Privacy Policy 9kiss – Our Commitment to Protecting Your Personal Data

1 Introduction and Scope of Privacy Policy

9kiss values the privacy of every member and user on our platform. As an operator of an online casino and betting platform serving the Malaysian market, we are bound by the responsibility to handle your personal data with integrity, transparency, and compliance with applicable laws.

This Privacy Policy is drawn up in accordance with Personal Data Protection Act 2010 (PDPA Malaysia) and international best practices in personal data management. This document clearly explains the types of data we collect, why it is collected, how it is used, and the measures we take to ensure its security.

This policy applies to all information collected through the 9kiss.vu website, the 9kiss mobile app, customer support Live Chat, email, and any other interactions between you and our platform.

2 Types of Personal Data We Collect

We only collect personal data that is strictly necessary to provide you with 9kiss platform services. The following are the categories of data we collect:

3 How We Collect Personal Data

Your personal data is collected through several different channels as you interact with the 9kiss platform:

• During account registration — you actively provide information such as your name, email, phone number, and date of birth.
• During the KYC process — you upload an official identity document such as a national ID or passport for identity verification.
• During financial transactions — bank account or e-wallet details are collected to process deposits and withdrawals.
• During platform usage — technical and usage data is collected automatically via cookies, server logs, and other tracking technologies.
• During customer support interactions — Live Chat conversation records and emails are retained for reference and service improvement.
• Via promotional campaigns — if you participate in contests or promotions, additional information may be collected with your consent.

4 Purpose of Personal Data Use

Every piece of data we collect has a clear and legitimate purpose. 9kiss will not use your data for any other purpose without obtaining your fresh consent:

• Identity verification (KYC) — verifying that you meet the age and legal eligibility requirements to use the platform.
• Account management — creating, maintaining, and protecting your member account.
• Payment processing — facilitating fund deposits and withdrawals securely and accurately.
• Service delivery — ensuring you can access all games and platform features seamlessly.
• Fraud prevention — detecting and blocking suspicious activity that could compromise your account security.
• Legal compliance — fulfilling reporting obligations to the relevant authorities as required by law.
• Service communications — sending important notifications regarding your account, transactions, and changes to our terms.
• Platform improvements — analysing usage patterns to enhance the overall 9kiss platform experience.
• Responsible gaming — monitoring wagering patterns to identify members who may need assistance.

5 Data Sharing with Third Parties

9kiss exercises great care when sharing members' personal data. We do not sell, rent, or disclose your data to any third party for marketing purposes. However, there are limited situations where data sharing is necessary:

• Technical service providers — server hosts, CDN providers, and cloud computing platforms that help us operate the platform securely.
• Payment gateway — a licensed payment processor that facilitates your deposit and withdrawal transactions.
• Game providers — licensed game providers such as Pragmatic Play and Evolution Gaming may receive minimum session data required to function.
• KYC verification services — a certified third-party identity verification platform that securely validates your documents.
• Legal authorities — information required by law or a valid court order will be shared with the relevant authorities.

All third parties working with 9kiss are bound by strict data confidentiality agreements and are not permitted to use your data for any purpose other than those specified.

6 Data Security and Protection

Protecting your personal data is 9kiss's highest priority. We implement multiple layers of technical and organisational security to ensure your data is always safe from unauthorised access, modification, or disclosure.

• 256-bit SSL/TLS Encryption — all communication between your browser and 9kiss servers is fully encrypted using the latest SSL technology.
• Encrypted database — all data stored on our servers is protected with AES-256 encryption at the storage level.
• Strict access controls — only authorised personnel with a clear operational need are permitted to access member data, and all access is logged.
• 24/7 threat monitoring — an intrusion detection system and security monitoring operate around the clock to detect any unusual activity.
• Periodic data backups — your data is periodically backed up across multiple data centres to ensure availability and recovery in the event of an incident.
• Periodic penetration testing — we conduct independent security testing on a regular basis to identify and patch system vulnerabilities before they can be exploited.

7 Use of Cookies and Tracking Technologies

9kiss uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

• Essential Cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Analytics Cookies — helping us understand how members use our platform so we can make meaningful improvements.
• Functional Cookies — stores your preferences such as language and display settings to provide a more personalized experience.
• Performance Cookies — used to monitor the platform's technical performance and identify issues that need to be addressed.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the 9kiss platform and you may be unable to log in or use certain features.

8 Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 Malaysia and the data protection principles we uphold, you have the following rights regarding your personal data held by 9kiss:

• Right to Access — you have the right to request a copy of the personal data we hold about you. Access requests are processed within 30 days.
• Right to Rectification — if any of your data is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Erasure — you may request the deletion of your personal data, subject to legal retention requirements and operational needs.
• Right to Object — you have the right to object to the processing of your data for specific purposes such as marketing communications.
• Right to Portability — you may request your data in a machine-readable format for transfer to another service provider.
• Right to Restriction — in certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, please contact our data protection team by email [email protected] by stating the nature of your request. We will respond within 7 business days.

9 Data Retention Period

9kiss retains your personal data for as long as your account is active or as long as necessary to provide services to you. The following are the data retention guidelines we adhere to:

• Active account data — retained for as long as your account is active and for up to 5 years after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in line with legal requirements under Malaysia's financial and tax laws.
• KYC Documents — retained for 5 years after the business relationship ends in accordance with anti-money laundering requirements.
• Communication records — customer support logs and emails are retained for 2 years for reference and service quality purposes.
• Anonymised analytics data — fully anonymised data may be retained indefinitely for platform improvement purposes.

10 Child Protection

The 9kiss platform is exclusively for individuals aged 18 years and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If you believe that a minor has registered an account on our platform or has provided us with their personal data, please contact us immediately at [email protected]. We will take immediate action to delete such data and close the account in question.

We implement age verification checks during registration and periodically through the KYC process to ensure our platform is not accessed by minors.

11 Amendments to the Privacy Policy

9kiss reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. You will be notified of any material changes.

• Notification via your registered email at least 14 days before the changes take effect.
• A prominent notice on the 9kiss website home page during the notice period.
• The date of the latest update is always displayed at the top of this document for your reference.

Your continued use of the 9kiss platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and withdraw your balance before the changes take effect.

12 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 9kiss handles your personal data, we encourage you to contact us directly.

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the 9kiss platform
• Response Time: Within 7 business days for all privacy enquiries

If you are not satisfied with our response, you have the right to file a complaint with Department of Personal Data Protection Malaysia (JPDP) responsible for overseeing PDPA compliance in Malaysia.