Privacy Policy

Your Privacy Responsibility kiss999 Home

At kiss999, we don't just make promises — we implement real data protection. From AES-256 encryption to full compliance with Malaysia's PDPA, every piece of information you share with us is handled with the highest level of security.

256-bit SSL Encryption
PDPA Full Compliance
24/7 System Monitoring
Updated: January 2026
Jurisdiction: Malaysia — PDPA 2010
Language: Malay

Six Core Principles Data Protection kiss999

We ensure every layer of the kiss999 platform is built with user privacy as a priority — not merely to meet legal requirements, but to exceed expectations.

End-to-End Encryption

All data transmitted between your device and kiss999's servers is protected by TLS 1.3 with AES-256 encryption — the same standard used by leading banking institutions in Malaysia. Your information cannot be read by any third party during transmission.

Malaysia PDPA Compliance

Kiss999 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We collect only data that is genuinely necessary, store it for defined periods, and ensure it is processed lawfully and transparently in accordance with the provisions of the law.

No Marketing Data Sharing

Your personal data is never sold, rented or shared with third parties for marketing purposes without your explicit consent. kiss999 draws a clear line between platform operational needs and the commercial exploitation of user data.

Full User Control

You have the right to access, correct, delete or transfer your personal data at any time. Data management requests can be submitted through our customer support team and will be processed within 14 working days.

Secure & Isolated Servers

Kiss999 user data is stored in ISO 27001-certified data centres with strict physical access controls, 24/7 monitoring and automatic backup systems. Access to sensitive data is restricted to authorised personnel with multi-layer verification.

Rapid Breach Notification

In the event of any security incident affecting user data, kiss999 is committed to notifying affected users within 72 hours — well ahead of current industry standards and regulatory requirements.

01 Privacy Policy Introduction and Scope

This Privacy Policy explains how kiss999 — Malaysia's leading digital entertainment platform — collects, processes, stores and protects your personal information when you use our website, Android mobile app or iOS PWA at https://kiss999.win.

We take user privacy extremely seriously. This policy is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international data protection standards. By registering or using the kiss999 platform, you consent to the processing of your data as described in this document.

This policy applies to all kiss999 users including visitors without an account, registered members, and users of our VIP and loyalty programmes. In the event of any conflict between this policy and another language version, this Malay version shall apply to Malaysian users.

Important Note. This Privacy Policy is to be read together with Terms and Conditions kiss999. Both documents together form the complete agreement framework between you and our platform.

02 Types of Personal Data Collected

Kiss999 collects your personal data through several channels — directly from you during registration and platform use, automatically through tracking technologies, and in limited circumstances from authorised third parties such as identity verification providers.

Data You Provide Directly

  • Identity information: Full name, National Identity Card (MyKad) or passport number, date of birth
  • Contact information: Email address, Malaysian mobile phone number
  • Financial information: Bank account number, account holder name (for processing withdrawals)
  • KYC documents: Photo or scan of identity document, verification selfie, proof of address
  • Communications: Customer support chat records, feedback, and complaints you have submitted

Data Collected Automatically

  • Device data: Device type, operating system, unique device identifier, screen resolution
  • Network data: IP address, estimated location based on IP, internet service provider name
  • Usage data: Pages visited, games played, session duration, in-app actions
  • Cookie data: Preferences, login sessions, language settings (further details in Section 6)
Data Category Example Requirements
Identity Name, IC, date of birth Mandatory
Contact Email, phone number Mandatory
Financial Bank account number Mandatory
Usage Pages visited, games played Preferences
Device IP, device type, OS Functional

03 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. kiss999 does not collect more data than is necessary to operate the platform and fulfil our legal obligations. Below are the legal basis and purpose for each use of data:

Contract Performance (Required for Service)

  • Creating and managing your user account
  • Processing deposits, withdrawals, and financial transactions
  • Delivering games and platform features to you
  • Sending important account-related notifications such as transaction confirmations

Legal Compliance (Statutory Obligation)

  • Conducting KYC identity verification and anti-money laundering (AML) requirements
  • Storing financial transaction records in accordance with Malaysia's legal requirements
  • Respond to lawful requests from law enforcement authorities

Legitimate Interest (Security & Improvement)

  • Detecting and preventing fraud, account abuse, and suspicious activity
  • Analysing usage patterns to improve the user experience
  • Resolving disputes and enforcing our terms of service

Consent (With Your Permission)

  • Sending promotional information and bonus offers via email or notifications (revocable at any time)
  • Personalising game recommendations based on your usage history
Data Minimisation Principle. kiss999 only collects data that is genuinely necessary. We do not request irrelevant information and will not use your data for any purpose other than those stated above without notifying you in advance.

