Section 1
1. Definitions
"kissapk", "we", "us" and "our" refer to the operator of the kissapk platform. "Platform" means the kissapk website, account systems, betting and gaming services, payment facilities and support functions. "Player", "you" and "your" mean the individual who registers and uses the Platform. "Personal Data" means any information that identifies or could reasonably identify a living individual. "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure and deletion. "KYC" means Know Your Customer identity and age verification.
Where capitalised terms appear elsewhere in this policy without fresh definition, they carry the meanings above. References to "applicable law" include privacy and data protection legislation relevant to the jurisdiction in which kissapk operates, anti-money-laundering obligations, and any regulatory directions that govern the handling of player information in the online betting sector.
Section 2
2. Personal data we collect
kissapk collects the categories of personal data described below. Not all categories will apply to every player — the data we hold depends on your level of interaction with the Platform.
2.1 Identity and contact data
Full legal name, date of birth, national identity card or passport number, residential address (including city and postcode within Malaysia), email address and mobile phone number. This information is required to open and verify an account.
2.2 Financial and payment data
Deposit amounts, withdrawal amounts, transaction dates, payment method identifiers (such as the registered Touch 'n Go eWallet account name, DuitNow registered number, FPX bank reference, or cryptocurrency wallet address), account balance history and associated bank or e-wallet names including Maybank, CIMB, Public Bank, RHB and Hong Leong. kissapk does not store full bank account numbers or complete card credentials.
2.3 Activity and betting data
Login timestamps, IP addresses, device types, operating systems, browser identifiers, sports markets wagered, casino games played, bet amounts, odds accepted, outcomes and session durations. This data is generated automatically as part of platform operation.
2.4 Verification documents
Scanned or photographed copies of government-issued identity documents, proof-of-address documents and source-of-funds declarations, where required for KYC, withdrawal processing or compliance review.
2.5 Communications data
Records of live chat sessions, support tickets, emails and any voluntary information you provide when contacting the kissapk support team. Call recordings may be retained where applicable.
2.6 Responsible gambling data
Deposit limit settings, loss limit elections, self-exclusion periods, cooling-off requests and any communications related to player protection tools. This category is treated with heightened sensitivity.
Section 3
3. How personal data is collected
3.1 Directly from you
Data you provide when registering an account, completing identity verification, depositing funds, requesting a withdrawal, claiming a promotion, setting responsible gambling limits or contacting support.
3.2 Automatically from your device
Technical data gathered during your sessions on the Platform, including device identifiers, browser type, referring URL, pages visited, game interactions and IP address. This data is used for security, fraud detection and platform optimisation.
3.3 From payment and verification partners
Confirmation data returned by payment processors (DuitNow, FPX, e-wallet providers, cryptocurrency infrastructure), identity verification services and anti-fraud systems. kissapk uses these confirmations to validate transactions and accounts rather than to build profiles for marketing.
Section 4
4. Purposes and legal bases for processing
kissapk processes personal data only where there is a lawful basis to do so. The table below summarises our primary processing activities.
| Purpose |
Legal basis |
| Account registration and management |
Performance of the player agreement |
| Processing deposits and withdrawals in MYR |
Performance of the player agreement |
| KYC identity and age verification (21+) |
Legal obligation and legitimate interest |
| Anti-money-laundering and fraud prevention |
Legal obligation and legitimate interest |
| Platform security and abuse detection |
Legitimate interest |
| Delivering and improving the betting and casino service |
Performance of the player agreement |
| Responsible gambling tools and player protection |
Legal obligation and legitimate interest |
| Responding to support enquiries |
Performance of the player agreement |
| Personalised promotional communications (where consented) |
Consent |
| Retaining records for regulatory and audit purposes |
Legal obligation |
Section 5
5. Sharing personal data with third parties
kissapk does not sell personal data. Data may be shared only in the following circumstances:
- Payment processors and banking partners: data necessary to execute deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, RHB, Hong Leong) or supported cryptocurrency networks.
- Identity and compliance verification providers: name, date of birth, document information and address data passed to third-party KYC or anti-fraud services for verification checks.
- Game and technology suppliers: session identifiers or account references passed to certified game providers to deliver casino or betting products. These parties receive only the minimum data necessary.
- Legal and regulatory authorities: where disclosure is required by applicable law, court order or regulatory direction. kissapk will comply with lawful requests while seeking to protect player interests to the extent permitted.
