OFFICIAL DOCUMENT

Privacy Policy KIS918 – Data Protection for Malaysian Players

Your privacy is our priority. This document transparently explains how kis918 collect, use, store, and protect your personal data as a player on our platform in Malaysia.

Updated: January 2026 256-bit SSL Encryption No Data Sales Full Data Access Bahasa Melayu

Contents of This Policy

Data We Collect
How We Use Your Data
Data Sharing
Security & Storage
Your Rights as a User
Cookie Policy
Contact Us

Privacy Commitment KIS918

Six core principles that guide how we manage your personal data

256-bit SSL Encryption

All data transmitted between your device and our servers kis918 is protected with 256-bit SSL encryption — the same security standard used by Malaysia's major banks, including Maybank and CIMB. No third party can intercept or read your information while it is in transit.

No Data Sales

kis918 have never and will never sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you. We use it solely to provide you with better service — not to generate revenue through third-party advertising.

Control in Your Hands

You have full rights to access, correct, download, or request deletion of your personal data held by us. Exercising these rights is straightforward and can be done through your account settings or by contacting our support team kis918 directly.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of physical and digital security. Access to these databases is strictly limited to staff who require it to perform their job functions, with all access logged and audited on a regular basis.

Minimum Data Collection

kis918 only collects data that is strictly necessary to provide our platform services. We do not collect information unrelated to your account operations, transactions, or gaming experience. This principle of data minimisation is a core part of our privacy commitment.

Policy Change Notice

If we make material changes to this Privacy Policy, you will be notified via email or an in-platform notification at least 14 days before the changes take effect. We believe in transparency — you have the right to know how your data will be handled before any changes come into force.

Types of Data We Collect

A brief overview of the categories of personal data we process and the reasons for collecting them

Identity Data

Full name, date of birth, phone number, and email address provided during registration. Required to verify your identity and confirm that you meet the minimum age requirement of 18 years.

Transaction Data

Records of deposits, withdrawals, and betting history on the platform. Required for processing transactions, resolving disputes, and meeting applicable financial audit requirements.

Gaming Data

Gaming session history, betting statistics, and win/loss records. Used to provide in-account statistics, identify potential problem gambling patterns, and improve the overall platform experience.

Technical Data

IP address, device type, operating system, browser type, and connection log data. Used for account security, detecting unauthorized access, and optimizing platform performance for your device.

Why Do We Collect This Data?

For many Malaysian users, the first question that comes to mind is straightforward: why does the platform need to know all this? The answer is equally straightforward — every category of data that kis918 everything we collect serves a specific, justifiable purpose. Nothing is kept on the basis that it might come in handy someday.

Identity data is required to confirm you are who you claim to be — this protects you from unauthorised account use and enables us to meet the compliance obligations applicable to online platforms. Transaction data is a financial record necessary for processing deposits and withdrawals correctly, resolving any disputes and ensuring every cent owed to you is handled accurately.

Gaming data allows us to identify patterns that may indicate problem gambling — this forms part of our commitment kis918 towards responsible gaming. Technical data is also our primary security tool: when the system detects a login from an unusual location or device, we can alert you and take immediate protective action before any harm occurs.

Last updated: 1 January 2026
1

Introduction

This Privacy Policy ("Policy") describes how KIS918 ("we", "platform" or "kis918") collects, uses, stores, discloses, and protects your personal data when you use our website, mobile app, and all services available under the kis918.xyz domain.

We understand that your trust in us depends not only on the quality of our games and the efficiency of our payouts — but also on the confidence that your personal information is handled with respect, responsibility, and transparency. This policy is written in plain, straightforward language rather than confusing legalese, because we believe you deserve to know exactly what happens to your data.

By registering an account or using any of our services kis918, you agree to the collection and use of information as described in this Policy. This Policy should be read together with Terms & Conditions and Responsible Gaming Guide us.

Plain English Summary: We collect only the data needed to deliver the best service to you. We do not sell your data. You may request access, correction, or deletion of your data at any time. We protect your data with the latest technology.

2

Data We Collect

kis918 collect personal data in two main ways: data you provide directly to us, and data collected automatically when you use the platform.

