Kiss2 Privacy Policy – Your Personal Data Protection

Kiss2 is an online gaming platform operating under kiss2.app, and we understand that your trust in us depends not only on the quality of games we offer, but also on how we handle your personal data with full integrity and responsibility.

This Privacy Policy is prepared in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, and outlines precisely how we collect, process, store, protect, and in certain circumstances disclose your personal information. We are committed to ensuring that all data you provide to us is handled with care, respect, and in full accordance with applicable laws.

As a responsible data processor, kiss2 only collects information that is strictly necessary to provide you with the best service — nothing more. We do not sell your data, we do not rent your data, and we will not disclose it to any third party without your consent, except where required by law.

We collect several categories of personal information depending on the nature of your interaction with the kiss2 platform. The following are the key data categories we process:

Kiss2 collects your personal information through several key channels:

1. During account registration — You directly fill in the registration form with your personal information and contact details.
2. During the KYC (Know Your Customer) process — You submit official identification documents such as an identity card or passport for age and identity verification purposes.
3. During financial transactions — Bank account information is collected to securely process your deposits and fund withdrawals.
4. During platform use — Our system automatically logs game activity, technical logs, and usage data to ensure account security and service quality.
5. Through cookies and tracking technologies — Our website uses cookies to enhance the user experience and analyze usage patterns (see Section 7).
6. Through communications with us — When you contact the customer support team via live chat or email, the information you provide will be stored for follow-up purposes.

We process your personal data for the following purposes, each of which has a firm legal basis under PDPA 2010:

• Account management: Creating, maintaining, and protecting your account on the kiss2 platform.
• Identity verification (KYC): Verifying that you meet the minimum age requirement of 18 years and confirming your identity to prevent fraud.
• Transaction processing: Processing deposits, withdrawals, and other financial activities accurately and securely.
• Legal compliance: Fulfilling our obligations under anti-money laundering (AML) laws, PDPA, and other applicable regulations.
• Platform security: Detecting and preventing fraud, account misuse, and unlawful activity on our platform.
• Service improvement: Analysing usage patterns to continuously improve game quality and user experience.
• Marketing communications: Sending promotional information, bonuses, and exclusive offers — only if you have given your consent to receive them.
• Customer support: Responding to enquiries, resolving complaints, and providing you with technical assistance.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.

Kiss2 does not sell or rent your personal data to any third party for their own marketing purposes. However, there are certain situations where we need to share your information with trusted parties in order to deliver our services to you:

• Licensed payment providers — To securely process your deposits and withdrawals via FPX, e-wallets, and bank transfers.
• Game providers — Account information required to access games from providers such as Pragmatic Play, Playtech, and others.
• KYC service providers — To verify your identity and documents in accordance with legal compliance requirements.
• IT and cybersecurity service providers — To maintain our platform's technical infrastructure securely and stably.
• Authorities and law enforcement agencies — When required by Malaysian law or a valid court order.

All third parties who receive your data are required to comply with strict confidentiality agreements and may only use that data for purposes agreed upon with kiss2.

We continually invest in our security infrastructure to ensure your personal data is always protected against both external and internal threats. The following layers of protection are in place:

• 256-bit SSL Encryption — All data transmitted between your web browser and kiss2 servers is protected by bank-grade encryption.
• Strict access controls — Only authorized personnel with the appropriate permission level may access member personal data.
• 24/7 Monitoring — Our security monitoring system operates around the clock to detect and respond to any suspicious activity.
• Regular security audits — Our platform undergoes regular penetration testing and independent security audits.
• Benchmarked data storage — Your password is stored in hashed format using modern encryption algorithms and cannot be read even by our own staff.
• Two-factor authentication (2FA) — You can activate an additional security layer for your account via SMS or an authenticator app.

The kiss2 platform uses cookies and similar tracking technologies to enhance the user experience, analyze usage patterns, and ensure the security of your login session. Below are the types of cookies we use:

You can control or delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality or user experience of the kiss2 platform.

Under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold. You may submit any request relating to these rights by contacting the kiss2 support team:

In certain situations, your personal data may be processed or stored on servers located outside Malaysia — particularly when we utilise services from licensed international game providers or technology infrastructure providers.

In all such cases, kiss2 ensures that:

• Data transfers are only carried out to countries or parties that provide a level of data protection equivalent to or exceeding Malaysia's PDPA standards.
• Legally binding data transfer agreements have been signed with all recipient parties.
• Appropriate technical and organisational controls have been implemented to protect your data throughout the transfer process.

If you would like to learn more about the protection mechanisms we use for international data transfers, please contact our support team via email.

Kiss2 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data — Retained for as long as your account is active on the kiss2 platform.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysia's tax and financial legal requirements.
• KYC Documents — Retained for the duration of the active account and for a minimum of 5 years after account closure in accordance with AML requirements.
• Support communication logs — Retained for 2 years from the date of last interaction.
• Technical log data — Retained for 90 days for security and troubleshooting purposes.

Once the retention period expires, your personal data will be securely deleted or anonymized in accordance with established procedures.

Kiss2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in legislation, industry practices, or how we handle your personal data. Any significant amendments will be communicated to members via their registered email or through a clearly displayed notice on kiss2.app.

The "Updated" date at the top of this page will always reflect the latest version of our Privacy Policy. You are encouraged to review this page periodically. Continued use of the kiss2 platform after any amendments take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or wish to submit a request regarding this Privacy Policy, your data rights, or how we handle your personal information, please contact the kiss2 Data Protection team through the following channels:

• Privacy Email: [email protected] — state "Privacy Request" in your email subject line
• Live Chat: Available 24/7 on the kiss2 platform for immediate inquiries
• Response time: We are committed to responding to all privacy-related enquiries within 14 working days

For more information about the games we offer or how to register an account, please visit the About Us or FAQ ours.