Kiss918 Ori Privacy Policy – Our Commitment to Your Personal Data

This Privacy Policy ("Policy") describes how Kiss918 Ori ("we", "platform", "kiss918 ori") collects, stores, processes, uses, and protects your personal data when you use the website, mobile application, and all services operating under the domain kiss918ori.click.

At kiss918 ori, we understand that trust is the foundation of our relationship with every member. Malaysian players entrust us with their personal information — from names and phone numbers to payment account details such as Touch 'n Go eWallet and DuitNow — and we take this responsibility very seriously. This Policy is written in clear, plain language so you truly understand your rights and how your data is managed.

This policy applies to all registered kiss918 ori members, unregistered visitors to our website, and any individual who interacts with our platform through any channel. It should be read together with Terms & Conditions ours, which forms an important part of the overall agreement between you and kiss918 ori.

Kiss918 ori collects various types of data depending on how you interact with our platform. Below is a full list of the data categories we may collect:

Kiss918 ori no collecting credit or debit card details directly – all payments are processed through third-party payment gateways that maintain their own security standards. We only receive a transaction reference for the purpose of verifying your deposit and maintaining your account records.

Kiss918 ori collects your personal data through several different methods throughout your interactions with our platform:

• Account Registration: When you register a new account at kiss918 ori, you provide basic identity and contact information directly through our registration form.
• Platform Usage: When you play casino games, place bets on Malaysia Super League football, purchase lottery tickets or use any kiss918 ori service, our systems automatically record that activity for service delivery and security purposes.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, we receive the transaction information necessary to process and verify your payment.
• Identity Verification (KYC): For members making withdrawals above certain thresholds, or when required for security purposes, we may request additional identity verification documents such as a copy of your Malaysian identification card.
• Support Communications: Every interaction you have with the kiss918 ori support team — whether via live chat or email — is recorded for service quality and dispute resolution purposes.
• Cookies & Tracking Technologies: The kiss918 ori website uses cookies and similar technologies to collect technical and usage data in order to improve the user experience. See section 9 for more information.

We only collect data that you voluntarily provide or that is automatically generated through your use of the platform. kiss918 ori does not purchase or import personal data lists from external sources.

Kiss918 ori uses your personal data solely for the following purposes. We will not use your data for any other purpose without notifying you:

• Account Setup & Management: To create, verify, and manage your kiss918 ori account, including login, security settings, and your personal preferences.
• Financial Transaction Processing: To process your deposits via Touch 'n Go eWallet, GrabPay, DuitNow, or any other Malaysian payment method of your choice, and to handle withdrawal requests securely and accurately.
• Identity Verification & Fraud Prevention: To verify member eligibility and to identify and prevent fraudulent activity, money laundering, and misuse of the kiss918 ori platform.
• Customer Support Services: To enable the kiss918 ori support team to assist you effectively whenever you reach out via live chat or email.
• Service Communications: To send important account-related notifications such as deposit confirmations, withdrawal status updates, security changes and policy updates.
• Marketing & Promotions (With Consent): To send you information about the latest kiss918 ori promotions, new bonuses and special offers — only where you have given your consent to receive such marketing communications.
• Platform Improvements: To analyse usage patterns on an aggregate (not individual) basis in order to improve the design, performance and content of the kiss918 ori platform for the benefit of all members.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including lawful requests from competent authorities in Malaysia.

Kiss918 ori does not sell, rent, or disclose your personal data to third parties for marketing purposes without your consent. However, there are specific situations where we need to share your personal data with the following parties in order to deliver our services:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions (such as FPX providers, TNG eWallet, and GrabPay) will receive the information necessary to complete those transactions. These providers maintain their own privacy policies and security standards.
• Game Software Providers: Casino game providers that supply blackjack, baccarat, slots, and Live Casino games to the kiss918 ori platform may process your game session data as required to operate those games.
• Platform Analytics Services: We use selected analytics tools to understand platform usage patterns at an aggregate level. Any data shared for this purpose is in a form that does not allow identification of individual users.
• Law Enforcement Authorities: Where required by Malaysian law or a valid court order, kiss918 ori may be obligated to disclose your personal data to the relevant authorities. We will endeavour to inform you of any such disclosure unless prohibited by law.
• Professional Advisors: Lawyers, accountants, and other professional advisors bound by confidentiality obligations may require access to certain data in the context of professional advice they provide to kiss918 ori.

In all cases of data sharing, kiss918 ori ensures that the receiving party has adequate data protection measures in place and uses the data only for the permitted purpose. We are not responsible for the privacy practices of independent third parties once data has been passed to them in accordance with service requirements.

Kiss918 ori implements a range of technical, physical, and organisational measures to protect your personal data against unauthorised access, modification, disclosure, or destruction. Key security measures we have in place include:

• 256-bit SSL Encryption: All data communications between the kiss918 ori platform and your device are protected by 256-bit SSL (Secure Socket Layer) encryption — the highest industry standard used by Malaysia's leading banks.
• Two-Factor Authentication (2FA): kiss918 ori members are strongly encouraged to enable 2FA in their account settings as an additional security layer that protects against unauthorised access, even if your password is compromised.
• 24/7 Security Monitoring: Kiss918 ori's automated monitoring system operates around the clock to detect unusual activity or unauthorised access attempts and respond promptly.
• Internal Access Controls: Only kiss918 ori staff who require access to specific personal data in order to perform their duties will be granted that access – in accordance with the "least privilege" principle (minimum access rights necessary).
• Regular Security Audits: The kiss918 ori platform undergoes regular security reviews and audits to identify and address potential vulnerabilities before they can be exploited.
• Data Backup: kiss918 ori member data is regularly backed up to a secure, separate location to ensure no data is lost due to system failure or unforeseen incidents.

