Kis819 Privacy Policy – Malaysian Player Data Protection

1Introduction & Scope of Privacy Policy

Kis819 ("we", "our platform", or "the Company") deeply respects the privacy of every member and user who accesses our online casino and Sports Betting platform. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out clearly and transparently how we handle your personal data from the moment you register right through to when you choose to close your account.

This Privacy Policy applies to all users of the kis819 website, mobile app, customer support services, and all communication channels we operate. It covers all information you provide directly to us, as well as information collected automatically when you use our services.

By registering an account with kis819 or continuing to use our platform after this Privacy Policy has been updated, you agree to the data handling practices described in this document. If you do not agree, please discontinue use of the platform and contact us to close your account.

2Types of Personal Data We Collect

To provide you with a secure, compliant, and high-quality service, kis819 collects various categories of personal data. We only collect data that is strictly necessary for the stated purposes.

Data You Provide Directly

• Identity Information: Full name, date of birth, Malaysian identity card number (MyKad) or passport, gender, and nationality.
• Contact Information: An active Malaysian phone number, email address, and mailing address.
• Account Information: Username, password (stored in hashed form), and security questions.
• Financial Information: Bank account numbers, phone numbers linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or DuitNow, along with deposit and withdrawal transaction records in RM.
• Verification Documents: MyKad copy, bank statements, or other supporting documents requested for the KYC (Know Your Customer) process.

Automatically Collected Data

• Technical Data: IP address, web browser type and version, device operating system, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time of visit, games played (slots, baccarat, Live Casino, badminton, cricket, e-sports), total bets placed, winnings, and session duration.
• Location Data: Approximate location derived from IP address for geo-compliance and fraud prevention purposes.
• Cookie Data: Information collected through cookies and tracking technologies is described further in Section 6.

3Purpose of Data Collection & Processing

Kis819 only processes your personal data for lawful and transparent purposes. Each purpose is clearly stated below:

You may withdraw your consent to receive marketing communications at any time by clicking the "unsubscribe" link in our promotional emails or by contacting us directly at support@kis819.com. Withdrawing marketing consent will not affect the processing of data required for your account operations.

4Third-Party Data Sharing & Disclosure

Kis819 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data is only shared in limited circumstances and for legitimate purposes:

• Payment Service Providers: Required information is shared with providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-supported banks (Maybank2u, CIMB Clicks) solely for the purpose of processing your financial transactions.
• Game Software Providers: Minimum necessary data is shared with our game platform providers to ensure games function properly and play records are accurately maintained.
• Legal Authority: We will disclose your data to Malaysian authorities such as the police, courts, or regulatory bodies when required to do so by applicable law.
• Technical Service Providers: Server hosting providers, cloud services, and cybersecurity partners that support our platform operations. All third parties are bound by strict confidentiality agreements.
• Business Merger or Acquisition: Should kis819 be involved in any corporate transaction, user data may be transferred as part of the business assets, subject to notice being given to you.

5Security & Data Protection

The security of your personal data is kis819's top priority. We continually invest in the latest security infrastructure to ensure your information is protected at all times.

• 256-bit SSL Encryption: All data transmitted between your device and kis819's servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by leading banking institutions in Malaysia.
• Secure Password Storage: Your password is never stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt) to ensure your password remains unreadable — even to our own staff.
• Two-Factor Authentication (2FA): We encourage all members to enable two-factor authentication for an added layer of security on their accounts.
• 24/7 Monitoring: Our systems are monitored around the clock to detect any suspicious activity or unauthorised access attempts.
• Internal Access Controls: Only authorised personnel with a legitimate business need are permitted to access users' personal data, and all such access is logged and regularly audited.

6Cookies, Tracking & Similar Technologies

The kis819 website uses cookies and similar tracking technologies to enhance user experience, analyse platform traffic, and tailor content to your needs. Cookies are small data files stored on your device by your web browser.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting basic website functionality.
• Performance & Analytics Cookies: This helps us understand how members use the platform – which games are most popular, which slots or Live Casino titles are visited most frequently – so we can continuously improve our services.
• Functional Cookies: Stores your preferences such as language selection and display settings to ensure a more personalised experience on every visit.
• Marketing Cookies: Used to show you relevant ads and promotions. You may opt out of this cookie category without affecting your access to the platform.

You can manage or delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect your experience and the functionality of some parts of the kis819 platform.

7Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by kis819:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 21 working days.
• Right to Rectification: If your data is inaccurate, incomplete, or out of date, you have the right to request that we correct it without delay.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time, without providing any reason.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to that point.
• Right to Complain: You have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at support@kis819.com by providing your full name, account number, and the right you wish to exercise. We will verify your identity before processing any request.

8Data Retention Period

Kis819 does not retain your personal data for longer than is necessary for the purpose it was collected, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account is active and up to 7 years after account closure for legal compliance and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian tax and financial regulatory requirements.
• Support Communication Logs: Retained for 3 years from the date of last interaction.
• Cookie & Analytics Data: Session cookies are deleted when you close your browser. Aggregated analytics data is retained for a maximum of 26 months.
• KYC Documents: Retained for 6 years after the business relationship ends, in accordance with Malaysian AML requirements.

Once the retention period has expired and there is no legal requirement to continue storing the data, your data will be securely deleted or anonymised using approved methods.

9Child Protection

The kis819 platform is exclusively for individuals who are of age 18 years and above. We do not knowingly collect, process, or store personal data from children or individuals under the age of 18.

Should we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered an account with kis819 should contact us immediately at support@kis819.com.

10How to Reach Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Personal Data Protection Officer (PDPO) through the following channels:

• Email: support@kis819.com
• Email subject: Please use the subject line "Privacy Policy Inquiry – [Your Account Name]"
• Response Time: We will acknowledge receipt of your enquiry within 2 business days and provide a full response within 14 business days.