Data Protection

Privacy Policy 918kiss ori – Your Data, Our Responsibility

We understand how important your privacy is. This document clearly explains how 918kiss ori collects, uses, stores, and protects your personal information in accordance with Malaysian law.

Updated: 1 January 2026
Compliant with PDPA 2010
256-bit SSL

Our Six Core Privacy Protection Principles

918kiss ori has built an integrated data protection system encompassing multiple layers of security to ensure your information remains safe at all times.

End-to-End Data Encryption

All data transmitted between your browser and the 918kiss ori servers is protected with 256-bit SSL encryption. This means sensitive information such as payment details and passwords cannot be intercepted by any third party during transmission.

Malaysia PDPA Compliance

Our Privacy Policy is fully built in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the full right to access, correct, and request the deletion of your personal data at any time.

Strict Access Control

Access to members' personal data within 918kiss ori is strictly limited and controlled on a "need-to-know" basis. Only authorised personnel may access sensitive data, and all access is logged for audit purposes.

No Data Selling

918kiss ori has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes or any commercial purpose without your explicit consent.

Clear Data Retention Period

Your personal data is retained only for as long as required by the purpose of collection or by law. After that period, data is securely deleted or anonymised in accordance with established procedures.

Immediate Breach Notification

In the event of any security incident involving your data, 918kiss ori is committed to notifying you within the timeframe required by law and taking immediate action to contain any potential damage.

Important Note: This Privacy Policy describes our practices regarding personal information. By using the 918kiss ori platform, you agree to the terms stated herein. Please read carefully.

1

Introduction

918kiss ori ("we", "Platform", "us") is committed to protecting the privacy of all users who access and use our services at 918kissori.app. This Privacy Policy ("Policy") describes the types of personal information we collect, how it is used, with whom it is shared, and your rights as an individual whose data we handle.

This Policy applies to all users of our platform — including website visitors, registered players, and VIP members — covering all interactions through our website and mobile app.

We comply with Personal Data Protection Act 2010 (PDPA) Malaysia and all related legislation currently in force. In the event of any conflict between this Policy and the provisions of applicable law, the legal provisions shall take precedence.

This Privacy Policy is part of the Terms and Conditions our comprehensive policy and should be read together with it.

2

Personal Data We Collect

We collect various types of personal data depending on how you interact with our platform. Below is a summary of the data collected:

Data Category Type of Information Collection Method
Identity Information Full name, date of birth, IC/passport number Registration form & KYC
Contact Information Phone number, email address, residential address Account registration
Financial Information Bank account number, bank name, transaction history Deposit & withdrawal process
Technical Data IP address, device type, browser, operating system Collected automatically during use
Game Data Game history, wagering, wins, balance In-platform activity
Communication Data Support chat records, emails, feedback Interactions with our team

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information, political views, or religious beliefs unless required by law.

Please ensure all information you provide is accurate and current. Incorrect information may affect your KYC process and fund withdrawals.

3

How We Use Your Data

The personal data we collect is used solely for legitimate purposes related to the provision of 918kiss ori services. The following are the primary purposes for which your data is used:

  • Account Management — creates, verifies, and manages your member account including the mandatory KYC process.
  • Transaction Processing — processes deposits, withdrawals, and all financial transactions carried out through our platform.
  • Service Provision — enables you to access games, promotions, the VIP programme, and all platform features seamlessly.
  • Security & Fraud Prevention — detects and prevents fraudulent activity, money laundering, and unauthorised account access.
  • Service Communications — sends important notices relating to your account, transactions, and policy changes that require your attention.
  • Promotional Communications — sends bonus offers, promotions, and platform update information (subject to your communication preferences, which can be adjusted in your account settings).
  • Platform Improvement — analyses usage patterns on an aggregated and anonymised basis to improve design, performance, and user experience.
  • Legal Compliance — fulfils reporting obligations to the relevant regulatory authorities in accordance with applicable Malaysian law.

We will not use your data for any other purpose without obtaining your explicit consent in advance, unless required by law.

4

Data Sharing with Third Parties

918kiss ori follows a limited and purpose-driven data sharing principle. We share your personal data only under the following circumstances:

  • Payment Service Providers — payment processing providers such as DuitNow, FPX, TNG eWallet, Boost, and GrabPay, required to process your transactions. They are subject to strict data confidentiality agreements.
  • Identity Verification (KYC) Providers — trusted and certified third parties who assist us in carrying out the identity verification process required by law.
  • Technology Service Providers — companies providing technical infrastructure such as server hosting, analytics services, and IT support — all subject to binding data protection agreements.
  • Legal Authority — Malaysian government authorities or regulatory bodies when required by law, court order, or official investigation.
  • Business Transfer — in the event of a company merger, acquisition, or asset sale, member data may be transferred to the new entity, which will maintain data protection to the same or higher standard.

In all of the above data sharing scenarios, we ensure that the receiving parties are bound by confidentiality and data protection obligations equivalent to our own standards.

Our Guarantee: 918kiss ori has never and will never sell your personal data to advertisers, data brokers, or any party unrelated to the provision of our platform services.

5

Data Security

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

  • 256-bit SSL/TLS Encryption for all communications between your browser and our servers.
  • Data encryption at rest — sensitive data such as financial information is encrypted when stored in our database.
  • Firewall and intrusion detection system (IDS) monitored continuously 24 hours a day.
  • Two-Factor Authentication (2FA) available to all member accounts as an additional security layer.
  • Regular security audits by independent third-party cybersecurity experts.
  • Internal access control policy ensuring only authorised staff can access member data.
  • Secure and regular data backups to ensure continuity of service.

While we implement the best available security measures, no system is entirely perfect. You also play an important role in keeping your account secure — use a strong password, enable 2FA, and never share your login credentials.