While kiss918 ori takes all reasonable security measures, no system is entirely risk-free. We encourage you to play your part in keeping your account secure by using a strong password, enabling 2FA, and reporting any suspicious activity to our support team promptly.

Kiss918 ori retains your personal data for as long as your account remains active, or for as long as necessary to provide services to you. Upon account closure, we will delete or anonymise your personal data within a reasonable period, subject to the following retention requirements:

• Financial Transaction Records: Data relating to deposits, withdrawals and betting history is retained for a minimum of seven (7) years from the date of transaction, in accordance with applicable financial and tax regulatory requirements in Malaysia.
• KYC Verification Records: Identity verification documents such as Malaysian IC images are retained for a minimum of five (5) years after account closure for anti-money laundering compliance purposes.
• Security Logs: Activity and security logs are retained for two (2) years to assist in the investigation of security incidents should they arise.
• Support Communication Records: Live chat session histories and support emails are retained for two (2) years for service quality and dispute resolution purposes.
• Marketing Data: If you withdraw your marketing consent, we will stop using your data for that purpose within 30 days, although the consent record and the withdrawal itself may be retained for longer for compliance purposes.

Once the applicable retention period has ended and there is no longer a legitimate legal or business reason to retain the data, kiss918 ori will securely delete or anonymise your data.

Under Malaysia's Personal Data Protection Act 2010 and the kiss918 ori privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the kiss918 ori support team by email at support@kiss918ori.click or via the platform's live chat. We will process your request within 30 business days. For complex requests, we may require additional time and will notify you in writing of any delay.

Please note that exceptions to these rights may apply — for example, we are unable to delete data required for financial legal compliance even upon request. Our team will clearly explain if any such limitations apply to your request.

The kiss918 ori website and platform use cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and understand how members interact with our services. The following are the types of cookies we use:

• Essential Cookies: Required for the kiss918 ori platform to function properly — including login session verification, account security, and your language preferences. These cookies cannot be disabled as they are essential to the platform's core operation.
• Preference Cookies: To save your personal settings such as game preferences, display themes, and notification preferences, so you do not need to reconfigure them each time you log in to kiss918 ori.
• Analytics Cookies: These help us understand how members use the kiss918 ori platform in aggregate — such as which pages are visited most frequently and how much time is spent on each section. This information is used to improve the platform for the benefit of all users.
• Security Cookies: Used to detect and prevent suspicious activity, unauthorised login attempts and other security threats to your kiss918 ori account.

Most web browsers allow you to control cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain kiss918 ori platform functions properly. Analytics cookies can be disabled without impacting your core account functionality.

Kiss918 ori does not use third-party cookies for cross-site advertising purposes or to track your activity outside the kiss918ori.click domain.

The kiss918 ori platform is not intended for individuals under the age of 18, and we do not knowingly collect personal data from minors. All kiss918 ori services — including casino games, Sports Betting, and lottery — are strictly for adults aged 18 and above.

The kiss918 ori account registration process includes steps to verify the age of applicants, including checks against Malaysian identification card numbers. Should we discover that we have inadvertently collected personal data from an individual under 18 years of age, we will take immediate steps to delete that data and close the associated account.

In the course of operating the kiss918 ori platform, your personal data may be stored or processed on servers located outside Malaysia — for example, when using cloud computing services or international gaming software providers. Such cross-border data transfers are carried out in accordance with business requirements and the delivery of services to our Malaysian members.

When your personal data is transferred outside Malaysia, kiss918 ori ensures that:

• The receiving country or entity maintains adequate data protection standards based on our assessment.
• Appropriate data processing agreements have been put in place with these third-party service providers to ensure your data is protected to the required standard.
• Any cross-border data transfers comply with the requirements of Malaysia's Personal Data Protection Act 2010 and related regulations.

If you have any questions about cross-border data transfers relating to your personal data at kiss918 ori, you may contact our team for more information on the protection mechanisms in place.

Kiss918 ori reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, changes to the services we offer, or other legitimate operational reasons. The "Last Updated" date at the top of this page will always reflect the date of the most recent amendment.

For material amendments — such as changes to how we use your data or new rights we are granting you — kiss918 ori will notify registered members via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about your continued use of the platform.

Minor amendments that do not affect your material rights – such as spelling corrections, language clarifications, or the addition of explanatory information – may be made without prior notice. We encourage you to review this page periodically to stay up to date with kiss918 ori's current Privacy Policy.

Continued use of the kiss918 ori platform after an amended policy takes effect will be considered your acceptance of those changes. If you do not agree with the amendments, you may close your account and request deletion of your data as described in section 8.

If you have any questions, concerns, or requests regarding the kiss918 ori Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Privacy Email: support@kiss918ori.click – please mark your email subject as "Privacy Enquiry" to ensure it is directed to the appropriate team.
• Live Chat: Available on the kiss918 ori platform 24 hours a day, 7 days a week in Bahasa Malaysia — for general enquiries related to your privacy and account security.

We aim to respond to all privacy enquiries within 7 business days. For more complex personal data rights requests – such as data access or deletion requests – processing may take up to 30 business days, and we will notify you if additional time is required.

Kiss918 ori values the trust you place in us. Every privacy-related query or concern is taken seriously and handled with full professionalism and respect by our team. Thank you for taking the time to understand how we protect your privacy at kiss918 ori.