04 Data Sharing and Disclosure

Kiss999 does not sell or rent your personal data to anyone. In certain circumstances, we may share data with selected third parties, but only under the conditions stated below and with appropriate safeguards in place.

Service Providers (Operational Partners)

We share necessary data with service providers that help operate the kiss999 platform, including:

  • Payment verification providers — to process deposits and withdrawals via FPX, local banks, and e-wallets
  • KYC solution providers — to carry out secure digital identity verification
  • Cloud service providers — for secure and reliable server infrastructure
  • Game providers — PG Soft, Pragmatic Play, Evolution Gaming, and others need to receive anonymised session IDs to operate games

All of these partners are bound by strict data protection agreements and are not permitted to use your data for their own purposes.

Authorities (When Required by Law)

Kiss999 may disclose data to Malaysian government authorities, law enforcement bodies, or courts when:

  • Ordered by a valid court order
  • Required to comply with AML/CFT obligations (anti-money laundering)
  • Necessary to protect the safety of other users or the public
Cross-Border Data Transfers. If your data needs to be transferred outside Malaysia (for example, to international game providers), we ensure such transfers are carried out with protections equivalent to or higher than Malaysia's PDPA.

05 Data Storage and Retention Period

Kiss999 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law. Once the retention period expires, data will be securely deleted or anonymised in a form that can no longer be identified.

Data Type Retention Period Reason
KYC Documents 7 years after account closure Malaysia AML Requirements
Financial Transaction Records 7 years Tax & legal requirements
Game Records 2 years Dispute resolution
Support communication logs 3 years Quality Reference & Audit
Marketing data Until consent is withdrawn Consent-based
Session data & technical logs 90 days Security & debugging

After your account is permanently closed, data that is no longer required will be deleted within 30 days, except for data that must be retained to fulfil legal obligations as specified in the table above.

06 Cookie & Tracking Technology Policy

Kiss999 uses cookies and similar technologies to keep the platform running smoothly, enhance user experience, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Maintaining login sessions, language preferences, and security settings Session / 30 days
Functional Cookies Remembering your game preferences, display format, and platform settings 1 year
Analytics Cookies Understanding platform usage patterns for continuous improvement (anonymised data) 2 years

Essential cookies cannot be disabled as they are required for the platform to function properly. Functional and analytics cookies can be managed through your browser settings. However, disabling certain cookies may affect your experience on the platform.

Manage Your Cookies. Most web browsers allow you to manage cookies through their settings. You can configure your browser to reject new cookies, delete existing cookies, or notify you when new cookies are received.

07 Your Rights as a Data Subject

Under Malaysia's PDPA and global data protection best practices, you have the following rights regarding your personal data held by kiss999:

Access Rights

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request immediate correction.

Right to Erasure

You can request deletion of your data, subject to applicable legal retention obligations.

Right to Object to Processing

You can object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer.

Right to Restrict Processing

In certain circumstances, you can request that we temporarily restrict the processing of your data.

To submit any of the requests relating to the rights above, please contact our Data Protection Officer via live chat within the platform or by email at [email protected]. We will process your request within 14 working days.

