Privacy Policy — kisa918

Introduction

This Privacy Policy ("Policy") describes how kisa918 ("we", "us", "our") collects, uses, processes, stores, and discloses personal information obtained from individuals ("you", "your", "User") who access or use the website at kisa918.cam ("Platform") and all associated gaming and sports betting services.

kisa918 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in accordance with applicable data protection obligations. This Policy applies to all personal data we hold about you, regardless of the channel through which it was collected — including your account registration, KYC submissions, payment transactions, customer support interactions, and your activity on the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By registering an account or using the Platform, you confirm that you have read and understood how we handle your personal data as described in this Policy.

Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

Data We Collect

kisa918 collects Personal Data from you through a number of channels and at various stages of your relationship with us. The categories of data we collect are as follows:

3.1 Registration Data. When you create an account, we collect:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address and mobile phone number.
• Username and encrypted password hash.
• Country and state of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam).

3.2 Identity Verification (KYC) Data. To fulfil our regulatory obligations, we collect:

• Copies of government-issued photo identification (Malaysian MyKad/NRIC, passport, or driver's licence).
• Proof of residential address (utility bills, bank statements dated within three months).
• Selfie photographs or video verification where required by our KYC provider.
• Source of funds documentation where transaction volumes or risk indicators warrant it.

3.3 Financial & Transaction Data. In connection with deposits and withdrawals in MYR, we collect:

• Bank account numbers, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), or DuitNow registered phone numbers used for transactions.
• Transaction amounts, timestamps, and reference numbers.
• FPX transaction identifiers and Maybank/CIMB/Public Bank/Hong Leong payment records where applicable.
• Cryptocurrency wallet addresses for players using BTC or USDT.

3.4 Technical & Device Data. When you use the Platform, we automatically collect:

• IP address and approximate geolocation data.
• Device type, operating system, and browser version.
• Session duration, pages visited, and clickstream data.
• Cookie identifiers and similar tracking technologies.

3.5 Gaming Activity Data. For the operation of fair gaming and regulatory record-keeping, we collect:

• Bet history, game session records, and wager amounts.
• Responsible gambling tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests).
• Bonus and promotion activity and wagering requirement progress.

3.6 Communications Data. When you contact our Customer Support team via live chat or email, we retain records of those communications including the content of messages, the date and time, and the resolution outcome.

How We Use Your Data

kisa918 uses your Personal Data for the following purposes:

kisa918 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you, except where strictly required by applicable law and where appropriate safeguards are in place.

Legal Basis for Processing

We process your Personal Data under one or more of the following legal bases, depending on the nature of the processing activity:

1. Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and game operation.
2. Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, identity verification mandates, and regulatory reporting obligations.
3. Legitimate Interests: Processing necessary for our legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
4. Consent: Processing carried out on the basis of your explicit, freely given consent — primarily for the purposes of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

kisa918 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share your data only in the following limited circumstances:

6.1 Service Providers (Data Processors). We engage trusted third-party service providers to perform specific functions on our behalf. These providers are contractually bound to process your data only on our instructions, to maintain appropriate security standards, and not to use your data for any other purpose. Categories of processors include:

• Payment gateway and e-wallet providers (facilitating DuitNow, FPX, Touch 'n Go, and other Malaysian payment transactions).
• KYC and identity verification technology partners.
• Fraud detection and risk management platform providers.
• Cloud infrastructure and data hosting providers.
• Customer support software providers (live chat platform).
• Email delivery service providers (for transactional and marketing communications).

6.2 Regulatory and Law Enforcement Authorities. We will disclose your Personal Data to competent public authorities — including gaming regulators, financial intelligence units, and law enforcement agencies — where we are legally required to do so or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any change in the applicable privacy policy.

International Data Transfers

Certain service providers engaged by kisa918 — including cloud hosting infrastructure and KYC technology partners — may process your Personal Data in countries outside Malaysia. Where such transfers occur, kisa918 takes appropriate measures to ensure that your data receives a level of protection equivalent to that provided under applicable law.