Data you provide directly:

  • Upon registration: Full name, Malaysian phone number, email address, and chosen password
  • During identity verification (KYC): National identification card number or passport number, along with copies of the relevant documents when required
  • During financial transactions: Digital wallet details (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay) or FPX account details (Maybank2u, CIMB Clicks) for deposit and withdrawal purposes
  • When contacting support: The content of your communications with our customer support team, including complaints, enquiries and feedback

Automatically collected data:

  • Log & technical data: IP address, web browser type and version, device operating system, screen resolution, time zone, and access timestamps
  • Usage data: Pages visited within the platform, features used, session duration and navigation patterns
  • Gaming data: Complete gaming session history including game type, bet amounts, outcomes and duration
  • Cookie data: Information collected through cookies and similar tracking technologies (see Section 9 for further details)
3

Legal Basis for Data Processing

kis918 processes your personal data on valid legal grounds. Depending on the purpose of processing, the bases we rely on are:

  • Contractual Performance: Processing necessary to deliver the platform's services to you — including account management, transaction processing, and game operations
  • Legitimate Interests: Processing for platform security, fraud prevention, performance analysis and service improvement — where these interests do not override your privacy rights
  • Legal Obligations: Processing required to fulfil legal obligations applicable to the platform's operations
  • Consent: For optional marketing communications — you may withdraw consent at any time through your account settings or by contacting us

Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to the withdrawal.

4

How We Use Your Data

kis918 use the personal data collected for the following purposes:

  • Account management: Creating and managing your account, verifying your identity, processing login requests and managing account security
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals to your registered payment method
  • Gaming service provision: Running and recording all gaming sessions including live casino, slots, Sports Betting, poker and lottery
  • Security and fraud prevention: Detecting and preventing unauthorised access, bot usage, player collusion, and other fraudulent activity that undermines the integrity of the platform
  • Responsible gaming: Monitoring gaming patterns to identify early signs of problem gambling and to ensure that available self-control tools are functioning correctly
  • Customer support: Resolving enquiries, complaints and disputes submitted to our support team
  • Service communications: Sending important notifications about your account, transactions, policy changes, and security information
  • Platform improvement: Analysing usage data in aggregate (not at an individual level) to identify opportunities for improvement in platform design, performance, and features
  • Marketing communications (with consent): Sending information about promotions, bonuses and the latest offers to players who have given consent to receive such communications
5

Data Sharing with Third Parties

kis918 does not sell, rent, or trade your personal data. However, there are limited situations in which we may share your information with specific third parties:

  • Payment service providers: Information required to process your transactions is shared with digital wallet and banking providers (Touch 'n Go, DuitNow, GrabPay, FPX providers) — strictly to the extent necessary to complete the transaction
  • Game software providers: Technical information required to operate certain games may be shared with the game software providers we work with — subject to strict data protection agreements
  • Technical service providers: Hosting companies, cybersecurity services, and analytics tools we use to operate the platform — all bound by data processing agreements that prevent them from using your data for any other purpose
  • Legal authorities: When required by law or a valid court order, we may be obligated to disclose information to the relevant authorities

Our Commitment: Every third party that receives your data from kis918 are bound by confidentiality and data protection agreements that prohibit them from using your information for any purpose beyond what is specifically authorised. We select partners whose security standards are equivalent to or exceed our own.

6

Data Security

kis918 implement a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental disclosure, alteration, or destruction.

Technical security measures we implement:

  • Encryption in transit: All communications between your device and our servers are protected with TLS 1.3 / SSL 256-bit encryption
  • Encryption at rest: Sensitive data such as payment information is stored in encrypted format within our database
  • Access controls: Staff access to player data is restricted on a least-privilege basis — only personnel who require access for their specific role are permitted
  • Two-factor authentication: Available for player accounts and mandatory for all internal administrative access
  • Continuous monitoring: Intrusion detection systems and anomaly monitoring active around the clock
  • Regular security audits: Penetration testing and security audits are conducted regularly by independent third parties

While we take reasonable precautions, no system is 100% secure. In the event of a security breach that materially affects your data, we will notify you as promptly as possible and take immediate remedial action.

