i918kiss Privacy Policy — Your Data, Our Responsibility

01

Introduction

i918kiss is an online casino and sports betting platform operated for the entertainment of adult players. We recognise that personal privacy is important to our members, particularly in the context of a financial services environment where sensitive identity and payment information must be exchanged to operate a lawful platform.

This policy describes the categories of personal data collected by i918kiss, the purposes for which that data is processed, the parties with whom it may be shared, the security measures applied to protect it, the period for which it is retained and the rights available to you as a data subject.

Where this Privacy Policy refers to "i918kiss", "we", "us" or "our", it means the entity operating the platform at i918kiss.cam. Where it refers to "you", "your" or "player", it means the individual whose data is being processed in connection with an i918kiss account or visit.

02

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, device identifiers and payment information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" means i918kiss, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of i918kiss and under its documented instructions.
• "KYC" means Know Your Customer — the identity and age verification process required before certain account functions, including withdrawals, can be activated.
• "Cookie" means a small text file placed on your device that allows our system to recognise your browser, maintain session state and collect analytics.
• "AML" means Anti-Money Laundering — the regulatory framework requiring financial businesses to identify, prevent and report suspicious activity.

03

Personal Data We Collect

i918kiss collects Personal Data from multiple sources in the course of operating the platform. The principal categories are described below.

3.1 Data you provide directly

• Registration details: full legal name, date of birth, residential address (including Malaysian city and postcode), mobile number and email address.
• Identity documents submitted for KYC verification, such as a copy of your MyKad, passport or other government-issued identification.
• Payment details, including the name and masked account number associated with Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank or other accepted payment channels.
• Communications sent to our support team by live chat, email or any other channel.
• Responsible gambling preferences, including deposit limits, session limits or self-exclusion requests.

3.2 Data collected automatically

• Device and browser information: IP address, browser type, operating system version and device model.
• Session data: login timestamps, pages visited, features used, game sessions initiated, bets placed and outcomes.
• Transaction logs: deposit amounts, withdrawal requests, payment method references, processing status and timestamps.
• Cookie and analytics identifiers, as described further in Section 8.

3.3 Data received from third parties

• Identity verification results returned by our KYC service provider after you submit documents for review.
• Payment authentication and fraud signals shared by payment networks and e-wallet providers.
• Sanctions and politically exposed persons screening results where required for compliance purposes.

04

How We Use Your Personal Data

i918kiss processes your Personal Data only for purposes that are necessary, proportionate and consistent with the reason for which it was originally collected. Principal processing activities include:

Processing Purpose	Data Categories Used
Account creation and management	Name, email, date of birth, mobile number, address
Identity and age verification (KYC)	Identity documents, name, date of birth
Processing deposits and withdrawals	Payment method details, transaction records
Fraud prevention and AML compliance	Transaction patterns, IP address, device identifiers, KYC data
Responsible gambling monitoring	Deposit limits, betting patterns, self-exclusion status
Customer support and complaint handling	Support communications, account history
Platform security and abuse prevention	IP address, session data, device fingerprint
Service improvement and analytics	Anonymised usage data, session logs
Marketing communications (where opted in)	Email address, game preferences, opt-in record

05

Legal Basis for Processing

i918kiss relies on the following legal bases when processing Personal Data:

• Performance of a contract: Processing necessary to provide and manage your i918kiss account, including executing deposits, withdrawals and game sessions.
• Legal obligation: Processing required to comply with identity verification, AML regulations, sanctions screening and other applicable legal or regulatory requirements.
• Legitimate interests: Processing necessary to prevent fraud, detect abuse, maintain platform security, and improve the services we offer — where those interests are not overridden by your privacy rights.
• Consent: Where we send optional marketing communications or deploy non-essential analytics cookies, we rely on your active opt-in consent. You may withdraw that consent at any time by contacting support or adjusting your account notification settings.

06

Sharing of Personal Data

i918kiss does not sell, rent or trade your Personal Data with third-party advertisers, data brokers or marketers. Personal Data may be disclosed to the following categories of recipients only where necessary and subject to appropriate confidentiality and security obligations:

• Payment service providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank) and cryptocurrency network processors, for the execution and reconciliation of financial transactions.
• Identity and KYC verification services: Third-party providers that verify the authenticity of identity documents and confirm that account holders meet the minimum age requirement of 21 years.
• Game suppliers and technology providers: Platform, game and infrastructure providers who process session and gameplay data on behalf of i918kiss under strict data processing agreements.
• Fraud prevention and AML screening services: Third-party compliance tools used to screen transactions and accounts against sanctions lists and risk indicators.
• Legal and regulatory authorities: Courts, law enforcement agencies, regulators or other public bodies where disclosure is required by applicable law, court order or legitimate investigation.
• Professional advisers: Legal, accounting and cybersecurity advisers who are bound by confidentiality obligations.

07

Payment Data and Financial Information

i918kiss processes payment information to execute deposits and withdrawals in Malaysian Ringgit (MYR) through approved channels. The following principles govern how payment data is handled:

• Full payment card numbers, e-wallet passwords and online banking credentials are never transmitted to or stored on i918kiss servers. Payments are tokenised or redirected through the relevant payment provider's own secure environment.
• i918kiss records the payment method type, masked account reference, transaction amount, timestamp and processing status for accounting, audit and dispute resolution purposes.
• Payment ownership verification may require you to provide a bank statement, screenshot or confirmation from the issuing bank or e-wallet provider to demonstrate that the payment method is registered in your name.
• Any third-party payment records supplied during a KYC or withdrawal verification process are handled with the same security standards applied to all other Personal Data.

