Privacy Policy

1. Introduction

i918kiss ("we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at i918kiss.org. We are committed to protecting and respecting the privacy of every individual who uses our services, particularly our Malaysian player base.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by i918kiss. Please read the following carefully to understand our practices regarding your personal data and how we will treat it. This Policy should be read together with our Terms & Conditions.

By registering an i918kiss account, accessing the Platform, or using any of the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, please discontinue use of the Platform and contact us to close your account.

2. Data Controller

i918kiss is the data controller responsible for your personal data collected through i918kiss.org and all associated Services. For the purposes of applicable data protection legislation, i918kiss determines the purposes for which, and the manner in which, your personal data is processed.

i918kiss operates under international gaming authority licensing and is subject to the data protection and privacy obligations stipulated by its licensing jurisdiction. Malaysian players also benefit from applicable protections under the Personal Data Protection Act 2010 (PDPA) of Malaysia to the extent applicable.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account or interact with i918kiss, we collect the following categories of personal data:

• Registration Data: Full legal name, date of birth, nationality, residential address, email address, and mobile phone number;
• Identity Verification (KYC) Data: Government-issued identification documents (e.g., Malaysian MyKad, passport), proof of address documents (e.g., utility bills), and source-of-funds documentation where required;
• Financial Data: Bank account details (for withdrawal processing), eWallet identifiers (Touch 'n Go, Boost), and transaction history. i918kiss does not store full payment card numbers on its servers;
• Communications Data: Records of your interactions with i918kiss customer support via live chat, email, or other channels, including the content of such communications.

3.2 Data Collected Automatically

When you access i918kiss, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP data;
• Device type, operating system, and browser information;
• Pages visited, session duration, clickstream data, and in-game activity logs;
• Referral URLs and session identifiers assigned at login.

This technical data is used for fraud prevention, security monitoring, platform performance optimisation, and responsible gaming monitoring purposes.

3.3 Data from Third Parties

i918kiss may receive supplementary personal data about you from third-party KYC verification providers, payment processors, and fraud prevention services in order to verify your identity, process transactions, and comply with anti-money laundering obligations.

4. How We Use Your Personal Data

i918kiss uses your personal data for the following purposes:

• Account Management: To register, verify, and administer your i918kiss account, including processing deposits, withdrawals, and bonus credits;
• Service Delivery: To provide you with access to the Platform's gaming, betting, and live casino services;
• KYC & Compliance: To verify your identity and age, conduct ongoing due diligence, and comply with anti-money laundering (AML), counter-terrorism financing (CTF), and licensing obligations;
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities;
• Responsible Gaming: To monitor your gaming activity and identify patterns that may indicate problem gambling, and to administer self-exclusion, deposit limit, and cooling-off requests;
• Customer Support: To respond to your enquiries, complaints, and disputes;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve our games, services, and user experience;
• Marketing (opt-in only): To send promotional offers, new game alerts, and VIP programme updates to Members who have opted in to marketing communications.

5. Legal Basis for Processing

i918kiss processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and i918kiss (account registration, service delivery, payment processing);
• Legal Obligation: Processing required to comply with applicable laws, including AML/CTF legislation, gaming licensing requirements, and court orders;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Sharing & Disclosure

i918kiss will not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes under any circumstances. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• KYC & Identity Verification Providers: Accredited third-party services that verify identity documents and age to meet our licensing obligations;
• Payment Processors: Licensed financial service providers processing your deposits and withdrawals (including eWallet operators and banking intermediaries);
• Gaming Platform Suppliers: Our licensed game content and live casino providers who require session-level data to deliver their games;
• Fraud Prevention & AML Services: Third-party risk and compliance platforms used to screen transactions and Member profiles against regulatory watchlists;
• Regulatory & Law Enforcement Authorities: Where i918kiss is legally required to disclose data in response to a valid legal request, court order, or regulatory direction.

All third-party data processors engaged by i918kiss are contractually bound to process personal data only on our instructions, to implement appropriate security measures, and to comply with applicable data protection requirements.

