Privacy Policy

Section 01 Introduction

This Privacy Policy ("Policy") is issued by Kissy88 ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at kissy88.cam. This Policy governs the collection, storage, processing, and disclosure of personal data relating to all individuals ("User", "you", "your") who access or use the Platform's services.

Kissy88 is designed primarily for Malaysian players and handles all financial transactions in Malaysian Ringgit (MYR). We interact with Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect — and our data handling practices are constructed to comply with applicable data protection standards relevant to our operations.

By registering an Account on Kissy88 or continuing to use the Platform after the date on which this Policy takes effect, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform immediately.

Section 02 Definitions

The following terms carry the meanings assigned to them below throughout this Policy:

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
"Processing"	Any operation performed on personal data, whether or not by automated means — including collection, storage, use, disclosure, erasure, or destruction.
"Data Controller"	The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, that entity is Kissy88.
"Data Processor"	A third party that processes personal data on behalf of Kissy88 under a contractual obligation and in accordance with this Policy.
"KYC Data"	Identity verification documents and information provided during the Know Your Customer process, including government-issued ID, proof of address, and source-of-funds documentation.
"Cookies"	Small text files placed on your device by the Platform or third-party services to store session information, preferences, and usage data.
"Account"	A registered user profile created by an eligible individual on the Kissy88 Platform.

Section 03 Personal Data We Collect

Kissy88 collects personal data through several channels — directly from you during registration and account management, automatically through your use of the Platform, and from authorised third parties as part of our verification and fraud prevention obligations.

3.1 Data Provided Directly by You

• Registration Data: Full name, date of birth, residential address, email address, and mobile number as provided during account creation.
• KYC Documentation: Malaysian NRIC, passport, or driver's licence; proof of address such as a utility bill or bank statement; source-of-funds documentation where applicable.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records in MYR.
• Support Communications: The content of any messages, emails, or live chat conversations you initiate with our support team.
• Responsible Gambling Preferences: Self-imposed deposit limits, session limits, self-exclusion elections, and any related disclosures you provide voluntarily.

3.2 Data Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages viewed, games accessed, session durations, click paths, betting patterns, and feature interactions within the Platform.
• Geolocation Data: General location data derived from your IP address, used for jurisdictional compliance purposes. We do not collect precise GPS location data.
• Cookie Data: Session cookies, authentication tokens, and preference cookies as described in Section 9.

3.3 Data from Third Parties

• Payment Providers: Transaction confirmation data from Touch 'n Go eWallet, DuitNow, FPX, and other supported payment channels for deposit and withdrawal verification.
• Identity Verification Services: Verification results and fraud risk scores from authorised KYC and anti-money-laundering service providers.
• Fraud Prevention Partners: Risk signals and screening results from third-party fraud detection services engaged to protect Platform integrity.

Section 04 How We Use Your Personal Data

The personal data we hold is used exclusively for the purposes described in this Policy. We do not use your data for undisclosed purposes or in ways that are inconsistent with your reasonable expectations as a Kissy88 user.

Purpose	Data Used	Basis
Account creation and management	Registration data, contact details	Contractual necessity
Identity verification (KYC)	KYC documentation, date of birth	Legal obligation
Processing deposits and withdrawals	Financial data, payment method details	Contractual necessity
Fraud prevention and AML compliance	Transaction data, device data, IP address	Legal obligation / Legitimate interest
Customer support	Account data, support communications	Contractual necessity
Responsible gambling monitoring	Betting patterns, usage data, RG preferences	Legal obligation / Legitimate interest
Platform improvement and analytics	Usage data, device data (anonymised)	Legitimate interest
Legal and regulatory compliance	All categories as required	Legal obligation
Service communications	Email address, mobile number	Contractual necessity / Consent

Section 05 Lawful Basis for Processing

Kissy88 processes personal data only where a valid lawful basis exists. The primary bases we rely on are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between you and Kissy88 — including account management, game access, and payment processing.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, age verification mandates, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for Kissy88's legitimate business interests, including fraud prevention, platform security, and product improvement — provided those interests are not overridden by your data protection rights.
• Consent: For specific processing activities where consent is the appropriate basis — such as optional marketing communications — we will seek your explicit agreement before proceeding. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Section 06 Data Sharing and Disclosure

Kissy88 does not sell your personal data. We may share personal data with third parties only in the following strictly defined circumstances:

• Payment Processors: Data shared with Malaysian payment providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong) solely to the extent necessary to process your deposit and withdrawal instructions.
• Identity Verification Providers: KYC data shared with authorised identity verification and AML screening service providers engaged under contractual data processing agreements.
• Fraud Prevention Services: Transaction and device data shared with fraud detection partners for risk assessment purposes, under strict data processing agreements.
• Legal and Regulatory Authorities: Personal data disclosed to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of Kissy88, its users, or others.
• Business Successors: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity, provided that the acquiring entity agrees to honour the terms of this Policy.

