kiss917 Privacy Policy

Introduction

kiss917 ("we", "us", "our", "kiss917") is committed to protecting the privacy and personal data of all individuals who access, register on, or otherwise interact with our online gaming and sports betting platform at https://kiss917.cam ("Platform"). This Privacy Policy ("Policy") is issued in accordance with applicable data protection legislation and explains how we collect, process, store, share, and protect your personal information.

This Policy applies to all personal data collected from players registered on the kiss917 Platform, visitors to our website, individuals who contact our customer support services, and any other person whose personal data we process in the course of our operations. It applies regardless of the device or browser you use to access the Platform.

By accessing the kiss917 Platform, completing the registration process, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not access or use the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, location data, or online identifiers.
• "Data Controller" — kiss917, being the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third-party service provider that processes personal data on behalf of kiss917, pursuant to a written data processing agreement.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a specified purpose.
• "Player" — any registered user of the kiss917 Platform who has completed the account registration process and provided the required personal information.
• "KYC" — Know Your Customer procedures undertaken to verify the identity, age, and payment method ownership of Players prior to the processing of withdrawal requests.
• "Cookies" — small data files placed on your device by the kiss917 Platform for the purpose of session management, analytics, and user experience optimisation.

Personal Data We Collect

kiss917 collects personal data that is necessary and proportionate for the operation of our Platform, the delivery of gaming services, and the fulfilment of our legal and regulatory obligations. The categories of personal data we collect are described below.

kiss917 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. We do not collect racial or ethnic origin data, political opinions, religious beliefs, health data (except where voluntarily disclosed in the context of responsible gambling support requests), or biometric data.

How We Collect Your Data

kiss917 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Data provided directly by you during account registration, KYC verification, deposit and withdrawal processes, customer support interactions, and any voluntary correspondence or feedback submissions. This includes information entered into our Platform forms and submitted documentation.

4.2 Automated Collection

Data collected automatically when you access or interact with the kiss917 Platform, including technical data gathered via cookies, log files, and session tracking tools. This data is collected regardless of whether you are a registered Player or an anonymous visitor.

4.3 Third-Party Sources

In limited circumstances, kiss917 may receive personal data from third-party sources including:

• Payment processors and financial institutions (including providers of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong) for the purpose of verifying and processing transactions
• Identity verification service providers engaged to conduct KYC checks
• Fraud detection and anti-money laundering screening services
• Regulatory authorities where information sharing is legally required

How We Use Your Personal Data

kiss917 processes personal data solely for the following specified, legitimate, and clearly defined purposes:

5.1 Account Management and Service Delivery

To create and maintain your kiss917 Account, authenticate your identity upon login, process deposits and withdrawals in MYR, deliver gaming services, manage bonuses and promotional offers, and provide customer support services. This processing is fundamental to our contractual obligations to you as a registered Player.

5.2 Identity Verification and Regulatory Compliance

To conduct KYC verification, verify your age (minimum 21 years), authenticate ownership of your registered payment methods, and comply with anti-money laundering (AML) obligations and applicable gaming regulations. This processing is required by law and cannot be waived.

5.3 Security, Fraud Prevention, and Risk Management

To monitor Platform activity for fraudulent, abusive, or unlawful behaviour, investigate suspicious transactions, enforce our Terms and Conditions, and protect the security and integrity of the kiss917 Platform and all Player accounts. This processing serves our legitimate interests in maintaining a safe and fair gaming environment.

5.4 Responsible Gambling Monitoring

To monitor gaming patterns that may indicate problematic gambling behaviour, to enforce responsible gambling tools activated by Players (including deposit limits, session limits, and self-exclusion), and to fulfil our obligations as a licensed gaming operator in relation to player protection. This processing is both a contractual commitment and a regulatory requirement.

5.5 Platform Improvement and Analytics

To analyse usage patterns, diagnose technical issues, improve the performance and user experience of the Platform, and develop new features and services. This processing is based on our legitimate interests in operating a high-quality and competitive gaming platform.

5.6 Communications and Marketing

To send you transactional notifications (deposits, withdrawals, security alerts), service updates, and promotional communications where you have provided express consent. You may opt out of marketing communications at any time by contacting our support team. Opting out of marketing will not affect the delivery of essential transactional communications.

Legal Basis for Processing

kiss917 processes personal data on the basis of one or more of the following lawful grounds:

• Contractual Necessity: Processing is necessary for the performance of our contract with you as a registered Player, including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required by applicable law, including but not limited to anti-money laundering regulations, gaming licensing requirements, and financial reporting obligations.
• Legitimate Interests: Processing is necessary for the purposes of our legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above grounds, we will seek and rely upon your freely given, informed, and specific consent. You retain the right to withdraw consent at any time.

Data Sharing and Disclosure

kiss917 does not sell, rent, or otherwise commercially transfer your personal data to unaffiliated third parties. We may share personal data in the following limited and controlled circumstances:

7.1 Service Providers and Data Processors

kiss917 engages carefully selected third-party service providers who process personal data on our behalf and under our instruction, pursuant to binding data processing agreements. These providers include payment processors (including Malaysian e-wallet and banking partners), identity verification services, fraud detection platforms, customer support software providers, and cloud hosting infrastructure providers.

