kis88 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how kis88 ("Company", "we", "us", "our"), the operator of the online gaming platform accessible at kis88.win, collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player") who register accounts on, access, or otherwise interact with the Platform.

kis88 is committed to protecting the privacy of every player across Malaysia — from Kuala Lumpur to Penang to Johor Bahru — and to handling personal data responsibly, transparently, and in compliance with applicable data protection law and the conditions of our international gaming authority licence.

By registering an account or using the kis88 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside the kis88 Terms & Conditions.

2 Data We Collect

2.1 Data You Provide Directly

When you register an account, make a deposit or withdrawal, or contact customer support, you provide personal data directly to kis88. This data includes:

2.2 Data Collected Automatically

When you access and use the Platform, certain data is collected automatically by our systems:

• Device data: IP address, browser type and version, operating system, device identifiers;
• Usage data: pages visited, games played, session duration, bet history, click patterns;
• Location data: approximate geolocation derived from IP address (city/country level only — no GPS);
• Cookie and tracking data: session tokens, preference settings, analytics identifiers (see Section 6).

2.3 Data from Third Parties

kis88 may receive personal data about you from third-party sources including payment processors (transaction confirmation data), identity verification service providers (document verification results), and fraud prevention services (risk scoring data).

3 How We Use Your Data

kis88 processes personal data for the following purposes:

• Account Management: Registration, authentication, profile maintenance, and account security;
• Service Delivery: Processing bets, casino game sessions, slot spins, and poker hands; crediting winnings; managing promotions and bonuses;
• Payment Processing: Processing deposits via Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank; verifying withdrawal requests; preventing chargebacks;
• Regulatory Compliance: Age verification; KYC and AML obligations under our gaming licence; responding to regulatory authority requests;
• Fraud Prevention: Detecting and preventing fraudulent activity, multiple accounts, bonus abuse, and money laundering;
• Responsible Gaming: Monitoring for problem gambling indicators; processing self-exclusion requests; enforcing deposit and loss limits;
• Customer Support: Responding to support queries, complaints, and account recovery requests;
• Platform Improvement: Analysing usage patterns to improve Platform performance, game selection, and user experience;
• Marketing Communications: Sending promotional emails and notifications to players who have opted in (opt-out available at any time).

4 Legal Basis for Processing

kis88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to provide the gaming services you have contracted for — account management, bet processing, payment handling;
• Legal Obligation: Processing required to comply with our gaming licence conditions, AML regulations, and identity verification requirements;
• Legitimate Interests: Fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests do not override your privacy rights;
• Consent: Marketing communications and non-essential cookies — where your explicit consent has been obtained and can be withdrawn at any time.

5 Data Sharing & Disclosure

5.1 Service Providers

kis88 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processors, identity verification providers, fraud detection services, cloud infrastructure providers, and customer support platform operators. All service providers are bound by data processing agreements that require them to handle your data only in accordance with this Policy and kis88's instructions.

5.2 Regulatory Authorities

kis88 may disclose personal data to its gaming regulatory authority, financial intelligence units, law enforcement agencies, or other governmental bodies where required by law, court order, or as a condition of the Platform's operating licence. Such disclosures will be made to the minimum extent legally required.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the kis88 business, personal data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and any material changes to data handling that result from it.

5.4 No Data Sales

kis88 does not sell, rent, or trade personal data to third-party advertisers, marketing agencies, or data brokers. Your data is not a commercial product.

6 Cookies & Tracking Technologies

The kis88 Platform uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to play games or access your account.

7 Data Retention

kis88 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected and to satisfy applicable legal and regulatory obligations. The following retention periods apply:

• Account data: Retained for the duration of the active account and for a minimum of 5 years following account closure, in accordance with gaming licence AML record-keeping requirements;
• Transaction records: Retained for a minimum of 7 years from the date of the transaction;
• KYC and identity documents: Retained for the duration of the account relationship and 5 years after account closure;
• Support communications: Retained for 3 years from the date of the last interaction;
• Marketing preferences: Retained until withdrawal of consent or account closure, whichever is earlier;
• Analytics data: Aggregated and anonymised after 24 months; raw session logs deleted after 90 days.

Following expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

8 Data Security

kis88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and kis88 servers;
• Encryption at rest for all personal data stored in kis88 databases;
• Role-based access controls ensuring that personnel access only the data necessary for their specific function;
• Multi-factor authentication required for all internal system access;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists;
• Incident response procedures to detect, contain, and report data breaches within required timeframes.

Notwithstanding these measures, no internet transmission or electronic storage system is 100% secure. In the event of a data breach affecting your personal data, kis88 will notify you and relevant regulatory authorities in accordance with applicable legal requirements.

9 Your Rights

Subject to applicable law and the conditions of kis88's gaming licence, you have the following rights with respect to your personal data held by kis88:

• Right of Access: You may request a copy of all personal data kis88 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where there is no legitimate legal basis for its continued retention — subject to our regulatory record-keeping obligations;
• Right to Restrict Processing: You may request that we temporarily cease processing your data while accuracy or legitimate purpose is verified;
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to kis88;
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a request to [email protected] with the subject line "Data Rights Request" and your registered account username. kis88 will respond within 30 days of receiving a valid request. We may require identity verification before processing your request.

10 Children's Privacy

The kis88 Platform is strictly intended for adults aged 21 years and over. kis88 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close that account, void any associated bets or balances, and delete the personal data collected.

If you believe that a person under the age of 21 has registered an account on the kis88 Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.

11 Changes to This Policy

kis88 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered players via email to the address on file and/or via a notification displayed on the Platform on next login. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent modification.

Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy. If you do not agree with any changes, you should cease using the Platform and request account closure before the revised Policy takes effect.

12 Contact

For privacy-related queries, data rights requests, or concerns about how kis88 handles your personal data, please contact us:

• Email: [email protected] — Subject: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 through the Platform's in-session support function
• Response Time: Privacy-related requests addressed within 30 calendar days of receipt

When submitting a privacy enquiry, please include your registered username and a clear description of your request to ensure prompt routing to our data protection team. Please do not include sensitive document copies in initial contact emails — our team will advise if verification documents are required.