Kis98 Privacy Policy – Your Personal Data Protection

Kis98 is an online entertainment platform fully committed to protecting user privacy. This Privacy Policy explains in detail how we handle your personal information when you use our website, mobile app, and all services offered under the kis98 brand.

We understand that your personal information is a trust placed in us. As such, kis98 handles all user data to the highest security standards and uses it solely for legitimate purposes that are clearly stated in this policy. We have never and will never sell users' personal information to any third party for commercial purposes.

Kis98 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. We continuously update our privacy practices to ensure ongoing compliance with legislative changes and the latest technological developments.

Kis98 collects users' personal data through various channels depending on the nature of your interaction with our platform. We only collect information that is strictly necessary to deliver safe, high-quality services.

We do not collect sensitive data categories such as health information, religious beliefs, or political affiliations unless specifically required for legal compliance or at your own request.

Every piece of information we collect is used responsibly and solely for legitimate purposes. kis98 does not use user data for any purpose not stated in this policy without first obtaining the user's consent.

• Account management: To create, verify, and manage your user account, including the mandatory identity verification (KYC) process.
• Transaction processing: To process deposits, withdrawal of winnings, and all financial transactions securely and accurately.
• Service provision: To give you access to all games, promotions, and exclusive features available on the kis98 platform.
• Platform security: To detect and prevent fraudulent activity, money laundering, unauthorised access, and other security threats.
• Service communications: To send important notifications related to your account, security updates, and transaction alerts.
• Platform improvements: To analyse usage patterns in order to improve the user experience, technical performance, and overall service quality.
• Regulatory compliance: To meet legal obligations including anti-money laundering (AML) requirements and reporting to the relevant authorities when required.
• Responsible gaming: To monitor gameplay patterns and identify users who may need support in managing their playing habits more responsibly.

Kis98 does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes without your explicit consent. However, there are limited situations where sharing information is necessary to provide our services or fulfil legal obligations.

• Verified service providers: We share the necessary information with payment providers, game providers, and technical support services that have signed strict confidentiality agreements with kis98.
• Competent authorities: kis98 will disclose user information to law enforcement agencies or financial authorities when required by a court order or applicable legislation.
• Analytics providers: Anonymised and aggregated usage data may be shared with analytics providers solely for the purpose of platform improvement.
• Business transfers: In the event of a merger, acquisition, or transfer of company assets, user information may be transferred to the new entity under the same or stricter Privacy Policy.

All third parties that receive kis98 user data are required to comply with data protection standards equal to or higher than our own. We conduct regular audits of their compliance.

The security of your personal information is our absolute priority. kis98 continuously invests in the latest cybersecurity infrastructure to ensure your data is always protected against unauthorised access, modification, or disclosure.

• 256-bit SSL encryption: All data transmitted between your device and kis98 servers is protected by 256-bit SSL encryption — the highest standard in the industry.
• Encryption of data at rest: Sensitive information stored in our databases, particularly financial and identification data, is encrypted using AES-256.
• Layered access controls: Only authorised personnel with a clear business need may access user data, and all access is thoroughly logged for audit purposes.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and address any threats or suspicious activity in real time.
• Regular penetration testing: kis98 conducts regular security tests and independent audits to identify and patch any system vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): kis98 users can and are encouraged to enable 2FA on their accounts as an additional layer of protection.

Kis98 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our platform.

• Essential cookies: Required for core platform functions such as login sessions, security, and basic settings. These cookies cannot be disabled.
• Performance cookies: Helps us understand how users interact with the platform through the collection of anonymised statistical data.
• Functional cookies: Stores user preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Security cookies: Used to detect suspicious activity, prevent fraud, and ensure that only legitimate account owners can access their accounts.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the kis98 platform. Third-party cookies used for analytics are anonymised and cannot be used to personally identify you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. kis98 fully respects and facilitates the exercise of these rights.

Kis98 retains users' personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law. When data is no longer needed, it will be securely deleted or anonymised.

• Active account data: Retained for the duration your account remains active, plus any additional period required under AML legislation.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical data and system logs: Retained for 12 months for security and technical troubleshooting purposes.
• Closed account data: Basic identification information is retained for 5 years after account closure in accordance with KYC/AML compliance requirements.

Once the designated retention period has expired, all personal data will be permanently deleted from our systems or fully anonymised so that it can no longer be linked to any individual.

Kis98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operational practices, new legal requirements, or relevant technological developments. We are committed to notifying you of any material changes.

• Any significant amendments will be communicated to registered users via in-platform notifications or email at least 14 days before they take effect.
• The "Last Updated" date at the top of this page will always reflect the latest version of the Privacy Policy currently in effect.
• Continued use of the kis98 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
• If you do not agree with any amendments, you have the right to close your account before those changes take effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kis98 handles your personal data, our Data Protection Officer (DPO) team is here to help.

You can reach us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom right corner of our platform.
• Support Page: Visit our FAQ section for answers to the most frequently asked questions.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex requests such as data access or account deletion, the maximum processing period is 21 business days in accordance with PDPA provisions.