7

Data Retention Period

kis918 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. Retention periods vary by data type:

  • Active account data: Retained for the duration your account is active and for a period following account closure as required by compliance obligations
  • Financial transaction records: Retained in accordance with applicable accounting and financial legal requirements — typically for a minimum period of 7 years
  • Gaming history: Retained for a minimum of 2 years from the session date for dispute resolution and responsible gambling purposes
  • Support communication logs: Retained for 3 years after the last communication for reference and complaint resolution purposes
  • Cookie data: Depending on the type of cookie — session cookies are deleted when you close your browser, while persistent cookies have a set expiry period (see Section 9)

When data is no longer needed, we will securely delete or anonymise it in accordance with our established deletion procedures.

8

Your Rights as a User

As a user of the platform kis918, you have the following rights regarding your personal data:

  • Right to Access: You have the right to request and receive a copy of the personal data we hold about you
  • Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data
  • Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data ("right to be forgotten") — subject to applicable legal retention requirements
  • Right to Restriction of Processing: You have the right to request a restriction on the processing of your data under certain circumstances — for example, during the period of a dispute investigation
  • Right to Data Portability: You have the right to receive the data you have provided to us in a machine-readable format and to transfer it to another party
  • Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time
  • Right to Withdraw Consent: You may withdraw any consent you have given for data processing at any time

To exercise any of these rights, please contact us at support@kis918.xyz with the subject line "PRIVACY RIGHTS REQUEST". We will process your request within 30 days. In complex cases, this period may be extended to 60 days, with notice provided to you.

Identity Verification: To protect the security of your account, we may require identity verification before processing any privacy rights request. This ensures that no unauthorised party can access or delete your data.

9

Cookie Policy

Platform kis918 uses cookies and similar tracking technologies to enhance your experience, secure your account and understand how our platform is used. Cookies are small text files stored in your web browser when you visit our platform.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect platform functionality and your ability to log in to your account.

10

Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to, stored at or processed by servers located outside Malaysia. This may occur in connection with the use of cloud hosting services, game provider services or other technical infrastructure.

When your data is transferred outside Malaysia, kis918 ensuring adequate protection is in place through:

  • Data transfer agreements requiring recipients to uphold equivalent data protection standards
  • Use of standard transfer mechanisms such as recognised standard contractual clauses
  • Selecting service providers that operate in jurisdictions with comprehensive data protection legislation
11

Children's Privacy

Platform kis918 is intended for adult users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from an underage individual, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes your underage child has accessed our platform, please contact us immediately at support@kis918.xyz so that we can take the appropriate action.

12

Amendments to This Policy

kis918 reserve the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform service improvements. Any amendments will be published on this page with an updated "Last Updated" date.

For material changes — that is, changes that significantly alter how we collect, use or protect your personal data — we will provide notice via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make decisions based on the latest information.

Last Updated: This Privacy Policy was last updated on 1 January 2026. We encourage you to check this page periodically to stay informed about how we manage your personal data.

13

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, please reach out to us through the following channels:

  • Email: support@kis918.xyz — use the subject line "PRIVACY ENQUIRY" or "PRIVACY RIGHTS REQUEST"
  • Live Chat: Via the in-platform live chat button, available 24/7
  • Response time: We aim to respond to all privacy enquiries within 5 business days

We take every privacy enquiry and complaint seriously. All privacy-related communications you send will be handled by team members specifically trained in data management and privacy protection. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant regulatory authority in your jurisdiction.

Your Privacy Rights At a Glance

A simple way to exercise your privacy rights at KIS918

Right to Data Access

Request a copy of all personal data we hold about you. Processed within 30 days and delivered to your email in a readable format.

Right to Rectification

Found an error in your data? Update it directly via your profile settings, or contact our support team for corrections that require additional verification.

Right to Erasure

Request erasure of your data when it is no longer needed for its original purpose or you withdraw your consent — subject to applicable legal retention obligations.

Right to Restriction

Request a restriction on the processing of your data in certain circumstances, such as when a dispute regarding data accuracy is under investigation.

