Kiss Kaya Privacy Policy — Protecting Your Data

This Privacy Policy is issued by Kiss Kaya ("we", "Platform") and applies to all users who register, log in or use any of the services provided on the website kisskaya.com as well as related mobile applications.

We understand that your personal data is a trust you place in us. The protection of members' personal information is therefore not merely a legal obligation — it is a moral responsibility we uphold in every aspect of Kiss Kaya's operations.

This Privacy Policy is drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia, which governs the processing of personal data in commercial transactions. By using the Kiss Kaya platform, you acknowledge that you have read and understood this Privacy Policy.

Kiss Kaya collects your personal data through various methods as you interact with our platform. The types of data collected are as follows:

We only collect data that is strictly necessary to provide Kiss Kaya's platform services. We do not collect sensitive information such as your medical records, religious beliefs or political views.

Kiss Kaya uses your personal data only for lawful purposes that have been disclosed to you. The following are the primary purposes for which your data is processed:

• Account management: Creating, verifying, and managing your member account on the Kiss Kaya platform.
• Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing your winnings withdrawals in MYR.
• KYC and AML compliance: Meeting Know Your Customer (KYC) and anti-money laundering (AML) requirements in accordance with Malaysian law.
• Customer support: Responding to enquiries, resolving complaints and providing technical support via live chat and email.
• Platform improvements: Analysing usage patterns to improve platform performance, user experience and security.
• Marketing communications: Sending promotional information, bonus offers and platform updates — only where you have given your consent.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.
• Platform security: Detecting and preventing fraud, unauthorised account access, and other security threats.

Kiss Kaya does not sell, rent or trade members' personal data to any third party for their own marketing purposes. We only share your data in limited circumstances and for legitimate purposes:

• Payment providers: Transaction data that must be shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (via DuitNow, FPX, Maybank2u, CIMB Clicks) to process your financial transactions.
• Technology service providers: Companies that support the platform's technical operations — such as server hosts, cybersecurity providers, and analytics software — are all subject to strict confidentiality agreements.
• Game providers: Required account information is shared with third-party game providers (such as slots and Live Casino companies) to ensure a seamless gaming experience.
• Statutory authorities: We may be required to disclose your data to Malaysian authorities such as the police, courts, or regulatory bodies where mandated by law or court order.
• Fraud prevention: Information that must be shared with fraud prevention agencies to protect members and the platform from illegal activity.

Every third party we engage is contractually bound to handle your data to the same stringent data protection standards that we uphold. We conduct regular reviews of third-party providers to ensure ongoing compliance.

The security of your personal data is Kiss Kaya's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL encryption: All data transmitted between your device and Kiss Kaya's servers is encrypted using the latest Transport Layer Security (TLS) technology.
• Two-factor authentication (2FA): Additional security options are available to protect your account from unauthorised access.
• 24/7 monitoring: Our security systems continuously monitor for suspicious activity and will immediately block any unauthorised access.
• Internal access controls: Only authorised personnel may access members' personal data, and all such access is logged and audited on a regular basis.
• Secure data backup: Data is regularly backed up to separate secure locations to ensure continuity of service.
• Regular penetration testing: We conduct regular security audits and penetration testing through independent third parties.

Kiss Kaya uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following are the types of cookies we use:

You can manage and delete cookies through your web browser settings at any time. However, blocking essential cookies may affect certain features of the Kiss Kaya platform. For more information on managing cookies, please refer to your browser settings.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. Kiss Kaya respects and facilitates the exercise of these rights:

Kiss Kaya retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

• Active account data: Retained for the duration that your account remains active and in use.
• Financial data and transaction records: Retained for a minimum of 7 years following account closure, in accordance with Malaysia's tax and audit regulatory requirements.
• KYC Data: Stored for 5 years after the business relationship ends, as required under AML obligations.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical log data: Stored for 90 days before being automatically deleted.

When data is no longer needed and there is no legal requirement to retain it, Kiss Kaya will securely delete or anonymise that data using industry-approved methods.

The Kiss Kaya platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we discover that personal data of a child has been collected without the knowledge of a parent or legal guardian, we will take immediate steps to delete the information and close the account in question.

Kiss Kaya reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform practices, legal requirements or technological developments.

When significant changes occur, we will notify you through:

• In-platform notifications when you are logged in
• Email to your registered email address
• A prominent notice on the website's main page

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last revised. Continued use of the Kiss Kaya platform following any amendments constitutes acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding how Kiss Kaya handles your personal data, or if you wish to exercise any of your rights as set out in this Privacy Policy, please contact our Data Privacy Officer:

If you are not satisfied with how we have handled your privacy complaint, you have the right to lodge a formal complaint with Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.