Full Policy
Detailed privacy provisions for kis888 users
The following clauses should be read in full. Section headings are provided for
navigation convenience and do not limit the legal scope of each provision.
SECTION 01
Definitions
In this Privacy Policy, "personal data" means any information that identifies
or can reasonably be used to identify a living individual. "Processing" refers
to any operation performed on personal data, including collection, storage, use, disclosure,
alteration or deletion. "User", "you" and "your"
refer to the individual whose data is processed. "kis888",
"we", "us" and "our" refer to the platform
and the entity responsible for data handling. "Account" means the personal
registration linked to one eligible adult user.
"KYC" means the identity and account verification process applicable to
registration, withdrawal or compliance review. "Payment data" includes deposit
and withdrawal amounts, selected methods, transaction timestamps, reference identifiers and
recipient information associated with MYR transactions including those using DuitNow, FPX,
Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong. These payment
providers each operate as independent data controllers for data processed through their own
infrastructure.
SECTION 02
Data we collect
The following categories of personal data may be collected when you register with kis888,
use account features or interact with our support and payment services.
| Category |
Examples |
Why collected |
| Identity data |
Full name, date of birth, identity document number |
Account creation, age verification, KYC compliance |
| Contact data |
Email address, phone number, city (e.g. Kuala Lumpur, Penang) |
Account management, notifications, support |
| Payment data |
Bank account, e-wallet ID, transaction reference, MYR amounts |
Deposit processing, withdrawal, fraud prevention |
| Account activity |
Login timestamps, game or market selections, session duration |
Platform operation, responsible-gambling monitoring |
| Device and technical data |
IP address, device model, browser type, operating system |
Security, fraud detection, platform compatibility |
| Communication records |
Support messages, live chat logs, email correspondence |
Issue resolution, quality review |
| Responsible-gambling data |
Deposit limit settings, self-exclusion requests, cooling-off periods |
Player protection, regulatory compliance |
Sensitive documents provided during KYC — such as a MyKad, passport or utility bill — are
used only for verification purposes and handled with additional care. Users must not supply
documents belonging to another person.
SECTION 03
Legal basis for processing
kis888 processes personal data on one or more of the following lawful grounds, depending on the
nature and purpose of the processing activity:
- Performance of the user agreement: account creation, payment processing and
withdrawal handling require personal data to function.
- Compliance with legal obligations: anti-money-laundering checks, identity
verification requirements and records retention may require specific data to be processed
irrespective of user preference.
- Legitimate interests: fraud prevention, security monitoring and platform
improvement may involve processing activity data and technical records where those interests
do not override a user's fundamental rights.
- Consent: where optional marketing, cookies beyond strictly necessary
functionality, or other discretionary communications are involved, specific consent may
be sought. Consent may be withdrawn at any time through account settings or support.
SECTION 04
Payment data and MYR transactions
Payment instructions involving DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n
Go eWallet, Boost or GrabPay are processed through the relevant provider's infrastructure.
kis888 receives transaction confirmation records, reference identifiers and amounts. Full card
or bank account numbers are not stored by kis888 where they are managed directly by the
payment provider.
Payment information is used to confirm deposits, authorise withdrawals, detect anomalies and
comply with financial-crime prevention obligations. A recipient name that does not match the
registered account holder's verified details may result in a payment being held for review.
Transaction records are retained for a period determined by applicable legal requirements and
operator compliance obligations, which typically extend beyond account closure. These records
support dispute resolution, regulatory review and fraud prevention work.
SECTION 05
Cookies and tracking technologies
The kis888 website may use cookies and similar technologies to support session management,
security, performance measurement and, where applicable, user preference storage. A cookie is
a small data file placed on a user's device by a visited website.
- Strictly necessary cookies: required for basic navigation, login sessions
and security. These cannot be disabled without affecting core functionality.
- Functional cookies: store preferences such as language selection or
account display settings.
- Analytics cookies: collect aggregated, anonymised information about how
pages are used, helping to improve navigation and performance.
Users may adjust cookie settings through their browser. Disabling cookies beyond the strictly
necessary category will not prevent access to the site but may affect certain features.
kis888 does not use cookies to serve targeted advertising campaigns on third-party websites.
SECTION 06
Sharing personal data with third parties
kis888 does not sell personal data to third parties for their commercial use. Data may be
shared in the following circumstances:
- Payment processors and banks: to complete deposits and withdrawals
according to the instructions given by the user.
- Identity verification providers: to confirm age, identity and address
during KYC review where applicable.
- Game studios and platform providers: on a technically necessary basis
to deliver game content and settle results.
- Legal and regulatory authorities: where required by applicable law,
court order or legitimate regulatory process. kis888 cannot circumvent lawful
disclosure requests by reference to user privacy preferences.
- Fraud prevention and security services: to identify and block
suspicious activity that may affect platform integrity or user safety.
Where data is shared with third-party processors, contractual obligations consistent with
applicable data protection standards are expected to apply to the receiving party's
handling of that information.
