256-bit SSL Encryption
All personal data transmitted between your device and kissy88 servers is protected by industry-standard 256-bit SSL/TLS encryption. Your information cannot be intercepted in transit.
No Password Storage
kissy88 never stores account passwords in plain text. Passwords are hashed using industry-standard cryptographic algorithms before storage, making them unreadable even to our own systems.
No Sale of Personal Data
kissy88 does not sell, rent, or trade your personal information to third-party marketers. Data sharing is limited to strictly necessary service providers and legal obligations.
1. Data Controller
kissy88 ("kissy88", "we", "us", "our") is the data controller responsible for personal data collected through the kissy88 online gaming platform at kissy88.org and all associated services. This Privacy Policy applies to all users of the kissy88 platform, including registered account holders and visitors who browse the platform without registering an account.
By accessing or using the kissy88 platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This Policy forms part of the kissy88 Terms and Conditions and should be read alongside those Terms.
2. Personal Data We Collect
kissy88 collects the following categories of personal data from its users, depending on how you interact with the platform:
2.1 Identity Data
Full legal name, date of birth, nationality, and government-issued identity document numbers (including MyKad number for Malaysian players). This data is collected during account registration and the mandatory Know Your Customer (KYC) verification process.
2.2 Contact Data
Email address, mobile phone number, and residential address. Contact data is used to communicate with you about your account, transactions, and promotions (subject to your communication preferences).
2.3 Financial Data
Payment method identifiers (e.g., masked bank account numbers, e-wallet identifiers), transaction amounts, deposit and withdrawal history, and bonus redemption records. kissy88 does not store full card numbers. Payment processing is handled by certified payment service providers.
2.4 Technical Data
IP address, device type and operating system, browser type and version, session duration, pages visited, referring URL, and login timestamps. This data is collected automatically when you access the kissy88 platform.
2.5 Gameplay Data
Records of all game sessions, wagers placed, game results, bet history, and bonus participation across all kissy88 game verticals including slots, live casino, sportsbook, arcade, and roulette.
2.6 Communications Data
Records of communications between you and kissy88 support, including live chat transcripts and email correspondence, retained for quality assurance and dispute resolution purposes.
3. How We Collect Your Data
kissy88 collects personal data through the following means:
- Direct interactions: Data you provide voluntarily during account registration, KYC verification, payment processing, form submissions, and communications with kissy88 support;
- Automated technical collection: Data collected automatically through cookies, server logs, and similar tracking technologies when you access the kissy88 platform;
- Third-party sources: Data received from identity verification providers, fraud prevention agencies, payment processors, and game studios in the course of providing kissy88 services;
- Publicly available sources: Information from publicly available databases used to support KYC and AML compliance obligations.
4. Purposes of Processing
kissy88 processes your personal data for the following purposes:
- To create, maintain, and manage your kissy88 account;
- To process deposits, withdrawals, and all financial transactions on the platform;
- To perform identity verification and age verification in compliance with our 21+ age restriction and applicable regulatory requirements;
- To detect, prevent, and investigate fraud, money laundering, and other unlawful activity;
- To provide customer support and respond to your enquiries and complaints;
- To administer bonuses, promotions, and the kissy88 VIP rewards programme;
- To comply with applicable legal and regulatory obligations, including anti-money laundering reporting requirements;
- To improve the kissy88 platform through analysis of usage patterns and technical performance data;
- To send you account-related communications and, where you have consented, promotional communications about kissy88 offers and products.
kissy88 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where required by fraud prevention systems operating under applicable regulatory frameworks.
5. Legal Basis for Processing
kissy88 processes your personal data on the following legal bases:
- Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered kissy88 player, including account management and payment processing;
- Legal obligation: Processing necessary to comply with applicable anti-money laundering, KYC, age verification, and other regulatory requirements;
- Legitimate interests: Processing necessary for fraud prevention, platform security, and the improvement of kissy88 services, where such interests are not overridden by your data protection rights;
- Consent: Processing for direct marketing communications, where you have provided express consent. You may withdraw this consent at any time by contacting kissy88 support or updating your communication preferences.
