kiss9 Privacy Policy

1. Introduction

kiss9 ("kiss9," "we," "us," "our") operates the online gaming platform accessible at https://kiss9.net and any associated subdomains or mobile interfaces (the "Platform"). This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, and disclosure of personal data relating to individuals who register accounts, visit, or otherwise interact with the Platform ("Users," "you").

This Policy forms part of the overall agreement between you and kiss9, alongside the Terms & Conditions and the Responsible Gaming Policy. By using the Platform, you acknowledge that you have read and understood this Policy and consent to our data practices as described herein.

We encourage you to read this Policy in full. If you have questions about any aspect of our privacy practices, you can reach our support team via live chat or at the contact details provided in Section 14.

2. Data Controller

For the purposes of applicable data protection law, kiss9 acts as the data controller in respect of personal data collected through the Platform. As data controller, kiss9 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an account, use the Platform, or contact our support team, you may provide the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and copies of government-issued identity documents submitted for KYC verification.
• Contact Data: Email address and, where provided, phone number.
• Financial Data: Payment method details sufficient to process deposits and withdrawals (e.g., Touch n Go eWallet account reference, bank account details for Maybank, CIMB, or Public Bank transfers, Boost account reference). Full payment credentials are processed by our payment providers and are not stored in plain text by kiss9.
• Account Data: Username, encrypted password, account preferences, and responsible gaming settings.
• Communications Data: Content of support conversations, feedback, and correspondence with kiss9.

3.2 Data Collected Automatically

When you access or use the Platform, kiss9 automatically collects the following technical and usage data:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, games played, wagers placed, session duration, click paths, and feature interactions within the Platform.
• Transaction Data: Records of all deposits, withdrawals, wagers, bonus credits, and account balance changes.
• Location Data: Approximate geographic location derived from IP address, used for compliance and fraud prevention purposes.

3.3 Data from Third Parties

kiss9 may receive personal data about you from third-party identity verification providers, payment processors, fraud detection services, and game technology providers in the course of operating the Platform. Such data is processed in accordance with this Policy.

4. How We Use Your Personal Data

kiss9 uses personal data collected through the Platform for the following purposes:

• To create and manage your kiss9 account, including verifying your identity and age in accordance with our 21+ requirement;
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your selected payment methods;
• To operate, maintain, and improve the Platform and its features;
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct;
• To enforce our Terms & Conditions and applicable law;
• To provide customer support and respond to your enquiries;
• To send you service-related communications, including account notifications, security alerts, and updates to our policies;
• To administer promotions, bonuses, and loyalty programmes where you have opted in;
• To conduct analytics and understand how the Platform is used, so that we can improve the user experience;
• To comply with applicable legal obligations, including anti-money laundering requirements and regulatory reporting.

5. Legal Basis for Processing

kiss9 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations to you under the Terms & Conditions — including account management, payment processing, and game provision.
• Legitimate Interests: Processing carried out in the legitimate interests of kiss9 or third parties, including fraud prevention, platform security, and analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations and age verification requirements.
• Consent: Processing based on your freely given, specific, and informed consent — principally in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

kiss9 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• Payment Processors: Touch n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank) and related payment technology providers, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services engaged by kiss9 to verify the identity and age of Players.
• Game Technology Providers: Licensed game suppliers whose titles are hosted on the Platform, to the extent necessary for game functionality and audit purposes.
• Fraud Prevention & Security Services: Third-party providers engaged to detect and prevent fraudulent activity and protect Platform security.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, kiss9 may disclose personal data to competent authorities.
• Professional Advisers: Legal, accounting, and auditing professionals where necessary in the course of their professional engagement with kiss9, subject to appropriate confidentiality obligations.

All third-party service providers engaged by kiss9 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with kiss9's instructions and applicable data protection law.

7. Cookies & Tracking Technologies

kiss9 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, authentication, and security. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to understand how Users interact with the Platform, which pages are visited most frequently, and where technical issues arise. This data is aggregated and does not identify individual Users.
• Preference Cookies: Used to remember your settings and preferences across sessions, such as language selection and responsible gaming configurations.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the Platform but may affect certain features and personalisation. kiss9 does not use third-party advertising cookies or sell browsing data to advertising networks.

8. Data Retention

kiss9 retains personal data for the following periods, unless a longer retention period is required by applicable law or regulatory obligation:

• Active Account Data: Retained for the duration of your account being active on the Platform.
• Transaction & Wagering Records: Retained for a minimum of five (5) years following the relevant transaction or wager, in accordance with standard anti-money laundering record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Support Communications: Retained for three (3) years following the date of the communication.
• Technical Logs: Retained for up to twelve (12) months, subject to security and fraud investigation requirements.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

9. International Data Transfers

kiss9 operates infrastructure and engages service providers in various jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside of Malaysia. Where such transfers occur, kiss9 takes steps to ensure that appropriate safeguards are in place to protect your personal data, including through the use of standard contractual clauses or equivalent contractual protections with recipient organisations.

By using the Platform and providing personal data to kiss9, you acknowledge that your data may be transferred internationally in accordance with this Policy.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by kiss9:

To exercise any of these rights, please contact kiss9 via live chat or at [email protected]. Requests will be acknowledged within five (5) business days and responded to within thirty (30) days, subject to verification of your identity.

11. Children & Minors

The kiss9 Platform is strictly intended for individuals aged 21 years and above. kiss9 does not knowingly collect or process personal data from individuals under the age of 21. If kiss9 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account will be permanently closed.

If you believe that a minor has registered on the Platform or provided personal data to kiss9, please contact our support team immediately so that appropriate action can be taken.

12. Security Measures

kiss9 implements the following technical and organisational measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kiss9's servers;
• Encrypted storage of passwords and sensitive credentials using industry-standard hashing algorithms;
• Access controls ensuring that personal data is accessible only to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Intrusion detection systems and real-time monitoring of suspicious access patterns;
• Two-factor authentication (2FA) available to all Players, strongly recommended for enhanced account security.

While kiss9 takes reasonable and industry-standard precautions to protect your data, no system is entirely immune to security threats. You should also take steps to protect your own account security, including using a strong password and enabling 2FA.

13. Updates to This Policy

kiss9 reserves the right to update or amend this Privacy Policy at any time. The current version will always be published at https://kiss9.net/privacy-policy with the effective date indicated at the top of the page.

Where changes to this Policy are material — for example, where we introduce a new purpose for processing your data or a new category of third-party recipient — we will notify registered users by email or through a prominent in-Platform notice prior to the changes taking effect. Your continued use of the Platform following notification of material changes constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how kiss9 handles your personal data.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or kiss9's data protection practices, please contact us through the following channel:

If you are not satisfied with kiss9's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.