Privacy Policy

kisy918 collects personal data necessary for the operation of the Platform, delivery of our services, compliance with legal obligations, and improvement of user experience. The categories of personal data we collect are detailed in the table below:

kisy918 collects personal data through the following channels and mechanisms:

kisy918 processes your personal data only for the purposes described below. We do not use your data for any purpose incompatible with the purpose for which it was originally collected without your explicit consent.

• Account Management: Creating, maintaining, and securing your kisy918 account, including password management and session authentication.
• Service Delivery: Processing deposits and withdrawals, settling bets, crediting bonuses, and providing access to games and betting markets.
• Identity & Age Verification: Conducting KYC procedures to confirm you are aged 21 or above and are the person you claim to be, in compliance with licensing and anti-money laundering obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct outlined in our Terms and Conditions.
• Regulatory Compliance: Meeting obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and licensing regulations, including record-keeping requirements.
• Customer Support: Responding to your queries, complaints, and requests through live chat and email channels.
• Responsible Gambling: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, and applying self-exclusion, deposit limits, or account restrictions where appropriate.
• Marketing Communications: Sending you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to improve the kisy918 user experience, game selection, and feature development.
• Legal Claims: Establishing, exercising, or defending legal claims where required.

kisy918 processes personal data one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted upon registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and licensing requirements, including KYC, AML, and CTF obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and responsible gambling monitoring — where our legitimate operational interests are balanced against your privacy rights.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time without prejudice to prior processing.

kisy918 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

As an internationally licensed online gaming platform, kisy918 may process or transfer personal data to servers or service providers located outside Malaysia. Where such international transfers occur, kisy918 takes reasonable steps to ensure that recipient parties provide an adequate level of protection for personal data consistent with the protections afforded under applicable data protection legislation.

Safeguards applied to international data transfers may include contractual clauses, data processing agreements, or reliance on the adequacy of the recipient jurisdiction's data protection framework, as appropriate.

kisy918 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with kisy918, plus a minimum of five (5) years following account closure, in compliance with AML and licensing record-keeping requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal history MYR, are retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Identity and verification documents are retained for the duration of your account and for a minimum of five (5) years post-closure, as required under applicable compliance obligations.
• Communication Records: Support correspondence and chat transcripts are retained for up to three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or legal matter.
• Marketing Data: Where you have consented to marketing communications, we retain your preferences and contact data until you withdraw consent or request deletion, unless retention is required for other compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified individual.

kisy918 uses cookies and similar tracking technologies to operate the Platform, maintain user sessions, and analyse usage patterns. The following categories of cookies are used:

Subject to applicable law and the limitations described below, you have the following rights in relation to your personal data held by kisy918:

To exercise any of the above rights, please contact the kisy918 data team via live chat or email at [email protected]. We will respond to all valid requests within thirty (30) calendar days. We may request identity verification before processing your request to prevent unauthorised access to your data.

kisy918 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including stored payment references and identity documents;
• PCI-DSS compliant payment processing through certified payment service providers;
• Multi-factor authentication options for account access;
• Role-based access controls restricting personal data access to authorised personnel on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures for detecting, containing, and reporting data breaches;
• Staff training on data protection and information security obligations.

While kisy918 takes all reasonable precautions to safeguard your data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights or interests, kisy918 will notify affected users as required by applicable law.

kisy918 is an adult platform strictly accessible to individuals aged 21 and above. We do not knowingly collect, process, or retain personal data from any under the age of 21. Where kisy918 becomes aware that personal data has been collected from an underage individual, that account will be immediately suspended, the data will be deleted, and any deposits will be returned to the originating payment method where practicable.

Parents and guardians who believe a minor may have accessed the kisy918 Platform or provided personal data without authorisation are encouraged to contact us immediately via live chat or at [email protected] so that appropriate action can be taken promptly.

The kisy918 Platform may reference third-party payment services or game providers in the course of delivering our services. These third parties operate independently and maintain their own privacy policies. kisy918 is not responsible for the privacy practices, content, or data collection activities of third-party platforms or services.

We encourage you to review the privacy policies of any third-party services you interact with through or in connection with kisy918, including payment processors such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX.

kisy918 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform operations. When material changes are made to this Policy, we will use reasonable efforts to notify registered users via email or an in-platform notification prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the kisy918 Platform following the publication of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kisy918, please contact us through the following channels:

kisy918 serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — and our team is committed to handling all privacy enquiries professionally, fairly, and in a timely manner.