91kiss Privacy Policy — Data Protection for Malaysian Members

91kiss takes the privacy of our members very seriously. As an online casino platform serving over 250,000 active members across Malaysia, we understand that your trust in us goes beyond the thrill of gaming — it is also about having confidence that your personal and financial information is always in safe, responsible hands.

This Privacy Policy applies to all information collected through the website 91kiss, mobile application (where applicable), customer support systems, and any other communication channels between you and 91kiss. This includes information you provide directly during registration, when making deposits or withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX through Maybank2u or CIMB Clicks, and when interacting with our customer support team.

This Policy does not apply to third-party websites or services that may be accessible via links within our platform. We encourage you to read the privacy policy of any external website you visit separately.

91kiss collects the following categories of information from our members:

Identity Information:

• Full name as per your identification card (MyKad) or passport.
• Date of birth for age verification purposes (18+ only).
• Identity card number (MyKad) or passport number when identity verification is required for higher-value withdrawals.

Contact Information:

• An active Malaysian mobile number (used for SMS verification and important notices).
• An active email address.
• State of residence in Malaysia (for service localisation purposes).

Financial Information:

• Deposit and withdrawal transaction details (amount, date, and payment method used).
• The e-wallet or bank account name used for transactions.
• Transaction history required for compliance records and auditing.

Platform Usage Information:

• Gaming history including game type, bet amounts, and outcomes.
• Login history, including time, date, and IP address.
• Device information (device type, operating system, web browser).
• Cookie and session usage data.

91kiss collects your information through the following methods:

• Account registration: When you fill in the registration form on our website, you directly provide us with your name, phone number, and email address.
• Financial transactions: Every time you make a deposit or withdrawal, your transaction details are automatically recorded in our system for account record-keeping and compliance purposes.
• Platform usage: Our systems automatically record your gaming activity, session duration, and technical device data while you use the platform 91kiss.
• Communications with customer support: Any communication through live chat, email, or other channels with our support team may be retained for training, service improvement, and record-keeping purposes.
• Cookies and similar technologies: Our website uses cookies to enhance user experience, save login preferences, and analyse usage patterns. See Section 8 for details.
• Identity verification: Where identity verification is required, you may be asked to upload a copy of your identification document. This document is stored securely and accessed only by authorised personnel.

91kiss uses the personal data collected solely for the following purposes:

• Account management: To create and manage your account, process your registration, and verify your identity in accordance with legal requirements.
• Transaction processing: To process deposits and withdrawals via your chosen Malaysian local payment method accurately and securely.
• Service delivery: To grant you full access to all games and services available on the platform 91kiss including baccarat, blackjack, roulette, Sports Betting, and online slots.
• Service communications: To send important account-related notices such as deposit confirmations, withdrawal updates, changes to terms, or security alerts.
• Customer support: To assist you in resolving any issues or enquiries related to your account, transactions, or platform usage via live chat or email.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-account abuse, or any misuse of the platform that violates our Terms & Conditions.
• Legal compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Platform improvement: To analyse usage patterns in aggregate (not at an individual level) for the purpose of improving the design and functionality of our platform.
• Direct marketing: With your consent, to send you information about promotions, bonuses, and the latest offers 91kiss that are relevant to you. You may opt out of marketing communications at any time.

91kiss does not sell or rent your personal data to any third party. However, we may share selected information in the following limited circumstances:

• Payment processors: Required transaction details are shared with payment service providers (such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX processors) solely for the purpose of processing your transactions. All these payment processors comply with PCI DSS security standards.
• Technology service providers: Companies that assist us in operating the platform — including server hosting providers, database management systems, and analytics tools — are all bound by strict confidentiality agreements with 91kiss.
• Game providers: Required account information is shared with the third-party game software providers we use to deliver live casino, slots, and Sports Betting games. Such sharing is kept to a minimum and is strictly for functional purposes.
• Legal requirements: We will disclose personal information where required by Malaysian law, court order, or lawful directive from a competent law enforcement authority.
• Rights protection: In cases where it is necessary to protect the rights, property, or safety of 91kiss, our members, or the general public — we may disclose relevant information to the appropriate parties.

