Privacy Policy

1. Introduction

888kiss.co ("888kiss", "we", "us", "our") operates the online casino and sports betting platform accessible at https://888kiss.co (the "Platform"). As part of operating this Platform and providing our Services to registered players ("you", "Player", "User"), 888kiss necessarily collects and processes certain personal data relating to individuals who register accounts, make transactions, or interact with the Platform in any capacity.

This Privacy Policy has been prepared to inform you clearly and transparently about: the categories of personal data we collect; the purposes for which we process it; the legal bases on which we rely; how long we retain it; the circumstances in which we may share it with third parties; the security measures we employ to protect it; and the rights you have in relation to your personal data.

This Privacy Policy applies to all personal data collected through the 888kiss Platform, including data collected during account registration, the Know Your Customer ("KYC") verification process, payment transactions, customer support interactions, and your general use of the Platform's features and services. By using the 888kiss Platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, which together govern the relationship between you and 888kiss.

2. Personal Data We Collect

888kiss collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration and Account Data

• Full legal name as it appears on your identity document;
• Date of birth (collected to verify that you meet the 21+ age requirement);
• Email address and, where provided, contact telephone number;
• Username and encrypted password;
• Preferred language and currency settings.

2.2 Identity Verification (KYC) Data

• Copy of Malaysian Identity Card (MyKad), passport, or other government-issued identity document;
• Proof of address documentation where requested for enhanced due diligence;
• Source of funds documentation where required for anti-money laundering ("AML") compliance purposes.

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment methods used (FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other participating institutions);
• Payment instrument identifiers (e.g., masked account numbers, eWallet identifiers) — we do not store full payment credentials;
• Bonus redemption history and wagering activity records.

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session timestamps, pages visited, and features accessed;
• Game session logs including game type, stake amounts, and outcomes (retained for regulatory and dispute resolution purposes).

2.5 Communication Data

• Records of communications with 888kiss customer support via live chat or email, including the content of messages and the subject matter of enquiries;
• Survey responses and feedback submitted voluntarily.

3. How We Use Your Personal Data

888kiss processes your personal data for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, and manage your account settings and preferences throughout your relationship with the 888kiss Platform.
• Service delivery: To provide access to casino games, live dealer tables, and sportsbook markets; to process stakes and distribute winnings; and to credit and debit your 888kiss wallet in connection with deposits, withdrawals, and bonus claims.
• Identity verification and KYC compliance: To verify that you meet the 21+ age requirement, to confirm the accuracy of the registration information you have provided, and to satisfy our obligations under applicable anti-money laundering legislation.
• Payment processing: To process deposit and withdrawal transactions through your selected payment method, to investigate and resolve payment disputes, and to detect and prevent fraudulent payment activity.
• Customer support: To respond to your enquiries, resolve complaints, and provide account assistance through our live chat and email support channels.
• Responsible gaming compliance: To monitor account activity for indicators of problem gambling behaviour, to enforce player-set account restrictions (such as deposit limits and self-exclusion orders), and to comply with our obligations under responsible gaming standards.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent account activity, collusion, and technical abuse of the Platform.
• Legal compliance: To comply with applicable legal and regulatory obligations, to respond to lawful requests from competent authorities, and to maintain records required under applicable law.
• Platform improvement: To analyse aggregated, anonymised usage patterns for the purpose of improving Platform functionality, game selection, and user experience. Such analysis is conducted on anonymised data and does not involve profiling of individual players for marketing purposes without consent.

4. Legal Basis for Processing

888kiss processes your personal data on the following legal bases:

• Contractual necessity: The majority of processing described in Section 3 is necessary for the performance of the contract between you and 888kiss — specifically, to provide the Services you have registered to access. This includes account management, game access, payment processing, and customer support.
• Legal obligation: Certain processing activities — including KYC verification, AML record-keeping, and compliance with requests from competent authorities — are required by applicable legal or regulatory obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement is carried out on the basis of 888kiss's legitimate interest in operating a secure, compliant, and commercially viable platform, balanced against your privacy interests.
• Consent: Where we process your data for purposes beyond those set out above (for example, optional marketing communications), we will seek your express consent and you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5. Data Sharing and Disclosure

888kiss does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes set out in this Privacy Policy:

• Payment processors and financial institutions: We share necessary transaction data with payment service providers (including FPX gateway operators, e-wallet providers such as Touch 'n Go and Boost, and participating banks such as Maybank, CIMB, and Public Bank) to process your deposit and withdrawal requests.
• Identity verification providers: We may use third-party KYC verification services to assist with the identity verification process. These providers process identity document data solely on our behalf and under our instructions.
• Game content providers: Live dealer and slot game providers may receive limited session data necessary for game delivery and technical support. They do not receive your financial or identity documentation.
• Legal and regulatory authorities: We will disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction — including in connection with AML investigations.
• Professional advisors: We may share data with our legal advisors, auditors, or insurers in connection with advice, audits, or insurance claims, subject to applicable professional confidentiality obligations.

