Privacy Policy

1. Who We Are

Kiss9 is the operator of the online casino and sports betting platform accessible at kiss9.app ("the Platform"). In this Privacy Policy, "kiss9", "we", "us", and "our" refer to the kiss9 platform operator. "You" and "your" refer to any natural person who accesses or uses the Platform, whether as a registered player, a visitor, or otherwise.

Kiss9 acts as the data controller in respect of the personal data collected through the Platform. We are committed to processing personal data in a manner that is lawful, fair, transparent, and consistent with the applicable data protection principles that govern our operations under our licensing jurisdiction.

Any questions, requests, or complaints relating to this Privacy Policy should be directed to [email protected].

2. Data We Collect

Kiss9 collects the following categories of personal data from players and Platform visitors:

Kiss9 does not collect full payment card numbers. Where payment is processed by a third-party payment provider, that provider's privacy policy governs the handling of full financial instrument data.

3. How We Collect Data

Kiss9 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — when you access the Platform, through server logs, cookies, and similar tracking technologies that record technical data about your device and session.
• From third parties — from payment processors (Touch n Go, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, and others) in connection with transaction verification; from identity verification service providers in connection with KYC; and from fraud prevention and AML screening services.

4. Purpose & Legal Basis for Processing

Kiss9 processes your personal data for the following purposes and on the following legal bases:

• Contract performance — to register and manage your account, process deposits and withdrawals, settle wagers, and provide customer support. Processing is necessary to perform the contract between you and kiss9.
• Legal obligation — to verify your age and identity (KYC), to comply with Anti-Money Laundering ("AML") obligations, and to respond to lawful regulatory or law enforcement requests. Processing is required to comply with applicable legal obligations.
• Legitimate interests — to detect and prevent fraud, account misuse, and bonus abuse; to maintain Platform security; to analyse gaming activity for responsible gaming monitoring; and to improve Platform performance. Processing is necessary for kiss9's legitimate interests, which do not override your rights.
• Consent — where we send you optional promotional communications. You may withdraw consent at any time by contacting [email protected].

5. Data Retention

5.1 Kiss9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, or reporting requirements.

5.2 Account and transaction data is typically retained for a minimum of five (5) years from the date of account closure, in compliance with AML and financial record-keeping obligations applicable to gaming operators.

5.3 Self-exclusion records are retained for the full duration of the exclusion period and for a defined period thereafter to prevent circumvention of the exclusion through re-registration.

5.4 Technical and log data is retained for shorter periods consistent with its purpose (typically 12 months) unless it is required for an ongoing investigation or legal proceeding.

5.5 Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised.

6. Sharing Your Data

Kiss9 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes described:

• Payment processors — Touch n Go, Boost, GrabPay, Maybank, CIMB Bank, Hong Leong Bank, 7-Eleven Cliqq, and USDT network operators — for transaction processing and verification.
• Identity verification and KYC providers — third-party services that assist with document verification and age/identity confirmation.
• Fraud prevention and AML screening services — to check transactions and account activity against watchlists and fraud databases.
• Game providers — including Evolution Gaming, Pragmatic Play, PG Soft, and others — for the provision of game services. Game providers operate under their own data processing agreements with kiss9 and do not receive unnecessary player identity data.
• Regulatory and law enforcement authorities — where kiss9 is legally required to disclose data, including in response to court orders, regulatory requests, or investigations into financial crime.
• IT infrastructure and hosting providers — who support the technical operation of the Platform and are subject to contractual data protection obligations.

All third-party data processors engaged by kiss9 are required to maintain appropriate technical and organisational security measures and to process data only on kiss9's documented instructions.

7. Cookies & Tracking Technologies

7.1 Kiss9 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your login session, remember your preferences, and collect analytical data about Platform usage.

7.2 The following categories of cookies may be set by the Platform:

• Essential cookies — required for the Platform to function. These include session cookies that keep you logged in during your visit. These cannot be disabled without affecting Platform functionality.
• Analytical cookies — used to understand how players navigate and use the Platform, in anonymised or aggregated form, to support Platform improvement.
• Security cookies — used to detect and prevent fraudulent activity, including session hijacking and CSRF attacks.

7.3 Kiss9 does not use third-party advertising cookies or cross-site tracking cookies. The Platform does not embed third-party advertising tags.

7.4 You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the Platform, including maintaining an authenticated session.

8. Security Measures

Kiss9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive personal data at rest within kiss9's database infrastructure.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Two-factor authentication available for all player accounts and enforced for internal administrative access.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Incident response procedures for the detection, reporting, and management of personal data breaches.

Notwithstanding these measures, no online platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their kiss9 account and to enable 2FA.

9. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by kiss9:

• Right of access — to request a copy of the personal data kiss9 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data, subject to kiss9's legal retention obligations (including AML record-keeping requirements).
• Right to restriction — to request that kiss9 restricts the processing of your data in certain circumstances.
• Right to data portability — to receive a copy of data you have provided to kiss9 in a structured, machine-readable format, where processing is based on consent or contract.
• Right to withdraw consent — where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — to object to processing based on legitimate interests, including profiling for direct marketing purposes.

To exercise any of these rights, contact kiss9 at [email protected]. Kiss9 will respond to verified requests within 30 days. Identity verification may be required before requests are actioned to protect against unauthorised data access.

10. Children & Minors

The kiss9 Platform is strictly for persons aged 21 and above. Kiss9 does not knowingly collect personal data from persons under 21. If kiss9 determines that a registered account belongs to a person under 21, the account will be immediately suspended, all associated data reviewed, and the account permanently closed without payment of any balance. Any funds deposited by a minor will be handled in accordance with applicable regulatory guidance.

If you believe that a person under 21 has registered on the Platform, please notify kiss9 immediately at [email protected].

11. Third-Party Services

The Platform integrates with third-party game providers and payment processors. While kiss9 selects these providers with care and requires contractual data protection commitments, their processing of your data is governed by their own privacy policies in addition to their agreements with kiss9. Kiss9 is not responsible for the privacy practices of third-party providers beyond the scope of its data processing agreements with them.

The Platform does not contain links to external third-party websites for advertising or affiliate purposes. Players should exercise caution with any third-party sites that claim affiliation with kiss9 that are not operated on the kiss9.app domain.

12. Amendments to This Policy

Kiss9 reserves the right to amend this Privacy Policy at any time. Updates will be published on this page with a revised effective date. Where an amendment materially changes how kiss9 processes your personal data, we will endeavour to notify registered players by email or Platform notification before the change takes effect. Continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the updated terms.

13. Contact & Complaints

For all privacy-related enquiries, data subject requests, or complaints relating to how kiss9 handles your personal data, please contact:

Email: [email protected]

Please include your registered account email address and a clear description of your request or complaint. Kiss9 aims to respond to all privacy-related enquiries within 14 business days.

If you are not satisfied with kiss9's response to a privacy complaint, you may have the right to lodge a complaint with the applicable data protection or regulatory authority in the jurisdiction governing kiss9's operations.