In all of the data-sharing cases outlined above, 91kiss ensuring that parties receiving data adhere to data protection standards equivalent to or higher than those we apply ourselves.

Data security is more than just a written commitment for 91kiss — it is an ongoing investment in real infrastructure and processes. The technical and organisational measures we implement include:

• 256-bit SSL Encryption: All communications between your browser and our servers are encrypted using TLS 1.3 with the strongest available cipher suites. This means that even if your data were intercepted in transit, it would be unreadable to any third party.
• Data-at-rest encryption: Sensitive data stored in our databases — including passwords (stored as one-way hashes) and financial information — is encrypted using the AES-256 standard.
• Multi-layered access control: Access to members' personal data within our internal systems is restricted to staff who genuinely require it to carry out their duties. All access is logged and audited on a regular basis.
• Two-factor authentication: Our internal administration systems are protected by mandatory two-factor authentication (2FA) for all staff with access to member data.
• Regular security audits: 91kiss conducting regular penetration testing and independent security audits by accredited third-party cybersecurity firms.
• 24/7 threat monitoring: Automated monitoring systems operate around the clock to detect and respond to any suspicious activity or unauthorised access attempts.
• Incident response plan: We have tested procedures in place to respond to any data breach, including protocols for notifying affected members within the timeframe required by law.

91kiss retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law:

• Active account data: For as long as your account remains active and you continue to use the platform 91kiss.
• Data after account closure: Financial transaction records are retained for a minimum of 7 years after account closure, as required by Malaysian tax law and financial compliance regulations.
• Security logs: Access logs and security activity records are retained for 12 months for security incident investigation purposes if needed.
• Support communication records: Live chat transcripts and customer support emails are retained for 24 months for training, service improvement, and dispute reference purposes.
• Marketing data: If you withdraw your consent to receive marketing communications, your information will be removed from our marketing list within 10 business days.

Once the retention period has expired or the data is no longer needed, 91kiss will securely delete or anonymise that data in accordance with approved procedures.

Platform 91kiss uses cookies and similar technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Required session cookies: These cookies are essential for the platform's core functions — including maintaining your login session, saving your bet slip contents, and enabling navigation between pages. Without them, the platform cannot function properly.
• Preference cookies: These cookies remember your preferences — such as language, display settings, and game preferences — so you do not need to reconfigure them each time you log in.
• Analytics cookies: We use analytics cookies to understand how members use our platform in aggregate — which pages are visited most often, average time spent, and points where users encounter difficulties. This data is used solely for platform improvement.
• Security cookies: These cookies help detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. 91kiss. Required cookies cannot be disabled without affecting the overall functionality of the platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and this Privacy Policy, you have the following rights regarding your personal data held by 91kiss:

91kiss is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If we determine that personal data belonging to a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and close the account in question. Age verification is conducted during registration and at the point of certain withdrawal requests to ensure compliance.

If you are a parent or guardian and believe that your minor child has registered an account on 91kiss, please contact us immediately at support@91kiss.click so that we may take the appropriate action.

Platform 91kiss may contain links to third-party websites or services, such as game provider websites, payment support pages, or other informational resources. This Privacy Policy does not apply to those third-party websites or services.

We are not responsible for the privacy practices or content of any third-party websites accessible through links on our platform. We encourage you to read and understand the privacy policy of each website you visit separately, especially before providing them with any personal information.

The presence of third-party website links within the platform 91kiss does not imply that we endorse or support the content, products, or services offered by those websites.

91kiss reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legislation, or our services. When significant amendments are made, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying a clear notice within the platform to logged-in members, informing them of the changes.
• Sending email notifications to active members regarding material changes that directly affect their privacy rights.
• Providing at least 14 days' notice before significant changes take effect, giving you time to review the updated terms.

Continued use of the platform 91kiss after any amendment to this Privacy Policy takes effect will be considered your acceptance of the revised policy. It is your responsibility to review this page periodically. If you disagree with any changes, you have the right to close your account by contacting our customer support.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 91kiss, please contact our Data Privacy Officer through the following channels: