Privacy Policy 918kiss ori —
Your Data is Fully Protected

1. Introduction and Scope of Privacy Policy

918kiss ori ("Platform", "we", "us") recognises that privacy is a fundamental right of every individual. We take data protection responsibilities extremely seriously and operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.

This Privacy Policy explains in detail how 918kiss ori handles your personal information — from the point of collection through to storage, use, and deletion. Our goal is to ensure you always have full control over your own personal data.

This policy applies to all registered members, website visitors, and anyone who interacts with the 918kiss ori platform through any device or communication channel. Please read this document carefully in its entirety as it contains important information regarding your rights.

2. Types of Personal Data Collected

918kiss ori collects various categories of personal information depending on how you interact with our platform. Below is a detailed explanation of the data we collect:

We only collect data that is strictly necessary for the stated purposes. Data that is no longer relevant or required will be deleted in accordance with our data retention policy.

3. How We Use Your Data

918kiss ori uses your personal data for lawful and transparent purposes. The following are the primary ways we use the information collected:

• Account management — creates, verifies, and maintains your member account to keep it secure and fully functional at all times.
• Transaction processing — processes deposits, withdrawals, and all financial matters related to your account swiftly and securely.
• Fraud prevention and security — detects suspicious activity, prevents unauthorised access, and protects the integrity of the platform against misuse.
• Legal compliance — fulfils the KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance obligations mandated by the relevant authorities.
• Customer support — provides relevant and effective assistance whenever you contact our support team.
• Service communications — delivers important notifications related to your account, security, and platform updates that directly affect you.
• Platform improvements — analyses usage patterns to enhance the performance, interface, and overall experience of the platform.
• Responsible gaming — monitors gaming behaviour to identify members who may require additional support or protection.

4. Data Sharing with Third Parties

918kiss ori does not sell or rent your personal data to any third party for marketing purposes. However, in certain circumstances, we may share your information with parties required to effectively operate the platform:

• Payment service providers — partner banks, e-wallet providers, and payment processors that help us handle your financial transactions securely. They receive only the minimum data necessary to process each transaction.
• Game providers — game providers such as slot and Live Casino suppliers that require basic data to run your gaming sessions.
• Identity verification services — third parties that assist us in the KYC process to verify member identity in accordance with compliance requirements.
• Legal authorities — we will disclose your data to the relevant authorities when required by law, court order, or to prevent criminal activity.
• Analytics services — analytics tools used to understand platform usage patterns for improvement purposes, with all data anonymised.

All our third-party partners are bound by strict data protection agreements and are required to handle your data in accordance with the security standards set by 918kiss ori.

5. Our Data Security Measures

918kiss ori invests seriously in security infrastructure to protect your personal data from unauthorised access, loss, misuse, or disclosure. Key security measures we have implemented include:

• 256-bit SSL Encryption — all data transmitted between your device and our servers is protected with the highest level of encryption, equivalent to that used by financial institutions and banks.
• Two-factor authentication (2FA) — an additional security layer requiring a second verification each time a login or withdrawal is performed from a new device.
• 24/7 Monitoring — a continuous threat detection system that monitors for suspicious activity around the clock and responds automatically to identified threats.
• Strict Access Control — only authorised and registered personnel have access to sensitive member data, and all access is logged and audited on a regular basis.
• Regular security testing — penetration testing and security audits are conducted regularly by independent third parties to identify and address any vulnerabilities.
• Secure data backup — your data is regularly backed up to a secure, separate location to ensure rapid recovery in the event of a technical disruption.

6. Cookies and Tracking Technologies

The 918kiss ori platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login sessions, security, and identity verification. These cookies cannot be disabled as they are essential to platform operations.
• Performance Cookies — collects information about how you use the platform, such as frequently visited pages and response times. This data is used in aggregate to improve platform performance.
• Functional Cookies — allows the platform to remember your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies — helps us understand overall usage patterns to make data-driven decisions in improving our products and services.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some features on the 918kiss ori platform.

7. Data Retention Period

918kiss ori retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. Our data retention guidelines are as follows:

• Active account data — retained for as long as your account is active and in use, plus any additional period required for audit and compliance purposes.
• Financial transaction data — retained for a minimum of seven (7) years in accordance with financial legislation and AML compliance requirements applicable in Malaysia.
• KYC and identity verification data — retained for the period mandated by the relevant authorities, typically a minimum of five (5) years following account termination.
• Support communication logs — retained for two (2) years for reference and service improvement purposes.
• Anonymised analytics data — may be retained for a longer period as it can no longer be attributed to any specific individual.

When your data is no longer needed and there is no legal obligation to retain it, 918kiss ori will securely delete or anonymise that data using methods that ensure it cannot be recovered.

8. Your Rights Regarding Personal Data

As a member of 918kiss ori and a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

9. Protection of Children's Data

918kiss ori strictly does not accept members under the age of 18. Our platform is not designed for children, and we do not knowingly collect personal data from individuals known to be under 18 years of age.

Should we discover that personal data of an underage minor has been collected without proper age verification, we will take immediate steps to delete that data and terminate the account in question. Parents or guardians who become aware that their child has registered an account on our platform are urged to contact us immediately.

10. KYC and AML Compliance

As a responsibly operated gaming platform, 918kiss ori fully complies with the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements set by the relevant authorities. This compliance requires us to:

• Verifying the identity of all members via valid identification documents before the first withdrawal or when certain thresholds are reached.
• Maintaining complete records of all financial transactions for the period stipulated by law.
• Reporting suspicious transactions to the relevant authorities without prior notification to the member, where doing so could compromise an investigation.
• Conducting ongoing screening against blacklists and databases of individuals involved in illicit activities.

11. Amendments to the Privacy Policy

918kiss ori reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When any material changes are made, we will:

• Displaying a clear notice on the platform's home page for at least 14 days before the changes take effect.
• Sending email notifications to members directly affected by the relevant changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the 918kiss ori platform after changes take effect will be considered as your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

12. Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer through the following channels:

• Email: [email protected] — for privacy-related enquiries and data access requests.
• Live Chat: Available 24/7 via the chat icon on our platform for general enquiries.
• Telegram & WhatsApp: For urgent communications regarding privacy issues that require immediate attention.

We are committed to responding to all privacy-related enquiries within 72 business hours. For more complex requests such as data deletion or full data access, processing may take up to 30 business days. Do not hesitate to reach out — your privacy is our priority.