kissapk Privacy Policy

1. Introduction

kissapk ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or use the kissapk platform at https://kissapk.co ("Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by kissapk.

This Privacy Policy applies to all registered users of kissapk, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and all other locations from which the Platform is accessed. By registering a kissapk account or using any part of the Platform, you confirm that you have read and agreed to this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

This policy should be read in conjunction with the kissapk Terms & Conditions, which govern your overall use of the Platform.

2. Data We Collect

kissapk collects personal data in the following categories:

2.1 Registration Data

When you create a kissapk account, we collect your full legal name, date of birth, residential address, email address, mobile phone number, and the username and password you choose. This information is required to open and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with KYC and AML obligations, kissapk may request copies of government-issued photo identification (such as a Malaysian MyKad or passport), proof of residential address (such as a utility bill or bank statement dated within three months), and payment method verification documents. These documents are processed securely and retained for the period mandated by applicable regulatory requirements.

2.3 Financial Data

kissapk collects data relating to deposits, withdrawals, and transaction history on your account. We do not store full payment card numbers on our servers. Deposits made via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, or cryptocurrency are processed through secure payment infrastructure with limited data sharing on a need-to-know basis.

2.4 Usage & Technical Data

kissapk automatically collects technical data when you use the Platform, including your IP address, device type, browser type and version, operating system, referring URL, pages visited, session duration, and in-platform activity such as games played, bets placed, and features accessed. This data is used for security monitoring, fraud detection, and platform improvement.

2.5 Communications Data

When you contact kissapk support via live chat or email, we retain a record of that communication — including the content of messages — for quality assurance, dispute resolution, and regulatory compliance purposes.

2.6 Voluntary Data

You may voluntarily provide additional data — such as preferred sports, game preferences, or responsible gaming settings — which kissapk uses to personalise your experience on the Platform.

3. How We Use Your Data

kissapk uses the personal data we collect for the following purposes:

• To create, maintain, and administer your kissapk account.
• To process deposits, withdrawals, and account transactions in MYR.
• To verify your identity and age (21+) in compliance with KYC and AML obligations.
• To detect and prevent fraud, money laundering, and unauthorised account access.
• To personalise your experience on the Platform, including game recommendations and promotional offers relevant to your activity.
• To send transactional communications including account notifications, deposit confirmations, and withdrawal updates.
• To send marketing communications where you have provided explicit opt-in consent.
• To operate and improve the kissapk platform, including performance monitoring, bug resolution, and feature development.
• To comply with legal, regulatory, and licensing obligations applicable to kissapk's operation.
• To manage responsible gaming obligations, including processing self-exclusion requests and enforcing deposit limits.

4. Legal Basis for Processing

kissapk processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between kissapk and you as a registered user — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable KYC, AML, tax reporting, and gaming regulatory obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform optimisation, and responsible gaming enforcement, where our legitimate interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time without affecting processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

kissapk does not sell, rent, or exchange your personal data with third-party marketing organisations. Your data may be disclosed to the following categories of recipients in limited, controlled circumstances:

• Payment Processors: Payment data is shared with authorised payment service providers (including Touch n Go eWallet, Boost, and bank partners) solely for the purpose of processing your transactions. These providers are contractually bound to process data only as instructed by kissapk.
• Game Studios: Technical session data may be shared with licensed game studio partners to facilitate game delivery and resolve technical disputes. No personally identifiable information beyond a session token is shared with game providers.
• Regulatory & Law Enforcement Authorities: kissapk may disclose your personal data to regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory mandate.
• Third-Party Service Providers: kissapk engages third-party technology providers for hosting, email delivery, and customer support infrastructure. These providers operate under data processing agreements and may not use your data for their own purposes.
• Business Transfers: In the event of a merger, acquisition, or asset sale, personal data held by kissapk may be transferred to the successor entity, subject to equivalent privacy protections.

6. Data Retention

kissapk retains your personal data for as long as your account remains active and for the period required by applicable law and regulatory obligations thereafter. Specifically:

• Account registration data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
• KYC identity verification documents are retained for the minimum period specified by applicable gaming authority regulations, typically five (5) years from the date of verification.
• Support communications are retained for three (3) years from the date of the interaction.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter as evidence of compliance.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

7. Cookies & Tracking Technologies

kissapk uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function, including session authentication, account security, and load balancing. These cannot be disabled without impairing core functionality.
• Analytics Cookies: Used to measure Platform usage, identify popular features, and monitor performance. Data collected is aggregated and anonymised.
• Preference Cookies: Store your Platform preferences such as language settings and responsible gaming configurations across sessions.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using kissapk core features. For full technical details of the cookies in use, contact support at [email protected].

8. Your Privacy Rights

As a kissapk user, you have the following rights regarding your personal data, subject to applicable legal exemptions:

• Right of Access: You may request a copy of the personal data kissapk holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Certain data fields can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that kissapk restricts processing of your data in specific circumstances, such as while the accuracy of data is contested.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of the above rights, contact kissapk support via live chat in your account dashboard or email [email protected]. We aim to respond to all verifiable data requests within thirty (30) days.

9. Security Measures

kissapk implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and the kissapk Platform.
• Encryption at rest for sensitive data including identity documents and financial records.
• Role-based access controls ensuring staff can only access personal data necessary for their specific role.
• Two-factor authentication available for all user accounts and mandatory for internal administrative access.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Incident response procedures for detecting, investigating, and notifying users of data breaches where required by applicable law.

Despite these measures, no system is completely immune to security risks. kissapk encourages users to use strong, unique passwords and to enable 2FA on their kissapk accounts to further reduce personal risk.

10. Children & Minors

The kissapk Platform is strictly for adults aged 21 (twenty-one) years and above. kissapk does not knowingly collect personal data from individuals under the age of 21. If kissapk determines that a registered user is under the minimum age, the account will be immediately suspended, all bets voided, and any net deposits returned in accordance with our Terms & Conditions.

If you believe a minor has registered on the kissapk Platform, please notify us immediately at [email protected] so that the appropriate action can be taken without delay.

11. Changes to This Privacy Policy

kissapk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes will be communicated to registered users via the email address on their kissapk account at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically. Continued use of the kissapk Platform after the effective date of any revision constitutes your acceptance of the updated policy.

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or kissapk's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 via your kissapk account dashboard. Fastest response channel for urgent privacy concerns.
• Email: [email protected] — for formal privacy requests including data access, correction, and deletion. We aim to respond within 30 days.

kissapk takes all privacy enquiries seriously. Formal data rights requests will be handled by our designated data protection contact and processed in accordance with applicable law.