kis888 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") applies to all personal data processed by kis888 ("we", "us", "our") in connection with the operation of the kis888 online gaming platform accessible at kis888.win and its mobile interface ("Platform").

1.2 By registering an account with kis888 or using any of its Services — including Slots, Live Casino, Sportsbook, Lottery Magnum, or Sic Bo — you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1.3 This Policy is incorporated by reference into the kis888 Terms and Conditions. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms and Conditions.

1.4 kis888 operates as a data controller in respect of the personal data it processes about registered Members and Platform visitors. We take our data protection obligations seriously and implement technical and organisational measures proportionate to the risks involved in processing your information.

2. Personal Data We Collect

kis888 collects the following categories of personal data in connection with your use of the Platform:

2.1 kis888 does not knowingly collect special category data (such as health information or biometric data) except where strictly required by applicable gaming regulatory requirements.

3. How We Collect Your Data

3.1 Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, use Platform features, or contact kis888 Customer Support.

3.2 Automatically — through cookies, server logs, and analytics tools that capture Technical Data each time you access the Platform. See Section 7 for our Cookie Policy.

3.3 From third parties — including identity verification service providers used in our KYC process, payment processors (such as FPX gateway operators), and fraud detection partners. Data received from these sources is treated with the same protections as data collected directly.

4. Legal Basis for Processing

kis888 processes your personal data on the following legal bases:

• 4.1 Performance of a contract — processing necessary to provide the Services under your Member agreement, including account management, game provision, and financial transaction processing.
• 4.2 Legal obligation — processing required to comply with anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, gaming licensing conditions, and applicable financial regulations.
• 4.3 Legitimate interests — processing for fraud prevention, Platform security, responsible gaming monitoring, and analytics to improve our services — where such interests are not overridden by your data protection rights.
• 4.4 Consent — for optional marketing communications. You may withdraw consent at any time by adjusting your notification preferences in Account settings or contacting support.

5. How We Use Your Personal Data

kis888 uses personal data for the following purposes:

• 5.1 To create and manage your kis888 Account, including identity verification and age confirmation (all Members must be 21 or above).
• 5.2 To process deposits and withdrawals in Malaysian Ringgit (MYR) via your selected payment method, and to maintain accurate transaction records.
• 5.3 To deliver all Platform Services — including game access, sportsbook betting, lottery draws, and live dealer casino sessions.
• 5.4 To administer promotions, bonuses, and loyalty programmes in accordance with the applicable promotional terms.
• 5.5 To monitor gaming activity for responsible gaming compliance, including detecting patterns indicative of problem gambling and applying self-imposed limits.
• 5.6 To detect, investigate, and prevent fraud, money laundering, match fixing, and other prohibited conduct.
• 5.7 To comply with reporting obligations under our gaming licence and applicable Malaysian and international law.
• 5.8 To send you service-related communications (account activity alerts, security notifications, withdrawal confirmations). Marketing communications are sent only with your consent and can be opted out at any time.
• 5.9 To improve Platform functionality, game selection, and user experience through anonymised analytics and testing.

6. Data Sharing and Disclosure

6.1 Service Providers: We share data with vetted third-party providers who support Platform operations under binding data processing agreements. These include payment processors (FPX, Touch 'n Go, DuitNow), identity verification services, game content providers, cloud hosting providers, and customer support platforms.

6.2 Regulatory Authorities: We may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by law, court order, or our gaming licence conditions.

6.3 Responsible Gaming Bodies: In certain circumstances, data may be shared with self-exclusion databases or problem gambling support organisations where required by our responsible gaming obligations or requested by the Member.

6.4 Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data may be transferred as part of that transaction, subject to equivalent data protection commitments.

7. Cookies and Tracking Technologies

7.1 The kis888 Platform uses cookies and similar tracking technologies (such as web beacons and local storage) to operate correctly, maintain your logged-in session, and collect anonymised analytics data about Platform usage.

7.2 The following categories of cookies are used:

• Strictly Necessary: Session management, login authentication, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional: Remembering your language preferences, game settings, and display preferences between sessions.
• Analytics: Anonymised data on page views, navigation flows, and feature usage, used to improve Platform performance.
• Marketing: Only used with your consent. May track interactions with promotional content to measure campaign effectiveness.

7.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform.

8. Data Retention

8.1 kis888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: retained for the duration of active membership plus a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory obligations.
• Financial transaction records: retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Gaming activity logs: retained for a minimum of five (5) years post-closure.
• Customer support communications: retained for three (3) years from the date of last interaction.

8.2 Following expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

9. Data Security

9.1 kis888 implements the following technical and organisational security measures to protect personal data:

• 256-bit SSL/TLS encryption for all data in transit.
• Encryption of sensitive data fields (including passwords, which are stored as one-way hashes) at rest.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments of Platform infrastructure.
• Automated anomaly detection and alerting for suspicious login activity or data access patterns.
• Incident response procedures including Member notification obligations in the event of a material data breach.

9.2 Notwithstanding the above, no data transmission or storage system is guaranteed to be 100% secure. Members are responsible for maintaining the confidentiality of their Account credentials. If you suspect a security incident involving your Account, contact kis888 support via Live Chat immediately.

10. Your Data Rights

Subject to applicable law and certain exceptions permitted under data protection legislation, you have the following rights in relation to your personal data held by kis888:

• 10.1 Right of Access: You may request a copy of the personal data kis888 holds about you.
• 10.2 Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• 10.3 Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that erasure requests may be limited by our regulatory retention obligations described in Section 8.
• 10.4 Right to Restriction: You may request that we restrict processing of your data in certain circumstances while a dispute is resolved.
• 10.5 Right to Data Portability: Where processing is based on consent or contract performance, you may request a machine-readable copy of data you have provided to kis888.
• 10.6 Right to Object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes.
• 10.7 Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a request to kis888 Customer Support via Live Chat or by email. We will respond within thirty (30) calendar days. We may need to verify your identity before processing a rights request.

11. Children's Privacy and Age Restriction

11.1 Age verification is conducted as part of the kis888 KYC process. Any individual who misrepresents their age to gain access to the Platform does so in breach of our Terms and Conditions and applicable law.

12. International Data Transfers

12.1 The personal data of Malaysian Members may be transferred to and processed in jurisdictions outside Malaysia in connection with our hosting infrastructure, game content providers, and other third-party service providers. Where such transfers occur, kis888 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to maintain a level of protection consistent with this Policy.

12.2 All service providers receiving personal data from kis888 are contractually bound to process that data only for the purposes specified, to maintain appropriate security measures, and not to further transfer data without our authorisation.

13. Changes to This Privacy Policy

13.1 kis888 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via the Platform and, where practicable, by notification to your registered email address or mobile number.

13.2 The version number and effective date at the top of this document indicate the currency of this Policy. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

14. Contact and Data Enquiries

14.1 For any questions, requests, or complaints relating to this Privacy Policy or kis888's data processing practices, please contact us through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. v2.4