Privacy Policy

Introduction

This Privacy Policy (hereinafter referred to as the "Policy") is issued by 98kiss (hereinafter referred to as the "Platform", "we", "us", or "our") and applies to all personal data collected, processed, stored, or otherwise handled in connection with your access to and use of the online gaming services available at https://98kiss.cam (the "Website").

98kiss operates as a Malaysia-focused online gaming platform serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout Malaysia. We recognise that our players trust us with sensitive personal and financial information, and we take that responsibility seriously.

By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform.

Definitions

For the purposes of this Policy, the following definitions apply:

Data We Collect

98kiss collects personal data in the following categories, depending on the nature of your interaction with the Platform:

3.1 Identity Data. Full legal name, date of birth, gender, nationality, and copies of government-issued identity documents such as MyKad, driver's licence, or passport, as required for KYC verification.

3.2 Contact Data. Email address, Malaysian mobile phone number, and residential address. This information is collected during registration and may be updated by you at any time through your account settings.

3.3 Financial Data. Payment method details including eWallet account identifiers (e.g., Touch 'n Go, Boost, GrabPay), bank account numbers associated with FPX transactions (e.g., Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency wallet addresses where applicable. We do not store full card numbers; card payments are processed entirely through our third-party payment gateway partners.

3.4 Transaction Data. A complete record of deposits, withdrawals, bonuses credited, wagers placed, and game results associated with your account.

3.5 Technical Data. IP address, browser type and version, operating system, device identifiers, time zone, and pages visited on the Platform. This data is collected automatically through standard server logs and analytics tools.

3.6 Usage Data. Information about how you interact with the Platform, including game preferences, session durations, betting patterns, and navigation paths through the Website.

3.7 Communications Data. Records of support conversations conducted via live chat, WhatsApp, or email, including messages sent and received and the subject matter of enquiries.

How We Collect Data

We collect personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
• Automated collection: Technical and usage data collected automatically through server logs, cookies, and analytics tools when you access the Website.
• Third-party sources: Identity verification data from KYC service providers, fraud prevention data from risk management partners, and payment confirmation data from payment processors.
• Publicly available sources: In limited circumstances, where legally permitted, we may supplement your profile with information from publicly available databases for fraud prevention and compliance purposes.

Purpose of Processing

98kiss processes your personal data for the following defined purposes:

Legal Basis for Processing

98kiss processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 98kiss — i.e., to provide you with access to the Platform, process your transactions, and manage your account.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification, and record-keeping mandates.
• Legitimate interests: Processing necessary for the legitimate interests of 98kiss, such as fraud detection, platform security, and improving our services — provided that such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent for a specific processing activity (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

98kiss does not sell or rent your personal data to any third party. We may share your data only in the following limited and controlled circumstances:

7.1 Payment Service Providers. We share financial data with payment processors necessary to execute your deposit and withdrawal transactions. These include eWallet providers (Touch 'n Go, Boost, GrabPay), bank-connected FPX gateways, and cryptocurrency processing services. All payment processors operate under contractual data processing agreements with 98kiss.

7.2 Identity Verification Partners. KYC document data is shared with third-party identity verification service providers solely for the purpose of verifying your identity and age. These providers are bound by strict confidentiality and data security obligations.

7.3 Fraud Prevention and Risk Services. We may share technical and behavioural data with fraud prevention platforms to detect and prevent account compromise, money laundering, and other prohibited activity.

7.4 Legal and Regulatory Authorities. We may disclose your personal data to governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or regulatory directive. We will notify you of any such disclosure where legally permitted to do so.

7.5 Business Transfers. In the event of a merger, acquisition, or asset sale involving 98kiss, your personal data may be transferred to the acquiring entity as part of the transaction, provided that the acquiring entity agrees to process your data in accordance with this Policy or provides you with equivalent protections.

International Data Transfers

Some of the third-party service providers used by 98kiss operate from jurisdictions outside Malaysia. Where your personal data is transferred internationally, 98kiss takes steps to ensure that an adequate level of protection is in place, including through the use of contractual data transfer agreements, data processing agreements with standard contractual clauses, or other legally recognised transfer mechanisms.

By using the Platform, you acknowledge that your personal data may be processed in countries outside Malaysia. Where such transfers occur, we ensure that your data continues to receive a standard of protection consistent with this Policy.

Data Retention

98kiss retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with 98kiss, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for AML and audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to a dispute or investigation, in which case it is retained until the matter is fully resolved.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent to demonstrate compliance.
• Technical and log data: Retained for up to twelve (12) months unless a security incident requires extended retention for investigative purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Security Measures

98kiss implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit AES encryption for data stored on Platform servers.
• TLS 1.2 or higher for all data transmitted between your device and the Platform.
• Two-factor authentication (2FA) available for all player accounts.
• Role-based access controls restricting staff access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Incident response procedures to detect, contain, and report data breaches in a timely manner.

While 98kiss takes all reasonable steps to protect your data, no electronic transmission or storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly reporting any suspected unauthorised access to your account.

Cookies & Tracking Technologies

The 98kiss Website uses cookies and similar tracking technologies to enhance your experience, maintain your session, and collect analytics data. The following categories of cookies may be set when you visit the Platform:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without breaking core Platform functionality.
• Preference cookies: Store your language preferences, display settings, and other customisations to personalise your experience across sessions.
• Analytics cookies: Collect anonymised or aggregated data about how visitors use the Platform, including pages visited, time spent, and navigation paths. This data is used to improve Platform performance and content.
• Security cookies: Support fraud detection and security monitoring functions by tracking anomalous session behaviour.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. 98kiss does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.

Minors & Age Restriction

The 98kiss Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to persons under the age of 21.

As part of our KYC process, all registered players are required to provide proof of age before withdrawal of funds is permitted. Where we discover that an account has been registered by a person under 21, we will immediately close the account, delete the associated personal data to the extent permitted by law, and return any deposited funds in accordance with our Terms & Conditions.

If you believe that a minor has registered an account on the Platform, please contact our support team at [email protected] without delay. For responsible gambling resources and information about protecting underage individuals from gambling-related harm, please visit our Responsible Gambling page.

Your Data Rights

Subject to applicable law and verification of your identity, you have the following rights in respect of your personal data held by 98kiss:

To exercise any of the above rights, please contact our support team using the details in Section 15. We will respond to all verified requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, of which you will be notified.

Please note that certain rights are subject to limitations where data processing is required for the fulfilment of a legal obligation (such as AML record-keeping), in which case we will explain the basis for any restriction at the time of your request.

Changes to This Policy

98kiss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — meaning they significantly alter how we collect, use, or share your personal data — we will notify you by email to the address associated with your account, or by a prominent notice on the Platform, at least 14 days prior to the changes taking effect.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 98kiss, please contact us through any of the following channels:

• Live Chat: Available on the Platform from 9:00 AM to 12:00 AM (MYT), seven days a week. For privacy-related matters, please indicate "Privacy Request" at the start of your message.
• WhatsApp Support: Available during the same operating hours as live chat. Please include "Privacy Request" in your opening message.
• Email: [email protected] — for data access requests, correction requests, or erasure requests, please use the subject line "Data Rights Request". We aim to acknowledge all privacy-related emails within one business day and to resolve requests within 30 calendar days.

When submitting a data rights request, please provide your registered account username and the email address associated with your account so that we can verify your identity before processing the request. We may request additional verification documents where appropriate.