1 Introduction
m918kiss ("the Company", "we", "us", or "our") operates the online gaming platform accessible at https://m918kiss.cam ("the Platform"). We understand that your personal data is valuable, and we take our responsibility to protect it seriously.
This Privacy Policy describes how m918kiss collects, processes, stores, shares, and safeguards personal data provided by users ("you", "your", or "the User") in connection with your use of the Platform, including when you register an account, deposit funds, place bets, claim bonuses, or contact our support team. This Policy applies to all users of the Platform, regardless of location — including players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions across Malaysia and beyond.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the practices described in this Policy, you must cease use of the Platform immediately.
This Privacy Policy should be read alongside our Terms & Conditions. In the event of any inconsistency between the two documents, the Terms & Conditions shall prevail to the extent of the inconsistency, except in matters where this Privacy Policy provides a higher standard of data protection.
2 Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or is capable of identifying you as a natural person, either alone or in combination with other information held by us. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any other handling of such data. |
| "Data Controller" | m918kiss, as the entity that determines the purposes and means by which your Personal Data is processed. |
| "Data Processor" | A third party that processes Personal Data on behalf of m918kiss under a written data processing agreement. |
| "Cookies" | Small text files placed on your device by the Platform for the purposes described in Section 9 of this Policy. |
| "KYC" | Know Your Customer — the identity and age verification process required to open and maintain an active account on the Platform. |
| "AML" | Anti-Money Laundering — the regulatory framework and internal procedures that m918kiss maintains to detect and prevent financial crime. |
3 Personal Data We Collect
The categories of personal data we collect vary depending on how you interact with the Platform. The following table summarises the main categories:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., Malaysian IC / MyKad number), copies of identity documents. |
| Contact Data | Residential address, email address, mobile telephone number. |
| Financial Data | Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet registered phone number, GrabPay account), cryptocurrency wallet addresses, transaction history, deposit and withdrawal records. |
| Account Data | Username, encrypted password, account preferences, VIP tier status, loyalty point balance, bonus redemption history, self-exclusion or deposit limit settings. |
| Technical Data | IP address, device type and operating system, browser type and version, device identifiers, session duration and timestamps, geolocation data (where consent is provided or technically inferred). |
| Usage Data | Games played, bet amounts and outcomes, pages viewed, navigation paths, search queries within the Platform, time spent on each game or section. |
| Communication Data | Records of your communications with our support team via live chat, email, or any other channel, including the content of those communications. |
| Verification Data | Photographs, selfies, utility bills, bank statements, and other documentation submitted for KYC verification purposes. |
You are not required to provide all categories of data at the time of registration. However, certain data — particularly Identity Data, Contact Data, and Verification Data — is mandatory for KYC compliance. Without it, your ability to make withdrawals and access certain features of the Platform will be restricted.
4 How We Collect Your Data
m918kiss collects your personal data through the following methods:
4.1 Directly from You
We collect data you provide directly when you register an account, complete your KYC verification, make a deposit or withdrawal request, contact our support team, respond to surveys or promotions, or update your account settings. This includes information entered into forms, uploaded documents, and communications sent to us.
4.2 Automatically via the Platform
When you access and use the Platform, we automatically collect Technical Data and Usage Data using cookies, web beacons, pixel tags, log files, and similar technologies. This data is collected each time you load a page, launch a game, or interact with any feature of the Platform. Please refer to Section 9 for our full Cookie Policy.
4.3 From Third Parties
We may receive personal data about you from third parties in limited circumstances, including:
- Payment service providers (e.g., Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX network operators) confirming transaction details;
- Identity verification and KYC service providers who assist us in verifying your identity documents;
- Fraud prevention agencies and credit reference bureaus, where permitted by applicable law;
- Publicly accessible sources, where relevant to AML compliance obligations.
