i918kiss Privacy Policy

1. Introduction

i918kiss ("we", "us", "our") operates the online gaming platform accessible at i918kiss.co (the "Platform"). As a platform that processes financial transactions and hosts regulated gaming activities, i918kiss recognises that the proper handling of personal data is fundamental to the trust our Malaysian and international Players place in us. This Privacy Policy is intended to be clear, specific, and genuinely informative — not a document designed to obscure how data is actually used.

By registering an Account on i918kiss, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the practices described in this Policy, you should not create an Account or use the Platform.

2. Data Controller

For the purposes of applicable data protection law, i918kiss acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, i918kiss determines the purposes for which personal data is processed and the means by which it is processed. Where i918kiss engages third-party service providers to process data on its behalf, those parties act as data processors under i918kiss's instruction and are bound by data processing agreements that restrict their use of the data.

Players may direct data protection enquiries, access requests, correction requests, and deletion requests to the i918kiss support team via the live chat facility or the contact email address specified in Section 16 of this Policy.

3. Personal Data We Collect

i918kiss collects the following categories of personal data in the course of operating the Platform:

3.1 Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification purposes);
• National identity number or passport number (for KYC verification);
• Copies of government-issued identification documents where required for verification.

3.2 Contact Data

• Mobile phone number registered with the Account;
• Email address where provided;
• Residential address (for KYC purposes where required).

3.3 Financial Data

• Payment method identifiers (e-wallet account references, bank account numbers, cryptocurrency wallet addresses) — stored in tokenised or masked form;
• Transaction history including deposits, withdrawals, and bonus credits;
• Wallet balance and transaction timestamps.

3.4 Gaming Activity Data

• Game session records including game type, wager amounts, outcomes, and timestamps;
• Sportsbook betting history including markets, stake amounts, and settlements;
• Bonus participation history and wagering requirement progress;
• Login history including timestamps and IP addresses associated with each session.

3.5 Technical Data

• IP address at the time of registration and each subsequent login session;
• Device type, operating system, browser type and version;
• Device fingerprint identifiers used for fraud prevention;
• Geolocation data derived from IP address (not GPS-level location).

3.6 Communications Data

• Records of communications with the i918kiss support team via live chat;
• Correspondence submitted through any enquiry channel;
• Responses to surveys or promotional communications where a Player has opted in.

4. How We Collect Your Data

i918kiss collects personal data through the following mechanisms:

• Direct submission — information you provide when registering an Account, completing KYC verification, initiating a deposit or withdrawal, or contacting support;
• Automated collection — technical data collected automatically when you access the Platform, including IP address, device identifiers, and session activity logs;
• Third-party verification services — identity verification data returned by KYC and AML service providers during the account verification process;
• Payment processors — transaction confirmation data returned by payment gateways including Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and cryptocurrency processors.

5. Purpose of Processing

i918kiss processes personal data for the following specific purposes:

6. Legal Basis for Processing

i918kiss processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil the obligations under the i918kiss Terms and Conditions, including account management, transaction processing, and game provision;
• Legal obligation — processing required to comply with applicable AML, KYC, and regulatory obligations;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by a Player's privacy rights;
• Consent — processing for optional promotional communications where a Player has expressly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

i918kiss does not sell personal data to third parties. Personal data may be shared with the following categories of recipients for the purposes described in this Policy:

• Licensed game providers — game session data is transmitted to the relevant provider's platform to enable game functionality. Game providers are contractually restricted from using this data for any purpose other than service provision;
• Payment processors — financial data necessary to execute deposit and withdrawal transactions is shared with the relevant payment gateway (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, cryptocurrency processors);
• KYC and AML service providers — identity and document data is shared with certified verification partners to complete regulatory compliance checks;
• Fraud prevention services — technical and transaction data may be shared with fraud detection platforms operating under confidentiality agreements;
• Regulatory and law enforcement authorities — personal data may be disclosed to competent authorities where required by applicable law, court order, or regulatory demand, without prior notice to the Player where legally required.

8. International Data Transfers

As an online platform with global infrastructure and game provider partnerships, personal data processed by i918kiss may be stored on servers located outside Malaysia or transferred to service providers operating in other jurisdictions. Where such transfers occur, i918kiss implements appropriate safeguards to ensure that personal data receives a level of protection consistent with the principles of this Privacy Policy, including contractual data transfer agreements with receiving parties.