7. Data Retention

i918kiss retains your personal data for as long as your account remains active, and for such further periods as required by applicable law and our licensing obligations. In general:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years from the date of the relevant transaction;
• Customer support communication records are retained for a period of three (3) years from the date of the interaction;
• Technical and session log data is retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8. Security Measures

i918kiss implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration:

• Transport Layer Security: All data transmitted between your device and i918kiss servers is encrypted using TLS 1.3 with 256-bit AES ciphers — the same standard applied by Malaysian banking portals;
• Server-Side Encryption: Personal data stored on i918kiss infrastructure is encrypted at rest;
• Access Controls: Access to personal data is restricted to authorised i918kiss personnel and service providers under strict role-based access control policies. All access is logged and audited;
• Two-Factor Authentication: i918kiss supports optional 2FA on all Member accounts for additional login security;
• Penetration Testing: i918kiss's systems undergo regular independent penetration testing and security assessments.

Notwithstanding the above measures, no method of electronic data transmission or storage is 100% secure. If you become aware of any security breach or suspected unauthorised access to your i918kiss account, please notify us immediately via live chat support.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit the i918kiss Platform. They allow us to recognise your device across sessions, remember your preferences, and collect analytics data about Platform usage.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your i918kiss account. These cannot be disabled without breaking core functionality;
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate the Platform, which pages are most visited, and where technical errors occur. This data helps us improve the i918kiss experience;
• Preference Cookies: Store your language and display preferences across sessions.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use i918kiss services. Browser-specific cookie management instructions are available in your browser's help documentation.

10. Marketing Communications

i918kiss will only send you promotional emails, SMS messages, or in-platform notifications if you have expressly opted in to receiving such communications during registration or through your account notification settings.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email;
• Updating your notification preferences in the i918kiss account settings dashboard;
• Contacting i918kiss support via live chat and requesting removal from all marketing lists.

Withdrawal of marketing consent does not affect the delivery of transactional and service communications (e.g., deposit confirmations, withdrawal notifications, security alerts), which are essential to the operation of your i918kiss account.

11. Your Data Rights

As an i918kiss Member, you have the following rights in relation to your personal data, subject to applicable law and regulatory retention obligations:

• Right of Access: You may request a copy of the personal data i918kiss holds about you;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations;
• Right to Data Portability: You may request a copy of the personal data you have provided to i918kiss in a structured, machine-readable format;
• Right to Restrict Processing: You may request that i918kiss restrict the processing of your personal data in certain circumstances;
• Right to Object: You may object to processing based on our legitimate interests. We will comply unless we can demonstrate compelling legitimate grounds for the processing that override your interests.

To exercise any of the above rights, please contact the i918kiss support team via live chat or by email at [email protected] (please type this address manually — it is not a clickable link). We will respond to all verified requests within thirty (30) days.

12. Children and Minors

The i918kiss Platform and Services are strictly intended for individuals aged 21 and above. i918kiss does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a minor has registered an account, we will immediately close the account, forfeit all associated balances, and delete all associated personal data unless retention is required by law.

Parents or guardians who believe that a minor may have registered an i918kiss account are encouraged to contact our support team immediately so that appropriate action can be taken.

13. Changes to This Privacy Policy

i918kiss reserves the right to update or revise this Privacy Policy at any time. Where changes are material, we will notify registered Members via email or prominent on-Platform notice prior to the changes taking effect. The date of the most recent revision is displayed at the top of this document.

Your continued use of the i918kiss Platform following any update to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage all Members to review this page periodically to stay informed about how i918kiss protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i918kiss, please contact our Data Protection team via:

• Live Chat: Available 24/7 on the i918kiss Platform;
• Email: [email protected] (please type manually — this is not a clickable link).

We aim to respond to all privacy-related enquiries within five (5) business days. Formal data subject rights requests will be responded to within thirty (30) days in accordance with applicable law.