kss918 Privacy Policy

1Introduction

kss918 ("we," "us," or "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy describes the personal data kss918 collects through the kss918 Platform at kss918.net (the "Platform"), the purposes for which that data is processed, the basis on which it is processed, and the rights you have in relation to your data.

This Privacy Policy applies to all users of the Platform, including registered account holders and visitors who have not yet registered. It should be read together with the kss918 Terms & Conditions.

2Data Controller

kss918 acts as the data controller for personal data collected through the Platform. As data controller, kss918 determines the purposes and means by which personal data is processed. Where kss918 engages third-party processors to handle data on its behalf, those processors act only on kss918's documented instructions and are bound by appropriate data processing agreements.

For all privacy-related enquiries, including requests to exercise your data rights, please contact the kss918 Data Protection contact via the details provided in Section 14 of this Policy.

3Personal Data We Collect

kss918 collects personal data through multiple channels and in multiple categories. The following table summarises the primary categories of data collected:

3.1 Data Collected Automatically

When you visit or use the kss918 Platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, approximate geographic location, device identifiers, browser type and version, pages visited, time on page, and referral source. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

4How We Use Your Personal Data

kss918 uses the personal data collected for the following purposes:

• Account administration — creating, verifying, and managing your kss918 account, including identity verification and KYC compliance.
• Transaction processing — processing MYR deposits and withdrawals via Touch 'n Go, Boost, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, GrabPay, and USDT TRC20.
• Platform delivery — providing access to live dealer games, slots, sportsbook, and other Platform features.
• Security and fraud prevention — monitoring for suspicious activity, preventing unauthorised access, and detecting and investigating potential fraud or money laundering.
• Legal and regulatory compliance — fulfilling obligations under kss918's international gaming licence, including record-keeping, reporting, and cooperation with regulatory authorities.
• Customer support — responding to enquiries, resolving disputes, and improving the quality of support interactions.
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion, deposit limit, and cooling-off requests.
• Marketing communications — sending promotional offers, bonus notifications, and relevant content where you have provided explicit consent. You may withdraw consent at any time.
• Platform improvement — analysing aggregated usage data to improve Platform performance, user experience, and game selection.

5Legal Basis for Processing

kss918 processes personal data on one or more of the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the Terms & Conditions you entered into when registering your kss918 account.
• Legal obligation — processing required to comply with applicable laws, licensing conditions, anti-money laundering requirements, and regulatory obligations.
• Legitimate interests — processing for fraud prevention, security monitoring, and Platform improvement where our legitimate interests are not overridden by your data protection rights.
• Consent — processing for marketing communications and optional analytics cookies, where you have provided explicit, freely given, informed consent that can be withdrawn at any time.

6Data Sharing and Disclosure

kss918 does not sell, rent, or trade your personal data to any third party for commercial purposes. kss918 shares personal data only in the following circumstances:

6.1 Service Providers

kss918 engages trusted third-party service providers to perform functions on its behalf, including payment processing (e.g., Touch 'n Go, DuitNow, FPX operators), identity verification and KYC services, game software provision, fraud detection services, and IT infrastructure and cloud hosting. These providers are contractually bound to process data only on kss918's instructions and to implement appropriate security measures.

6.2 Regulatory and Legal Authorities

kss918 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by law, pursuant to its licensing obligations, or in response to a valid legal order. kss918 will endeavour to notify you of any such disclosure where legally permissible.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of kss918's assets, personal data held by kss918 may be transferred to the acquiring entity. Affected users will be notified of any such transfer and any material changes to data processing practices that result from it.

7International Data Transfers

As an internationally licensed online gaming platform, kss918 may transfer personal data to servers or service providers located in jurisdictions outside Malaysia. Where such transfers occur, kss918 ensures that appropriate safeguards are in place, including contractual data protection clauses that impose obligations equivalent to applicable data protection standards.

By using the kss918 Platform, you consent to the transfer of your personal data to jurisdictions outside your country of residence where such transfers are necessary for the purposes described in this Policy.

8Data Retention

kss918 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing obligations. In practice:

• Account data is retained for the duration of your active account plus a minimum of five (5) years following account closure, as required for regulatory and audit purposes.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC documents are retained for the period required under kss918's licensing obligations, typically five (5) years from account closure.
• Marketing data is retained until you withdraw consent, or for a period of two (2) years from your last interaction with kss918 marketing communications, whichever is earlier.
• Technical and log data is typically retained for twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9Security Measures

kss918 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kss918 servers — the same standard used by major Malaysian financial institutions including Maybank and CIMB.
• AES-256 encryption at rest for sensitive personal and financial data stored on kss918 servers.
• Role-based access controls limiting staff access to personal data to only those with a legitimate operational need.
• Regular penetration testing and security audits by independent security professionals.
• Two-factor authentication available for all kss918 user accounts.
• Intrusion detection systems monitoring for suspicious access patterns in real time.

Notwithstanding these measures, no method of electronic data transmission or storage is completely secure. kss918 cannot guarantee the absolute security of data transmitted over the internet.

10Cookies and Tracking Technologies

10.1 Essential Cookies

kss918 uses essential session cookies that are strictly necessary for the Platform to function. These cookies maintain your login session, remember your language preferences, and enable core security features. Essential cookies cannot be disabled without preventing you from using the Platform.

10.2 Analytics Cookies

With your consent, kss918 uses analytics cookies to understand how players interact with the Platform — which pages are visited most frequently, where users spend the most time, and where technical issues occur. This data is used in aggregated, anonymised form to improve Platform performance and user experience.

10.3 Managing Cookies

You can control cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the kss918 Platform. Most modern browsers allow you to review and delete stored cookies — consult your browser's help documentation for instructions specific to your browser.

11Your Data Rights

Subject to applicable law and licensing obligations, you have the following rights in relation to your personal data held by kss918:

• Right of access — the right to request a copy of the personal data kss918 holds about you.
• Right to rectification — the right to request correction of inaccurate or incomplete personal data.
• Right to erasure — the right to request deletion of your personal data, subject to kss918's legal retention obligations.
• Right to restrict processing — the right to request that kss918 limit the processing of your data in certain circumstances.
• Right to data portability — the right to receive a copy of certain personal data in a structured, machine-readable format.
• Right to withdraw consent — the right to withdraw consent to marketing communications or optional analytics cookies at any time, without affecting the lawfulness of prior processing.
• Right to object — the right to object to processing based on legitimate interests in certain circumstances.

To exercise any of the above rights, please contact kss918 support as described in Section 14. kss918 will respond to verified data rights requests within thirty (30) days. In complex or high-volume cases, this period may be extended by up to an additional sixty (60) days with notice provided.

12Children and Minors

The kss918 Platform is strictly intended for adults aged 21 years and above. kss918 does not knowingly collect personal data from individuals under the age of 21. If kss918 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed.

Parents and guardians who believe that a minor may have registered an account on the kss918 Platform should contact the support team immediately using the contact details in Section 14 of this Policy.

13Changes to This Privacy Policy

kss918 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, licensing requirements, or Platform practices. The date of last revision is displayed at the top of this page. Where material changes are made, kss918 will endeavour to notify registered users via their registered email address prior to the changes taking effect.

Your continued use of the kss918 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms.

14Contact Us

For all privacy-related enquiries, data rights requests, or concerns regarding the handling of your personal data by kss918, please contact our support team:

You may also raise a concern with the relevant data protection authority in your jurisdiction if you believe your data rights have not been adequately addressed by kss918. Details of the kss918 escalation procedure are available via our FAQ page.