Players who have concerns about international data transfers may contact i918kiss support for further information regarding the specific safeguards applicable to their data.

9. Data Retention

i918kiss retains personal data for the following periods:

• Active Account data — retained for the duration of the Account relationship and for a period of at least five (5) years following Account closure, in compliance with AML record-keeping obligations;
• Transaction records — retained for a minimum of five (5) years following the date of the transaction;
• KYC verification documents — retained for the period required by applicable regulatory obligations, typically five (5) years post-Account closure;
• Support communications — retained for two (2) years from the date of the communication, or longer where the communication relates to an active dispute or investigation;
• Technical and session logs — retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual.

10. Cookies and Tracking Technologies

i918kiss uses cookies and similar tracking technologies on the Platform to enable core functionality and to improve the Player experience. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without preventing access to the Platform;
• Functional cookies — used to remember Player preferences such as language settings, preferred game categories, and UI display options;
• Analytics cookies — used to collect aggregated and anonymised data on how Players interact with the Platform, enabling i918kiss to identify performance issues and improve the user experience. Individual player data is not shared with third-party analytics providers in identifiable form.

Players may manage cookie preferences through their browser settings. Disabling certain non-essential cookies will not prevent access to the i918kiss Platform but may affect the availability of certain convenience features.

11. Your Data Rights

Subject to applicable law and any overriding legal obligations (including AML record-keeping requirements), Players have the following rights in respect of their personal data held by i918kiss:

• Right of access — the right to request a copy of the personal data i918kiss holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to overriding legal retention obligations;
• Right to restriction of processing — the right to request that i918kiss limits the processing of your data in certain circumstances;
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to withdraw consent — where processing is based on consent (e.g., marketing communications), the right to withdraw consent at any time without affecting prior processing.

To exercise any of these rights, Players should contact i918kiss via the live chat support facility or the contact details in Section 16. i918kiss will respond to verified data rights requests within a reasonable timeframe, typically within 30 days.

12. Children's Privacy

The i918kiss Platform is strictly intended for adults aged 21 and above. i918kiss does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Account registration requires age verification, and i918kiss implements KYC procedures specifically designed to prevent underage access to the Platform. Where i918kiss discovers that personal data has been provided by a person under the minimum age, the relevant Account will be immediately terminated and all associated data will be deleted or anonymised to the extent not required by regulatory retention obligations.

13. Security Measures

i918kiss implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• All data transmitted between Players and the Platform is encrypted using 256-bit SSL/TLS protocols, consistent with the standards applied by major Malaysian financial institutions including Maybank2u, CIMB Clicks, and Public Bank Online;
• Passwords are stored using one-way cryptographic hashing — i918kiss personnel cannot retrieve a Player's plain-text password;
• Access to personal data within i918kiss's internal systems is restricted on a need-to-know basis and subject to multi-factor authentication for staff;
• The platform undergoes regular penetration testing and security audits conducted by independent third-party security specialists;
• Payment data is handled in compliance with applicable payment card industry security standards, with sensitive financial identifiers stored in tokenised form only.

Despite these measures, no online platform can guarantee absolute security. Players are advised to maintain the security of their own Account credentials and to report any suspected unauthorised access to i918kiss support immediately.

14. Third-Party Content and Links

The i918kiss Platform may display game content hosted on third-party game provider infrastructure. Each game provider operates under its own privacy and data handling practices in relation to game session data. i918kiss is not responsible for the privacy practices of its licensed game providers beyond the data processing obligations imposed in the relevant service agreements. Players who have concerns about how a specific game provider handles data should review that provider's privacy documentation.

i918kiss does not include third-party advertising networks, social media tracking pixels, or affiliate tracking scripts on the Platform that would result in third parties collecting personal data about Players without appropriate disclosure.

15. Updates to This Privacy Policy

i918kiss reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the operational practices of the Platform. The date of the most recent revision is shown at the top of this document. Where amendments are material, i918kiss will notify registered Players via their registered contact details or through a prominent notice on the Platform prior to the amendments taking effect. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

16. Contact and Data Enquiries

Players who wish to exercise their data rights, submit a privacy-related complaint, or make any enquiry regarding this Privacy Policy should contact the i918kiss data team through the following channel:

Support contact: [email protected] (plain text — not a clickable link)

The i918kiss live chat facility, accessible after logging into your Account, is also available 24/7 for privacy-related enquiries and is typically the fastest response channel. Please include your registered username and a clear description of your request when contacting us.