Kiss918 Ori Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

Kiss918 Ori is fully committed to protecting the privacy of every individual who uses our platform. This Privacy Policy sets out in detail and with full transparency how Kiss918 Ori collects, uses, discloses, stores, and protects your personal information as a user of our online casino platform.

By accessing or using the Kiss918 Ori platform — whether via our website or your mobile device — you confirm that you have read, understood, and agreed to the privacy practices set out in this document. If you disagree with any part of this policy, please discontinue use of our platform and contact us with any questions.

This Kiss918 Ori Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in the online entertainment industry. We believe privacy is more than a legal obligation — it is the foundation of trust we build with every Kiss918 Ori member.

Kiss918 Ori collects various types of information from users in order to operate the platform and deliver the best possible service. The information collected is divided into several key categories:

Account Registration Information:

• Full name as shown on your official identification document
• An active Malaysian mobile phone number
• Account password (stored in encrypted hash form — we cannot view your actual password)
• Date of birth (for minimum age verification of 18 years)

Identity Verification Information (where required):

• MyKad number or passport number
• Valid copy of identity document
• Bank account or eWallet details for withdrawal verification purposes

Financial Transaction Information:

• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Payment methods used — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks
• Amount and date of each transaction

Platform Activity Information:

• Gaming history — slots, Table Games, Live Casino, poker, football, Virtual Sports
• Bets placed and game results
• Bonuses and promotions claimed
• Login and logout records

Technical Information:

• IP address of the device used to access the platform
• Device type, operating system, and web browser
• Cookie data and website usage (see Section 7 for more details)

All information collected by Kiss918 Ori is used responsibly and only for legitimate purposes. Below is a complete list of how your data is used:

Kiss918 Ori will not use your data for any purpose beyond those listed above without first obtaining your explicit consent. Should we wish to use your data for a new purpose, we will inform you in advance and seek your agreement.

Kiss918 Ori processes your personal information on clear and lawful legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). There are several legal bases we rely on, depending on the type of processing involved:

• Consent: When you register an account with Kiss918 Ori and accept these Terms & Conditions and Privacy Policy, you give your consent for us to process your data for the purposes stated.
• Contract Performance: We need to process your data to fulfil our contractual obligations to you — including managing your account, processing deposit and withdrawal transactions, and providing access to the gaming platform.
• Legitimate Interests: We process data for fraud prevention, platform security, and service improvement purposes — these constitute legitimate interests that do not override your privacy rights.
• Legal Obligations: In certain cases, Malaysian law requires us to retain and disclose specific information to the relevant authorities.

Kiss918 Ori does not sell, rent, or trade members' personal information to any third party for commercial purposes. However, there are limited situations where we need to share your information with selected third parties for platform operational purposes:

• Payment Processing Providers: eWallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX/DuitNow service providers require the necessary transaction details to process your deposits and withdrawals.
• Game Software Provider: Game providers such as Pragmatic Play, Microgaming, and JILI Gaming may receive the game-related information required to run their titles on our platform. They do not receive your full personal identification details.
• Technology Service Providers: Companies that provide server infrastructure, cybersecurity, and analytics services that help us run the platform safely and efficiently.
• Legal Authorities: Where required by Malaysian law or a valid court order, we may be obligated to disclose certain information to the relevant authorities.

All third parties that receive data from Kiss918 Ori are bound by strict confidentiality agreements and data protection obligations. They are only permitted to use the shared data for the specific purposes set out in their agreement with us, and may not use it for any other purpose.

Kiss918 Ori continuously invests in robust security infrastructure to ensure your personal and financial data is always protected against unauthorized access, disclosure, alteration, or destruction.

Key security measures we have implemented include:

• 256-Bit SSL Encryption: All communications between your device and Kiss918 Ori's servers are encrypted using TLS/SSL protocol with a 256-bit key — the same standard used by Malaysia's major banks, including Maybank and CIMB.
• Database Encryption: Sensitive data stored in our databases, including financial and identity information, is encrypted using the AES-256 algorithm at rest.
• Strict Access Controls: Only Kiss918 Ori staff with specific authorization may access member data, and only for the categories of data they need to carry out their duties.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect and respond to any threats or suspicious activity.
• Regular Security Audits: Kiss918 Ori conducts regular independent security audits to identify and address any system vulnerabilities before they can be exploited.
• Two-Factor Authentication: We encourage all members to enable two-factor authentication on their accounts as an additional layer of protection.

Kiss918 Ori uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and enabling secure transactions. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your preferences such as display language and display settings to provide a more personalised experience.
• Analytics Cookies: Helps us understand how users interact with our platform — including the most visited pages and any technical issues encountered. This data is collected anonymously.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the Kiss918 Ori platform. For the best experience, we recommend allowing essential and preference cookies.

In operating the Kiss918 Ori platform, your data may be processed or stored on servers located outside Malaysia by the cloud infrastructure or international gaming software providers we use. When this occurs, Kiss918 Ori ensures that such data transfers are carried out with adequate safeguards in place.

• All international service providers we engage are required to meet data protection standards equivalent to or higher than Malaysia's PDPA.
• Binding data processing agreements are in place with all third-party service providers that may process our members' data.
• Sensitive financial data is never transferred outside Malaysia without adequate encryption protection.

If you have any concerns about international data transfers involving your personal information, please contact us by email at support@kiss918ori.xyz and we will provide further details.

Kiss918 Ori retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required or permitted under applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active on the Kiss918 Ori platform.
• Financial Transaction History: Retained for a minimum of 7 years after a transaction is made, in line with Malaysia's accounting and taxation legal requirements.
• Identity Verification Data: Retained for 7 years after account closure for anti-money laundering (AML) legal compliance purposes.
• Customer Support Communication Records: Retained for 3 years for reference and service improvement purposes.
• Technical Data & Security Logs: Retained for 12 months for security and technical troubleshooting purposes.

Once the applicable retention period expires, your data will be securely deleted or fully anonymised so it can no longer be linked to your identity. You may request a review or deletion of your data at any time — please refer to Section 10 for more information about your rights.

As a Kiss918 Ori user, you have certain rights regarding your personal information under Malaysia's Personal Data Protection Act 2010 (PDPA). Kiss918 Ori respects and facilitates the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal information we hold about you. We will provide this within 21 working days from the date your request is received.
• Right to Rectification: If any personal information we hold is inaccurate or incomplete, you have the right to request a correction. You may also update certain details directly within your account.
• Right to Withdraw Consent: You have the right to withdraw your consent to data processing at any time, subject to applicable legal and contractual limitations.
• Right to Object to Processing: In certain circumstances, you have the right to object to the processing of your personal information, particularly for direct marketing purposes.
• Right to Erasure: You have the right to request the deletion of your personal information, subject to our legal obligations to retain certain records.

The Kiss918 Ori platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal information from anyone under the age of 18.

Should we discover that we have collected personal information from someone under the age of 18 without appropriate verification, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who find that their child has registered an account with Kiss918 Ori are urged to contact us immediately at support@kiss918ori.xyz.

Kiss918 Ori reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, relevant Malaysian legislation, or developments in how we operate the platform.

Any changes will be published on this page with an updated "Last Updated" date. For significant changes, Kiss918 Ori will endeavour to notify members via in-account notifications or a message to your registered phone number. Your continued use of the Kiss918 Ori platform after any changes are published will be considered your acceptance of the revised policy.

We encourage you to review this Privacy Policy page periodically — at least once every few months — to stay informed about how we protect your personal information. If you disagree with any changes, please contact us before continuing to use the platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Kiss918 Ori handles your personal information, our team is available 24 hours a day, 7 days a week in Bahasa Malaysia.

• Email: support@kiss918ori.xyz
• Live Chat: Available directly on the Kiss918 Ori platform (24/7)
• Response Time: Within 24 hours for general inquiries, and 21 business days for formal data rights requests

When contacting us regarding a privacy matter, please provide your account username (never send your password) and clearly describe your concern so we can assist you as quickly and accurately as possible.