918kiss ori Privacy Policy – Malaysian Player Data Protection

918kiss ori collects several categories of personal information from members and visitors to our platform. This is done directly through the registration process and your interactions with the platform, as well as automatically through industry-standard tracking technologies.

1.1 Information You Provide Directly

• Personal Identification Information: Full name (as per MyKad), date of birth, gender, and identification card number (MyKad).
• Contact Information: Email address, Malaysian mobile number, and postal address where applicable.
• Financial Information: Malaysian bank account number, bank name, and e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow) registered for deposit and withdrawal purposes.
• Account Security Information: Username, password (stored in an unreadable hashed format), and security questions if you have enabled that feature.
• Identity Verification Documents (KYC): A copy of your MyKad, bank statement, or other supporting documents required during the KYC process.

1.2 Automatically Collected Information

• Device & Technical Data: IP address, web browser type, operating system, device model, and screen resolution.
• Platform Activity Data: Gaming history, game types played (slots, baccarat, blackjack, poker, Sports Betting), bet values, session times, and overall gameplay patterns.
• Transaction Data: A complete history of all deposits, withdrawals, winnings, losses, and bonuses credited to your account.
• Approximate Location Data: Location information derived from your IP address, used for geographic eligibility verification and fraud prevention purposes.
• Cookie Data: Information collected through cookies and similar tracking technologies — see Section 5 for full details.

The personal information we collect is used solely for the following purposes:

2.1 Account & Platform Operations

• Creating and managing your 918kiss ori member account.
• Verifying your identity during login and the KYC process.
• Deposits are processed via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, with withdrawals sent directly to your Malaysian bank account or e-wallet.
• Crediting eligible bonuses, rebates, and rewards to your account.
• Provides complete transaction histories and account statements.

2.2 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, or any misuse of the platform.
• Confirming that you meet the age eligibility requirement (18 and above) and geographic eligibility (Malaysia).
• Monitoring unusual transaction patterns to protect the security of your account.
• Complying with anti-money laundering (AML) and know your customer (KYC) compliance requirements.

2.3 Service Improvement & Communications

• Analyzing platform usage patterns to improve the overall user experience.
• Sends transaction notifications, account updates, and important security alerts.
• Sending you the latest promotional information and bonus updates — only where you have given your consent to receive marketing communications.
• Providing more effective customer support by having your account context on hand when you contact us.

918kiss ori does not sell, rent, or disclose members' personal information to third parties for commercial purposes. However, there are limited circumstances in which we need to share your data with specific parties in order to operate the platform properly:

3.1 Trusted Third-Party Service Providers

918kiss ori works with service providers that help us operate the platform. Data shared with these parties is limited strictly to what is necessary, and all parties are bound by confidentiality agreements:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks (via FPX) require the relevant transaction details to process your deposits and withdrawals.
• Game Providers: Companies such as Pragmatic Play, Habanero, NetEnt, and Microgaming may receive game session IDs for technical purposes — no personally identifiable information is shared.
• Identity Verification Service Providers: For the KYC process, we may engage recognised third-party identity verification services.
• Platform Analytics Services: Anonymised platform usage data (with no personally identifying information) is used for service improvement analysis.

3.2 Legally Required Disclosures

918kiss ori may disclose your personal information to the relevant authorities if required by Malaysian law or a court order, including for the purposes of financial crime investigations, AML, or national security-related matters. In such circumstances, we will inform you where we are permitted to do so under the law.

918kiss ori continually invests in robust cybersecurity infrastructure to protect the personal data of all our members. The security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your browser and 918kiss ori servers are encrypted using the latest TLS protocol, ensuring your data cannot be intercepted or read by third parties.
• Hashed Password Storage: Your account password is never stored in plain text — we use a strong one-way hashing algorithm, meaning even our own internal team cannot read your password.
• 24/7 Threat Monitoring: Our security systems are continuously monitored by a trained in-house cybersecurity team to detect and respond to any threats or intrusion attempts.
• Optional Two-Factor Authentication (2FA): Members can enable 2FA in their account settings for an additional layer of security during login.
• Secure Servers with Restricted Access: Personal data is stored on secured servers with strict access controls — only 918kiss ori employees who require access to perform their duties are permitted to do so.
• Regular Security Audits: We conduct regular penetration testing and security audits through independent third parties to identify and address any system vulnerabilities.