5 Legal Basis for Processing
m918kiss processes your personal data on the following legal bases. Where we rely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
| Legal Basis | When We Rely on It |
|---|---|
| Performance of a Contract | Processing necessary to create and manage your account, process deposits and withdrawals, and deliver the gaming services you have registered for. |
| Legal Obligation | Processing required to comply with KYC, AML, and other applicable regulatory obligations, including identity verification and transaction monitoring. |
| Legitimate Interests | Processing for fraud prevention, platform security, internal analytics, service improvement, and direct marketing to existing customers where consistent with your reasonable expectations. |
| Consent | Processing for optional marketing communications and the placement of non-essential cookies on your device, where your prior consent has been obtained. |
6 How We Use Your Personal Data
m918kiss uses the personal data we hold about you for the following purposes:
6.1 Account Management & Service Delivery
To create and administer your account; process deposits and withdrawals via your chosen payment method (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Bitcoin, and USDT); display your account balance, transaction history, and game history; and deliver customer support services.
6.2 Identity Verification & Compliance
To verify your identity and age (you must be 21 years of age or older to use the Platform) in compliance with our KYC obligations; to conduct ongoing transaction monitoring in accordance with our AML programme; and to comply with any other applicable regulatory requirements, court orders, or law enforcement requests.
6.3 Fraud Prevention & Security
To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other breaches of our Terms & Conditions; to protect the security of your account and the integrity of the Platform; and to share relevant data with fraud prevention agencies where legally permitted.
6.4 Personalisation & Platform Improvement
To personalise your experience on the Platform, including tailoring game recommendations and bonus offers based on your play history and preferences; to conduct internal analytics and research to improve our games, features, and services; and to monitor and address technical issues.
6.5 Marketing Communications
Where you have provided consent or where we rely on our legitimate interests as an existing customer relationship, we may contact you with information about promotions, new games, VIP programme updates, and other offers that may be of interest to you. You may opt out of marketing communications at any time by contacting our support team.
6.6 Responsible Gambling
To monitor your gambling activity for indicators of problem gambling or at-risk behaviour; to apply any deposit limits, session limits, or self-exclusion restrictions you have requested; and to provide information about responsible gambling resources where relevant.
7 Data Sharing & Disclosure
m918kiss does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:
- Payment Service Providers: We share the minimum financial data necessary with our payment partners — including the FPX network, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network processors — to complete your deposit and withdrawal transactions.
- KYC & AML Service Providers: We engage third-party identity verification specialists to assist with KYC document checks and AML transaction screening. These providers act as Data Processors under our instructions and are contractually bound to protect your data.
- IT & Infrastructure Partners: We use cloud hosting, data storage, and analytics providers to operate the Platform. These partners process data solely on our behalf under strict data processing agreements.
- Regulatory Authorities & Law Enforcement: We may disclose your data to our gaming regulator, financial intelligence units, law enforcement agencies, or courts where required by applicable law, regulation, or a valid legal order.
- Fraud Prevention Agencies: Where we have reasonable grounds to suspect fraud or financial crime, we may share relevant data with fraud prevention agencies or other operators within a shared fraud database, where legally permitted.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
All third parties with whom m918kiss shares personal data are required to process that data in accordance with applicable data protection law and to implement appropriate security measures. We do not permit our Data Processors to use your data for their own purposes beyond the specific services they provide to us.
8 Data Retention
m918kiss retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or regulatory reporting requirements.
As a general principle, we apply the following retention periods:
- Account and Transaction Data: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later, in compliance with AML record-keeping requirements.
- KYC Verification Documents: Retained for a minimum of five (5) years from the date of account closure.
- Communication Records: Retained for up to three (3) years from the date of the communication, unless a longer period is required for ongoing dispute resolution or regulatory purposes.
- Technical and Usage Data: Retained for up to two (2) years from the date of collection for analytics and fraud prevention purposes, after which it is anonymised or deleted.
- Marketing Preferences: Retained until you withdraw your consent or opt out of marketing communications, plus a reasonable period thereafter as evidence of your prior consent.
Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised such that it can no longer be associated with you as an individual.
