Privacy Policy Kiss918 Ori – Our Commitment to Protecting Malaysian Players' Data

At Kiss918 Ori, we understand that Malaysian players' trust in our platform goes beyond great games or competitive odds — it's also about the confidence that your personal information is handled responsibly and transparently. This Privacy Policy is written to explain precisely what we do with your data, why we need it, and how we protect it.

We have written this policy in plain, straightforward language — not dense legal text packed with technical jargon that discourages anyone from reading it. We believe you deserve to fully understand how your data is used, not simply be handed a wall of text that no one is expected to read.

Kiss918 Ori operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Should you have any questions about this policy, our team is available at any time via support@kiss918ori.best.

This Privacy Policy applies to all users who access or use the Kiss918 Ori platform through our website kiss918ori.best, mobile application, or any other digital channel operated by kiss918 ori. It covers all personal information collected from you during the registration process, platform use, financial transactions, communications with our customer support team, and every other interaction between you and kiss918 ori.

By registering an account or using the kiss918 ori platform, you confirm that you have read and understood this privacy policy and agree to how we collect and use your personal information as described. If you do not agree, you should not proceed with registration or use of the platform.

This Policy should be read together with Terms & Conditions Kiss918 Ori, which is the overarching agreement governing your use of our platform.

Kiss918 ori collects your personal information from several sources — information you provide directly during registration or platform use, information collected automatically as you use the platform, and in certain circumstances, information from authorised third parties.

We not collect sensitive information such as health details, religious beliefs or political views. Credit card information is not stored on our servers — card transactions are processed directly through an authorised payment gateway without card data passing through our systems.

Every piece of data we collect serves a clear purpose. Kiss918 Ori does not gather information simply to store it without reason. Here are the primary ways your data is used:

• Account management: Verifying your identity, processing your registration and keeping your account secure.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals of your winnings to your registered account.
• Age verification and identity check (KYC): Ensuring all players meet the minimum age requirement of 18 years, in line with applicable legal requirements.
• Fraud prevention and security: Detecting suspicious activity, preventing multi-account abuse, and safeguarding platform integrity for all players.
• Customer support: Handling enquiries, resolving issues, and providing relevant assistance based on your account history and activity.
• Personalising your experience: Displaying games and promotions that may be relevant based on your gaming preferences — slots, live casino, football, badminton or others.
• Important communications: Sending account-related notifications, transaction updates, policy changes, and promotions that you have agreed to receive.
• Legal compliance: Complying with reporting and record-keeping requirements under applicable Malaysian laws, including the PDPA 2010.
• Platform improvements: Analysing usage patterns to improve platform performance, interface design, and the overall player experience.

We process your data on one of the following legal bases: contract performance (to process bets and transactions), legal obligation (for KYC and compliance), legitimate interests (for security and fraud prevention), or your consent (for optional marketing communications).

Kiss918 Ori does not sell, rent, or distribute your personal data to any third party for their marketing or commercial purposes. This is our absolute commitment to the privacy of Malaysian players.

However, in the course of operating the platform, there are situations where data needs to be shared with specific parties:

• Authorised service providers: Companies we engage to help operate the platform — such as cloud service providers, payment gateways, and game providers like Evolution Gaming or Pragmatic Play — receive only the minimum data necessary for their specific purposes. All providers are bound by strict data protection agreements with Kiss918 Ori.
• Identity verification and KYC: Authorised third-party identity verification services may process some of your information solely for the purpose of age and identity verification.
• Competent authorities: kiss918 ori will disclose personal data to law enforcement, courts, or regulatory authorities when required by Malaysian law or a valid court order.
• Fraud Prevention: In cases of suspected fraud or criminal activity, relevant information may be shared with the appropriate authorities or financial institutions for investigation purposes.

Protecting the personal and financial data of Malaysian players is one of Kiss918 Ori's most significant investments in terms of infrastructure and operations. We employ a combination of industry-standard security technologies and rigorous operational practices to ensure your data is protected at all times.

