Privacy Policy

1.1 kisa918 takes the privacy of its players seriously. This Policy sets out in plain terms what personal data kisa918 collects from users, the purposes for which that data is processed, the legal grounds relied upon for such processing, and the rights available to you as a data subject.

1.2 This Policy should be read together with the kisa918 Terms and Conditions, which are available at kisa918.org/terms-conditions. Where this Policy and the Terms and Conditions address the same subject matter, this Policy shall govern on privacy-related matters.

1.3 The kisa918 Platform is intended for use by adults aged 21 and above. kisa918 does not knowingly collect personal data from individuals under the age of 21.

kisa918 collects personal data in the following categories:

2.1 Registration Data. When you create a kisa918 account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and verify your account and to comply with Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents. For KYC and age verification purposes, kisa918 may request copies of government-issued photo identification (such as a MyKad, passport, or driving licence) and proof of residential address (such as a utility bill or bank statement).

2.3 Financial Data. kisa918 collects information related to your deposits and withdrawals, including the payment method used (e.g. Touch n Go eWallet, Boost, Maybank, CIMB Bank, Public Bank), transaction amounts in Malaysian Ringgit (MYR), and transaction reference numbers. kisa918 does not store full credit or debit card numbers on its servers.

2.4 Gaming and Transactional Data. kisa918 records your wagering history, game participation, bet amounts, win/loss records, and bonus redemption activity. This data is used for account management, fraud prevention, and responsible gaming monitoring.

2.5 Technical and Device Data. When you access the kisa918 Platform, we automatically collect your IP address, browser type and version, operating system, device identifiers, and session timestamps. This data is used for security, fraud detection, and platform optimisation.

2.6 Communications Data. If you contact kisa918 support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and ongoing account management purposes.

kisa918 uses your personal data for the following purposes:

• Account creation and management — to register your kisa918 account, verify your identity, and maintain your account profile.
• Processing transactions — to facilitate deposits and withdrawals in MYR through your chosen payment methods.
• Service delivery — to provide access to games, sportsbook markets, and promotional offers on the kisa918 Platform.
• Customer support — to respond to your enquiries, complaints, and support requests via live chat or email.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access.
• Regulatory compliance — to meet KYC, anti-money laundering (AML), and other applicable legal obligations.
• Responsible gaming — to monitor gaming activity for indicators of problem gambling and to administer responsible gaming tools including self-exclusion.
• Platform improvement — to analyse usage patterns and improve the performance, design, and functionality of the kisa918 Platform.
• Marketing communications — to send you promotional offers and updates from kisa918, where you have consented to receive such communications. You may withdraw consent at any time.

4.1 Contractual Necessity. Much of the personal data processing undertaken by kisa918 is necessary for the performance of the contract between kisa918 and you as a registered player — specifically, operating your account, processing transactions, and providing gaming services.

4.2 Legal Obligation. kisa918 processes certain personal data, in particular identity verification and transaction data, to comply with applicable legal obligations including KYC and AML requirements.

4.3 Legitimate Interests. kisa918 processes technical and device data on the basis of legitimate interests in operating a secure, fraud-resistant platform and improving service quality for all players.

4.4 Consent. Where kisa918 relies on consent as the legal basis for processing — in particular for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5.1 kisa918 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 kisa918 may share your personal data with the following categories of third parties in the course of providing its services:

• Payment processors and financial institutions — to facilitate your deposit and withdrawal transactions, including Touch n Go, Boost, DuitNow, and the major Malaysian banks.
• Identity verification and KYC service providers — to verify your identity and comply with regulatory requirements.
• Game content providers and software licensors — limited technical data may be shared with game studios to facilitate gameplay and resolve technical disputes.
• Fraud prevention and security services — to detect and prevent fraudulent activity on the kisa918 Platform.
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or regulatory demand.

5.3 kisa918 requires all third-party service providers with whom personal data is shared to maintain appropriate technical and organisational security measures and to process personal data only as instructed by kisa918.

6.1 The kisa918 Platform uses cookies and similar tracking technologies to operate the Platform, maintain your login session, detect fraud, and analyse how the Platform is used. Cookies are small text files stored on your device by your browser.

6.2 kisa918 uses the following categories of cookies:

• Essential cookies — required for the Platform to function. These include session authentication cookies that keep you logged in to your kisa918 account during an active session.
• Analytics cookies — used to collect aggregated, anonymised data about how players navigate and use the kisa918 Platform, helping kisa918 identify areas for improvement.
• Security cookies — used to detect and prevent fraudulent logins and suspicious account activity.

6.3 You may configure your browser to refuse cookies or to alert you when cookies are being set. Please note that disabling essential cookies may affect the functionality of your kisa918 account, including the ability to remain logged in.

7.1 kisa918 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as may be required by applicable law.

7.2 Account registration data and transaction records are retained for a minimum of five years following the closure or last activity of your kisa918 account, in compliance with applicable financial record-keeping requirements.

7.3 Communication records (including live chat logs and email correspondence) are retained for a period of two years from the date of the communication, unless a longer retention period is required for the resolution of a dispute or legal proceedings.

7.4 Following the applicable retention period, kisa918 will securely delete or anonymise your personal data.

8.1 kisa918 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the kisa918 Platform, encrypted storage of sensitive personal and financial data, access controls restricting data access to authorised kisa918 personnel, and regular security assessments of the kisa918 Platform infrastructure.

8.2 While kisa918 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you become aware of a security vulnerability or suspect that your kisa918 account has been compromised, please notify kisa918 immediately at [email protected].

Subject to applicable law, you have the following rights in relation to the personal data kisa918 holds about you:

• Right of Access — you may request a copy of the personal data kisa918 holds about you.
• Right to Rectification — you may request correction of inaccurate or incomplete personal data.
• Right to Erasure — you may request deletion of your personal data, subject to kisa918's legal retention obligations.
• Right to Restriction — you may request that kisa918 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability — where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your personal data.
• Right to Object — you may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact kisa918 support at [email protected]. kisa918 will respond to all data rights requests within 30 days of receipt.

10.1 The kisa918 Platform is strictly for adults aged 21 and above. kisa918 does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

10.2 If kisa918 becomes aware that personal data has been collected from a person under 21 years of age, kisa918 will promptly delete such data and close the associated account. If you believe that a minor has registered on the kisa918 Platform, please notify kisa918 support immediately.

11.1 The kisa918 Platform does not include links to third-party websites. This Privacy Policy applies solely to data collected and processed through kisa918.org and does not extend to any third-party services, payment processors, or other external platforms you may interact with in connection with your kisa918 account.

11.2 kisa918 recommends that you review the privacy policies of any third-party services — including your eWallet provider, bank, or other payment provider — through which you transact in connection with your kisa918 account.

12.1 kisa918 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or kisa918's data processing practices. The date of the most recent revision is indicated at the top of this page.

12.2 Where changes to this Policy are material, kisa918 will notify registered players by email to the address on file, or by a prominent notice on the kisa918 Platform, prior to the changes taking effect. Your continued use of the kisa918 Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or kisa918's handling of your personal data, please contact the kisa918 Data Support team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the kisa918.org Platform after logging in to your account

kisa918 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days of receipt.