Personal Data Protection

Kiss 9 Privacy Policy – Personal Data Protection for Malaysian Members

Your privacy is not merely a legal obligation for Kiss 9 — it is our moral responsibility to every member. This document clearly and transparently explains how we handle your personal data.

Last updated: 1 January 2026

Kiss 9's Commitment to Your Privacy

Six core principles that guide how we handle every member's personal data

Bank-Grade Encryption

All Kiss 9 members' personal data is stored on servers encrypted to AES-256 standards — the same technology used by Malaysia's leading banking institutions such as Maybank and CIMB.

You Control Your Data

Kiss 9 members have the full right to access, correct, download, or request deletion of their personal data at any time through their account settings or by contacting us directly.

No Data Sales

Kiss 9 has never sold, rented, or traded members' personal data to any third party for marketing purposes, and will never do so without the explicit consent of the member concerned.

Minimum Data Collection

We only collect data that is strictly necessary to provide Kiss 9 services. No excess data is collected — the principle of data minimisation is fundamental to our privacy policy.

Malaysia PDPA Compliance

The Kiss 9 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We take our legal obligations to protect members' personal data seriously.

Data Breach Notification

In the event of any data breach involving member information, Kiss 9 is committed to notifying affected members within 72 hours of the breach being detected and confirmed.

Section 1

Introduction & Scope of the Privacy Policy

This Privacy Policy ("Policy") is published by Kiss 9 ("we", "Platform", "Kiss9") and applies to all members and users who access or use the Kiss 9 platform through any channel — including the website, mobile app, and other related services.

Kiss 9 is committed to protecting the privacy of every individual who interacts with our platform. This Policy clearly sets out the types of personal data we collect, how that data is used, who may access it, and what rights you have as a data subject.

We encourage you to read this document carefully. By registering for or continuing to use Kiss 9's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us for assistance.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and takes effect from 1 January 2026, superseding all previous versions.

Section 2

Types of Personal Data We Collect

Kiss 9 only collects personal data that is strictly necessary to operate the platform and deliver the best experience to our members. The categories of data we collect include:

Data Category Data Examples Requirements
Identity Data Full name, date of birth, identity card number Required
Contact Data Phone number, email address Required
Financial Data Bank account number, deposit & withdrawal records Required
Technical Data IP address, device type, browser, OS Automatic
Usage Data Betting records, games played, active hours Automatic
Communication Data Support chat records, emails, complaints Where applicable

Important note: Kiss 9 does not collect sensitive data such as health information, sexual orientation, religious beliefs, political views, or biometric data, except where required by law for identity verification purposes.

Section 3

How We Collect Personal Data

Personal data for Kiss 9 members is collected through various channels depending on the nature of your interaction with our platform:

  • Account Registration: You provide your identity and contact details directly when completing the Kiss 9 registration form.
  • Financial Transactions: Financial data is collected when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), or when you submit a withdrawal request.
  • Platform Usage: The Kiss 9 system automatically records technical and usage data each time you access the platform, place a bet, or play a casino game.
  • Support Interactions: When you contact the Kiss 9 support team via live chat, email, or Telegram, records of those interactions are retained to ensure service quality.
  • KYC Verification: For Know Your Customer (KYC) compliance purposes, you may be required to submit a copy of your identification document when transactions exceed a certain threshold.
  • Cookies & Tracking Technologies: Kiss 9 uses cookies and related technologies to automatically collect technical data as you browse our platform. Further details are set out in Section 8.
Section 4

How We Use Your Personal Data

Kiss 9 uses collected personal data solely for lawful, necessary, and platform-relevant purposes. The primary purposes of data use include:

  • Account Management: Creating, verifying, and managing your Kiss 9 member account, including login processing and account security.
  • Transaction Processing: Securely and accurately processing all deposits and withdrawals made via Touch 'n Go eWallet, GrabPay, DuitNow, and other Malaysian payment methods.
  • Legal Compliance: Meeting our legal obligations under Malaysia's PDPA 2010, anti-money laundering (AML) requirements, and Know Your Customer (KYC) obligations.
  • Platform Security: Detecting and preventing fraud, collusion, bot usage, money laundering, and any activity that violates Kiss 9's Terms & Conditions.
  • Service Improvement: Analysing aggregate (not individual) platform usage patterns to improve the Kiss 9 interface, performance, and user experience.
  • Service Communications: Sending important notifications related to your account, policy changes, security information, and Kiss 9 service updates.
  • Marketing (with consent): Sending promotional information, bonus offers, and the latest Kiss 9 news to members who have consented to receive marketing communications. You may withdraw this consent at any time.

Kiss 9 will not use your personal data for any purpose other than those stated above without first obtaining your renewed consent.

Section 5

Data Sharing & Disclosure to Third Parties

Kiss 9 does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. However, there are limited circumstances in which we may need to share your data with certain parties:

  • Payment Service Providers: Payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network require minimum transaction data to securely process your deposits and withdrawals.
  • Technology Service Providers: Companies that assist us in managing technical infrastructure, cybersecurity, and platform analytics — all bound by strict confidentiality agreements with Kiss 9.
  • Regulatory Authorities: Kiss 9 will disclose data when required by Malaysian law, a court order, or a legitimate request from a relevant law enforcement agency.
  • Business Transfers: In the event of a merger, acquisition, or sale of Kiss 9's assets, member data may be transferred to the new entity — but equivalent protections will be maintained and members will be notified in advance.

