ikiss Privacy Policy

1. Who We Are

ikiss ("we", "us", "our") is an internationally licensed online gaming platform operating under the domain ikiss.lat. We offer Malaysian members a comprehensive range of online entertainment services including slots, live dealer games, a sportsbook, crash games, and betting content. Our services are made available to adult users aged 21 and above only.

This Privacy Policy governs the collection, processing, use, storage, and disclosure of personal data relating to individuals who access or register on the ikiss platform. By using our platform, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

2. Data We Collect

When you interact with ikiss — whether by registering an account, making a deposit, placing a bet, or simply browsing our website — we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, nationality, and copies of identification documents required for KYC (Know Your Customer) verification.
• Contact Data: Email address, phone number, and residential address (including city and state within Malaysia, e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Bangsar, Penang).
• Account Data: Username, password (stored in hashed form), account preferences, and gaming history.
• Financial Data: Deposit and withdrawal records, e-wallet identifiers for services such as Touch n Go eWallet or Boost, and bank account details for FPX transfers via Maybank, CIMB, or Public Bank. We do not store full payment card numbers.
• Technical Data: IP address, browser type, device identifiers, operating system, and session timestamps collected automatically when you access our platform.
• Usage Data: Pages visited, games played, bets placed, time spent on the platform, and interaction logs that help us understand how members use ikiss features.
• Communications Data: Records of correspondence between you and our support team, including live chat transcripts and email exchanges.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications and your preferred language for support (Bahasa Melayu, English, or 中文).

We collect this information directly from you at registration, through your ongoing use of the platform, automatically via cookies and tracking technologies, and occasionally from trusted third-party identity verification partners as required for regulatory compliance.

3. How We Use Your Data

ikiss processes your personal data only for legitimate, clearly defined purposes. We do not use your information in ways that are incompatible with the reason it was originally collected. The primary purposes for which we use your data include:

• Account Management: Creating and maintaining your ikiss member account, verifying your identity, and administering your profile settings.
• Service Delivery: Processing deposits and withdrawals, crediting winnings, resolving disputes, and providing access to all gaming products available on the platform.
• Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) laws, KYC requirements, and international gaming licensing conditions, including age verification to confirm members are 21 or above.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, unauthorised account access, and suspicious activity patterns that may indicate misuse of the platform.
• Customer Support: Responding to your queries, resolving technical issues, and ensuring your experience on ikiss is smooth and satisfying.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand member behaviour, improve game offerings, and optimise site performance.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have given us explicit consent to do so, or where we have a legitimate interest that is not overridden by your rights.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and to enforce self-exclusion or deposit limits where requested by members.

4. Legal Basis for Processing

ikiss processes personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the member agreement — for example, processing transactions and maintaining your account.
• Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, or court orders — including KYC and AML obligations.
• Legitimate Interests: Processing carried out in our legitimate business interests where those interests are not overridden by your data protection rights — for example, fraud prevention and platform security.
• Consent: Processing based on your freely given, specific, and informed consent — in particular for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Information

ikiss does not sell or rent your personal data to third parties. We may, however, share your information with carefully selected partners and service providers under strict confidentiality obligations in the following circumstances:

• Payment Processors: To facilitate deposits and withdrawals via FPX, Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency networks (BTC, ETH, USDT).
• Identity Verification Providers: Third-party KYC services used to verify your identity and age during registration or when processing large transactions.
• Technology Partners: Hosting providers, cloud infrastructure services, and cybersecurity vendors who process data on our behalf under binding data processing agreements.
• Regulatory Authorities: Government agencies, law enforcement bodies, or licensing authorities where we are legally required to disclose information.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify affected members in such circumstances.

6. Cookies & Tracking Technologies

ikiss uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our platform. A cookie is a small text file placed on your device that allows our website to recognise your browser and remember certain information between sessions.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These cannot be disabled as they are required for security, authentication, and core service delivery.
• Performance Cookies: Collect anonymised data about how visitors use our site — which pages are most visited, where users navigate from, and any error messages encountered — so we can improve platform performance.
• Functional Cookies: Remember your preferences, such as language selection, currency display (MYR), and preferred game categories, to personalise your experience.
• Analytics Cookies: Help us understand aggregate member behaviour to refine our game catalogue, promotional timing, and content layout.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of some ikiss features.

7. Data Retention

ikiss retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Active Accounts: Data is retained for the duration of your membership and for a reasonable period thereafter to enable account reinstatement if requested.
• Closed Accounts: Following account closure, we retain transaction records, identity verification documents, and correspondence for a minimum of five (5) years to meet our AML and regulatory compliance obligations.
• Marketing Data: Retained until you withdraw consent or opt out, after which we will suppress your details from future marketing communications.
• Technical Logs: Server and access logs are retained for a rolling period of up to twelve (12) months for security and diagnostic purposes.

Once the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. Your Rights

As an ikiss member, you have a number of rights in relation to your personal data. These rights apply subject to applicable law and may be exercised by contacting us at the details provided in Section 12 of this Policy.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data — commonly referred to as the "right to be forgotten" — subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the way we use your data in specific situations, for example while a dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing, at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw that consent at any time without affecting prior lawful processing.

We will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

9. Security Measures

Protecting the integrity and confidentiality of your personal data is a top priority for ikiss. We have implemented a comprehensive set of technical and organisational security measures designed to guard against unauthorised access, alteration, disclosure, or destruction of your information. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including financial records and identity documents.
• Role-based access controls ensuring that only authorised staff can access member data, on a strict need-to-know basis.
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure.
• Multi-factor authentication (MFA) requirements for staff accessing administrative systems.
• Continuous monitoring of network traffic for anomalous patterns indicative of a breach or intrusion attempt.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected members and relevant authorities in accordance with our obligations under applicable law.

10. Minors & Age Restriction

ikiss is an online gaming platform intended exclusively for adults. Access to our platform is strictly restricted to individuals aged 21 years or above, in accordance with responsible gaming standards applicable to the Malaysian market.

We do not knowingly collect personal data from individuals under the age of 21. As part of our registration and KYC process, we require members to verify their age through submission of a valid government-issued identification document. Any account found to belong to a minor will be immediately suspended and all associated funds handled in accordance with our Terms & Conditions and applicable regulations.

11. Changes to This Policy

ikiss reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or applicable legal requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the ikiss platform informing members of the changes.
• Where required by law, seek renewed consent for any significantly different uses of your personal data.

We encourage you to review this Policy periodically to stay informed about how ikiss handles your personal data. Your continued use of the platform following the posting of changes constitutes your acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ikiss handles your personal data, please do not hesitate to reach out to our Data Protection team. We are committed to addressing all enquiries promptly and transparently.

Email: [email protected]
Support: 24/7 Live Chat is available on every page of the ikiss platform.
Response Time: We aim to respond to all privacy-related enquiries within five (5) business days.

For formal data rights requests, please include your full name, registered email address, and a clear description of your request so we can verify your identity and process your request efficiently.