918kiss ori will never ask for your password via email, chat, or phone. If anyone claims to represent us and requests your password, please report it to us immediately.

6

Your Rights Under PDPA

As an individual whose data we handle, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

Access Rights

You have the right to request a copy of the personal data we hold about you. Requests can be submitted via our support email and will be processed within 21 business days.

Right to Rectification

If the data we hold about you is inaccurate or outdated, you have the right to request a correction. Basic account data can be updated directly in your profile settings.

Right to Erasure

You may request the deletion of your personal data when it is no longer required for its original collection purpose, subject to any applicable legal retention obligations.

Right to Restrict Processing

You may opt out of marketing communications at any time via the unsubscribe link in our emails or by contacting our support team.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a machine-readable format for transfer to another service provider if desired.

Right to Complain

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

To exercise any of the above rights, please contact us via our support email. We may need to verify your identity before processing your request for security purposes.

7

Cookies & Tracking Technologies

918kiss ori uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies — required for core platform functions such as login session management and security settings. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies — collects information about how you use the platform (e.g. most frequently visited pages, error messages) to help us improve our service. This data is collected on an aggregated and anonymised basis.
  • Functional Cookies — stores your preferences such as language, display settings, and saved login information to make repeat visits more convenient.
  • Analytics Cookies — helps us understand traffic patterns and user behaviour through our internal analytics tools for product improvement purposes.

You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality of some platform features. Continued use of our platform after the cookie notice is acknowledged constitutes your consent to the use of cookies as described.

8

Child Data Protection

The 918kiss ori platform is exclusively for individuals aged 18 years and above. We do not accept registrations from individuals under the age of 18 and do not knowingly collect their personal data.

Our KYC process is specifically designed to verify the age of every new player through valid identity document checks. Should we find an account held by an underage individual, the account will be terminated immediately and all funds returned upon verification.

If you believe a minor has registered on our platform, please contact our team immediately. We will take prompt action to address the situation.

9

Cross-Border Data Transfers

In certain situations, your personal data may be transferred to or processed outside Malaysia, particularly when we engage international technology service providers. Any such transfer will be carried out with adequate safeguards, including:

  • Ensuring that recipient countries maintain an adequate level of data protection.
  • Implementing standard data protection clauses in agreements with overseas service providers.
  • Obtaining your consent where required under applicable law.

918kiss ori's primary servers operate in the Asian region and are subject to relevant data protection laws. We consistently ensure an equivalent level of data protection regardless of where your data is physically processed.

10

Data Retention Period

918kiss ori retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. The following are our general data retention guidelines:

  • Active Account Data — retained for the duration your account is active and for 5 years after account closure for audit and legal compliance purposes.
  • Financial Transaction Records — retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements.
  • KYC Data — retained for the duration of the active account plus 5 years after closure to meet anti-money laundering (AML) requirements.
  • Support Communication Logs — retained for 3 years for dispute resolution and service quality improvement purposes.
  • Analytics Data — anonymised usage data may be retained indefinitely as it cannot be used to identify any specific individual.

When data is no longer needed, it will be securely deleted or anonymised in accordance with our established data disposal procedures. You may request further information about the retention period for your specific data by contacting our team.

We conduct regular reviews of stored data to ensure that data no longer required is deleted according to the established schedule.

11

Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your data privacy rights, please contact our Data Protection Officer (DPO) via:

  • Email: [email protected]
  • Live Chat: Available 24/7 at the bottom-right corner of the platform
  • Response Time: Within 3 business days for general enquiries; 21 business days for formal data rights requests

When submitting a data-related request, please include your account username and a clear description of your request to expedite the process. We may need to verify your identity before processing the request to ensure the security of your data.

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to registered members via an in-platform notice or email. The "Updated" date at the top of this page indicates the current version of this document.

Understanding Your Data Privacy in Depth

Many users of online platforms — not just gaming platforms — are not fully aware of how much data is actually collected each time they use a digital service. At 918kiss ori, we believe that transparency is the foundation of trust. That is why we want to explain not only what we do, but why we do it.

Take the KYC (Know Your Customer) process as an example. For many new users, submitting a copy of their IC or passport may feel like a burden or an invasion of privacy. In reality, KYC is a protective mechanism that serves you — not us. It ensures that no one else can register an account using your identity, and it also protects the platform from being used for money laundering activities that could harm all other users.

Why Is Technical Data Collected?

Technical data such as IP addresses and device information may seem like surveillance tools, but they actually serve as an important security layer. When our systems detect a login from an unusual location or device, we can alert you or temporarily block access until verification is completed. This is active protection for your account — not merely data collection for our own benefit.

Privacy and Responsible Gaming

Game data such as betting history and gameplay patterns is also used for purposes of responsible gaming. We monitor gameplay patterns not to track you personally, but to identify whether a player may need help or support regarding gambling habits. This is part of our social responsibility as a trusted gaming platform.

Your Rights Are Real, Not Just Words

In Malaysia, the PDPA grants you clear rights over your personal data. At 918kiss ori, we do not treat these rights as mere legal formalities. We have established clear internal processes to ensure that data access, correction, and deletion requests are handled promptly and efficiently. If you ever feel your privacy rights have not been respected, you can contact us directly — we take every complaint seriously.

Keep Your Information Up to Date

One of the best ways to protect your own privacy is to ensure your account information is always accurate and up to date. An outdated phone number or email address means we cannot reach you for important security alerts. Review your profile settings periodically and update any changes promptly.

Join Us

Your Data Is Safe. Your Game Is Fun.

918kiss ori protects your privacy to the highest standards while delivering the best online entertainment experience for users in Malaysia. Register today and enjoy complete peace of mind.

256-bit SSL Secured Compliant with PDPA 2010 Trusted KYC No Data Selling
Bahasa Melayu