Right to Portability

Receive your data in a machine-readable format (JSON or CSV) for transfer to another platform upon request.

Right to Object

Object to the processing of your data for direct marketing purposes at any time via the notification settings in your account or by contacting support.

How to Exercise Your Privacy Rights

1
Identify the Type of Request You Need

Specify which right you wish to exercise — data access, correction, erasure, restriction, portability or objection. This helps us process your request more quickly and accurately.

2
Contact the KIS918 Privacy Team

Send an email to support@kis918.xyz with the subject line "PRIVACY RIGHTS REQUEST – [Request Type]". Include your full name, registered phone number, and a clear description of your request. Alternatively, use the in-platform live chat for simpler requests.

3
Identity Verification

To protect the security of your account, we may request a brief identity verification before processing your request. This typically only requires confirming an OTP sent to your registered phone number.

4
Receive a Response Within 30 Days

We will process your request and respond within 30 business days. For complex requests, this period may be extended to up to 60 days, with an explanatory notice sent to you. There is no charge for exercising these rights.

FAQ – Privacy Policy KIS918

Answers to the most commonly asked questions about our privacy and data protection practices

KIS918 does not sell, rent, or trade your personal data to third parties for marketing purposes. We only share information when strictly necessary, and only in three limited situations: with payment service providers (Touch 'n Go, DuitNow, FPX, and others) to process your transactions, with game software providers to operate specific games, and with authorities when required by law. All such sharing is governed by strict data protection agreements.

Yes, you have the right to request deletion of your personal data (the "right to be forgotten"). Submit your request to support@kis918.xyz with the subject line "DATA DELETION REQUEST". Please note, however, that certain categories of data are legally required to be retained — such as financial transaction records that must be kept for a minimum period to meet audit obligations. Data not subject to legal retention requirements will be deleted or anonymised within 30 days of your request.

KIS918 does not store your full digital wallet or bank account details in our systems. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, the transaction is processed directly through the respective provider's secure payment gateway. We only receive a verification token and transaction record that contains no full sensitive information. All communication with payment gateways is protected by 256-bit SSL encryption.

When you close your KIS918 account, your active account data will be set to inactive status. Financial transaction records will be retained for the period required by law (typically 7 years) before being securely deleted. Gaming data is kept for 2 years after account closure. Data not subject to legal obligations will be deleted or anonymised within 90 days. You will not receive any marketing communications after your account is closed. If your account is closed for responsible gambling reasons, we will also retain a record of your self-exclusion to prevent unintentional re-registration.

Privacy & Responsible Gaming

Your gaming data is also used to safeguard your wellbeing

Monitoring to Keep You Protected. KIS918 uses your gaming data not only to record your play history, but also to detect patterns that may indicate problem gambling — such as sharply escalating bets, repeated deposit attempts following significant losses, or drastic changes in playing habits. This is one of the most important and beneficial uses of your data.

Enforced Self-Exclusion Limits. When you set deposit limits, loss limits or time limits on your account, the kis918 using real-time session data to ensure those limits are enforced. This data is processed in real time solely to protect your decisions — and for no other purpose.

Respect for Self-Exclusion Decisions. When you activate self-exclusion, kis918 retains a record of this decision to ensure it is fully respected — including preventing re-registration using the same details. This is the only ongoing use of data after account closure that we consider essential for your wellbeing.

Related Documents

This Privacy Policy forms part of a broader policy framework. For a complete overview of your rights and responsibilities as a KIS918 member, please also refer to Terms & Conditions ours that sets out the full terms and conditions of platform use, as well as Responsible Gaming Guide providing information on self-control tools and support resources available in Malaysia.

Confident in Our Data Protection? Join KIS918

Register for free and enjoy 500+ games with the assurance that your data is protected by industry-leading security standards

Register Now

Still Have Questions About Your Data Privacy?

Support team kis918 always here to answer any questions about how we manage your personal data. Reach us via 24/7 live chat or email at support@kis918.xyz.

⚠️ Gambling involves financial risk. Only play with money you can afford to lose. 18+ only.

Bahasa Melayu