Privacy Policy — How KIS88 Handles Your Data

01 Introduction

This Privacy Policy ("Policy") is published by KIS88 ("we", "us", "our", "the Platform"), the operator of the online sports betting and live casino platform accessible at https://kis88.cam. This Policy applies to all personal data collected from players, prospective players, and visitors who access or use the KIS88 Platform, whether through a desktop browser, mobile device, or any other channel.

KIS88 processes personal data in accordance with applicable data protection principles, including those aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised privacy standards. We are committed to handling your information transparently, using it only for the purposes described in this Policy, and protecting it with appropriate technical and organisational safeguards.

By registering an Account on KIS88 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to any part of this Policy, you should not use the Platform.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

03 Data We Collect

KIS88 collects personal data only to the extent necessary to provide our services, comply with applicable legal obligations, and protect the integrity of the Platform. The categories of data we collect are as follows:

3.1 Registration Data

When you create a KIS88 Account, we collect the information you provide in the registration form, including:

• Full legal name as it appears on your identity document
• Date of birth (for age verification — players must be 21 years of age or older)
• Residential address, including city and postcode
• Email address and mobile telephone number
• Chosen username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money-laundering obligations, we may request copies of supporting documentation, including:

• Malaysian MyKad, passport, or other government-issued identity document
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Proof of payment method ownership (bank statement, e-wallet screenshot)
• Source of funds documentation for high-value accounts or unusual deposit patterns

3.3 Financial Transaction Data

We collect details of all financial transactions conducted through your Account, including:

• Deposit and withdrawal amounts, dates, and payment references
• Payment method identifiers (e.g., bank account suffix, e-wallet identifier for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency wallet address)
• Transaction status and processing timestamps
• Bonus and promotional credit history

3.4 Betting & Gaming Activity Data

• Wager history, including markets selected, stake amounts, odds, and settlement outcomes
• Game session records for live casino, slots, lottery, and arcade products
• Responsible gambling tool usage — deposit limits set, session timers activated, self-exclusion requests

3.5 Technical & Device Data

• IP address and approximate geographic location at the time of login
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Session duration, page views, and navigation paths within the Platform
• Referral source (where applicable)

3.6 Communications Data

Records of communications between you and KIS88, including live chat transcripts, support ticket exchanges, and email correspondence, are retained for quality assurance and dispute resolution purposes.

04 How We Use Your Data

KIS88 uses personal data collected from players for the following purposes:

• Account creation and management: To register your Account, verify your identity and age, and maintain the accuracy of your Account records.
• Service delivery: To process deposits and withdrawals, settle wagers, credit bonuses, and provide access to all products and features available on the Platform.
• Regulatory compliance: To fulfil anti-money-laundering (AML) obligations, conduct ongoing KYC checks, and respond to lawful requests from regulatory or law enforcement authorities.
• Responsible gambling: To monitor betting patterns for signs of problem gambling behaviour, enforce deposit and loss limits, and facilitate self-exclusion requests where applicable.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other conduct that violates our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality and training purposes.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the functionality and performance of the KIS88 Platform.
• Marketing communications: With your prior consent, to send you promotional offers, bonus notifications, and updates about KIS88 products. You may withdraw consent at any time.

05 Legal Basis for Processing

KIS88 processes your personal data on the following legal bases:

06 Data Sharing

KIS88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. We may share your data with third parties only in the following limited circumstances:

• Payment processors: To facilitate deposit and withdrawal transactions, we share necessary transaction data with payment service providers including FPX network participants, DuitNow operators, and regulated banking institutions such as Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as e-wallet providers (Touch 'n Go, Boost, GrabPay) and cryptocurrency exchange services.
• Identity verification providers: Third-party KYC and identity verification services may process your identity documents on our behalf under strict data processing agreements.
• Technology and hosting providers: Cloud infrastructure, software-as-a-service providers, and security technology vendors who process data on KIS88's behalf and are contractually bound to handle it in accordance with this Policy.
• Game content providers: Game studios and platform providers whose products are hosted on KIS88 may receive limited session data necessary for game operation, RNG audit, and dispute resolution.
• Regulatory and law enforcement authorities: KIS88 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction.
• Anti-fraud and AML networks: Where permitted by law, KIS88 may share limited data with industry-wide fraud prevention or anti-money-laundering schemes to protect players and the broader online gaming community.

