Privacy Policy Kiss77

Kiss77 ("we", "Platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information when you access or use the Kiss77 platform, including our website at kiss77.pro and related mobile applications.

This document applies to all Kiss77 users, including visitors, registered members, and active platform users. By registering an account or continuing to use our platform, you consent to the collection and use of your information as described in this Privacy Policy.

Kiss77 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and continually strive to ensure your data is handled with the utmost care and accountability.

Kiss77 collects various types of information depending on how you interact with our platform. This information is divided into three main categories:

Information you provide directly:

• Full name as stated in your official identification document.
• Email address and Malaysia mobile number.
• Date of birth (for age verification — you must be 18 years of age or above).
• Bank account or e-wallet details (FPX, DuitNow, Touch 'n Go, GrabPay) for processing deposits and withdrawals.
• A copy of your identity document (MyKad or passport) for the KYC verification process.
• Current residential address.

Information collected automatically:

• IP address and general location information (country/city).
• Device type, operating system, browser version.
• Game session data including login times, games played, wagering amounts, and outcomes.
• Cookie data and related tracking technologies (see Section 9).
• Platform activity logs including pages visited and actions taken.

Information from third parties:

• Identity verification information from our appointed KYC service providers.
• Financial transaction data from payment service providers.
• Blacklist information from regulatory bodies related to fraud prevention and anti-money laundering.

The personal information we collect is used solely for legitimate and necessary purposes in the operation of the Kiss77 platform. The following is a detailed breakdown of how that data is used:

We will not use your data for any purpose other than those stated above without obtaining your additional consent beforehand.

All personal data processing carried out by kiss77 has a clear legal basis under Malaysia's PDPA 2010. We rely on the following bases:

• Consent: For marketing activities, promotional communications, and optional data use — you may withdraw consent at any time.
• Contract fulfillment: For processing necessary to deliver the services you have requested, including account management, deposits, and withdrawals.
• Legal obligation: For compliance with AML (Anti-Money Laundering), KYC regulations, and reporting requirements to regulatory authorities.
• Legitimate interest: For fraud prevention, platform security, service improvement, and risk analysis — where our interests do not override your privacy rights.

Kiss77 will not disclose your personal information to external parties without your consent, except in the following circumstances permitted under Malaysia's PDPA:

• Appointed service providers: We share necessary data with payment service providers (FPX, DuitNow, TNG eWallet, GrabPay), KYC service providers, game technical audit firms, and cloud infrastructure providers who have signed strict data processing agreements with us.
• Legal requirement: When required by a court, regulatory body, or Malaysian government authority with lawful jurisdiction.
• Fraud prevention: Minimum necessary data is shared with recognised fraud prevention organisations and industry gambling blacklist bodies.
• Business transfers: In the event of a merger, acquisition, or sale of company assets — you will be notified in advance and your rights under PDPA will be preserved.

All third parties receiving your data from kiss77 are bound by confidentiality agreements and data protection obligations held to the same rigorous standards as our own.

Kiss77 continuously invests in robust security infrastructure to protect your data from unauthorized access, loss, modification, or disclosure. The technical and organizational measures we implement include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and kiss77 servers.
• Data-at-rest encryption (AES-256) for all sensitive information stored in our databases, including banking details and KYC documents.
• Two-factor authentication (2FA) available and strongly encouraged for all member accounts.
• 24/7 security monitoring by our internal cybersecurity team using intrusion detection systems (IDS) and intrusion prevention systems (IPS).
• Penetration testing conducted periodically by certified third-party security audit firms.
• Role-based access control (RBAC) ensuring internal personnel can only access data required for their respective roles.

Kiss77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data: For the duration that your kiss77 account remains active on the platform.
• Financial transaction data: Minimum 7 years after the transaction, in line with Malaysia's tax and AML legal requirements.
• KYC Documents: Minimum 5 years after account closure, in line with regulatory compliance requirements.
• Security and activity logs: 2 years for security audit and fraud investigation purposes.
• Marketing data (with consent): Until you withdraw consent or close your account.
• Inactive account: Data will be deleted after 36 months of inactivity, with notification to you prior to deletion.

Once the retention period expires, data will be securely deleted using industry-standard data destruction methods or fully anonymised so it can no longer be linked to any individual.

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by Kiss77:

To exercise any of the above rights, please contact our data protection team via kiss77 customer support. We may require identity verification before processing your request.

Kiss77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
• Performance cookies: Collecting anonymized information on how users interact with our platform for improvement purposes.
• Functionality cookies: Saving your preferences such as currency, language, and display settings to deliver a more personalized experience.
• Analytics cookies: Helping us understand platform usage patterns to plan targeted improvements.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may significantly affect the functionality of the Kiss77 platform.

In the course of operating the Kiss77 platform, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs primarily in the context of our cloud infrastructure and data backup systems.

When this occurs, Kiss77 ensures that:

• Every international data transfer is protected by comprehensive data processing agreements.
• The recipient country or entity maintains a level of data protection equivalent to or higher than that required by Malaysia's PDPA.
• End-to-end encryption is applied during all data transfers.
• The cloud service providers we use comply with internationally recognized security standards such as ISO 27001 and SOC 2 Type II.

The kiss77 platform is exclusively for users aged 18 and above. We do not knowingly collect, use, or process personal information from individuals under the age of 18.

The kiss77 account registration process requires mandatory age verification. Should we detect that data from a minor has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account without notice.

Kiss77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Displaying a clear notice on the Kiss77 platform homepage regarding the changes.

Your continued use of the Kiss77 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you should discontinue use of the platform and contact us to close your account.