SECTION 07
Data retention
Personal data is not kept for longer than is reasonably necessary for the purpose for which
it was collected, taking into account applicable legal retention obligations:
- Active account data: maintained while the account remains open and for
a reasonable period following closure to manage outstanding obligations and disputes.
- Transaction and financial records: subject to mandatory retention
periods set by applicable laws, which may be several years from the transaction date.
- KYC documents: retained for the period required by applicable anti-money
laundering and identity verification obligations, which typically extends beyond account
closure.
- Support communications: retained for a reasonable period to support
dispute resolution and quality review, then deleted or anonymised.
- Marketing consent records: retained until consent is withdrawn or the
record is no longer required to demonstrate the lawfulness of past communication.
When personal data is no longer required and no retention obligation applies, it will be
securely deleted or effectively anonymised so that it cannot be attributed to an individual.
SECTION 08
User rights
Subject to applicable local law and any overriding legal obligation, users may exercise the
following rights in relation to personal data that kis888 holds about them. Expand each right
for a description.
You may request a description of the personal data kis888 holds about you, the
purposes for which it is processed and whether it has been shared with third parties.
A reasonable period will be required to compile and verify the response.
Where personal data held by kis888 is inaccurate or incomplete, you may request
a correction. Corrections that affect identity or payment records may require
supporting documentation before the change is applied.
You may request deletion of personal data that is no longer necessary for its
original purpose, where processing was based on consent that has since been
withdrawn, or where applicable law otherwise supports erasure. Mandatory legal
retention obligations may prevent immediate or complete deletion in some cases.
Where you dispute the accuracy of data, contest the lawfulness of processing or
object to deletion but require data to be preserved for a legal claim, you may
request that active processing be restricted while the matter is reviewed.
Where processing is based on legitimate interests, you may object to that
processing on grounds relating to your particular situation. kis888 will cease
the relevant processing unless it can demonstrate compelling legitimate grounds
or a legal basis that overrides those interests.
Where processing is based on consent, you may withdraw that consent at any time
through account settings or by contacting support. Withdrawal does not affect
the lawfulness of processing that was carried out before the withdrawal.
To exercise any of the above rights, contact kis888 support using the email address shown in
the footer. Include sufficient information to verify your identity before the request is
processed. Do not include sensitive financial credentials or passwords in any request.
SECTION 09
Security measures
kis888 employs technical and organisational measures to protect personal data against
accidental loss, unauthorised access, alteration or disclosure. These measures include
encrypted data transmission, controlled access to sensitive systems and regular review of
security practices.
No system can guarantee absolute security. Users play an important part in protecting their
own data by choosing a strong, unique password, keeping devices updated, avoiding public
Wi-Fi networks for account access, and never sharing login credentials or one-time
verification codes with anyone — including individuals who claim to represent kis888 support.
Where a data incident is identified that could materially affect user rights, kis888 will
take reasonable steps to contain the incident, assess its scope and communicate relevant
information to affected users where required and practicable.
SECTION 10
Minors and age restriction
kis888 is strictly for adults aged 21 and above. The platform does not knowingly collect
personal data from individuals below that age. Where an account is discovered to be
associated with a person under 21, it will be closed and any associated data handled in
accordance with applicable law and responsible-gambling safeguards.
Account holders are responsible for ensuring that any device used to access kis888 is not
accessible to persons under 21, including children or younger family members. If you believe
a person under 21 has submitted data to or created an account with kis888, please contact
support immediately.
SECTION 11
Responsible-gambling data
Information relating to a user's responsible-gambling decisions — including deposit limit
configurations, self-exclusion requests, cooling-off periods and support communications
regarding problem gambling — is treated with additional sensitivity. This data is used to
honour the user's protection choices, monitor compliance with applied restrictions and
support any required interaction with responsible-gambling programmes.
Self-exclusion and limit records may be retained beyond account closure to prevent
circumvention through re-registration. A self-excluded user who attempts to create a new
account may have that account identified and closed using information retained for this
specific protection purpose.
SECTION 12
Changes to this Privacy Policy
kis888 may update this Privacy Policy to reflect changes in data-handling practices, legal
requirements or platform features. The current version will be published on this page with
the version indicator shown near the top of the document. Material changes that require user
awareness may be communicated through an account notice or email before they take effect.
Continued use of kis888 following a published update constitutes acknowledgement of the
revised policy, where permitted by applicable law. Users who do not accept a material change
should contact support to discuss account options before the revision takes effect.
SECTION 13
Contact Us
For questions about this Privacy Policy, to exercise a data right or to report a privacy
concern, contact the kis888 support team using the email address displayed below. Please
provide enough detail to identify your account and describe your request clearly. Processing
a data rights request may require identity confirmation before action is taken.
Website email: [email protected] — displayed as plain text only.
Do not include passwords, one-time codes, full banking credentials or sensitive document
images in the body of an initial contact message.
Common questions about account data, cookies and payment records may also be addressed in
the FAQ section accessible through the main navigation.