In the event of any data security breach involving members' personal information, 918kiss ori will notify affected members and the relevant authorities within the timeframe prescribed under Malaysia's PDPA.

918kiss ori uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our platform.

Types of Cookies We Use:

• Essential Cookies (Required): Required for core platform functions — such as maintaining your login session, remembering your language preference, and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helps us understand how members use the platform — which pages are visited most frequently, time spent on the platform, and technical issues that need to be addressed. This data is collected in aggregate form and is not linked to your personal identity.
• Functional Cookies: Remembering your personal preferences and settings — such as your preferred bet values, display language, and game display preferences — to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious login attempts, verify sessions, and prevent fraud in real time.

You can manage or delete cookies at any time through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of certain parts of the 918kiss ori platform, including your ability to stay logged in and process transactions securely.

As a 918kiss ori member based in Malaysia, you are protected under the Personal Data Protection Act 2010 (PDPA) and hold the following rights with respect to your personal data:

To exercise any of the rights listed above, please contact our Privacy Officer at support@918kissori.best, stating the right you wish to exercise along with your account details. We are committed to responding within 21 business days of receiving your request.

The 918kiss ori platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

If you discover that someone under the age of 18 has registered an account on 918kiss ori, please notify us immediately at support@918kissori.best. We will take prompt action to close the account and delete all associated data.

To operate the 918kiss ori platform, some of your personal data may be processed or stored on servers located outside Malaysia — particularly in relation to technical infrastructure and international game provider services such as Pragmatic Play, Habanero, NetEnt, and Microgaming.

In all cases of cross-border data transfers, 918kiss ori ensures that protection equivalent to Malaysia's PDPA standards is applied through:

• Binding data processing agreements with all third-party service providers.
• Only partnering with providers that hold recognised security certifications and privacy compliance standards.
• Ensuring that only the minimum necessary data is transferred outside of Malaysia.

Sensitive financial information, including your Malaysian bank account and e-wallet details, is processed and stored exclusively on servers located within Malaysia, in compliance with local financial regulations.

918kiss ori retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy and to comply with applicable legal obligations in Malaysia.

• Active Account Data: Retained for the duration that your 918kiss ori account remains active.
• Financial Transaction Records: Retained for a minimum of 7 years following the date of transaction, in accordance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• KYC Records: Retained for a minimum of 5 years following account closure for legal compliance purposes.
• Platform Activity Logs: Retained for 2 years after a session ends for security and dispute resolution purposes.
• Inactive Accounts: Inactive account data with no transactions for more than 5 years will be anonymised, unless there is an unclaimed balance or a legal requirement to retain it for longer.

918kiss ori reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in platform operations.

When material amendments are made to this Privacy Policy — particularly those affecting how we use or share your personal data — we will:

• Updating the "Last Updated" date at the top of this page.
• Notifying all active members via their registered email address at least 14 days before any amendments take effect.
• Displaying a prominent notice within the 918kiss ori platform during the notification period.

Your continued use of the 918kiss ori platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data in accordance with the procedure set out in Section 6.

This page was last updated on January 2026. The latest version of this Privacy Policy is always available on this page.

If you have any questions, concerns, or complaints regarding how 918kiss ori handles your personal data, or if you wish to exercise any of the rights outlined in Section 6, please contact our Privacy Officer:

• Privacy Officer Email: support@918kissori.best (please include "Privacy Enquiry" in the subject line)
• Live Chat: Available on the 918kiss ori platform, 24 hours a day, 7 days a week
• Service Language: Bahasa Melayu and English
• Response Time: Within 3 business days for general enquiries; within 21 business days for formal data rights requests

For formal complaints regarding a privacy breach, please include in your email: your 918kiss ori account number, a brief description of your concern, and any relevant supporting documents (if applicable). We are committed to addressing every privacy complaint seriously, fairly, and within a reasonable timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) under the Ministry of Communications & Digital Malaysia.