9 Cookies & Tracking Technologies
9.1 What Are Cookies?
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit the Platform. They allow the Platform to recognise your device and remember certain information about your session and preferences.
9.2 Types of Cookies We Use
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for the Platform to function. Includes session authentication cookies that keep you logged in as you navigate between pages. Cannot be disabled. |
| Functional | Remember your preferences such as language settings, preferred payment method, and game display options to provide a more personalised experience. |
| Analytical / Performance | Help us understand how users interact with the Platform — which pages are visited most, where users exit, and how long they spend on each game. Data is aggregated and anonymised. |
| Marketing | Used to deliver relevant promotional content and track the effectiveness of our marketing campaigns. Only placed with your prior consent. |
9.3 Managing Cookies
You may control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features, including account login.
10 Data Security
m918kiss implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard SSL/TLS protocols.
- Data Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using strong encryption standards.
- Access Controls: Access to personal data is restricted to authorised personnel on a strictly need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
- Regular Security Audits: Our systems are subject to regular penetration testing and security audits by independent third-party specialists.
- Incident Response: We maintain a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant regulatory authority in accordance with applicable law.
While we take all reasonable steps to protect your data, no system of data transmission or storage can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately if you suspect any unauthorised access to your account.
11 Your Rights
Subject to applicable data protection law and certain exceptions, you have the following rights in relation to your personal data held by m918kiss:
Right of Access
Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification
Request correction of any personal data that is inaccurate, incomplete, or out of date.
Right to Erasure
Request deletion of your personal data in certain circumstances — for example, where we no longer need it for the purpose for which it was collected.
Right to Restrict Processing
Request that we limit processing of your data in specific circumstances, such as while we investigate a dispute about its accuracy.
Right to Data Portability
Receive a structured, machine-readable copy of the personal data you provided to us, where processing is based on consent or contract.
Right to Object
Object to processing of your data where we rely on legitimate interests, including direct marketing. You may opt out of marketing at any time.
To exercise any of the rights described above, please contact our support team as described in Section 15. We will respond to all verified requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, with prior written notification.
Please note that certain rights are subject to limitations where our processing is required for legal or regulatory compliance purposes — for example, we are unable to delete transaction records that we are required to retain under AML legislation.
12 Children's Privacy & Age Restriction
The Platform is strictly prohibited for individuals under the age of 21 years. m918kiss does not knowingly collect, process, or store personal data from any person under 21. Age verification is a mandatory step in our KYC process, and any account discovered to have been opened by a person under 21 will be immediately closed and all associated personal data deleted or rendered inaccessible, except where retention is required by law.
If you believe that a person under the age of 21 has registered an account or provided personal data to m918kiss, please notify us immediately at the contact details provided in Section 15. We will investigate and take appropriate action without undue delay.
Parental Controls: If you are a parent or guardian concerned about a minor's access to online gambling platforms, we strongly encourage you to use parental control software and monitoring tools. For additional resources, please visit our Responsible Gambling page.
13 International Data Transfers
As an international online gaming operator, m918kiss may transfer your personal data to, or process it in, countries outside of Malaysia. This may occur where, for example, our IT infrastructure providers or KYC service partners are located in other jurisdictions.
Where we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections provided under applicable Malaysian data protection requirements. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions that have been determined to provide an adequate level of data protection.
14 Updates to This Privacy Policy
m918kiss reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where a material change is made to this Privacy Policy — such as a significant change in the categories of data we collect, the purposes for which we use it, or the third parties with whom it is shared — we will provide advance notice to registered users via email or a prominent notice on the Platform prior to the change taking effect.
Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and contact us to request account closure.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by m918kiss, please contact our Data Protection team using the details below. All requests will be acknowledged within 5 business days and resolved within 30 calendar days.
Email (plain text — not a link): [email protected]
Subject line to use: "Privacy Request — [Your Account Username]"
Live Chat: Available 24/7 via the Platform. Average response time under 90 seconds.
Written requests: Please include your full name, account username, and a clear description of your request. We may need to verify your identity before processing the request.