Technical security layers we have in place:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same standard employed by banking institutions. This means your information cannot be read by anyone attempting to intercept the transmission.
• Static data encryption (data at rest): Data stored in our databases is also encrypted — not just during transmission. This provides an additional layer of protection in the event of any unauthorised access attempt on our infrastructure.
• Multi-layered access controls: Only staff who require access to specific data to perform their duties are permitted to do so. All internal access is logged and continuously monitored.
• 24/7 security monitoring: Our automated monitoring system operates around the clock to detect anomalies, unauthorised access attempts or suspicious activity in real time.
• Two-factor authentication (2FA): Staff accounts with access to player data are protected by mandatory two-factor authentication.
• Regular security audits: Independent, qualified third parties conduct regular security reviews and penetration testing on our infrastructure to identify and patch any vulnerabilities before they can be exploited.

While we take every reasonable measure to protect your data, no system can guarantee absolute 100% security against all evolving cyber threats. If you suspect any suspicious activity on your account, please contact our support team immediately.

The kiss918 ori platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyse platform usage patterns on an aggregate basis.

Types of cookies we use:

• Essential cookies: Required for the platform to function properly — maintaining your login session, remembering your language preference and ensuring session security. These cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how you use the platform — most visited pages, time spent on specific games, and navigation paths. This data is gathered in aggregate and does not identify you personally.
• Functional cookies: Remembering your preferences such as display settings, favourite games, and other personal choices for a more tailored experience.
• Analytics cookies: Helping us understand overall platform performance so we can make meaningful improvements based on real usage data.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Kiss918 Ori platform, including your ability to log in and carry out transactions securely.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles we uphold, you have several important rights regarding your personal data at kiss918 ori. We are committed to making it straightforward for you to exercise these rights without unnecessary barriers.

To exercise any of the rights above, please contact our team at support@kiss918ori.best stating the right you wish to exercise and the information needed to verify your identity. We will respond within 14 business days.

Kiss918 ori retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. We do not keep data longer than needed.

General data retention guidelines:

• Active account data: Retained for as long as your kiss918 ori account remains active.
• Financial transaction data: Retained for a minimum of 7 years following a transaction, in line with Malaysian financial and accounting regulatory requirements.
• KYC and identity verification data: Retained for a minimum of 5 years following account closure or last use, in compliance with anti-money laundering (AML) requirements.
• Customer support communication records: Retained for 3 years for reference and dispute resolution.
• Technical and security logs: Retained for 1 year for security and investigation purposes if required.
• Marketing data (where permitted): Retained until you withdraw consent or request deletion.

Once the retention period expires and there is no legal requirement to keep the data, Kiss918 Ori will securely delete or anonymise it using industry-recognised methods.

The Kiss918 Ori platform is strictly for individuals aged 18 and above. We do not knowingly collect, use, or store any personal information from children or individuals under the age of 18.

The Kiss918 Ori registration process includes strict age verification. Should we discover that personal data belonging to a minor has been collected without our knowledge — for example, through registration using false information — we will delete that data immediately and close the account in question.

Kiss918 Ori reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes in the technology we use. Each new version will display the latest update date at the top of the page.

When there are material changes to how we use your data, we will:

• Publishing a clear notice on the platform's main page at least 14 days before any changes take effect.
• Sending notifications to all registered members via the email address saved on their account.
• In cases where changes require fresh consent, we will seek your explicit agreement before those changes take effect.

Continued use of the Kiss918 Ori platform after a policy change takes effect will be considered acceptance of the revised policy. We encourage you to review this page periodically to stay informed on how we protect your privacy.

If you have any questions, concerns, or wish to exercise your privacy rights, the kiss918 ori team is here to help. You can reach us through the following channels:

• Privacy email: support@kiss918ori.best — for privacy enquiries and data access requests
• Live chat: Available directly within the Kiss918 Ori platform — 24 hours a day, 7 days a week

For privacy rights requests — such as data access, correction, or deletion — please include in your email: your full name, your kiss918 ori account number (if applicable), the type of request, and any other relevant details. We will process your request within 14 business days.

In addition to this privacy policy, we encourage you to also read Terms & Conditions and the Responsible Gaming for a comprehensive overview of how Kiss918 Ori operates in the interest and protection of Malaysian players.