m918kiss – Privacy Policy

01 Introduction

m918kiss ("we", "us", "our") is committed to protecting the personal data of every individual who interacts with our platform — whether as a registered member, a website visitor, or a prospective player. This Privacy Policy describes in detail how we collect, use, store, process, and protect your personal information in connection with the m918kiss online casino and sportsbook platform.

By accessing the m918kiss website or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy is to be read alongside the m918kiss Terms & Conditions and Responsible Gaming Policy.

We take our obligations under applicable data protection law seriously. While m918kiss serves predominantly Malaysian players — from Kuala Lumpur, Penang, Johor Bahru, and across the country — our data protection practices align with internationally recognised standards, reflecting our commitment to responsible data stewardship.

02 Data Controller

m918kiss operates as the data controller in respect of personal data collected through the m918kiss platform. As data controller, we determine the purposes and means of processing your personal data. Where we engage third-party processors to handle data on our behalf, we ensure appropriate data processing agreements are in place.

All data protection enquiries, subject access requests, and complaints regarding m918kiss's data practices should be directed to our support team using the contact details provided in Section 16 of this Policy.

03 Personal Data We Collect

m918kiss collects personal data across several categories depending on the nature of your interaction with the platform:

Identity & Contact Data

Account & Financial Data

Gaming & Behavioural Data

Technical & Device Data

Communication Data

04 How We Collect Your Data

m918kiss collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an m918kiss account, completing identity verification, submitting a deposit or withdrawal request, contacting live chat, or completing any on-platform form.
• Automated technical collection: Data collected automatically via cookies, server logs, and similar technologies when you access the m918kiss website or use our services. This includes IP addresses, device identifiers, and browsing behaviour within the platform.
• Third-party verification providers: Identity and address verification data returned from KYC (Know Your Customer) service providers engaged to fulfil our regulatory obligations.
• Payment processors: Transaction confirmation data received from Malaysian payment processors including Touch n Go eWallet, DuitNow, Maybank, CIMB, and other integrated payment providers when you make a deposit or withdrawal.
• Fraud and AML monitoring systems: Data generated or flagged by automated fraud detection and anti-money laundering monitoring systems that analyse transaction patterns and account behaviour.

05 Purpose and Legal Basis for Processing

m918kiss processes personal data only where a lawful basis for doing so exists. The following table summarises our primary processing activities:

06 Sharing of Personal Data

m918kiss does not sell, rent, or trade personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following limited circumstances:

• Service providers and processors: We engage trusted third-party providers to deliver specific services on our behalf, including payment processors, KYC/identity verification services, cloud infrastructure providers, customer support software, and fraud detection systems. These providers are bound by data processing agreements and are restricted from using your data for any purpose other than delivering the contracted service.
• Gaming regulatory authorities: Where required by the applicable licensing authority or other regulatory body, m918kiss will provide member data as required to fulfil our regulatory obligations.
• Law enforcement and legal proceedings: We will disclose personal data to law enforcement agencies, courts, or other authorities where legally required or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of m918kiss, our members, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the m918kiss business, member data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer via your registered email address.

07 Data Retention

m918kiss retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Key retention periods are as follows:

• Active accounts: All personal data associated with an active m918kiss account is retained for the duration of the account relationship.
• Closed accounts: Following account closure, personal data (including identity documents, transaction records, and game history) is retained for a minimum of 5 years to comply with AML, gaming regulatory, and tax reporting obligations.
• Support and communication records: Live chat transcripts, email correspondence, and support ticket records are retained for up to 3 years from the date of the interaction.
• Marketing preferences: Where you have opted in to marketing communications, your preferences are retained until you withdraw consent or for up to 3 years of inactivity, whichever is sooner.
• Technical and log data: Server logs and access records are retained for a maximum of 12 months unless required for ongoing investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

08 Cookies and Tracking Technologies

m918kiss uses cookies and similar tracking technologies to operate the platform and enhance the member experience. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session management, login state maintenance, security tokens, and language preference storage. These cannot be disabled without significantly impairing functionality.
• Functional cookies: Store your preferences such as currency display settings, responsible gaming tool configurations, and game filter preferences, so you don't need to re-enter them on each visit.
• Analytics cookies: Collect aggregated and anonymised data about how members use the m918kiss platform — pages visited, time on site, navigation paths — to help us improve the service. This data does not identify you individually.

m918kiss does not use third-party advertising or cross-site tracking cookies. You can manage cookie preferences via your browser settings or our cookie preference centre. Note that disabling strictly necessary cookies will affect platform functionality.

09 Security Measures

m918kiss implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data in transit;
• Encrypted storage of sensitive personal data at rest;
• Two-factor authentication (2FA) available for all member accounts;
• Real-time intrusion detection and fraud monitoring systems;
• Strict role-based access controls limiting staff access to member data on a need-to-know basis;
• Regular penetration testing and security audits by independent security professionals;
• Automated session timeout and suspicious activity alerts.

Despite these measures, no internet transmission is completely secure. m918kiss cannot guarantee absolute security of data transmitted to our platform — members should take their own precautions including using strong passwords, enabling 2FA, and logging out from shared devices.

10 International Data Transfers

m918kiss may transfer member personal data to service providers and infrastructure partners located outside Malaysia. Where such transfers occur, we ensure that adequate data protection safeguards are in place, which may include:

• Standard contractual clauses incorporated into data processing agreements;
• Transfer to jurisdictions that maintain data protection standards recognised as adequate by relevant regulatory authorities;
• Binding corporate rules where applicable.

Members may request information about the specific safeguards applied to international data transfers by contacting our support team.

11 Your Data Protection Rights

As an individual whose personal data is processed by m918kiss, you have the following rights, subject to applicable law and any overriding legal obligations on our part:

• Right of access: You may request a copy of the personal data m918kiss holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the m918kiss support team. We will respond within 30 days. We may need to verify your identity before processing your request.

12 Children's Privacy

m918kiss services are strictly for persons aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately close the associated account and delete all related personal data.

If you believe an underage person has registered an m918kiss account, please notify us immediately via our support team. We treat such reports as a priority and will investigate without delay.

13 Marketing Communications

m918kiss may send promotional communications including bonus offers, new game announcements, and platform updates to members who have opted in to receive such communications. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your communication preferences in your m918kiss account settings;
• Contacting our support team with an opt-out request.

Opting out of marketing communications does not affect the receipt of transactional communications essential to your account, such as deposit confirmations, withdrawal notifications, and security alerts.

14 Third-Party Links

The m918kiss platform may contain references or navigational elements that point to other pages within the m918kiss domain. m918kiss does not link to external third-party websites from within the platform. This Privacy Policy applies solely to data processed by m918kiss and does not extend to any third-party services, tools, or payment providers that operate under their own separate privacy notices.

Where you interact with third-party payment processors — such as Touch n Go eWallet, DuitNow, or your bank's online portal — their respective privacy policies govern the handling of your data in connection with those services.

15 Changes to This Privacy Policy

m918kiss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered members via their registered email address with a minimum of 14 days' notice before taking effect.

The "Last updated" date at the top of this document indicates when the most recent revision was made. Continued use of the m918kiss platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

16 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by m918kiss, please contact our support team through the following channels:

Data subject requests — including access, rectification, and erasure requests — should be submitted in writing to [email protected] with the subject line "Data Protection Request". Please include your registered account email address and a description of your request. We will acknowledge receipt within 5 business days and provide a substantive response within 30 days.