Privacy Policy – m918kiss

1. About This Policy

This Privacy Policy ("Policy") describes how m918kiss ("the Platform", "we", "us", "our") — operating at m918kiss.club — collects, processes, stores, and shares personal data relating to individuals ("you", "your", "User") who access or use the platform, whether as registered account holders or visitors.

m918kiss takes the privacy of its users seriously. The Platform operates under a licence issued by an international gaming regulatory authority, which imposes binding obligations on how we handle personal data. These obligations form part of the framework within which this Policy operates.

By registering an account on m918kiss or by continuing to access the platform, you acknowledge that you have read and understood this Policy and agree to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the m918kiss platform.

2. Data We Collect

2.1 Account Registration Data

When you register an account with m918kiss, we collect: full legal name; date of birth; email address; Malaysian mobile number; residential address; and a chosen username and password (stored in hashed form — we cannot retrieve your plaintext password).

2.2 KYC and Identity Verification Data

To comply with our licensing obligations and to activate withdrawal functionality, we collect identity verification data including: scanned or photographed copies of your Malaysian IC (MyKad) or other government-issued identification document; selfie or liveness verification image; and in enhanced due diligence cases, proof of address (utility bill, bank statement) and source of funds documentation.

2.3 Financial and Transaction Data

We collect records of all financial transactions on your account, including: deposit amounts, methods, and timestamps; withdrawal requests and processing status; bonus credits and wagering history; and e-wallet or bank account details provided for withdrawal purposes (account names, masked account numbers — full account credentials are not stored by m918kiss).

2.4 Gameplay and Betting Data

We maintain detailed records of all gaming activity on the platform, including: game sessions, bet amounts, game outcomes, and session durations. This data is used for account history, dispute resolution, RNG audit trails, and responsible gaming monitoring.

2.5 Device and Technical Data

When you access m918kiss, we automatically collect: IP address; browser type and version; operating system; device type (desktop, mobile, tablet); session timestamps; and referral URL. This data is collected for security monitoring, fraud prevention, and platform analytics.

2.6 Customer Support Data

Records of communications between you and the m918kiss support team are retained, including live chat transcripts, email correspondence, and support ticket content. These records are used for dispute resolution, quality assurance, and training purposes.

3. How We Collect Data

m918kiss collects personal data through the following mechanisms:

• Directly from you: via the registration form, KYC submission portal, deposit and withdrawal request forms, account settings updates, and customer support interactions;
• Automatically: via cookies, server logs, and session tracking technologies when you browse or use the platform;
• From third-party payment processors: transaction confirmation data from Touch 'n Go, Boost, DuitNow, and partnering Malaysian financial institutions, to the extent required to confirm and reconcile payments;
• From identity verification service providers: results and flags from automated document verification and liveness checks conducted during the KYC process.

4. How We Use Your Data

m918kiss uses personal data for the following purposes:

• Creating and managing your account, including authentication and security;
• Processing deposits, withdrawals, and bonus credits in MYR;
• Conducting KYC and ongoing due diligence as required by our operating licence;
• Detecting and preventing fraud, money laundering, underage gambling, and other prohibited activities;
• Providing customer support and resolving disputes;
• Monitoring gameplay for responsible gaming indicators and taking appropriate action where problem gambling is identified;
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account alerts;
• Sending promotional communications, including bonuses and offers, where you have not opted out;
• Complying with our regulatory, legal, and licensing obligations;
• Improving platform performance and user experience through aggregated, anonymised analytics.

5. Legal Basis for Processing

m918kiss processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform our obligations under the account Terms & Conditions you accepted on registration (account management, payment processing, gameplay);
• Legal obligation: processing required to comply with our gaming licence, anti-money laundering obligations, and applicable data protection law (KYC, transaction records, audit logs);
• Legitimate interests: fraud prevention, security monitoring, responsible gaming oversight, and platform analytics where our interests do not override your fundamental rights;
• Consent: marketing communications, where consent has been collected. You may withdraw consent for marketing at any time via your account settings or by contacting support.

6. KYC and Identity Verification Data

KYC data — including identity documents and selfie images — is treated with a heightened level of care given its sensitive nature. This data is:

• Stored in encrypted, access-restricted document vaults separate from general account data;
• Accessible only to authorised compliance and verification personnel with a legitimate operational need;
• Never shared with third parties for marketing, profiling, or any purpose outside of regulatory compliance and fraud prevention;
• Retained for a minimum of 5 years following account closure, as required under anti-money laundering obligations applicable to our operating licence;
• Processed by automated identity verification systems certified for data security compliance, in addition to human review where required.