All third-party processors engaged by Kissy88 are bound by contractual obligations requiring them to process personal data only as instructed, to implement appropriate security measures, and to refrain from using the data for their own purposes.

Section 07 Data Retention

Kissy88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. General retention periods are as follows:

• Account and KYC Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with applicable AML and record-keeping regulations.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the transaction date, as required for financial and tax compliance purposes.
• Support Communication Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required by law.
• Usage and Analytics Data: Anonymised or aggregated usage data may be retained indefinitely for statistical and platform improvement purposes. Identifiable usage logs are retained for up to two (2) years.
• Responsible Gambling Records: Self-exclusion records and related correspondence are retained for a minimum of five (5) years to prevent re-registration by excluded individuals.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Section 08 Your Data Rights

Subject to applicable law, you hold the following rights in relation to personal data held by Kissy88. To exercise any of these rights, please contact us using the details in Section 15.

We aim to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you and explain the reason for the extension.

Please note that certain rights may be limited or subject to conditions — for example, we cannot erase data that we are legally obligated to retain, and we cannot provide copies of data in formats we do not technically support.

Section 09 Cookies and Tracking Technologies

Kissy88 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and do not require consent. They include session authentication tokens, security cookies, and load-balancing cookies.
• Functional Cookies: Store your preferences such as language settings, display options, and responsible gambling tool configurations to improve your experience across sessions.
• Analytics Cookies: Collect anonymised or aggregated data about how users interact with the Platform, including pages visited and features used. This data is used to identify usability improvements. No individual user is identified through analytics data.
• Security Cookies: Used for fraud detection, bot prevention, and authentication integrity purposes.

Kissy88 does not use advertising or third-party tracking cookies for cross-site behavioural profiling. You can manage or block cookies through your browser settings, though disabling strictly necessary cookies will impair Platform functionality.

Section 10 Data Security

Kissy88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal data, including KYC documents and financial information.
• Strict role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Incident response procedures to detect, investigate, and respond to personal data breaches within required timeframes.

While we implement industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for promptly notifying us of any suspected unauthorised access to your Account.

Section 11 International Data Transfers

Kissy88 primarily processes personal data within its operating infrastructure. Where personal data is transferred to a third-party service provider located outside Malaysia, such transfers are made only where appropriate safeguards are in place, including contractual clauses that bind the recipient to data protection standards consistent with the principles set out in this Policy.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in locations outside Malaysia where different data protection laws may apply. We take reasonable steps to ensure that such transfers are conducted lawfully and that your data remains protected.

Section 12 Children's Privacy and Age Restriction

Kissy88 is strictly restricted to individuals aged 21 years and above. The Platform does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered Accounts.

If we become aware that we have inadvertently collected personal data from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated Account. If you believe a minor has registered an Account on the Platform, please contact us immediately using the details in Section 15.

Section 13 Third-Party Services and Links

The Platform may operate in conjunction with third-party payment providers (including Touch 'n Go eWallet, Boost, DuitNow, and Malaysian banking institutions) and identity verification services. These third parties operate under their own privacy policies and data protection practices, which are independent of Kissy88's Policy. We encourage you to review the privacy policies of any third-party service providers with whom you interact in connection with your use of Kissy88.

Kissy88 is not responsible for the privacy practices, data handling, or content of third-party services, and this Policy does not apply to them. Our responsibility extends only to data processing conducted directly by Kissy88 or by Data Processors acting under our instruction.

Section 14 Amendments to This Policy

Kissy88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or industry best practices. Material changes will be communicated to registered users via the email address on file or through a prominent notice on the Platform, with reasonable notice provided before changes take effect.

The version number and effective date displayed at the top of this Policy will be updated to reflect each revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any change, you should cease using the Platform and request Account closure.

Section 15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact the Kissy88 data protection team using the following details:

Please note that the email address above is displayed as plain text only and is not a clickable link. When contacting us regarding a data rights request, please provide sufficient information to allow us to verify your identity before we process your request — this is necessary to protect your data from being disclosed to unauthorised parties.