All third-party processors engaged by KIS88 are subject to data processing agreements that require them to implement appropriate security measures and process personal data only on KIS88's documented instructions.

07 Data Retention

KIS88 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including the satisfaction of any legal, regulatory, accounting, or reporting obligations. Specific retention periods are as follows:

• Active Account data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with applicable AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the transaction date for AML and tax compliance purposes.
• Support communications: Retained for three (3) years from the date of the interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Technical and device data: Typically retained for twelve (12) months from collection, unless required longer for fraud investigation purposes.
• Marketing consent records: Retained for three (3) years from the date of consent, or until consent is withdrawn, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with KIS88's data disposal procedures, unless retention is required by law.

08 Cookies & Tracking Technologies

KIS88 uses cookies and similar tracking technologies to operate the Platform effectively, improve user experience, and analyse Platform performance. A cookie is a small text file stored on your device by your browser when you visit the Platform.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during your visit. These cannot be disabled without disrupting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregate information about how players use the Platform — pages visited, time spent, error messages encountered. This data is used exclusively to improve Platform performance.
• Functional Cookies: Used to remember your preferences — such as language settings and responsible gambling limit configurations — to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including multi-session detection and device fingerprinting for account security purposes.

You may control cookie behaviour through your browser settings. Please note that disabling certain cookies may impair your ability to use some features of the KIS88 Platform, including login and account management functions. KIS88 does not use cookies to serve third-party advertising on the Platform.

09 Data Security

KIS88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Key security controls include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and KIS88 servers
• Encrypted storage of all passwords and sensitive account credentials using industry-standard hashing algorithms
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure
• Intrusion detection systems and 24/7 security monitoring of Platform environments
• Formal incident response procedures to detect, assess, and notify affected parties of any personal data breach within legally required timeframes

While KIS88 takes all reasonable steps to protect your personal data, no method of internet transmission or electronic storage is completely secure. You are encouraged to use a strong, unique password for your KIS88 Account and to notify us immediately if you suspect any unauthorised access.

10 Your Rights

As a Data Subject whose personal data is processed by KIS88, you have the following rights in respect of that data, subject to applicable legal exemptions and KIS88's legitimate interests:

• Right of Access: You may request a copy of the personal data KIS88 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data KIS88 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: You may request that KIS88 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (such as AML record-keeping requirements).
• Right to Restriction of Processing: You may request that KIS88 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that KIS88 provide your personal data in a commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes or on the basis of KIS88's legitimate interests, in which case KIS88 will cease such processing unless it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights described above, please contact KIS88's data protection team via our live chat service or by email at [email protected]. We will respond to your request within 30 days of receipt. In some cases, we may need to verify your identity before processing your request.

11 Protection of Minors

KIS88 is an adult entertainment platform strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If KIS88 discovers that personal data has been collected from a person under 21 — whether through a falsified registration or any other means — that Account will be closed immediately, any associated funds will be returned to the source after investigation, and all personal data held in connection with that Account will be deleted.

12 Third-Party Links

The KIS88 Platform does not include links to third-party websites for commercial or promotional purposes. However, game content provided by third-party studios may involve data transmission directly between your device and the studio's own servers for game operation purposes. KIS88 is not responsible for the privacy practices of third-party game providers, and we encourage you to review their respective privacy policies where this is a concern.

13 Changes to This Policy

KIS88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material — for example, where we begin processing a new category of personal data or using data for a new purpose — we will notify registered players via the email address on file or through a prominent notice on the Platform, providing a minimum of fourteen (14) days' advance notice before the change takes effect.

Non-material amendments — such as typographical corrections or clarifications that do not alter your rights or our obligations — may be made without prior notice. The current version of this Policy, with its effective date, is always available on this page. We encourage you to review this Policy periodically.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by KIS88, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.