Official 918kisses Documents

918kisses Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

Last Updated: 1 January 2026 Version 3.0 Compliant with Malaysia PDPA 2010

At 918kisses, your privacy is more than a legal obligation — it is a responsibility we take seriously. This Privacy Policy clearly explains how we collect, use, store and protect your personal data as a valued 918kisses player in Malaysia.

How 918kisses Protects Your Privacy
Six core principles that shape our approach to protecting the personal data of Malaysian players
256-bit SSL encryption
Bank-Grade Security

All data transmitted between your device and 918kisses servers is protected by 256-bit SSL encryption — the same security technology used by major Malaysian banks such as Maybank and CIMB. Your data is kept safe from unauthorised parties.

Secure Data Storage
Centralised & Controlled Servers

Your personal data is stored in data centres protected by strict access controls, multi-factor authentication, and 24/7 security monitoring. Only authorised personnel may access user data, and every access is recorded in an audit log.

User Data Controls
Right to Access & Erasure

You have full control over your personal data at 918kisses. You may request to view, amend, transfer or delete your personal data at any time by contacting our support team via email or live chat.

No Data Selling
Your Data Is Not Our Product

918kisses has never sold, rented or traded your personal data to any third party for commercial marketing purposes, and never will. Your data is used solely to enhance your gaming experience on our platform.

PDPA 2010 Compliance
Malaysian Personal Data Protection Act

All data processing practices at 918kisses fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We have an appointed Data Protection Officer (DPO) responsible for ensuring ongoing compliance with all legal requirements.

Flexible Communication Options
Notification & Marketing Controls

You can choose the types of communications you wish to receive from 918kisses — including promotions, product updates, and technical notifications. An unsubscribe option is available in every promotional email we send you.

Important Note: This Privacy Policy explains how 918kisses manages your personal data. By registering for or using the 918kisses platform, you agree to the terms set out here. Please read this document carefully — you have the right to know how your data is used.

1Introduction

918kisses is an online entertainment and gaming platform operating in Malaysia, offering casino, Sports Betting, poker, e-sports, and table game services to eligible users. We take our responsibilities as a data controller seriously with regard to all personal information you provide to us.

This Privacy Policy has been drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and clearly sets out your rights as a data subject, as well as 918kisses's obligations as a responsible data controller. We are committed to ensuring your personal data is processed lawfully, fairly, and transparently.

If you have any questions about how we handle your personal data, please do not hesitate to contact our Data Protection Officer at privacy@918kisses.ws.

2Categories of Personal Data We Collect

918kisses collects various categories of personal data depending on the nature of your interactions with our platform. Below is a comprehensive overview of the data we may collect:

Data CategoryExamples of InformationPrimary PurposeRetention Period
Identity Data Full name, MyKad number, date of birth, gender Account verification & KYC 5 years after account closure
Contact Data Malaysian phone number, email address, residential address Communication & verification 5 years after account closure
Financial Data Bank account number, TNG/GrabPay/DuitNow account name, transaction history Deposits, withdrawals & AML 7 years (regulatory requirement)
Gaming Data Betting history, wins, losses, and game preferences Customer support & responsible gaming 5 years after account closure
Technical Data IP address, device type, operating system, browser information Security & fraud detection 2 years
Usage Data Access logs, pages visited, session duration, clicks and navigation Platform improvement & analytics 1 year

918kisses does not collect special category data (sensitive data) such as medical information, religious beliefs, political views or sexual orientation, unless you voluntarily disclose it and it is relevant to responsible gaming.

3How We Collect Your Personal Data

918kisses collects your personal data through the following channels:

3.1 Information You Provide Directly

  • Account registration form — name, email, Malaysian phone number
  • KYC verification process — MyKad copies, financial documents
  • Deposit and withdrawal requests — TNG, GrabPay, DuitNow, FPX, or bank account information
  • Communications with customer support — email, live chat, complaint forms
  • Responses to customer surveys or questionnaires

3.2 Automatically Collected Data

  • Cookies and similar tracking technologies — for more information please refer to Section 9
  • Server logs — IP address, access timestamps, pages visited
  • Performance data — page load times, technical errors, usage statistics
  • Device data — phone model, operating system, screen resolution (for display optimisation)

3.3 Data from Authorised Third-Party Sources

  • Malaysian local payment providers (TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) — for transaction verification
  • Authorised identity verification agencies — for KYC and AML purposes
  • Legitimate public information sources — for re-verification of declared information

4Purposes for Using Personal Data

918kisses uses the personal data collected solely for legitimate and necessary purposes, namely:

  • Account management: Opening, verifying, maintaining and closing user accounts
  • Transaction processing: Securely processing deposits and withdrawals via Malaysian local payment methods
  • Identity verification (KYC): Verifying user identity and complying with anti-money laundering (AML) legal requirements
  • Service delivery: To enable you to access and enjoy all games and features on the 918kisses platform
  • Customer support: To address enquiries, resolve complaints, and provide technical assistance
  • Security & fraud detection: To detect and prevent fraud, account abuse, collusion, and other unlawful activities
  • Responsible gaming: Monitoring gaming patterns to identify players who may need support and to ensure compliance with self-imposed limits
  • Platform improvements: Analysing how users interact with the platform to improve the overall user experience
  • Marketing communications: Sending information about promotions, bonuses and new features — only to users who have consented to receive such communications
  • Legal compliance: To comply with applicable legal requirements, regulations, and directives from relevant authorities in Malaysia

918kisses will not use your personal data for any purpose other than those stated above without first obtaining your renewed consent, unless another lawful basis permits such processing.

