At kiss98, your privacy is not just a legal obligation — it is a core value we uphold. This document clearly explains how we collect, use, store, and protect your personal data at all times.
Six core principles guiding how kiss98 manages your personal data
We clearly inform you of what data is collected, for what purpose, and how long it is retained — nothing is hidden from you.
Your data is protected with end-to-end encryption, strict access controls, and continuous monitoring to prevent any unauthorised access.
We only collect data that is genuinely necessary to provide our services to you — nothing more, nothing less.
You have the right to access, correct, download, or delete your personal data at any time by contacting us.
Kiss98 has never and will never sell, rent, or trade your personal data to any third party for marketing purposes.
The kiss98 privacy policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.
When you register an account at kiss98, we collect the information you provide directly. This includes your full name as per your ID, mobile number, active email address, date of birth, and the bank account or e-wallet details you use for transactions. All this information is required to process payments, verify your identity, and ensure our platform runs smoothly for you.
When you use the kiss98 platform — whether via the website or mobile app — our systems automatically record certain technical information. This includes your device's IP address, browser type and operating system, pages visited within the platform, session time and duration, as well as gaming and betting activity data. This information is used solely for security, service improvement, and internal analytics purposes.
As a responsible platform, kiss98 carries out a KYC (Know Your Customer) process to verify the identity of our members. During this process, you may be asked to submit a copy of your national ID or passport, a selfie for facial verification, and proof of address such as a utility bill or recent bank statement. All documents are handled with the utmost care and used solely for verification purposes.
| Data Type | Purpose of Collection | Retention Period |
|---|---|---|
| Name & Personal Information | Account registration, identity verification | Throughout active account + 7 years |
| Payment Details | Deposit & Withdrawal Processing | Throughout active account + 7 years |
| Technical Data (IP, Browser) | Security & Fraud Prevention | 12 months |
| Game Records | Game integrity & dispute resolution | 3 years |
| KYC Documents | AML/KYC Legal Compliance | 5 years after account closure |
Kiss98 uses collected personal data for specific and legitimate purposes only. We do not use your data for any purpose other than those stated below:
In operating the platform, kiss98 works with a number of trusted third-party service providers. These include payment gateway providers for processing financial transactions, identity verification (KYC) service providers, customer support platforms, and technology infrastructure providers. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
Kiss98 may be required to disclose your personal data to relevant authorities when mandated by law, court order, or direction from a regulatory body. This includes cases involving financial crime investigations, money laundering, or other illegal activities. In such situations, we will notify you where permitted by law.
We firmly state that kiss98 never sell, rent, exchange, or disclose your personal data to advertisers, data brokers, or any other third party for marketing or commercial purposes. Your data belongs to you, and we respect that.
The security of your personal data is kiss98's top priority. We implement multiple layers of technical and organizational protection to keep your data safe at all times:
Cookies are small text files stored on your device when you visit our website. They help us remember your preferences, maintain your login session, and understand how you use our platform so we can deliver a better experience.
You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. For instructions on managing cookies in your specific browser, please refer to your browser's documentation.
Kiss98 retains your personal data for as long as your account is active and for the required period thereafter, depending on the type of data and legal obligations. Generally, financial data and KYC records are retained for at least seven years after account closure to comply with anti-money laundering (AML) legal requirements in Malaysia.
Once the retention period expires and no legal obligation requires continued storage, your data will be securely deleted or anonymised so that you can no longer be identified from it.
If you request account closure, we will process your request within a reasonable timeframe. However, certain data may need to be retained for a period required by law even after the account is closed.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by kiss98:
You have the right to request a copy of the personal data we hold about you at any time.
You may request that we correct any personal data that is inaccurate or incomplete.
You may request the deletion of your personal data, subject to applicable legal obligations.
You may object to the processing of your personal data for direct marketing purposes at any time.
You may request your data in a machine-readable format for transfer to another platform.
You may withdraw consent to data processing at any time without affecting the validity of prior processing.
To exercise any of the above rights, please contact our Privacy Officer via email at [email protected] or via 24/7 live chat on the platform. We will process your request within 30 business days.
The kiss98 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18. Should we discover that a minor's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.
If you believe a minor has registered an account on our platform, please contact us immediately at [email protected] so that we can take the appropriate action.
Kiss98 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technology we use. Any material changes will be communicated to you via in-platform notification or email at least 14 days before they take effect.
We encourage you to review this page regularly to stay informed about how we protect your information. The "Updated" date at the top of this page will always reflect the latest version of our Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:
The concrete steps we take every day to protect your privacy
Every transaction and data transfer on kiss98 is protected with 256-bit SSL encryption — the same standard used by major banks in Malaysia.
Your data is stored in enterprise-grade data centres with strict physical and digital access controls, monitored around the clock without interruption.
Kiss98 has a dedicated Data Protection Officer (DPO) to ensure all data handling practices comply with Malaysia's PDPA.
We conduct regular security audits and privacy risk assessments involving independent third-party experts to ensure the highest standards are maintained.
A clear security incident response procedure ensures you will be notified within 72 hours should any incident involving your data occur.
All our data handling practices are fully compliant with Malaysia's Personal Data Protection Act 2010 and relevant international standards.