6. Sharing Your Personal Data
kissy88 does not sell your personal data. We share your data only in the following circumstances and with the following categories of recipients:
6.1 Service Providers
kissy88 engages third-party service providers who process data on our behalf under strict data processing agreements. These include: payment processors (Touch n Go, Boost, GrabPay, Maybank, CIMB, and related providers), identity verification providers, fraud prevention agencies, cloud hosting providers, and game studio partners.
6.2 Legal and Regulatory Disclosure
kissy88 may disclose your personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where required to do so by applicable law, court order, or regulatory obligation. Where permitted, kissy88 will notify you of such disclosure.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of kissy88's business, your personal data may be transferred to the acquiring entity as part of that transaction. kissy88 will notify you of any such transfer and the applicable data protection terms of the new controller.
7. Data Retention
kissy88 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, and specifically:
- Account data is retained for the duration of your active kissy88 account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations;
- Transaction records and gameplay data are retained for a minimum of five (5) years for regulatory compliance purposes;
- Support communications are retained for two (2) years from the date of resolution;
- Marketing consent records are retained indefinitely as evidence of consent, but marketing data itself is deleted promptly upon withdrawal of consent.
Upon expiry of the applicable retention period, kissy88 will securely delete or anonymise your personal data.
8. Data Security
kissy88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and kissy88 servers;
- Encryption of sensitive data fields at rest, including identity document numbers and financial identifiers;
- Cryptographic hashing of account passwords — kissy88 cannot read your password and will never ask for it;
- Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
- Regular security audits and penetration testing of the kissy88 platform infrastructure;
- Automated monitoring for anomalous access patterns and potential data breach indicators.
Despite these measures, no online platform can guarantee absolute security. If you suspect unauthorised access to your kissy88 account, contact our support team immediately and change your password.
9. Your Data Rights
Subject to applicable law, you have the following rights in respect of your personal data held by kissy88:
- Right of access: You may request a copy of the personal data kissy88 holds about you;
- Right to rectification: You may request correction of inaccurate or incomplete personal data;
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kissy88's legal retention obligations;
- Right to restrict processing: You may request that kissy88 restricts processing of your data in certain circumstances;
- Right to data portability: You may request a machine-readable copy of personal data you have provided to kissy88 for transfer to another controller;
- Right to object: You may object to processing based on legitimate interests, including direct marketing;
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact kissy88 support with a written request. kissy88 will respond within thirty (30) days. We may require identity verification before processing your request.
10. Cookies & Tracking Technologies
The kissy88 platform uses cookies and similar tracking technologies to provide platform functionality, remember your preferences, analyse usage patterns, and support security features including session management and fraud detection.
10.1 Essential Cookies
Required for the kissy88 platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that help detect fraud. These cannot be disabled without breaking core platform functionality.
10.2 Analytics Cookies
Used to understand how players interact with the kissy88 platform — which pages are visited, how long sessions last, and where technical errors occur. This data is aggregated and anonymised and does not identify you personally.
10.3 Preference Cookies
Store your kissy88 platform preferences such as language settings and display choices, so you don't need to reconfigure them on each visit.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the kissy88 platform.
11. Minors
The kissy88 platform is strictly restricted to individuals aged 21 years and above. kissy88 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately close the account, void any associated transactions, and delete the personal data concerned. Parents and guardians who believe their minor child has registered a kissy88 account should contact our support team immediately.
12. Changes to This Privacy Policy
kissy88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. Where changes are material, kissy88 will notify registered users by email to their registered address or through a prominent notice on the platform at least fourteen (14) days prior to the changes taking effect. Your continued use of the kissy88 platform after the effective date constitutes acceptance of the revised Privacy Policy. The date of the most recent revision is displayed at the top of this page.