08

Cookies and Analytics

i918kiss uses cookies and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and — where you consent — measure how the service is used so that it can be improved.

8.1 Essential cookies

These cookies are strictly necessary to deliver the service. They enable secure login sessions, maintain your preferences during a visit and protect against cross-site request forgery. They cannot be disabled without breaking core functionality.

8.2 Analytics cookies (consent required)

Where you have given consent, analytics tools may set cookies that aggregate session and navigation data. This data is used in anonymised form to understand how players interact with different features and to prioritise platform improvements. You may withdraw consent at any time via your account notification settings.

8.3 Managing cookies

Most modern browsers allow you to view, block or delete cookies through their settings menu. Blocking essential cookies may prevent you from accessing your account or using key features of the platform. Blocking analytics cookies does not affect your access but may limit our ability to improve the service.

09

Data Retention

Personal Data is retained only for as long as necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general principles apply:

• Account data and transaction records are retained for the duration of the account relationship and for a minimum period thereafter to satisfy financial record-keeping and AML compliance requirements.
• Identity documents submitted for KYC verification are retained for the period required by applicable anti-money laundering and gaming regulations, which may extend beyond account closure.
• Support and complaint records are retained for a period sufficient to resolve any escalated dispute, regulatory inquiry or legal proceding.
• Marketing opt-in records are retained for as long as your preference remains active, and for a reasonable period after you withdraw consent to evidence the withdrawal.
• Anonymised, aggregated analytics data may be retained indefinitely as it no longer constitutes Personal Data.

10

Security Measures

i918kiss implements a layered security programme designed to protect Personal Data against unauthorised access, accidental loss, alteration and disclosure. Key measures include:

• All data in transit is encrypted using TLS 1.3 or higher. Outdated protocol versions are disabled.
• Data at rest is encrypted using industry-standard algorithms. Database access is restricted and logged.
• Two-factor authentication is available to all account holders and is mandatory for staff with access to player records.
• Automated fraud monitoring analyses transaction patterns, login behaviour and device signals in real time.
• Access to Personal Data is limited to authorised personnel who require it for a specific, documented purpose. Access rights are reviewed periodically.
• Our technical infrastructure is monitored around the clock. Incident response procedures are maintained and tested.

Despite these measures, no internet-connected system can guarantee absolute security. You play an important role by keeping your password confidential, enabling two-factor authentication and notifying i918kiss promptly if you suspect that your account has been accessed without your authorisation.

11

Your Rights as a Data Subject

Subject to applicable law and the verification of your identity, you hold the following rights with respect to your Personal Data held by i918kiss:

• Right of access: You may request a copy of the Personal Data i918kiss holds about you, along with information about how it is processed.
• Right to rectification: Where Personal Data held is inaccurate or incomplete, you may request that it be corrected or supplemented.
• Right to erasure: You may request that certain Personal Data be deleted where it is no longer necessary for the purpose for which it was collected, subject to overiding retention obligations.
• Right to restrict processing: In certain circumstances, you may ask i918kiss to limit how your data is used while a query or objection is investigated.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request your data in a structured, commonly used and machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for security purposes. We will consider your objection and cease processing unless we have compelling legitimate grounds to continue.
• Right to withdraw consent: Where processing relies on your consent — for example, marketing emails — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, contact i918kiss support using the details in Section 14. Requests will be responded to within a reasonable timeframe. We may ask you to verify your identity before acting on a request.

12

Minors and Age Restriction

i918kiss is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under 21 years of age. Age verification is a mandatory step in the KYC process, and accounts suspected of belonging to underage individuals will be suspended pending investigation.

If you are a parent or guardian and believe that a minor has submitted Personal Data to i918kiss, please contact us immediately at the address in Section 14. We will investigate promptly and, where an underage registration is confirmed, close the account and securely delete or anonymise the associated data to the extent permitted by legal retention obligations.

13

Updates to This Privacy Policy

i918kiss may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, payment integrations, security practices or regulatory guidance. When a material change is made, the effective date at the top of the document will be updated.

For significant changes that affect how Personal Data is used or the rights available to you, we will publish a notice in the account area. We encourage you to review this Privacy Policy periodically, particularly after logging in following an extended absence.

Continued use of i918kiss after a revised Privacy Policy takes effect constitutes your acknowledgement of the updated terms to the extent permitted by applicable law. If you do not agree with a material change, you should contact support to discuss your options, including account closure.

14

Contact Us — Data Enquiries and Complaints

If you wish to exercise a data subject right, raise a concern about how your Personal Data has been handled, or make a complaint relating to a privacy matter, please contact the i918kiss support team. Include your registered account email address and a clear description of your request or concern. Do not include your account password or full payment credentials in any communication.

We will acknowledge receipt of your enquiry and aim to provide a substantive response within a reasonable period. Complex requests involving third-party verification, legal review or coordination with payment providers may require additional time. We will keep you informed of progress.