5Sharing Data with Third Parties

918kisses does not sell your personal data. However, we may share your personal data with selected third parties in the following circumstances:

5.1 Contracted Service Providers

We work with third-party service providers that help us operate the 918kisses platform, including Malaysian local payment providers (TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), cloud service providers, fraud detection companies, and KYC agencies. All third parties are required to comply with strict data protection standards and are prohibited from using your data for any other purpose.

5.2 Legal Requirements

918kisses may disclose your personal data to Malaysian government authorities or regulatory bodies where we are required to do so by law, court order or direction of a lawful regulatory body. This includes investigations relating to financial crime or money laundering.

5.3 Protection of Vital Interests

In exceptional circumstances, we may disclose your data where doing so is necessary to protect your vital interests or those of another person — such as in an emergency involving risk to someone's life.

6Data Security Measures

918kisses implements a range of robust technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or accidental disclosure:

  • Transit encryption: All data transmitted between your browser/app and 918kisses servers is protected with TLS 1.3 and 256-bit SSL encryption
  • Storage encryption: Sensitive data such as passwords are stored using a one-way encryption algorithm (bcrypt) that cannot be decrypted
  • Access controls: Access to user data is granted only to staff who require it to perform their duties, on a strict need-to-know basis
  • Two-factor authentication (2FA): All 918kisses staff with access to user data systems are required to use 2FA
  • Regular security audits: We conduct regular penetration testing and security audits carried out by independent cybersecurity experts
  • 24/7 Monitoring: A Security Information and Event Management (SIEM) system continuously monitors all system activity
  • Incident response plan: 918kisses maintains a tested incident response procedure to address data breaches swiftly and effectively

While we take every reasonable measure to protect your data, no security system is 100% impenetrable. You also play an important role in keeping your data secure — always use a strong, unique password for your 918kisses account and never share your login credentials with anyone.

7Data Retention Period

918kisses retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. In general:

  • Active account data: Retained for the duration your account is active, plus 5 years after account closure
  • Financial transaction records: Retained for 7 years in accordance with Malaysian financial and tax regulatory requirements
  • Security and audit logs: Retained for 2 years for security incident investigation purposes
  • Customer support communication records: Retained for 3 years for reference and service improvement
  • Marketing data: Retained until you withdraw your consent to receive marketing communications

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any individual.

8Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights in relation to your personal data held by 918kisses:

Right to Access

Request a copy of the personal data we hold about you and information on how it is processed.

Right to Rectification

Request correction or updates to any inaccurate or outdated personal data held in our records.

Right to Erasure

Request the deletion of your personal data under certain circumstances, subject to applicable legal requirements.

Right to Object

Object to the processing of your personal data for specific purposes such as direct marketing.

Right to Data Portability

Receive your personal data in a machine-readable format for transfer to another party.

Right to Restrict Processing

Request that 918kisses restrict the processing of your data in certain circumstances as provided by law.

To exercise any of the rights above, please contact our Data Protection Officer at privacy@918kisses.ws. We will respond to valid requests within 14 working days.

9Cookie Policy

918kisses uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect the functionality of the 918kisses platform. We do not use third-party advertising cookies.

10Children's Privacy

The 918kisses platform is strictly for individuals aged 21 years of age and above. We do not knowingly collect personal data from individuals below that age. Should we find that personal data of someone under 21 years of age has been collected without proper age verification, we will delete that information immediately and close the account in question.

If you believe that your child or someone you know under the age of 21 may have registered on our platform, please contact us immediately at privacy@918kisses.ws so that we may take appropriate action.

11Third-Party Links

The 918kisses platform may contain links to third-party websites operated independently of us — such as local Malaysian payment provider websites. This Privacy Policy applies solely to the 918kisses platform.

918kisses is not responsible for the privacy practices of third-party websites. We encourage you to read the privacy policy of every website you visit. This includes the websites of e-wallet providers such as Touch 'n Go, GrabPay, Boost and ShopeePay when you carry out transactions through their channels.

12Cross-Border Data Transfers

In some situations, your personal data may be processed on servers located outside Malaysia — for example, for cloud computing services used by the 918kisses platform. In such cases, we ensure that any cross-border data transfers are protected by appropriate safeguards, such as:

  • Standard contractual clauses approved by the relevant data protection authority
  • Data protection assessments for recipient countries to ensure an adequate level of protection
  • Binding data processing agreements with all our sub-processors

Financial data related to transactions in Malaysian Ringgit (RM) via Malaysian local payment systems is always processed within Malaysia's borders, in accordance with Bank Negara Malaysia requirements.

13Amendments to This Privacy Policy

918kisses reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or updated platform features. You will be notified of any significant amendments through:

  • In-account notifications — displayed upon your next login
  • Email to your registered email address — at least 7 days before the amendment takes effect
  • A prominent notice on the 918kisses website homepage

The last updated date of this Privacy Policy is always displayed at the top of this document. Your continued use of the 918kisses platform following any amendments constitutes your acceptance of the revised terms.

14Contact Us – Privacy & Data Protection Enquiries

If you have any questions, concerns, or wish to exercise your rights as a data subject, please contact the 918kisses Data Protection Officer (DPO):

  • Privacy Email: privacy@918kisses.ws
  • General Support Email: support@918kisses.ws
  • Live Chat: Available 24/7 via the chat icon on the 918kisses platform
  • Response Time: We will respond to privacy enquiries within 14 business days
  • Language: Bahasa Melayu and English

If you are dissatisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the country's data protection regulatory body.

For further information on the use of our platform, please refer to Terms & Conditions and Responsible Gaming.

Your Data Is Safe at 918kisses – Register with Confidence

918kisses safeguards your privacy with 256-bit SSL encryption, Malaysia PDPA compliance, and a strict no data-selling policy. Register today and enjoy a safe, fair, and enjoyable gaming experience!

256-bit SSL PDPA 2010 Compliant No data selling 24/7 Support
Bahasa Melayu