These measures may include: the use of standard contractual clauses approved by the relevant data protection authority; data processing agreements incorporating appropriate technical and organisational security standards; or transfers to countries that have been assessed as providing an adequate level of data protection.

You may contact our Customer Support team to request further information about the specific safeguards applied to international transfers of your Personal Data.

Data Retention

kisa918 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Our general retention schedule is as follows:

• Active Account Data: Retained for the full duration of your account relationship with kisa918, including any period of dormancy.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years following each transaction, consistent with financial regulatory obligations.
• Customer Support Communications: Retained for two (2) years following the resolution of the relevant support interaction, except where the communication forms part of an ongoing dispute or investigation.
• Marketing Consent Records: Retained for three (3) years from the date of consent or the date of your last interaction with marketing communications, whichever is later.
• Technical Logs and Cookies: Session cookies expire when you close your browser; persistent analytical cookies are retained for up to twelve (12) months.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

Cookies & Tracking Technologies

kisa918 uses cookies and similar tracking technologies to operate and improve the Platform. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies that remember your language and currency preference (MYR). These cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Used to understand how players interact with the Platform — which pages are visited most frequently, where errors occur, and how navigation flows can be improved. The data collected is aggregated and anonymised.
• Functional Cookies: Used to remember your personalisation preferences, such as your last-visited game category, preferred game view, or customer support chat history.
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns and to ensure that marketing communications are relevant to your interests. These cookies are only placed with your consent and may be disabled at any time.

You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality and performance of the Platform. Instructions for cookie management are available in your browser's help documentation.

Your Rights

Subject to applicable law and certain limitations that may apply in specific circumstances, you have the following rights in relation to your Personal Data held by kisa918:

To exercise any of these rights, please contact our Customer Support team via live chat or by emailing [email protected] (plain text — not a clickable link). We will respond to all verified requests within thirty (30) calendar days. We may request identity verification before processing a data rights request to prevent unauthorised disclosure.

Please note that certain rights may be limited where exercising them would conflict with our legal obligations — for example, where we are required to retain transaction records under anti-money laundering regulations, we cannot delete those records on request within the mandatory retention period.

Security Measures

kisa918 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser or device and our servers is encrypted using 256-bit SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar when accessing kisa918.cam.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial information, is encrypted in our databases using AES-256 encryption standards.
• Access Controls: Access to Personal Data within the kisa918 organisation is governed by role-based access controls on a strict need-to-know basis. All access events are logged and subject to audit.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts. 2FA is enforced for all administrative users within our organisation.
• Regular Security Assessments: We conduct periodic penetration testing, vulnerability assessments, and security audits of our infrastructure and application code.
• Incident Response: We maintain documented incident response procedures and will notify affected players and relevant authorities in the event of a data breach that poses a risk to your rights, in accordance with applicable law.

While we take all reasonable steps to protect your data, no system is completely immune to security risks. We encourage all players to use a strong, unique password for their kisa918 account and to enable 2FA.

Minors & Age Verification

kisa918 does not knowingly collect Personal Data from individuals under the age of 21. The Platform is strictly restricted to adults aged 21 and above, and we employ mandatory KYC identity verification to enforce this requirement.

If we discover or reasonably suspect that Personal Data has been collected from a person under 21 without the knowledge or consent of a parent or guardian, we will take immediate steps to suspend the relevant account, delete the data, and return any deposited funds in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has provided Personal Data to kisa918, please contact our Customer Support team immediately so that we can investigate and take appropriate action.

Policy Amendments

kisa918 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide reasonable advance notice by publishing the updated Policy on this page with a revised "Last Updated" date and, where appropriate, by notifying you via the email address registered on your account.

Your continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically to stay informed of how kisa918 handles your Personal Data.

Historical versions of this Policy are available on request from our Customer Support team.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way kisa918 handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average first response is under 90 seconds. Live chat is the fastest channel for data rights queries.
• Email: [email protected] (plain text only — not a clickable link). For written data rights requests, please include "Data Rights Request" in your subject line and provide your registered username and a description of your request.
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 calendar days.

Where you have submitted a formal complaint that we are unable to resolve to your satisfaction through our internal processes, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.