All third parties with whom we share personal data are contractually required to process such data in accordance with applicable privacy standards and solely for the purposes for which it was disclosed.

6. Cookies and Tracking Technologies

The 888kiss Platform uses cookies and similar tracking technologies to support the operation of the Platform and to improve your experience. The following categories of cookies may be set when you visit or use the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session management cookies that keep you logged in to your 888kiss account during an active session. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and last-visited game category, to personalise your experience on subsequent visits.
• Analytics cookies: Used to collect aggregated, anonymised data about Platform usage patterns — such as which pages are visited most frequently and how users navigate between sections — to inform Platform improvements. This data is not linked to individual player profiles.
• Security cookies: Used to detect suspicious activity, verify authentication status, and protect against cross-site request forgery and similar attack vectors.

You may configure your browser settings to refuse non-essential cookies. Blocking strictly necessary cookies will impair your ability to log in and use the Platform. Analytics and functional cookies can be declined without affecting core functionality, though personalisation features may be reduced.

7. Data Retention

888kiss retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention considerations:

• Active accounts: Personal data associated with active 888kiss accounts is retained for the duration of the account relationship.
• Closed accounts: Following account closure, 888kiss retains financial transaction records, KYC documentation, and game session logs for a minimum of five years in accordance with applicable AML record-keeping requirements and potential regulatory audit obligations.
• Support communications: Records of customer support interactions are retained for a minimum of two years following the closure of the relevant support case.
• Inactive accounts: Accounts that have been inactive for 12 consecutive months may be subject to the account suspension process described in our Terms & Conditions. Associated data is retained in accordance with the timelines above following any account closure.

Where retention is no longer necessary for any applicable legal purpose and no active dispute or investigation is pending, personal data is securely deleted or anonymised.

8. Security Measures

888kiss implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data transmitted between your device and the 888kiss Platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption;
• Stored personal data and financial records are held in encrypted form on secured servers with restricted access controls;
• Account passwords are stored in hashed form using industry-standard hashing algorithms — 888kiss staff cannot retrieve your plain-text password;
• Access to personal data by 888kiss personnel is restricted on a need-to-know basis, with role-based access controls and access audit logging;
• Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities;
• A documented incident response procedure is in place to address any data breach promptly and in accordance with applicable notification obligations.

Notwithstanding these measures, no method of data transmission over the internet or electronic storage is completely secure. While 888kiss takes reasonable steps to protect your personal data, we cannot guarantee absolute security. You are encouraged to use a strong, unique password for your 888kiss account and to contact us immediately if you suspect any unauthorised access.

9. Your Rights in Relation to Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data that 888kiss holds about you:

• Right of access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For certain account fields, you can update this information directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 7).
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact 888kiss through the channels listed in Section 13. We will respond to all valid requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

10. Children's Privacy

The 888kiss Platform is strictly intended for adult use by individuals aged 21 years and above. 888kiss does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the 888kiss registration process, and identity document verification is required before the first withdrawal is processed.

If 888kiss becomes aware that personal data has been collected from an individual who is under 21 years of age, the account will be immediately suspended, any associated balance will be withheld, and the personal data will be deleted in accordance with our data retention policies. If you believe that a minor has registered an account on the 888kiss Platform, please notify us immediately via the contact details provided in Section 13.

11. International Data Transfers

888kiss operates under international gaming authority licensing guidelines and may process and store personal data on servers located outside Malaysia. Where personal data is transferred internationally, 888kiss takes appropriate steps to ensure that such transfers are subject to adequate safeguards consistent with applicable data protection standards, including through contractual arrangements with data recipients that impose data protection obligations equivalent to those applicable to 888kiss.

By using the 888kiss Platform and providing personal data, you acknowledge that your data may be transferred to, stored in, and processed in jurisdictions outside Malaysia as described in this Section.

12. Changes to This Privacy Policy

888kiss reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. Where changes are material, we will publish the updated Privacy Policy on the 888kiss website with a revised "Last Updated" date and, where practicable, notify registered players via their registered email address.

Your continued use of the 888kiss Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We encourage you to review this Privacy Policy periodically. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and contact us to close your account.

13. Contact — Data Protection Enquiries

For all enquiries, requests, or complaints relating to this Privacy Policy or the processing of your personal data by 888kiss, you may contact us through the following channels: