kis98 Privacy Policy

This Privacy Policy ("Policy") describes how kis98 ("we", "us", "our") collects, uses, discloses, and safeguards personal information provided by users ("you", "your") when accessing or using the kis98 online gaming platform at kis98.lat. By registering an account or using our services, you acknowledge that you have read and understood this Policy.

This Policy applies to all kis98 players across Malaysia — including those in Kuala Lumpur, Petaling Jaya, Bangsar, Penang, Johor Bahru, and surrounding areas — as well as any person who visits our platform regardless of their method of access.

We encourage you to read this Policy in full. If you have any concerns, please contact our support team before you proceed to use our services.

1. Who We Are

kis98 is an online gaming platform operating under international gaming licensing, offering sports betting (including the Malaysia Super League and EPL), live casino, slots, crash games, and blackjack. We are committed to transparency in how we handle player data, consistent with applicable data protection frameworks.

For all data-related inquiries, the kis98 data protection contact is reachable via the support email address listed at the bottom of this Policy.

2. Data We Collect

kis98 collects personal information through different channels depending on how you interact with our platform. The categories of data we may collect include:

2.1 Account Registration Data

• Full legal name
• Date of birth (required to verify 21+ age eligibility)
• Email address
• Mobile number
• Residential address (including postcode and state in Malaysia)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with Anti-Money Laundering (AML) obligations and responsible gaming requirements, kis98 may request:

• Copy of your MyKad, passport, or other government-issued ID
• Proof of address documents (e.g. utility bill, bank statement)
• Selfie or liveness check images for identity confirmation

2.3 Financial and Transaction Data

• Deposit and withdrawal records
• Payment method identifiers (e.g. Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank account references)
• Transaction timestamps and MYR amounts

Note: kis98 does not store full card numbers or banking credentials. Payment processing is handled by certified third-party gateways and all sensitive payment data is tokenised.

2.4 Platform Activity Data

• Games played, betting history, session durations
• Device type, operating system, and browser information
• IP address and approximate geolocation
• Login timestamps and account activity logs

2.5 Communications Data

Any messages, emails, or live chat transcripts exchanged between you and the kis98 support team. This includes feedback you submit, complaints lodged, and any documentation you provide in the course of resolving a dispute.

3. How We Use Your Data

kis98 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your player account, verifying your identity, and enabling you to log in securely.
• Service delivery: Processing deposits and withdrawals in MYR, crediting winnings, and enabling access to sports betting, slots, crash games, blackjack, and live casino features.
• Regulatory compliance: Meeting our obligations under applicable AML, KYC, and responsible gaming regulations — including age verification to ensure all players are 21 or older.
• Fraud prevention and security: Monitoring account activity for suspicious behaviour, investigating potential breaches, and protecting the integrity of our platform.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of our service based on feedback.
• Platform improvement: Analysing anonymised usage patterns to improve game performance, site navigation, and the overall user experience on desktop and mobile.
• Responsible gaming: Identifying signs of problem gambling behaviour and, where necessary, applying account restrictions or self-exclusion tools in line with our Responsible Gaming policy.
• Marketing communications: Sending you promotions, bonus offers, and platform updates — but only where you have provided explicit consent. You may opt out at any time.

We do not use your data for automated decision-making processes that produce legal or similarly significant effects without human review.

4. Legal Basis for Processing

kis98 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is required to fulfil the terms of our player agreement with you — including account setup, payment processing, and service access.
• Legal obligation: We are required to collect and retain certain data to comply with AML laws, licensing conditions, and regulatory directives applicable to our operations.
• Legitimate interests: We process certain data — such as platform activity logs and security monitoring — to protect the safety and integrity of the kis98 platform and its users.
• Consent: Where processing is not otherwise justified (e.g. marketing emails, optional analytics), we rely on your explicit consent, which you may withdraw at any time.

5. Cookies & Tracking Technologies

kis98 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files placed on your device when you visit our site. We use the following types:

• Essential cookies: Required for the platform to function correctly — including session management, login state, and security tokens. These cannot be disabled without affecting core functionality.
• Performance cookies: Collect anonymised data about how users interact with our platform, helping us identify and fix performance issues.
• Preference cookies: Remember your settings and preferences (such as language selection and display preferences) so you don't need to reconfigure them on each visit.
• Analytics cookies: Used to track aggregate traffic patterns, game popularity, and platform usage. Data collected through analytics cookies is anonymised and cannot identify you individually.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the kis98 platform fully.

6. Third-Party Data Sharing

kis98 does not sell, lease, or trade your personal information. We may, however, share your data with carefully selected third parties under strict contractual data protection obligations in the following circumstances:

6.1 Service Providers

We engage third-party vendors to support the operation of our platform, including payment gateway processors, KYC identity verification providers, cloud infrastructure services, fraud detection tools, and customer support software. These providers are permitted to process your data only to the extent necessary to provide the contracted service.

6.2 Regulatory and Law Enforcement Authorities

Where required by law or in response to a valid legal request, kis98 may disclose personal data to regulatory bodies, law enforcement agencies, or judicial authorities. We will notify you of any such disclosure where legally permissible to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the kis98 business, your personal data may be transferred as part of that transaction. You will be notified in advance and the receiving entity will be required to honour this Privacy Policy.

6.4 Affiliates and Group Companies

Data may be shared within the kis98 corporate group where necessary for internal operational purposes, subject to the same data protection standards described in this Policy.

7. Data Retention

kis98 retains personal data for as long as your account is active and for a defined period thereafter, in line with our regulatory and legal obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of 5 years following account closure, as required under AML and gaming regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for up to 3 years from the date of the interaction.
• Marketing consent records: Retained for the duration of your active consent and for 1 year after withdrawal, as evidence of compliance.

Once the applicable retention period expires, your personal data will be securely deleted or anonymised in a manner that prevents identification.

8. Your Rights

As a kis98 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details provided in Section 12.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to restrict processing: In certain circumstances, you may ask us to pause the processing of your data while a dispute or objection is being resolved.
• Right to data portability: Where technically feasible and legally applicable, you may request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where we rely on your consent to process data (e.g. for marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests, including the use of your data for direct marketing purposes.

We will respond to all valid rights requests within 30 days. In complex cases, we may extend this period by a further 30 days and will notify you accordingly.

9. Security Measures

kis98 implements a multi-layered security infrastructure to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser or app and our servers
• Password hashing using industry-standard cryptographic algorithms — we never store plaintext passwords
• Two-factor authentication (2FA) available for all player accounts
• Segregated database architecture with strict access controls and role-based permissions
• Continuous automated monitoring for unusual login patterns, high-velocity transactions, and other anomalous activity
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure
• Staff training on data protection obligations and information security best practices

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password for your kis98 account and to enable 2FA for an additional layer of protection.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, kis98 will notify affected players without undue delay and in accordance with our regulatory obligations.

10. Children's Privacy

The kis98 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal information from anyone under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If you believe that a minor has provided personal information to kis98 without proper parental or guardian consent, please contact us immediately at the email address in Section 12. Upon confirmation, we will delete the relevant data and close the account as promptly as possible.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. For more information on safe gaming, visit our Responsible Gaming page.

11. Changes to This Policy

kis98 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, platform features, or applicable laws. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Post a prominent notice on the kis98 platform
• Where required, notify registered players by email

Your continued use of the kis98 platform following notification of changes constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of our platform and contact us to close your account.

We recommend reviewing this Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kis98 handles your personal data, please reach out to our dedicated data protection contact:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the kis98 platform
• Response Time: Within 2 hours for general queries; up to 30 days for formal rights requests

We are committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority in your jurisdiction.