kis88 Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal data collected by kis88 in connection with your use of the kis88 online gaming platform, including all associated websites, mobile-optimised interfaces, live chat tools, and customer support channels operated under the kis88.asia domain.

The Company acts as the data controller in respect of personal data collected through the platform. This policy is intended to be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

The kis88 platform serves players located across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Ipoh, and surrounding regions. Where applicable, our data processing practices are designed to meet the standards required under our international gaming authority licence, which includes data protection obligations as part of the licensing framework.

2. Personal Data We Collect

The Company collects the following categories of personal data in connection with the operation of the kis88 platform:

Identity & Contact Data

• Full legal name and date of birth;
• Residential address (including city, state, and postcode);
• Malaysian mobile phone number;
• Email address;
• Username and account credentials (passwords are stored in hashed form only — the Company does not store readable passwords).

Verification & Identity Documents

• Copies of government-issued identity documents (e.g., MyKad, passport) submitted for age and identity verification;
• Selfie or liveness verification images where required by our KYC process;
• Proof of address documents (e.g., utility bills, bank statements).

Financial Data

• Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, bank account number, card details where applicable);
• Transaction history, including deposit amounts, withdrawal requests, dates, and processing outcomes;
• Wallet balance and bonus records.

Technical & Usage Data

• IP address and geolocation data at the time of login and gaming activity;
• Device type, operating system, browser type and version;
• Session logs, game activity logs, and betting history;
• Cookies and similar tracking technology data (see Section 9).

Communications Data

• Records of live chat conversations, email correspondence, and any other communications with the kis88 support team;
• Complaint and dispute records.

3. How We Collect Your Data

The Company collects personal data through the following channels:

• Directly from you — during account registration, identity verification, deposit and withdrawal requests, competition entries, and when you contact our support team;
• Automatically — through your use of the platform, via server logs, session tracking, and cookies placed on your device;
• From third parties — including payment processors (such as Touch n Go eWallet, Boost, and banking partners), identity verification service providers, fraud prevention agencies, and our licensing authority where required by law.

4. How We Use Your Personal Data

The Company uses the personal data it collects for the following purposes:

• Account administration: Creating and managing your kis88 account, processing your login, and maintaining your account security;
• Identity and age verification: Confirming that you meet the 21-years-of-age minimum requirement and that your identity matches the information provided at registration;
• Financial processing: Processing deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported channels; detecting and preventing fraud;
• Platform operation and improvement: Delivering games, sportsbook markets, and all other features of the kis88 platform; analysing usage data to improve functionality, performance, and user experience;
• Customer support: Responding to your enquiries, resolving complaints, and providing assistance via live chat and email;
• Regulatory compliance: Meeting our obligations under our international gaming licence, including anti-money laundering (AML) checks, Know Your Customer (KYC) obligations, and responsible gaming requirements;
• Marketing communications: Sending promotional emails and notifications about bonuses, new games, and platform updates — only where you have opted in or where permitted under applicable law. You may opt out at any time by contacting our support team;
• Legal proceedings: Asserting or defending legal claims, complying with court orders, or cooperating with regulatory investigations.

5. Legal Basis for Processing

The Company processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the kis88 Terms & Conditions (e.g., account management, payment processing, game delivery);
• Legal obligation: Processing required to comply with applicable laws and the conditions of our international gaming licence (e.g., AML checks, KYC, responsible gaming obligations);
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and improving the platform — where these interests are not overridden by your data protection rights;
• Consent: For direct marketing communications and the use of non-essential cookies, where your consent has been obtained.

6. Data Sharing & Third Parties

The Company does not sell your personal data to third parties. Your data may, however, be shared with the following categories of recipients in the circumstances described:

• Payment processors and financial institutions (including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank) — solely for the purpose of processing deposits and withdrawals;
• Identity verification and KYC service providers — to verify your age and identity as required by our licensing obligations;
• Fraud prevention and AML compliance agencies — to detect and prevent fraudulent activity and money laundering;
• Game software providers and platform infrastructure vendors — who process data on our behalf as data processors under contractual data processing agreements;
• Our licensing authority and regulatory bodies — where disclosure is required by law or as a condition of our operating licence;
• Law enforcement and courts — where we are legally compelled to disclose your information by court order or applicable law.

All third parties engaged by the Company as data processors are required to handle your personal data strictly in accordance with our instructions and applicable data protection standards.

7. Data Retention

The Company retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law and our international gaming licence obligations. In practice, this means:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, as required for AML compliance and audit purposes;
• Identity verification documents are retained for the minimum period required by our licensing authority, typically five years post-closure;
• Live chat and email support records are retained for up to three years from the date of the conversation;
• Cookie and session data is retained in accordance with the individual cookie retention periods set out in Section 9.

After the applicable retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8. Security Measures

The Company implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL / TLS 1.3 encryption on all data in transit between your device and the kis88 servers;
• One-way cryptographic hashing for all stored passwords — no plain-text password is ever stored;
• Two-factor authentication (2FA) available to all Members for account login;
• Device and location-based anomalous login detection with automatic security alerts;
• Regular internal security reviews and penetration testing;
• Access controls limiting employee access to personal data to those with a legitimate need.

While the Company takes all reasonable precautions, no internet-based system is completely immune to security risks. You are encouraged to use a strong, unique password for your kis88 account and to enable 2FA to maximise your account security.

9. Cookies & Tracking Technologies

The kis88 platform uses cookies and similar tracking technologies to operate core platform functions, analyse usage, and — where you have consented — deliver relevant promotional content. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function (e.g., session management, login state, security tokens). These cannot be disabled without breaking platform functionality;
• Analytical / performance cookies: Collect anonymised data about how Members use the platform to help us improve it. These are set only with your consent;
• Functional cookies: Remember your preferences (e.g., language, display settings) to personalise your experience;
• Marketing cookies: Used to track interactions with promotional content. These are set only with your explicit consent.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair platform functionality. Withdrawing consent for analytical or marketing cookies will not affect your ability to use the platform.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by kis88:

• Right of access: You may request a copy of the personal data we hold about you;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances;
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a portable copy of your data;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact the kis88 support team via live chat or email at [email protected]. We will respond to your request within thirty (30) days. Please note that some requests may be limited by our legal and regulatory obligations — for example, we cannot delete transaction records that must be retained for AML compliance purposes.

11. Children & Minors

The kis88 platform is strictly intended for adults aged 21 years or older. The Company does not knowingly collect personal data from individuals under the age of 21. If the Company becomes aware that a registered account belongs to a person under the minimum age, the account will be immediately suspended, all balances will be frozen pending investigation, and the personal data associated with the account will be handled in accordance with our regulatory obligations.

If you believe that a minor has registered on the kis88 platform, please notify our support team immediately.

12. Changes to This Privacy Policy

The Company reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered Members by email to the address on file or via a prominent notice on the kis88 platform prior to the changes taking effect. The "Last updated" date at the top of this page indicates when the most recent revision was made.

Continued use of the kis88 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you should cease using the platform and may request account closure.

13. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the kis88 data team through the following channels:

• 24/7 Live Chat: Available on the kis88 platform. Response: under 90 seconds.
• Email: [email protected] — Response: within 24 hours.

The Company's support and compliance teams serve players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and all other regions, every day of the year without exception.