Privacy Policy kis888 — Your Personal Data Protection

01 Introduction

Kis888 ("we", "our platform") respects the privacy of every individual who uses our gaming platform. This Privacy Policy transparently explains how we collect, process, store, and protect your personal data when you use the kis888 website, mobile app, and all services offered through the platform.

By registering an account or using any kis888 service, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read this document carefully and to contact our support team if you have any questions.

02 Personal Data We Collect

Kis888 collects your personal data through various means as you interact with our platform. The types of data we collect are as follows:

Data you provide directly:

• Full name, date of birth, and identification card number (for the KYC process).
• Email address, phone number, and residential address.
• Registered bank account details and payment methods.
• Account username and password (passwords are stored in an unreadable hashed format).
• Identity verification documents submitted during the KYC process.

Data collected automatically:

• IP address and device information used to access the platform.
• Your device's web browser type and operating system.
• Activity log data including pages visited, access times, and in-platform actions.
• Geolocation data at the country or state level (not precise location) for security purposes.
• Game session data including bets, wins, and play duration.

Below is a summary of the data types, purposes of collection, and the legal basis underpinning each:

03 How We Use Your Data

The personal data we collect is used solely for the stated purposes and will not be used for any other purpose without your consent. The following are the primary ways we use your data:

• Account management: Creating and managing your member account, including identity verification and transaction processing.
• Service delivery: Ensuring all games, betting, and platform features function properly for an optimal user experience.
• Platform security: Detecting and preventing fraud, money laundering, and other illegal activities that could compromise the security of all members.
• Service communications: Sending transaction notifications, important account updates, and responses to customer support enquiries.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.
• Legal compliance: Fulfilling the reporting and compliance obligations required under applicable Malaysian law.
• Platform improvement: Analysing usage patterns in aggregate (not individually) to improve features and user experience.

04 Data Sharing with Third Parties

Kis888 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited circumstances in which we need to share your data with certain parties to enable the platform to operate properly:

• Payment service providers: Transaction information is shared solely with approved payment providers to process your deposits and withdrawals.
• Game providers: Minimum technical data is shared with third-party game providers integrated with the kis888 platform to ensure games function correctly.
• Statutory authorities: We will disclose data to authorities where required by a court order, regulatory directive, or other legal obligation.
• Companies within the group: Data may be shared within the kis888 group of companies for internal operational purposes, with the same data protections applied.

All third parties who receive your data are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.

05 Data Storage & Security

Kis888 stores your personal data on servers protected by multiple layers of technical and organisational security. The protective measures we employ include:

• Data encryption in transit using TLS 1.3 protocol.
• Data encryption at rest for sensitive information such as financial details.
• Firewall and intrusion detection systems that are always active.
• Network segmentation and role-based access control (RBAC).
• Regular data backups with tested recovery procedures.
• 24/7 security monitoring.

Data Retention Period: Your personal data is retained for the duration of your active membership and for any additional period required by law following account closure — typically 7 years for financial records, in line with Malaysian legal requirements. Data that is no longer needed will be securely disposed of using approved methods.

06 Cookies & Tracking Technologies

The kis888 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your login session. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they directly affect platform functionality.
• Performance cookies: Collecting aggregated analytics data on how users interact with the platform — without identifying individuals — to help us improve the user experience.
• Preference cookies: Saving your preferences such as display language, currency format, and other personal settings so you do not have to reconfigure them each time you log in.
• Security cookies: Used to identify and prevent fraudulent activity, including detecting suspicious login attempts.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some sections of the kis888 platform.

07 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by kis888. We are committed to respecting and facilitating the exercise of these rights:

08 Children's Data Protection

The kis888 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that a child's data has been collected without our knowledge, immediate steps will be taken to delete that data and close the relevant account.

If you are a parent or guardian who discovers that a minor has registered an account at kis888, please contact our support team immediately so that appropriate action can be taken.

09 Changes to This Privacy Policy

Kis888 reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. The last updated date will always be kept current at the top of this page.

For changes considered material or significant, we will endeavour to notify members by email or in-platform notification at least 7 days before the changes take effect. Continued use of the platform after the effective date of such changes will be deemed acceptance of the updated Privacy Policy.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how we handle your personal data, or to exercise any of your privacy rights, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

• Official platform email: [email protected]
• In-platform support ticket system via the FAQ.
• Live Chat is available 24 hours a day on the kis888 platform.

We are committed to responding to all privacy-related enquiries within 3 to 5 business days. More complex complaints may require up to 21 business days to be fully resolved, but we will ensure you are kept informed of the latest developments throughout.