7. Cookies and Tracking Technologies

m918kiss uses cookies and similar technologies (pixel tags, local storage) on the platform. Cookies are used for the following purposes:

• Strictly necessary cookies: session management, authentication tokens, and security — these cannot be disabled without breaking core platform functionality;
• Functional cookies: remembering your preferences such as language settings and game lobby filters;
• Analytics cookies: aggregated, anonymised data on page visits, session lengths, and feature usage, used to improve the platform — no personal identifiers are associated with this data;
• Responsible gaming cookies: tracking session duration and activity for the purpose of delivering real-time responsible gaming prompts and enforcing cooling-off periods you have set.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, but may affect the availability of certain functional features.

8. Third-Party Data Sharing

m918kiss shares personal data with third parties only in the following circumstances:

• Payment service providers: data shared with Touch 'n Go, Boost, DuitNow, and FPX-participating banks to process your deposits and withdrawals. These providers are subject to their own privacy policies and regulatory obligations;
• Identity verification providers: KYC document and selfie data shared with our certified identity verification service provider solely for the purpose of verification processing;
• Game studio providers: gameplay session data shared with game providers (e.g., live studio partners) to the extent technically required for game delivery and RNG audit purposes;
• Regulatory authorities: personal data and transaction records disclosed to licensing authorities, law enforcement, or financial intelligence units upon lawful demand;
• Professional advisers: legal, audit, and compliance advisers under confidentiality obligations;
• Corporate successors: in the event of a merger, acquisition, or transfer of the m918kiss business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

m918kiss does not sell personal data and does not share it with third-party advertisers or data brokers.

9. International Data Transfers

As an internationally licensed platform, m918kiss may transfer personal data to servers and service providers located outside Malaysia. Where such transfers occur, m918kiss ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with applicable law, to ensure that your personal data receives equivalent protection to that afforded under our licensing jurisdiction's requirements.

10. Data Retention

m918kiss retains personal data for the following periods:

• Active account data: retained for the duration of the account relationship plus 7 years following closure, in accordance with anti-money laundering record-keeping requirements;
• KYC and identity documents: minimum 5 years post-account closure, or longer if required by applicable law;
• Customer support communications: 3 years from the date of the interaction;
• Gameplay and transaction logs: 7 years from the date of each transaction, for audit and dispute resolution purposes;
• Marketing preferences and consent records: retained until consent is withdrawn, plus a reasonable period thereafter for evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with m918kiss's data disposal procedures.

11. Your Data Rights

Subject to applicable law and regulatory retention obligations, you have the following rights with respect to your personal data held by m918kiss:

To exercise any of the above rights, contact the m918kiss support team via live chat or email. m918kiss will respond to all requests within 30 days. Where a request cannot be fulfilled (e.g., due to regulatory retention obligations), you will be informed of the reason.

12. Data Security

m918kiss implements technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• Role-based access controls ensuring that staff can only access data necessary for their specific function;
• Comprehensive audit logging of all access to personal data systems;
• Regular penetration testing and vulnerability assessments by independent security specialists;
• Multi-factor authentication required for all administrative access to personal data systems.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected individuals, m918kiss will notify the relevant regulatory authority within 72 hours of becoming aware of the breach, and will notify affected users where required by applicable law.

13. Children and Minors

m918kiss is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all accounts. If m918kiss becomes aware that an account has been registered by or on behalf of a minor, the account will be immediately suspended, all associated data will be reviewed, and any funds held in the account will be returned to the depositing payment method after investigation. Any winnings generated by an underage user are void.

14. Changes to This Policy

m918kiss reserves the right to update or amend this Privacy Policy at any time. Where material changes are made that affect how we use your personal data, we will notify registered users via email or prominent notice on the platform prior to the changes taking effect. The effective date at the top of this Policy will be updated with each revision. Continued use of the platform after the effective date of a revised Policy constitutes your acceptance of the changes.

The current version of this Policy is always available at m918kiss.club/privacy-policy. We encourage you to review it periodically.

15. Contact and Complaints

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data by m918kiss, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat widget on m918kiss.club
• Email: [email protected] (plain text — not a clickable link)
• FAQ: Visit our FAQ page for answers to common privacy questions

If you are unsatisfied with our response to a privacy concern, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction or the authority designated under m918kiss's operating licence framework.