In all data-sharing situations described above, Kiss 9 ensures that recipient parties are bound by appropriate confidentiality and data protection obligations.

Section 6

Data Security Measures

Protecting the personal data of Kiss 9 members is among our highest technical priorities. We implement multiple layers of security to keep your data safe at all times:

  • SSL/TLS Encryption: All communications between your device and Kiss 9 servers are encrypted using TLS 1.3 — the same protocol used by online banking in Malaysia.
  • Data-at-Rest Encryption: Data stored in our databases is encrypted using AES-256, meaning that even if an unauthorised party gains access to our servers, the data remains unreadable.
  • Two-Factor Authentication (2FA): Kiss 9 members are encouraged to enable 2FA as an added layer of security that prevents unauthorised access even if your password has been compromised.
  • 24/7 Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) operate around the clock to detect and block suspicious activity.
  • Internal Access Control: Only Kiss 9 staff with a legitimate operational need will be granted access to members' personal data — and all access is logged and audited on a regular basis.
  • Regular Security Testing: Kiss 9 conducts regular penetration testing and security audits carried out by independent cybersecurity firms to identify and address system vulnerabilities.
Section 7

Personal Data Retention Period

Kiss 9 retains members' personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law in Malaysia.

  • Active Account Data: For the duration that your Kiss 9 account remains active.
  • Financial Transaction Records: Minimum 7 years from the transaction date, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
  • KYC & Verification Data: Minimum 5 years after account closure or the end of the business relationship.
  • Support Communication Records: 2 years from the date of the last interaction, for quality control and dispute resolution purposes.
  • Closed Accounts: Closed account data is retained for 5 years after the closure date before being permanently deleted or anonymised.

Once the retention period expires, your personal data will be securely deleted or anonymised in a way that can no longer be linked back to your identity.

Section 8

Cookies, Tracking Technologies & Analytics

Kiss 9 uses cookies and similar tracking technologies to enhance platform functionality and performance, and to better understand how members use our services.

Types of Cookies We Use:

  • Essential Cookies: Required for core Kiss 9 platform functions such as login authentication, session security, and platform stability. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language, time zone, and display settings to enhance your Kiss 9 experience.
  • Analytics Cookies: Helps us understand aggregate platform usage patterns — most visited pages, average session duration, and exit points — for continuous improvement.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and safeguard member account security.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the Kiss 9 platform. For more information on managing cookies, please refer to your web browser's documentation.

Section 9

Your Privacy Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by Kiss 9:

01
Right of Access

You have the right to request a copy of the personal data we hold about you. Kiss 9 will respond within 21 business days.

02
Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request a correction through your account settings or by contacting the Kiss 9 support team.

03
Right to Erasure

You may request the deletion of your personal data, subject to any legal retention obligations we are required to comply with.

04
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time by contacting us.

05
Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.

06
Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights above, please contact the Kiss 9 privacy team at privacy@kiss9.onl or via the in-platform live chat. Your request will be processed within 21 business days.

Section 10

Children's Privacy & Minor Protection

Kiss 9 maintains a strict zero-tolerance policy against the use of its platform by minors. Kiss 9 services are exclusively for individuals aged 18 years and above only.

We do not intentionally collect, process, or store personal data of individuals under the age of 18. Should we discover that a child's data has been collected inadvertently, we will take immediate steps to delete it and investigate how it occurred.

If you believe a child has registered an account on Kiss 9 or that a child's data has been collected in error, please contact us immediately at support@kiss9.onl. We will investigate and respond promptly.

Section 11

Amendments to This Privacy Policy

Kiss 9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. Every amendment will be accompanied by a new "Updated" date at the top of this document.

For material amendments — that is, changes that significantly affect how we use your personal data — Kiss 9 will notify you via registered email or in-platform notification at least 14 days before those amendments take effect.

Continued use of the Kiss 9 platform after amendment notifications have been sent will be considered acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

Section 12

Contact the Kiss 9 Privacy Officer

If you have any questions, concerns, or complaints regarding how Kiss 9 handles your personal data, or wish to exercise any of the privacy rights set out in Section 9, please contact our Data Protection Officer (DPO) through the following channels:

  • Privacy Email: privacy@kiss9.onl
  • General Support Email: support@kiss9.onl
  • Live Chat: Available 24/7 via the chat icon on the Kiss 9 platform.
  • Telegram: Kiss 9's official support channel on Telegram.

The Kiss 9 privacy team will receive and acknowledge your request within 3 business days and resolve all privacy-related enquiries within 21 business days from the date of receipt.

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe Kiss 9 has not complied with the requirements of PDPA 2010. However, we encourage you to contact us first so that we may resolve any concerns directly and promptly.

Your Data Is Safe with Kiss 9. Join Now!

Over 500,000 Malaysian players trust Kiss 9 with their data. Register for free and enjoy a welcome bonus of RM 188 — deposit via Touch 'n Go, GrabPay, or DuitNow.

Bahasa Melayu