kisa918 Privacy Policy

§ 1 Introduction

kisa918 ("we", "us", "our") operates the online gaming and sports betting platform accessible at kisa918.net (the "Platform"). kisa918 is committed to protecting the privacy and personal data of all persons who register as players, visit the Platform, or otherwise interact with our services.

This Privacy Policy describes in detail what personal data kisa918 collects about you, the purposes for which that data is processed, the legal bases for such processing, how long data is retained, with whom it is shared, what rights you hold in respect of your data, and how you may exercise those rights.

This Privacy Policy applies to all registered players on the kisa918 Platform, visitors to kisa918.net, and individuals who contact us through any of our support channels — including live chat, email, and WhatsApp. It should be read alongside the kisa918 Terms & Conditions, which govern your use of the Platform.

By registering a kisa918 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices as described herein, you must discontinue use of the Platform and may request closure of your account as described in Section 10 below.

§ 2 Data Controller

For the purposes of applicable data protection legislation, kisa918 is the data controller responsible for your personal data collected through the Platform. kisa918 operates under international gaming authority licensing standards and is committed to maintaining data protection standards consistent with Malaysian law, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.

All enquiries relating to this Privacy Policy, your personal data held by kisa918, or the exercise of your rights described below should be directed to our Data Protection contact via [email protected] (displayed as plain text — not a clickable link) or through our 24/7 live chat service.

§ 3 Data We Collect

kisa918 collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, MyKad / passport number, nationality	Account registration, age verification (21+), KYC compliance
Contact Data	Email address, phone number, WhatsApp number	Account communication, support, security alerts
Financial Data	Bank account details, e-wallet IDs (Touch n Go, Boost, GrabPay), transaction history	Deposit/withdrawal processing, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type, operating system, session timestamps	Platform security, fraud detection, technical support
Usage Data	Games played, bet amounts, session duration, pages visited	Responsible gaming monitoring, product improvement, personalisation
Communications Data	Live chat transcripts, email correspondence, support tickets	Customer support, dispute resolution, quality assurance
Marketing Preferences	Promotional opt-in/opt-out status, preferred contact channel	Sending relevant offers from kisa918 only (never third parties)

kisa918 does not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, or religious beliefs) unless specifically required by applicable law.

§ 4 How We Collect Data

kisa918 collects personal data through the following mechanisms:

• Direct submission: Data you provide when registering your kisa918 account, completing KYC verification, making deposits or withdrawals, contacting our support team, or updating your account profile.
• Automated technologies: When you access the kisa918 Platform, we automatically collect technical data through cookies, web beacons, server logs, and similar technologies as described in Section 9 below.
• Third-party sources: kisa918 may receive data about you from identity verification services, payment processors (including Touch n Go eWallet and Boost infrastructure providers), fraud prevention agencies, and publicly available sources, for the purpose of verifying your identity and managing risk.

§ 5 Purposes & Legal Basis for Processing

kisa918 processes your personal data for specific, legitimate purposes. The following table sets out those purposes and the corresponding legal basis under applicable data protection law:

Purpose	Legal Basis
Registering your kisa918 account and providing access to Platform services	Performance of contract
Age verification (21+) and KYC identity checks	Legal obligation; legitimate interests (preventing underage gambling)
Processing deposits and withdrawals via Touch n Go, Boost, bank transfer	Performance of contract
Fraud prevention, security monitoring, and AML compliance	Legal obligation; legitimate interests
Responsible gaming monitoring and intervention	Legal obligation; legitimate interests (player protection)
Sending kisa918 promotional communications (where opted in)	Consent
Platform analytics and product improvement	Legitimate interests
Customer support and dispute resolution	Performance of contract; legitimate interests

§ 6 Data Sharing

kisa918 does not sell, rent, or trade your personal data to third-party commercial marketers. We share your data only in the following limited circumstances:

• Payment processors: Data necessary to execute your deposit or withdrawal transactions is shared with the relevant payment service providers (e.g., Touch n Go eWallet, Boost, GrabPay, FPX bank gateways). These processors are contractually bound to protect your data.
• Identity verification providers: For KYC purposes, your identity documents may be shared with certified identity verification service providers operating under strict data processing agreements.
• Game providers: Gameplay data is shared with our licensed game studio partners to the extent necessary to operate the games you play on kisa918.
• Fraud prevention agencies: kisa918 may share data with fraud prevention and anti-money laundering services where required to investigate suspicious activity.
• Regulatory authorities: kisa918 will disclose personal data to relevant regulators, law enforcement, or government authorities where required to do so by applicable law, court order, or regulatory direction.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of kisa918's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

§ 7 International Data Transfers

kisa918's platform infrastructure and some of our third-party service providers may be located outside Malaysia. Where your personal data is transferred to a country that does not provide the same level of data protection as Malaysia, kisa918 ensures that adequate safeguards are in place, including contractual protections equivalent to those required under the Malaysian PDPA, prior to any such transfer.

§ 8 Data Retention

kisa918 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or regulatory reporting requirements. As a general guide:

• Account and KYC data: Retained for the duration of your kisa918 account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering obligations.
• Transaction records: Retained for a minimum of seven (7) years to comply with financial recordkeeping requirements.
• Marketing preferences: Retained until you withdraw consent or close your account.
• Support communications: Retained for three (3) years from the date of the communication for quality assurance and dispute resolution purposes.

When personal data is no longer required, kisa918 will securely delete or anonymise it in a manner that prevents reconstruction.

§ 9 Cookies & Tracking Technologies

kisa918 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that allow us to recognise your browser, remember your preferences, maintain your login session, and understand how the Platform is used.

kisa918 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your kisa918 login state. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language and display settings to improve your experience on kisa918.
• Analytics Cookies: Collect anonymised data about how visitors use the kisa918 Platform to help us improve performance and usability. Data collected is aggregated and non-identifiable.

kisa918 does not use advertising or cross-site tracking cookies. You may adjust your browser settings to refuse or delete cookies at any time, though doing so may affect the functionality of certain parts of the kisa918 Platform.

§ 10 Your Data Rights

As a data subject under applicable Malaysian data protection legislation, you hold the following rights in respect of your personal data held by kisa918:

• Right of Access: You may request a copy of the personal data kisa918 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. You can update most account information directly from your kisa918 account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kisa918's legal retention obligations.
• Right to Restrict Processing: You may request that kisa918 restrict processing of your data in certain circumstances, such as where you contest its accuracy.
• Right to Data Portability: You may request that kisa918 provide your personal data in a structured, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. kisa918 will respond to verified requests within 30 days. In some cases, we may need to verify your identity before processing a request.

§ 11 Children's Privacy

§ 12 Security

kisa918 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the kisa918 Platform;
• Encryption of sensitive data stored in kisa918's databases;
• Strict access controls limiting internal access to personal data to authorised personnel with a legitimate need;
• Regular security assessments and penetration testing of the kisa918 Platform infrastructure;
• Two-factor authentication available to all players on their kisa918 accounts.

While kisa918 takes all reasonable precautions, no data transmission over the internet or method of electronic storage is completely secure. kisa918 cannot guarantee absolute security, and you use the Platform at your own risk in this regard.

§ 13 Third-Party Links

The kisa918 Platform may contain links to third-party websites or services, including game provider portals and payment gateway landing pages. kisa918 is not responsible for the privacy practices of these third parties and this Privacy Policy does not apply to them. We encourage you to review the privacy notices of any third-party services you access in connection with your kisa918 gaming activity.

§ 14 Policy Updates

kisa918 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material, kisa918 will notify registered players by email or by displaying a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the kisa918 Platform following any such changes constitutes acceptance of the updated Privacy Policy.

§ 15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by kisa918, please contact us through:

• Live Chat: Available 24/7 on every page of the kisa918 Platform. Average response time: 3–5 minutes.
• Email: [email protected] (plain text — not a clickable link). Please mark your subject line "Privacy Request".
• WhatsApp: Contact details provided within your kisa918 account after login.

kisa918's support and compliance team is available every day of the year, including all Malaysian public holidays.