Kiss app Privacy Policy – Personal Data Protection for Malaysian Players

Kiss App is an online Sports Betting and casino platform serving players in Malaysia. We understand that privacy is a fundamental right, and we take our responsibility to protect the personal information you entrust to us very seriously.

This Privacy Policy applies to all Kiss App users, including registered members, unregistered website visitors, and anyone who interacts with our platform via mobile device, personal computer, or any other device.

We operate within the framework of Personal Data Protection Act 2010 (PDPA) Malaysia and are committed to ensuring that all data we collect and process is handled lawfully, fairly, and transparently. If at any time you feel that kiss app is not complying with this policy, please contact us directly through the channels listed at the end of this document.

Kiss App only collects data that is necessary for legitimate purposes in operating our services. The following are the categories of data we may collect from you:

2.1 Personal Identification Data

2.2 Financial & Transaction Data

To process deposits and withdrawals, we record financial transaction details including the payment method used (Touch 'n Go eWallet, GrabPay, DuitNow, ShopeePay, Boost, Maybank2u, CIMB Clicks, or other FPX methods), transaction amount, date and time, and transaction reference number. We do not store your PIN, password, or full account credentials for any e-wallet or online banking service.

2.3 Platform Activity Data

• Betting records – game type, amount, odds, outcome (football, badminton, Baccarat, slots, live casino, etc.)
• Login records — date, time, and device used
• Customer support interaction history
• Account preferences and settings

2.4 Technical & Device Data

• IP address and network information
• Device type, operating system, and browser version
• Unique device identifier (for account security)
• Cookie data and similar tracking technologies

Every piece of data we collect has a clear and lawful purpose. kiss app uses your personal information for the following:

• Service provision: Managing your account, processing deposits and withdrawals, and providing access to all games and betting markets on our platform.
• Identity verification and security: Conducting KYC checks, verifying age (18+), and protecting your account from unauthorised access.
• Legal compliance: Fulfilling our obligations under applicable laws, including Malaysia's PDPA, anti-money laundering (AML) regulations, and financial reporting requirements.
• Customer support: Responding to inquiries, resolving issues, and handling disputes efficiently.
• Platform improvements: Analysing usage patterns to improve the user experience, enhance platform features, and optimise technical performance.
• Service communications: Sending important notifications about your account, changes to terms, or security issues.
• Relevant promotions: With your consent, sending you information about kiss app offers, bonuses, and promotions that may interest you.
• Fraud prevention: Identifying and investigating suspicious activity to protect all members of the platform.

Kiss app does not sell, rent, or trade your personal data to third parties for commercial purposes. However, we may share your data in limited and controlled circumstances as follows:

4.1 Trusted Service Providers

We engage trusted third-party service providers to support our operations. These include payment processing providers (Malaysian FPX gateways and e-wallets), gaming software providers, and secure cloud storage services. All providers are bound by strict confidentiality agreements and are only permitted to use data for the specific purposes we have defined.

4.2 Legal Requirements & Authorities

Kiss App may be required to disclose your data to government authorities or law enforcement in the following circumstances:

• When required by a valid court order or warrant
• To comply with AML (anti-money laundering) reporting requirements
• In financial crime or fraud investigations
• To protect the rights, property, or safety of Kiss App, our players, or the public

4.3 Business Transfers

In the event of a merger, acquisition, or sale of kiss app's business assets, your personal data may be transferred as part of those assets. You will be notified before your data becomes subject to a different Privacy Policy.

Kiss app continually invests in the latest technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, alteration, or destruction.

5.1 Technical Security Measures

• 256-bit SSL Encryption for all data transmitted between your device and our servers – the same standard used by Malaysia's leading banks
• Encryption of sensitive data stored in our databases
• Multi-layered firewalls and an intrusion detection system (IDS) active 24/7
• Two-factor authentication (2FA) is available for all member accounts
• Real-time account activity monitoring to detect suspicious behaviour
• Regular security testing and audits conducted by independent cybersecurity experts

5.2 Internal Access Controls

Access to member personal data within the Kiss App organisation is restricted on a need-to-know basis. Only staff who require access to carry out their duties are granted permission, and all access is logged and monitored regularly.

5.3 Your Responsibilities

Data security also depends on your own actions. We encourage you to:

• Using a strong, unique password for your Kiss App account
• Do not share your login credentials with anyone
• Enabling two-factor authentication (2FA) in your account security settings
• Log out of your account when using a shared or public device
• Report any suspicious activity on your account to our support team immediately

Kiss App retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

Once the retention period ends, your personal data will be securely deleted or anonymised so it can no longer be linked back to you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

• Right to Access: You have the right to request a copy of the personal data we hold about you. kiss app will provide this information within 21 days of receiving a valid request.
• Right to Rectification: If your data is inaccurate, incomplete, or out of date, you have the right to request a correction. You can also update much of your information directly in your account settings.
• Right to Object: You may object to the processing of your data for marketing purposes at any time, without needing to provide a reason.
• Right to Erasure: Under certain circumstances — such as when data is no longer needed for its original purpose — you may request the deletion of your personal data. Please note that some data may need to be retained to comply with legal obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data while a dispute is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the rights above, please contact our data protection team at support@kissapp.app with the email subject line "Privacy Rights Request". We will verify your identity and respond within 30 calendar days.

The Kiss App website and platform use cookies and similar tracking technologies to enhance the user experience and collect analytics data that helps us improve the platform.

8.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login, session security, and account preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform (pages visited, time spent on each page) to help us understand and improve the user experience. All data is collected anonymously.
• Functional Cookies: Saves your preferences such as language, display settings, and other choices to deliver a more personalised experience.

8.2 Cookie Controls

You can manage and delete cookies through your internet browser settings. Please note, however, that disabling essential cookies may prevent you from fully using certain features of the Kiss App platform.

As a platform operating on global technical infrastructure, your personal data may in some cases be stored or processed outside Malaysia – for example, when using cloud storage services or international game software providers.

In all such cases, kiss app ensures that:

• Such data transfers comply with Malaysia's PDPA requirements
• Data recipients are bound by appropriate confidentiality and data protection agreements
• A level of data protection equivalent to that provided in Malaysia is maintained
• Data transfers occur solely on the basis of legitimate business need

If you have any questions, concerns, or complaints about how Kiss App handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels: