Privacy Policy — 198kiss Malaysia

This Privacy Policy ("Policy") describes how 198kiss ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("Member", "User", "you") who access or use the 198kiss website at https://198kiss.cam and all associated services.

198kiss is committed to handling personal data with care, transparency, and purpose. This Policy is intended to give every member a clear understanding of what information is involved in operating the 198kiss platform, why that information is needed, and what control members retain over their own data.

This Policy applies to all personal data collected through the 198kiss platform, including data provided during registration, identity verification, payment processing, gameplay activity, customer support interactions, and general platform use. It applies regardless of the device or connection method used to access the platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial account information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, or deletion.
• "Data Controller" — 198kiss, as the entity that determines the purposes and means of Processing Personal Data collected through the platform.
• "Data Processor" — a third party engaged by 198kiss to Process Personal Data on our behalf under our documented instructions.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the Processing of Personal Data for a stated purpose.
• "KYC" — Know Your Customer verification processes used to confirm a Member's identity before processing certain account actions.
• "Session Data" — technical information relating to a Member's connection to the platform, including IP address, browser type, device type, and session duration.

198kiss collects Personal Data from Members through several sources and at different points during the use of the platform. The categories of data collected are described below.

198kiss does not intentionally collect sensitive categories of Personal Data beyond those required for identity verification and fraud prevention. Full payment card numbers are not stored on the 198kiss platform — payment details are handled directly by the respective payment processor.

Personal Data collected by 198kiss is used for specific, documented purposes. We do not use Personal Data for purposes beyond those described in this Policy without first informing the Member and, where required, obtaining appropriate consent.

• Account Management: Creating, maintaining, verifying, and managing Member accounts, including username assignment, password security, and account status updates.
• Identity Verification (KYC): Confirming that a Member meets the minimum age requirement (21+) and verifying identity before processing withdrawals or resolving account disputes.
• Payment Processing: Facilitating deposits and withdrawals in MYR via supported Malaysian payment methods, including Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX.
• Service Delivery: Providing access to the game lobby, sports betting markets, live casino tables, and all other platform features that the Member has engaged with.
• Security & Fraud Prevention: Detecting and investigating unusual account activity, suspected fraud, money laundering indicators, and unauthorised access attempts.
• Customer Support: Responding to account queries, technical issues, payment disputes, and responsible gambling requests submitted through the support channels.
• Responsible Gambling Compliance: Monitoring account activity against self-declared spending limits and self-exclusion requests to support safer gambling controls.
• Legal & Regulatory Obligations: Maintaining records required to demonstrate compliance with applicable laws and to respond to lawful requests from authorities.
• Platform Improvement: Analysing aggregated, anonymised usage patterns to improve platform performance, navigation, and content relevance.
• Communications: Sending account-related notifications, security alerts, and, where you have not opted out, promotional communications about current198kiss offers.

198kiss processes Personal Data on the following legal bases, applied as appropriate to each Processing activity:

• Contractual Necessity: Processing required to enter into or perform the Member Agreement, including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including identity verification obligations and record-keeping requirements.
• Legitimate Interests: Processing for fraud detection, platform security, and service improvement, where these interests are not overridden by the Member's privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where consent has been obtained. Consent may be withdrawn at any time without affecting the legality of Processing carried out before withdrawal.

198kiss does not sell Personal Data to third parties. Personal Data may be disclosed to the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Service Providers: Financial institutions, eWallet operators (including those supporting Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX), and card processors involved in handling deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC service providers used to verify identity documents and assess fraud risk.
• Game Studio Partners: Software providers supplying games accessible through the 198kiss platform. These partners may receive anonymised player identifier data for the purpose of game round settlement and RTP auditing.
• Technology Service Providers: Cloud hosting, server infrastructure, and cybersecurity providers used in the operation and maintenance of the 198kiss platform.
• Legal and Regulatory Authorities: Law enforcement agencies, courts, or regulatory bodies where disclosure is required by law or is necessary to protect the rights, property, or safety of 198kiss or others.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to binding confidentiality obligations.

198kiss retains Personal Data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of the Member's account and for a defined period following account closure, to allow for dispute resolution and regulatory compliance.
• Transaction Records: Financial transaction data, including deposit and withdrawal history in MYR, is retained for a minimum period as required by applicable financial regulations.
• KYC Documents: Identity verification documents are retained for the period required by anti-money laundering regulations applicable to the platform's operating jurisdiction.
• Support Communications: Live chat transcripts and email correspondence are retained for quality assurance and dispute resolution purposes for defined period following the closure of each support interaction.
• Session and Device Data: Retained for a limited period for security monitoring, fraud detection, and platform performance analysis.
• Marketing Opt-Out Records: Retained indefinitely to ensure that previously opted-out Members are not re-added to marketing communications lists.

When Personal Data is no longer required for any of the above purposes and no legal obligation to retain it exists, 198kiss will securely delete or anonymise it.

198kiss applies technical and organisational security measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of Personal Data in transit using TLS (Transport Layer Security).
• Encryption of sensitive data at rest within our storage infrastructure.
• Access controls limiting Personal Data access to authorised personnel on a need-to-know basis.
• Regular review of access permissions and security configurations.
• Monitoring for anomalous account activity and potential security incidents.
• Secure disposal of data no longer required for operational or legal purposes.

While 198kiss applies industry-standard security practices, no online system can guarantee absolute security. Members are advised to protect their own account credentials, use strong passwords, and notify the198kiss support team immediately if they suspect that their account has been accessed without authorisation.

198kiss uses cookies and similar browser-based technologies to support the operation, security, and performance of the platform. A cookie is a small text file placed on your device by a website you visit. The following categories of cookies are used on the 198kiss platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security identifiers, and load balancing cookies. These cannot be disabled without impacting platform usability.
• Functional Cookies: Used to remember preferences such as language, display settings, and session continuity so that Members do not need to reconfigure settings on every visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate and use the platform. This data informs platform improvements and does not identify individual Members.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection, CSRF protection, and unusual session behaviour monitoring.

Most browsers allow users to control cookie acceptance through browser settings. Disabling strictly necessary cookies will impair your ability to use the 198kiss platform. For guidance on managing cookies, refer to the help documentation for your browser.

Members have the following rights in relation to their Personal Data held by 198kiss. To exercise any of these rights, contact the support team using the details provided in Section 15. Requests will be responded to within a reasonable timeframe.

The 198kiss platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is applied during the account registration process and may be further confirmed through KYC documentation.

If you believe a minor has registered an account on the 198kiss platform, please contact the support team immediately. Parental control software may also be used to restrict access to gambling-related websites — details of such software are referenced on ourResponsible Gambling page.

In the course of operating the 198kiss platform, Personal Data may be transferred to or processed by service providers located outside Malaysia. Where such transfers occur, 198kiss takes steps to ensure that the recipient provides an adequate level of data protection consistent with the standards applied to data held domestically.

Transfers to third-party game studio partners and technology providers operating in other jurisdictions are governed by appropriate contractual arrangements that include data protection obligations. 198kiss does not transfer Personal Data internationally in a manner that is inconsistent with the purposes described in this Policy.

The 198kiss platform may reference or present content supplied by third-party game studio partners. While 198kiss applies its own privacy standards to data within the platform, it is not responsible for the privacy practices of independent third parties. Game providers may independently process anonymised session data to fulfil their audit, RTP calculation, and game integrity obligations.

This Privacy Policy applies exclusively to the 198kiss platform. If you follow a link to a third-party website from within the platform, the privacy policy of that third party will govern the handling of any information you provide there.

198kiss may update this Privacy Policy from time to time to reflect changes in the way the platform operates, changes in applicable law, or changes in the services provided. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material, 198kiss will take reasonable steps to notify Members — for example, through a notice on the platform or a communication to the registered email address. Continued use of the 198kiss platform following the effective date of an updated Policy constitutes acceptance of the revised terms.

We recommend reviewing this Policy periodically to remain informed about how your Personal Data is handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by 198kiss, please contact our support team. We aim to acknowledge data-related requests promptly and resolve them within a reasonable timeframe.

For privacy-related requests — including access requests, rectification requests, erasure requests, or consent withdrawal — please provide your registered account username and clear description of your request. This helps our team locate the relevant records and process your request efficiently.