7.2 Regulatory and Law Enforcement Authorities

kiss917 may disclose personal data to relevant governmental authorities, regulatory bodies, law enforcement agencies, or other official bodies where we are legally obligated to do so, where disclosure is necessary to protect the rights, property, or safety of kiss917, our Players, or the public, or where required under anti-money laundering or gaming licensing obligations.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of kiss917's assets, personal data held by kiss917 may be transferred to the acquiring or successor entity. Any such transfer will be subject to the same data protection commitments set out in this Privacy Policy, and affected Players will be notified where required by applicable law.

Data Retention

kiss917 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following retention periods apply as general guidance:

• Account and Transaction Data: Retained for a minimum of five (5) years from the date of the last transaction or account closure, in accordance with anti-money laundering and gaming regulatory requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant KYC process, in compliance with applicable financial regulations.
• Customer Support Records: Retained for three (3) years from the date of the relevant interaction, subject to longer retention where a dispute remains unresolved.
• Technical and Usage Data: Retained for up to twenty-four (24) months for security and analytics purposes, after which it is aggregated or anonymised.
• Marketing Consent Records: Retained until consent is withdrawn plus an additional twelve (12) months to evidence the withdrawal of consent and prevent inadvertent re-engagement.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with kiss917's data disposal protocols.

Security Measures

kiss917 implements a comprehensive and layered approach to data security, combining technical, organisational, and procedural safeguards designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

9.1 Technical Safeguards

All data transmitted between your device and the kiss917 Platform is encrypted using 256-bit SSL (Secure Sockets Layer) encryption. Player account access is protected by password hashing, optional two-factor authentication (2FA), and session expiry controls. Sensitive financial data is tokenised and never stored in plaintext.

9.2 Infrastructure Security

The kiss917 Platform is hosted on secure, access-controlled infrastructure with firewall protection, intrusion detection systems, and regular vulnerability scanning. System access is restricted to authorised personnel only, and all access is logged and monitored.

9.3 Organisational Controls

kiss917 applies a strict need-to-know access policy to personal data. Staff with access to personal data are subject to confidentiality obligations and receive regular training on data protection responsibilities. Third-party service providers are subject to contractual data protection requirements and periodic security assessments.

Cookies & Tracking Technologies

kiss917 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your login session, remember your preferences, and collect analytics data that helps us improve the Platform experience.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential to the basic functioning of the Platform, including maintaining your authenticated session and enabling core features. These cookies cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies: Used to remember your preferences (such as language settings) and to provide enhanced functionality and personalisation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform, enabling us to measure performance and identify areas for improvement. No personally identifiable information is shared with analytics partners.
• Security Cookies: Used to detect and prevent fraudulent activity, protect Player accounts, and maintain the integrity of our security systems.

10.2 Cookie Management

You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the performance and functionality of the kiss917 Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to function.

10.3 Do Not Track

Some browsers may send "Do Not Track" signals. kiss917 does not currently respond to "Do Not Track" browser signals in a standardised way, as no universally accepted standard for handling these signals exists. Our standard cookie and tracking practices apply regardless of these signals.

Your Data Rights

Subject to applicable law and regulatory limitations, Players and visitors whose personal data is processed by kiss917 have the following rights in relation to that data. To exercise any of these rights, please contact us at the details provided in Section 15.

• Right of Access: You may request a copy of the personal data kiss917 holds about you, along with information about how that data is processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances, subject to our legal and regulatory retention obligations.
• Right to Restriction: You may request that kiss917 restricts its processing of your personal data in defined circumstances (e.g., while the accuracy of data is contested).
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where processing is based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe your data rights have been violated.

kiss917 will respond to all verified data rights requests within a reasonable period, generally within 30 calendar days. In complex cases or where requests are numerous, we may extend the response period and will notify you accordingly.

Protection of Minors

The kiss917 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification forms a mandatory part of our KYC process, and any account found to belong to an individual under 21 years of age will be immediately terminated.

If you believe that we have inadvertently collected personal data from a person under 21 years of age, please contact our support team immediately at [email protected]. Upon confirmation, we will take prompt steps to delete the relevant data and close the associated account.

Cross-Border Data Transfers

The kiss917 Platform is operated primarily to serve players in Malaysia. However, certain technical infrastructure components, third-party service providers, and regulatory processes may involve the transfer or processing of personal data in jurisdictions outside Malaysia.

Where personal data is transferred internationally, kiss917 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding the protections required under applicable Malaysian data protection law. These safeguards include contractual data protection clauses with receiving parties and assessments of the adequacy of data protection regimes in the receiving jurisdiction.

By using the kiss917 Platform and providing your personal data, you acknowledge and consent to the transfer of your data as described in this section, subject always to the protections set out in this Privacy Policy.

Amendments to This Policy

kiss917 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or operational circumstances. The updated Policy will be published on this page with a revised "Last Reviewed" date.

Where amendments are material — meaning they affect the nature or scope of data processing in a way that is significant to Players — kiss917 will provide advance notice via email or an in-platform notification at least fourteen (14) days prior to the changes taking effect, where reasonably practicable.

Your continued use of the kiss917 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of and agreement to the updated Policy. We encourage you to review this page periodically to stay informed of how your personal data is being handled.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kiss917, please contact our Data Protection team using the following details:

For formal complaints regarding the handling of your personal data, you are also entitled to contact the relevant data protection authority in your jurisdiction. kiss917 will cooperate fully with any such authority in the investigation and resolution of complaints.