Privacy Policy i918kiss – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") is published by i918kiss ("we", "the Company") and applies to all users of the online entertainment platform i918kiss.ws ("Platform"). This Policy explains how we collect, use, disclose, transfer, and protect your personal information when you use any of our services.

I918kiss services include slots, poker, football covering the Malaysia Super League and EPL, cricket, Virtual Sports, and live casino. When you register, log in, make a deposit via Touch 'n Go eWallet or GrabPay, or simply browse our platform, you acknowledge that you have read and understood this Policy.

If you do not agree with any provision of this Policy, please discontinue use of the Platform. For privacy-related enquiries, you may contact us at support@i918kiss.ws at any time.

I918kiss collects your personal data through several means — directly from you, automatically during your use of the Platform, and in certain cases, from authorised third parties.

We does not collect sensitive information such as biometric data, medical records, or religious data, unless required by law or for specific identity verification purposes.

I918kiss uses your personal data for the following purposes, each grounded in contractual necessity, legitimate interest, legal obligation, or your consent:

• Service provision: Creating and managing your account, processing deposits via DuitNow or ShopeePay, handling withdrawals, and ensuring a seamless gaming experience.
• Identity verification (KYC): Meeting anti-money laundering legal requirements and verifying that you meet the minimum age eligibility of 18 years.
• Security & fraud prevention: Detecting and preventing fraudulent activity, unauthorised access, and conduct that violates our Terms & Conditions.
• Customer support: Efficiently and accurately handling your enquiries, complaints, and support requests.
• Product improvement: Analyzing usage patterns to improve platform features, user experience, and technical performance.
• Marketing communications: Sending you information about i918kiss promotions, bonuses, and the latest offers — only if you have opted in to receive them.
• Legal compliance: Meeting reporting obligations to the relevant authorities as required by applicable law.

I918kiss does not sell your personal data to any third party. However, in the following limited circumstances, we may share your data with authorised parties:

• Payment service providers: Information required to process transactions via Touch 'n Go eWallet, GrabPay, Boost, Maybank2u (FPX), and other Malaysian payment providers. These providers are bound by strict confidentiality agreements.
• Game providers: Partners such as Pragmatic Play, PG Soft, and Habanero may receive the minimum technical information necessary to deliver games to you.
• Cloud service providers: Server infrastructure and data storage managed by certified cloud providers with robust security compliance.
• Legal authorities: When required by a court order, warrant, or lawful request from a law enforcement agency.
• Audit & compliance: Independent auditors engaged to verify i918kiss's compliance with security standards and fair play requirements.

All third parties that receive your personal data are required to uphold data security and confidentiality standards equivalent to, or exceeding, those of i918kiss.

I918kiss invests heavily in security infrastructure to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Below are the key security measures we have in place:

• 256-bit SSL encryption: All data communications between your browser and i918kiss servers are protected by encryption that is practically unbreakable.
• Layered access controls: Only authorised personnel with a legitimate operational need may access players' personal data, and all access is logged for audit purposes.
• Two-factor authentication (2FA): Available on all player accounts as an added security layer — we strongly encourage you to enable it.
• Continuous threat scanning: A 24/7 security monitoring system that detects and responds to cyber threats in real time.
• Regular security audits: Comprehensive security assessments are conducted by independent third parties every six months to identify and address any vulnerabilities.
• Incident response plan: Documented procedures to respond swiftly and effectively in the event of a data security incident.

I918kiss retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, subject to any legal requirements that may mandate a longer retention period.

• Active account data: Retained for as long as your i918kiss account remains active. This data is necessary to provide you with uninterrupted service.
• Data after account closure: Identity information and transaction records are retained for a minimum of 5 years following account closure to meet anti-money laundering legal obligations.
• Support communication records: Retained for 2 years after the last interaction for quality control and dispute resolution purposes.
• Technical log data: Access logs and system logs are retained for 90 days for security and incident investigation purposes.
• Marketing data: Retained until you withdraw your consent or request deletion, whichever comes first.

Once the relevant retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked back to you.

As an i918kiss player and data subject, you have the following rights regarding your personal data. All requests may be submitted to support@i918kiss.ws and will be processed within 30 business days.

I918kiss uses cookies and similar tracking technologies to enhance user experience, analyse traffic, and ensure platform security. The following are the types of cookies we use:

In operating the i918kiss Platform, your personal data may be processed or stored on servers located outside Malaysia. Where such transfers occur, i918kiss ensures that:

• Data transfers are made only to countries or providers that offer a level of data protection equivalent to or exceeding Malaysian standards.
• Appropriate data transfer agreements, including standard contractual clauses, are established with all recipients of data outside the country.
• All cloud service and infrastructure providers we use comply with internationally recognised security standards such as ISO 27001.

Most of your financial transaction data involving payments via Maybank2u, CIMB Clicks, or Malaysian e-wallets is processed within Malaysia by licensed local payment providers.

The i918kiss Platform is exclusively for individuals aged 18 and above. We do not knowingly collect, use, or disclose the personal data of any individual under the age of 18.

Should we discover that we have inadvertently collected the personal data of a minor, we will take immediate steps to delete that information from our records and close the relevant account.

If you believe we may hold information from or about a minor, please contact us at support@i918kiss.ws immediately.

I918kiss reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new Platform features.

• Non-material changes will take effect immediately upon the updated Policy being published on this page.
• Material changes — those that significantly alter how we collect or use your data — will be communicated to you via email or an in-Platform notification at least 14 days before they take effect.
• By continuing to use the Platform after any changes take effect, you are deemed to have accepted the updated version of this Policy.

We encourage you to check this page regularly to stay informed on how i918kiss protects your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way i918kiss handles your personal data, please contact us:

We are committed to handling all privacy enquiries seriously and within a reasonable timeframe. If you are not satisfied with how we have resolved your enquiry, you have the right to escalate the matter to the relevant data protection authority.