- Professional advisers: accountants, lawyers and auditors bound by professional confidentiality obligations, where disclosure is reasonably necessary for business operation.
All third parties who receive personal data from kissapk are required to handle it lawfully, securely and only for the stated purpose. kissapk remains responsible for ensuring that contractual obligations covering data protection are in place with relevant partners.
Section 6
6. Security measures
kissapk applies technical and organisational security measures appropriate to the sensitivity of the data held and the risks involved. Measures include 256-bit SSL encryption for all data in transit, access controls that restrict system access to authorised personnel on a need-to-know basis, segregated storage for sensitive categories such as identity documents and payment references, two-factor authentication options for account access and regular internal review of data handling procedures.
No internet transmission is entirely free from risk. You are responsible for maintaining the security of your own credentials, keeping your registered email address and mobile number up to date, and alerting kissapk promptly if you suspect unauthorised account access. kissapk will never ask you for your full password by email, chat or phone.
Section 7
7. Data retention
kissapk retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory or financial obligations. In practice this means:
- Account records and transaction history are retained for a minimum of five years after account closure to satisfy anti-money-laundering recordkeeping requirements.
- Identity documents submitted for KYC are retained for the same minimum period or longer where required by a compliance obligation.
- Responsible gambling settings and self-exclusion records are retained for the duration of any restriction and for a reasonable period afterwards to prevent inadvertent re-registration.
- Support communications are retained for a period sufficient to resolve disputes and for quality assurance, typically up to two years from the last interaction.
- Technical logs used for fraud prevention and platform security are retained for a rolling period aligned with operational and investigative needs.
Where retention is no longer justified, kissapk will securely delete or irreversibly anonymise the data in question.
Section 8
8. Your rights over your personal data
Subject to applicable law, you hold the following rights regarding personal data that kissapk holds about you:
- Right of access: you may request a copy of the personal data kissapk holds about you and information about how it is processed.
- Right to rectification: you may ask kissapk to correct inaccurate or incomplete data without undue delay.
- Right to erasure: in certain circumstances you may request deletion of your personal data where it is no longer necessary, where consent is withdrawn, or where processing is unlawful — subject to overriding legal retention obligations.
- Right to restrict processing: you may ask kissapk to limit how your data is used while an accuracy challenge or objection is being considered.
- Right to data portability: where processing is based on consent or contract and is carried out by automated means, you may request a structured, machine-readable copy of the data you provided.
- Right to object: you may object to processing carried out on the basis of legitimate interests. kissapk will stop unless compelling legitimate grounds override your interests.
- Right to withdraw consent: where processing is based solely on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any right, contact the kissapk support team via on-site live chat or at the email address in section 10. Requests will be responded to within a reasonable period. kissapk may need to verify your identity before acting on a request to protect against unauthorised access to another person's data.
Section 9
9. Cookies and similar technologies
kissapk uses cookies and similar browser-based technologies to operate the Platform, maintain sessions, remember preferences and analyse performance. The categories of cookies used are:
- Strictly necessary cookies: essential to enable login, session management and security functions. These cannot be disabled without impairing core functionality.
- Functional cookies: used to remember your language, balance display preferences and other non-essential settings to provide a more convenient experience.
- Analytics cookies: used to understand how players navigate the Platform, which features are used most and where performance improvements can be made. Data collected is aggregated and does not identify individuals.
You may adjust browser settings to block or delete cookies. Blocking strictly necessary cookies will impair your ability to use the Platform. Analytics and functional cookies can generally be controlled through browser preferences without affecting core functionality. By continuing to use the kissapk Platform with standard browser settings, you consent to the use of cookies consistent with this policy.
Section 10
10. Contact and data enquiries
If you have questions about how kissapk handles your personal data, wish to exercise a data right, or want to raise a privacy concern, you may reach the support team through 24/7 on-site live chat or by email. The contact email address for privacy matters is displayed as plain text below — it is not a clickable link.
Privacy enquiries:
Email: [email protected]
Please include "Privacy Request" in the subject line, your registered account name and a clear description of your request or question. Do not include passwords or full payment credentials.
kissapk will acknowledge receipt and aim to respond substantively within a reasonable timeframe. Where a request is complex or requires further verification, additional time may be required. You will be informed if this is the case.