kissapk Privacy Policy

1. Who We Are

kissapk ("we", "us", or "our") operates the online gaming and sports betting platform accessible at kissapk.lat. We serve registered adult players (aged 21 and above) across Malaysia, including users based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and other states throughout the country.

This Privacy Policy applies to all personal data processed when you visit our website, register an account, make deposits or withdrawals, place bets, engage with our customer support, or interact with any kissapk-operated service. By accessing kissapk, you acknowledge that you have read and understood this policy.

2. Personal Data We Collect

We collect personal data only to the extent necessary for delivering our services, meeting regulatory obligations, and maintaining account security. The categories of data we collect include:

• Identity Data: Full name, date of birth, MyKad / passport number, nationality, and a copy of government-issued identification for KYC (Know Your Customer) verification.
• Contact Data: Email address, mobile number, and residential address (city/state, e.g. Kuala Lumpur, Penang).
• Account Data: Username, password (stored as a hashed value — never in plain text), account preferences, transaction history, and betting activity records.
• Financial Data: Payment method details sufficient to process deposits and withdrawals (e.g. bank name, e-wallet type such as Touch 'n Go eWallet or Boost, DuitNow ID). We do not store full card numbers or online banking credentials.
• Device & Technical Data: IP address, browser type, operating system, device identifiers, and session duration, collected automatically when you access kissapk.
• Usage Data: Pages visited, games played, bet types, click-stream data, and on-site behaviour, used to improve our platform experience.
• Communications Data: Records of your interactions with our customer support team, including live chat transcripts and email correspondence.
• Verification Documents: Where required for responsible gaming compliance or by applicable law, additional documentation such as source-of-funds declarations.

3. How We Use Your Personal Data

kissapk uses the personal data we collect for specific, lawful purposes. We do not use your data in ways that are inconsistent with the purposes listed below:

• Account Registration & Management: To create and maintain your kissapk account, verify your identity, and ensure account security.
• Payment Processing: To facilitate deposits and withdrawals via Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported cryptocurrency channels.
• Service Delivery: To provide access to our sportsbook, live casino, slots, fishing games, and other platform features in a personalised and seamless manner.
• Legal & Regulatory Compliance: To meet our obligations under Malaysia's Personal Data Protection Act 2010 (PDPA), Anti-Money Laundering (AML) requirements, and other applicable regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats.
• Responsible Gaming: To monitor gameplay patterns, enforce deposit limits, facilitate self-exclusion requests, and identify players who may need support.
• Customer Support: To respond to your enquiries, process complaints, and maintain records of our communications for quality assurance purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have given consent or where a legitimate interest applies. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct internal research, and continuously improve the kissapk user experience.

4. Legal Basis for Processing

Under Malaysia's PDPA 2010 and applicable data protection principles, kissapk processes your personal data on the following legal grounds:

• Consent: Where you have expressly agreed to the processing of your data, such as when registering an account or opting in to marketing communications.
• Contractual Necessity: Where processing is required to perform our agreement with you — for example, processing a withdrawal to your Maybank or CIMB account.
• Legal Obligation: Where we are required to process data to comply with a legal duty, including AML reporting obligations and identity verification requirements.
• Legitimate Interests: Where processing is necessary for our legitimate business interests (such as fraud detection and platform security), provided those interests are not overridden by your rights and freedoms.

5. Data Sharing & Third Parties

kissapk does not sell or rent your personal data to any third party. We may share your data with carefully selected partners and service providers solely for the purposes described in this policy:

• Payment Processors & Banking Partners: To facilitate secure deposits and withdrawals via FPX, DuitNow, e-wallets, and banking channels. These parties process only the financial data necessary for the transaction.
• Identity Verification Providers: Third-party KYC service providers that assist in verifying your identity documents in compliance with our regulatory obligations.
• Technology & Infrastructure Providers: Cloud hosting, database management, and cybersecurity vendors who support the technical operation of our platform, all operating under strict data processing agreements.
• Game Software Providers: Licensed game studios and platform providers whose titles appear on kissapk. They may receive anonymised session data necessary to run their games correctly.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or lawful authority, we may disclose your data to the relevant Malaysian government agencies or international regulators.
• Professional Advisers: Lawyers, auditors, and consultants bound by professional confidentiality obligations, where necessary to obtain professional advice.

All third parties with whom we share data are contractually required to implement appropriate technical and organisational security measures and to use your data only for the specified purpose.

6. Cookies & Tracking Technologies

kissapk uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our site. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the website to function. These include session management, security tokens, and login authentication cookies. You cannot opt out of these without disabling core site functionality.
• Performance & Analytics Cookies: Used to understand how players navigate the site, which pages are most visited, and where errors occur, so we can improve the experience.
• Functional Cookies: Store your preferences such as language settings, preferred payment methods, and display options to personalise your experience.
• Marketing Cookies: Used (with your consent) to deliver relevant promotional content and track the effectiveness of our campaigns.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the kissapk platform. Refer to your browser's help documentation for instructions on managing cookies.

7. Data Retention

kissapk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Active Accounts: Personal data is retained for the duration of your account relationship with kissapk and for a period thereafter as required by law.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in compliance with AML legislation and financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the customer relationship.
• Support Communications: Customer support correspondence is retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Closed Accounts: Following account closure, we retain the minimum data necessary to meet our legal obligations, after which all remaining personal data is securely deleted or anonymised.

8. Your Privacy Rights

As a kissapk user and a data subject under Malaysia's PDPA 2010, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time by contacting us or updating your account preferences.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict how we use your data while a complaint or objection is being resolved.
• Right to Data Portability: You may request that we provide your data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing, at any time.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details provided in Section 12 of this policy. We aim to respond to all valid requests within thirty (30) calendar days.

9. Security Measures

kissapk implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including financial records and identity documents.
• Bcrypt hashing for all user passwords — your password is never stored in readable form.
• Multi-factor authentication (MFA) options for account login to add an extra layer of security.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Strict access controls ensuring that only authorised kissapk personnel can access personal data on a need-to-know basis.
• 24/7 automated fraud monitoring and anomaly detection to identify and respond to suspicious account activity in real time.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your kissapk account and to enable MFA where available.

10. Children's Privacy

kissapk is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 21.

As part of our account registration process, all applicants are required to confirm their age and provide valid government-issued identification for KYC verification. Accounts belonging to underage individuals will be suspended immediately upon discovery and any funds will be handled in accordance with our Terms & Conditions and applicable law.

If you have reason to believe that a minor has registered an account with kissapk, please contact us immediately at the email address in Section 12 so that we can take appropriate action without delay.

11. Changes to This Privacy Policy

kissapk reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or regulatory requirements. When we make material changes, we will:

• Update the "Effective Date" and "Last Reviewed" dates at the top of this page.
• Display a prominent notice on the kissapk platform informing registered users of the update.
• Where required by law or where changes significantly affect your rights, seek fresh consent from you.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of kissapk after any policy update constitutes your acknowledgement of the revised terms.

12. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by kissapk, you may contact our Data Protection Officer (DPO) using the contact details below. All communications are strictly confidential and will be responded to within thirty (30) calendar days.

Please note that for all data subject requests (access, correction, erasure, etc.), we will need to verify your identity before processing the request. This is to ensure that your personal data is only disclosed to, or acted upon by, you or an authorised representative.