08 Data Security and Protection Measures

Kiss999 continually invests in security infrastructure to ensure your data is protected from unauthorised access, loss, alteration, or disclosure. The technical and organisational measures we implement include:

  • Data encryption at rest: All sensitive data stored in our databases is encrypted using AES-256, including KYC information and financial details.
  • Data encryption in transit: All communication between your device and our servers is secured by TLS 1.3 — the latest version of the Transport Layer Security protocol.
  • Two-factor authentication (2FA): The kiss999 platform supports 2FA for user accounts and requires multi-layer verification for all internal administrative access.
  • Periodic penetration testing: We conduct comprehensive security testing by independent security experts at least twice a year.
  • Real-time threat monitoring: Our SIEM (Security Information and Event Management) system monitors for suspicious activity around the clock, 24 hours a day.
  • Role-based access control: Internal kiss999 staff only have access to the data needed for their role — the principle of least privilege is strictly enforced.
  • Regular Backups: Data is automatically backed up daily to separate secure locations, ensuring service continuity.
Shared Responsibility. While we implement the highest level of security measures, the safety of your account also depends on your own actions. Please use a strong password, do not share your login credentials, and enable 2FA for maximum protection.

09 Changes to This Privacy Policy

Kiss999 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. We are committed to being transparent about any changes made.

When there are material changes to this policy, we will:

  • Sending notifications to your registered email at least 7 days before changes take effect
  • Displaying clear notices on the kiss999 platform's home page and login page
  • Updating the "Last Updated" date at the top of this policy
  • Maintaining an archive of previous versions of this policy for your reference

Your continued use of the kiss999 platform after the effective date of any changes will be deemed your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data.

10 Contact Our Data Protection Officer

Kiss999 has appointed a Data Protection Officer responsible for ensuring compliance with privacy policies and acting as the point of contact for all user privacy-related enquiries.

If you have any questions, concerns, or complaints regarding how we handle your personal data, or wish to submit any request relating to your rights, please contact us through the following channels:

Privacy Email
[email protected]
Live Chat
Available 24/7 within the platform

We are committed to responding to all privacy inquiries within 3 working days. For requests that require a thorough investigation, we will provide an update within 7 days and resolve the request within 14 working days. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Department (PDPA) of Malaysia.

Document Information
  • Version v3.1
  • Updated Jan 2026
  • Legal Basis PDPA 2010
  • Language Malay

FAQ About kiss999 Privacy

We have compiled the most frequently asked questions from Malaysian users regarding kiss999's privacy policy and data protection practices.

Absolutely not. kiss999 has never and will never sell, rent, or trade users' personal data to any third party for commercial purposes. Your data is only shared with selected, contractually bound operational partners — such as payment and KYC solution providers — and only to the extent necessary to deliver platform services.

You can submit a data access request by contacting our customer support team via live chat on the platform or by emailing [email protected]. Specify the type of data you are requesting and we will process your request within 14 working days. Identity verification may be required before data is released to ensure the security of your account.

Yes, you have the right to request deletion of your personal data. However, full deletion is subject to Malaysia's data retention legal obligations — for example, financial transaction records and KYC documents must be kept for 7 years under AML requirements. Data not subject to such obligations will be securely deleted within 30 days of the request being received.

When your account is closed, we will immediately cease all non-essential data processing activities. Data not subject to legal retention requirements will be deleted within 30 days. Data that must be retained for legal compliance, such as financial records and KYC, will be stored in an isolated environment with strictly limited access, only for the period required by law.

Yes. Your financial details, such as bank account numbers, are stored in encrypted form using AES-256 encryption and are only accessible by authorised payment processing systems. This information is never exposed in plain text to any staff or external systems. Every withdrawal transaction also goes through a multi-layered identity verification process to ensure only the legitimate account owner can carry out transactions.

You can stop receiving promotional emails at any time in two ways: first, click the "Unsubscribe" link at the bottom of any marketing email we send; or second, log in to your kiss999 account, go to notification settings and disable marketing communication preferences. Withdrawing this consent will not affect essential operational emails such as transaction confirmations and account security notifications.

Digital Entertainment Platform Most Trusted in Malaysia

Register your kiss999 account today and enjoy the ultimate gaming experience with full data security — SSL encryption, PDPA compliance and 24/7 support for your peace of mind.

Data Protected
AES-256 Encryption
Fully Licensed
Trusted platform
Fast Withdrawal
Processed in minutes
24/7 Support
Team ready to assist
Bahasa Melayu