1918kiss Privacy Policy

1918kiss ("we", "us", "our") operates the online gaming platform accessible at https://1918kiss.net and all associated sub-domains and mobile interfaces. We are committed to protecting the personal data of all individuals who interact with our platform, whether as registered members, visitors, or prospective players.

This Privacy Policy ("Policy") describes how 1918kiss collects, uses, stores, discloses, and otherwise processes personal data in connection with the provision of our Services. It applies to all personal data processed in relation to the 1918kiss platform, regardless of the device or access method used.

By registering an account with 1918kiss, accessing our platform, or otherwise using any of our Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, please discontinue use of the 1918kiss platform.

1918kiss collects the following categories of personal data:

2.1 Identity Data — Full legal name; date of birth; government-issued identification number (e.g., Malaysian Identity Card / MyKad number or passport number); copies of identification documents submitted for KYC (Know Your Customer) verification purposes.

2.2 Contact Data — Email address; Malaysian mobile telephone number; residential address (where required for enhanced verification).

2.3 Account Data — Username; account registration date; account login history including timestamps and IP addresses; security settings and two-factor authentication configuration.

2.4 Financial Data — Deposit and withdrawal transaction history; payment method identifiers (e.g., Touch 'n Go eWallet account reference, Maybank2u account details — stored in tokenised form only, not raw account numbers); wallet balance history.

2.5 Gaming Data — Game session history; betting records; win/loss data; bonus participation history; responsible gaming tool settings and usage records.

2.6 Technical Data — IP address; browser type and version; device type and operating system; referring URL; session duration; pages visited; click-path data collected through standard web analytics.

2.7 Communications Data — Records of correspondence with the 1918kiss customer support team via live chat or email, including the content of communications and their timestamps.

1918kiss collects personal data through the following means:

• Directly from you — when you complete the account registration form, submit identity verification documents, make deposits or withdrawal requests, contact our support team, or update your account profile;
• Automatically — through cookies, web beacons, and standard server logging technologies as you browse and interact with the 1918kiss platform (see Section 7 for details);
• From third-party service providers — including identity verification services, payment processors, and fraud detection providers who supply supplementary data to assist in account verification and security;
• From public sources — including publicly available sanctions lists and politically exposed persons (PEP) databases consulted as part of our anti-money laundering compliance obligations.

1918kiss processes personal data for the following purposes:

• Account administration — creating and managing your 1918kiss account; verifying your identity and age eligibility; processing deposits, withdrawals, and bonus claims;
• Service delivery — providing access to gaming products, live casino, sportsbook, and all other platform features; personalising your account experience;
• Security and fraud prevention — detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other unauthorised activity;
• Regulatory compliance — fulfilling obligations under applicable anti-money laundering regulations; responding to lawful requests from regulatory authorities; maintaining required transaction records;
• Responsible gaming — administering deposit limits, loss limits, session timers, and self-exclusion requests; monitoring for indicators of problem gambling in accordance with our responsible gaming obligations;
• Customer support — responding to your queries, complaints, and disputes; improving the quality of our support services through analysis of communication records;
• Marketing communications — sending promotional offers and platform updates by email or mobile notification, where you have provided or have not withdrawn your consent to receive such communications;
• Platform improvement — analysing aggregated usage patterns to improve platform performance, fix technical issues, and develop new features.

1918kiss processes personal data on the following legal grounds:

• Contractual necessity — processing required to perform the agreement between you and 1918kiss, including account management, payment processing, and gaming service delivery;
• Legal obligation — processing required to comply with anti-money laundering regulations, age verification requirements, and other applicable legal obligations imposed on licensed gaming operators;
• Legitimate interests — processing carried out for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, where such interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for marketing communications and the use of non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

1918kiss does not sell your personal data. We share personal data with third parties only in the following circumstances:

• Payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank2u, CIMB Clicks, and FPX, for the purpose of processing your deposit and withdrawal transactions;
• Identity verification providers — third-party KYC service providers who assist in verifying the authenticity of identification documents submitted by members;
• Gaming software providers — licensed game studios whose software is integrated into the 1918kiss platform may receive game session data necessary for the technical operation of their games;
• Fraud and security services — third-party providers who assist in detecting and preventing fraudulent activity, account takeovers, and bonus abuse;
• Regulatory authorities — in response to lawful requests from government authorities, law enforcement agencies, or regulatory bodies, where 1918kiss is legally required to disclose relevant data;
• Business transfers — in the event of a merger, acquisition, or sale of substantially all of the assets of 1918kiss, personal data held by us may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers who process personal data on behalf of 1918kiss are required to do so in accordance with contractual data processing agreements that impose appropriate security and confidentiality obligations.

The 1918kiss platform uses cookies and similar tracking technologies to operate and improve our services. The following categories of cookies are used:

• Strictly necessary cookies — required for the platform to function, including session management, login authentication, and security tokens. These cookies cannot be disabled without impairing platform functionality;
• Performance cookies — used to collect anonymised data about page load times, error rates, and navigation patterns to improve platform performance;
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming limit configurations, between sessions;
• Analytics cookies — used to analyse aggregated usage patterns and improve our content and promotional offers. These cookies are activated only with your consent.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the 1918kiss platform.

1918kiss implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include, but are not limited to: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers; encryption of sensitive data at rest; role-based access controls limiting internal access to personal data; regular security vulnerability assessments and penetration testing; and incident response procedures to address any identified data security breaches promptly.

Where a personal data breach occurs that is likely to result in a risk to your rights and freedoms, 1918kiss will notify affected members without undue delay and will take all reasonable steps to mitigate the impact of the breach.

1918kiss retains personal data for the following periods:

• Account data and identity records — retained for the duration of your account plus a minimum of five (5) years following account closure, in line with anti-money laundering record-keeping requirements;
• Transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Support communications — retained for three (3) years from the date of the communication;
• Marketing consent records — retained for the period during which consent is active plus three (3) years following withdrawal of consent, as evidence of lawful processing;
• Technical and session data — retained for thirteen (13) months for analytical purposes, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

Subject to applicable law, you have the following rights in respect of the personal data 1918kiss holds about you:

• Right of access — you may request a copy of the personal data we hold about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restrict processing — you may request that we limit processing of your personal data in certain circumstances;
• Right to object — you may object to processing of your personal data based on legitimate interests, including for direct marketing purposes;
• Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the 1918kiss Data Protection team at [email protected]. We will respond to all verified requests within 30 calendar days of receipt. We may require verification of your identity before processing any data rights request.

The 1918kiss platform is strictly intended for use by persons aged 21 years and above. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have accessed our platform, please contact us immediately at [email protected].

1918kiss reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. Where changes are material, we will notify registered members by email to the address on file at least seven (7) days prior to the changes taking effect. The current version of this Policy is always accessible at https://1918kiss.net/privacy-policy. The "Last updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the 1918kiss platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

For any queries regarding this Privacy Policy, to exercise your data protection rights, or to raise a data-related concern, please contact the 1918kiss team using the following details:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the live chat facility on the 1918kiss platform

All formal data rights requests should be submitted in writing via email to ensure a complete audit trail. We are committed to addressing all privacy-related enquiries with care and within the timeframes specified in this Policy.