confirm user identity. These providers process only the data strictly necessary for verification purposes.
• Fraud Prevention & AML Services: We share relevant data with anti-fraud screening and financial intelligence service providers to detect money laundering, account takeovers, and other unlawful activity.
• Platform & Infrastructure Providers: We engage cloud hosting, content delivery, database, and security service providers who process technical data necessary to operate the Platform. All such providers are bound by data processing agreements.
• Regulatory & Law Enforcement Authorities: We disclose Personal Data to competent authorities where required by law, court order, or regulatory direction — including in the context of AML suspicious transaction reporting. We will notify you of such disclosure where we are legally permitted to do so.
• Professional Advisers: We may share limited Personal Data with legal counsel, auditors, and compliance advisers under strict confidentiality obligations where necessary to obtain professional advice.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ikiss918's business, Personal Data held by ikiss918 may be transferred as part of that transaction. You will be notified of any such transfer and any material change to this Policy that may result.

The ikiss918 Platform uses cookies and similar tracking technologies to operate core platform functions, enhance your user experience, and support our security and analytics operations. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain authentication state, protect against cross-site request forgery (CSRF), and enable secure communication between your browser and our servers. These cookies cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings and responsible gambling tool configurations — so that you do not need to reset them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how users interact with the Platform, including pages visited, session duration, and navigation paths. This data informs our product development and helps us identify and resolve usability issues.
• Security & Fraud Detection Cookies: These cookies assist in identifying unusual activity patterns that may indicate fraudulent access attempts, account takeovers, or bot traffic.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the Platform. ikiss918 does not use third-party advertising or behavioural retargeting cookies that track you across external websites.

ikiss918 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following general retention periods apply:

• Account Data and Transaction Records: Retained for a minimum of five (5) years following Account closure or the date of the last transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory direction.
• Gaming Activity Logs: Retained for five (5) years to support dispute resolution, responsible gambling monitoring, and regulatory audit requirements.
• Customer Support Records: Retained for three (3) years from the date of each interaction, unless the matter involves an ongoing complaint or legal dispute, in which case records are retained until final resolution.
• Marketing Preferences: Retained until you withdraw consent or request removal, or for three (3) years of inactivity, whichever occurs sooner.
• Technical and Security Logs: Retained for twelve (12) months on a rolling basis, except where a specific security incident requires extended retention for investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an individual.

ikiss918 implements a layered, enterprise-grade information security framework to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your browser or mobile device and our servers is protected by TLS 1.2 or higher (256-bit SSL encryption), ensuring that your session data, login credentials, and financial transactions are shielded from interception.
• Encryption at Rest: Sensitive Personal Data — including financial data and KYC documents — is encrypted at rest using AES-256 encryption in our secure storage infrastructure.
• Access Controls: Access to Personal Data within ikiss918's systems is governed by strict role-based access controls. Staff are granted access only to the data strictly necessary for the performance of their specific functions. All access is logged and audited.
• Segregated Fund Storage: Player funds are held in accounts segregated from ikiss918's operational accounts. Financial data held by payment processors is governed by the security standards of each respective processor.
• Security Monitoring: Our infrastructure is monitored around the clock for anomalous activity, intrusion attempts, and data exfiltration signals by dedicated security operations personnel.
• Incident Response: ikiss918 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and relevant authorities within the timeframes required by applicable law.

While ikiss918 takes all reasonable and practicable steps to protect your data, no system connected to the internet can be guaranteed entirely immune from external attack. You play an important role in protecting your own data by keeping your login credentials confidential and notifying us immediately of any suspected unauthorised account activity.

Subject to applicable law, including the Malaysian Personal Data Protection Act 2010 (PDPA), you hold the following rights in respect of your Personal Data held by ikiss918:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how it is being processed.
• Right to Correction: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. For certain data fields (such as name and date of birth), correction may require submission of supporting documentary evidence.
• Right to Withdraw Consent: Where Processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of Processing carried out prior to the withdrawal.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the Processing of your Personal Data — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where technically feasible and permitted by law, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where Processing was unlawful. Note that we may be required by law to retain certain data (such as KYC and transaction records) for defined periods notwithstanding a deletion request.
• Right to Object: You have the right to object to Processing of your Personal Data carried out on the basis of our legitimate interests, including direct marketing. Upon receipt of a valid objection to direct marketing, ikiss918 will cease that Processing immediately.

To exercise any of the above rights, please contact our support team via live chat or by email at [email protected]. We will respond to all verified requests within thirty (30) calendar days. We may require proof of identity before actioning a request to protect against unauthorised data access.

The ikiss918 Platform is strictly intended for adults aged twenty-one (21) years and above. ikiss918 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification controls are applied at the point of registration and during KYC review to prevent access by minors.

If ikiss918 becomes aware that Personal Data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data, close the associated Account, and return any deposited funds where practically possible. If you have reason to believe that a person under the age of 21 has created an Account on the Platform, please contact our support team immediately so that we can act without delay.

The Platform may contain integrations with, or references to, third-party service providers — including payment gateways, identity verification services, and gaming content providers. Each of these third parties operates under its own privacy policy and data handling practices, for which ikiss918 accepts no responsibility.

When you interact with a third-party service integrated within the Platform — for example, by completing a payment transaction through Maybank2u, DuitNow, or Touch 'n Go eWallet — that third party may collect and process Personal Data in accordance with its own terms and privacy policy. ikiss918 recommends that you review the privacy notices of all third-party services you interact with directly.

ikiss918 does not embed third-party social media widgets, advertising networks, or cross-site tracking scripts that would allow third parties to build behavioural profiles based on your activity on the Platform.

ikiss918 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable law. Where amendments are material, we will notify registered Players by email and/or by a prominent notice on the Platform no less than fourteen (14) days prior to the amended Policy taking effect.

The current version of this Policy, together with its effective date, is always available at ikiss918.cam/privacy-policy. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, please cease use of the Platform and contact us to close your Account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by ikiss918, please contact our Data Privacy team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface. Ideal for general privacy queries and account data requests.
• Email: [email protected] — please include "Privacy Request" in your subject line to ensure prompt routing to our data privacy team. Average response time within 2 business hours.

All formal data subject requests (access, correction, deletion, portability) must be submitted in writing via email to create a complete and auditable record. ikiss918 will acknowledge all written requests within 24 hours and will provide a substantive response within 30 calendar days. Proof of identity may be requested before actioning any request that involves the disclosure or deletion of Personal Data.