9kiss Privacy Policy

9kiss ("we", "us", "our") operates the online gaming information and entertainment platform accessible at https://9kiss.cam (the "Platform"). This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure and protection of personal data submitted by or collected from users ("you", "your") who visit or register on the Platform.

By accessing the 9kiss Platform, creating an account, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with the terms of this Policy, please discontinue use of the Platform immediately.

This Policy applies to all users of the 9kiss Platform regardless of their location, though it is specifically designed to address the rights and expectations of users based in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam. Where applicable, we observe the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection frameworks.

This Privacy Policy should be read alongside the Terms & Conditions and Responsible Gambling guidelines published on the Platform, which together form the complete framework governing your relationship with 9kiss.

The following terms are used throughout this Privacy Policy with the meanings assigned below. Capitalised terms not defined here carry the same meaning as in the 9kiss Terms & Conditions.

9kiss collects the following categories of personal data, depending on how you interact with the Platform:

9kiss collects personal data through the following channels:

• Direct submission — information you voluntarily provide during account registration, KYC verification, support enquiries or promotional participation.
• Automated technical collection — technical and usage data collected automatically when you access the Platform, via server logs, session tracking and cookies.
• Payment processors — transaction confirmation data returned by payment service providers such as Maybank, CIMB, FPX, DuitNow, Touch 'n Go eWallet, Boost and GrabPay following a completed deposit or withdrawal.
• KYC verification partners — where third-party identity verification services are used to confirm the authenticity of documents submitted during the KYC process.
• Marketing and analytics tools — aggregate and anonymised performance data about Platform usage from analytics service providers, which 9kiss uses to improve user experience and content quality.

9kiss processes personal data only for legitimate, specified purposes. The table below sets out the primary purposes for which each category of data is used:

• Account management — to register, maintain, authenticate and close user accounts on the 9kiss Platform.
• Identity and age verification (KYC) — to confirm that users are aged 21 or above and to meet anti-money laundering obligations before processing withdrawals.
• Payment processing — to facilitate deposits and withdrawals in MYR through approved Malaysian payment channels, including FPX, DuitNow and participating e-wallets.
• Customer support — to respond to enquiries, complaints and dispute submissions submitted to [email protected].
• Responsible gambling compliance — to monitor gaming behaviour, administer deposit limits, time limits and self-exclusion requests, and identify indicators of problem gambling.
• Platform improvement and analytics — to understand how users interact with the 9kiss Platform and to improve content, navigation, performance and game category information.
• Legal and regulatory compliance — to meet obligations under applicable Malaysian laws, including the PDPA, anti-money laundering legislation and any applicable gaming regulatory requirements.
• Security and fraud prevention — to detect, investigate and prevent fraudulent accounts, multi-accounting, payment chargebacks and other prohibited activities described in the Terms & Conditions.
• Marketing communications — to send promotional information, bonus announcements and platform updates to users who have provided explicit consent. You may withdraw this consent at any time.

9kiss processes personal data on the following legal grounds, consistent with the principles of the Malaysia Personal Data Protection Act 2010 and applicable international data protection standards:

• Contractual necessity — processing required to register your account, process transactions and provide gaming services in accordance with the Terms & Conditions you have accepted.
• Legal obligation — processing required to comply with KYC, anti-money laundering, age verification and other applicable regulatory requirements.
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gambling monitoring and product improvement, where our interests are not overridden by your data protection rights.
• Consent — processing for optional purposes such as direct marketing and the placement of non-essential cookies, where we have obtained your prior, specific and freely given consent.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

9kiss does not sell, rent or otherwise trade your personal data to unaffiliated third parties for their own commercial purposes. Disclosure of personal data is limited to the following categories of recipients and circumstances:

• Payment processors and financial institutions — FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost and GrabPay, to the extent necessary to process your deposits and withdrawals.
• Identity verification providers — KYC service providers engaged by 9kiss to authenticate identity documents submitted during account verification.
• Cloud hosting and infrastructure providers — third-party data processors that host the 9kiss Platform and associated databases under data processing agreements that require equivalent data protection standards.
• Analytics and performance services — service providers that supply aggregate, anonymised analytics data about Platform usage to assist in product improvement.
• Regulatory and law enforcement authorities — where 9kiss is legally required or officially requested to disclose data by a competent court, regulatory body or law enforcement agency in Malaysia or any other applicable jurisdiction.
• Responsible gambling bodies — where disclosure is necessary to support a self-exclusion request or other responsible gambling intervention.
• Business transfers — in the event of a merger, acquisition, restructuring or sale of all or a substantial part of 9kiss assets, personal data may be transferred to the successor entity under equivalent data protection obligations.

The 9kiss Platform uses cookies and similar tracking technologies to deliver a functional, personalised and secure experience. The following types of cookies may be set when you visit the Platform:

• Strictly necessary cookies — essential for the Platform to function correctly. These include session authentication, security tokens and load-balancing cookies. They cannot be disabled without materially affecting your ability to use the Platform.
• Functional cookies — store your preferences such as language settings, display options and responsible gambling tool configurations across sessions.
• Analytical cookies — collect anonymised data about page visits, session duration and navigation paths to help 9kiss understand how the Platform is used and identify areas for improvement.
• Marketing cookies — used only where you have given explicit consent, to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies are not set by default.

You can manage or withdraw consent for non-essential cookies at any time through your browser settings or through the cookie preference tool on the Platform. Please be aware that disabling certain cookies may limit the functionality available to you during your 9kiss session.

9kiss retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods below serve as a guide; specific legal obligations may require longer retention in certain cases.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

9kiss implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data in transit between your device and 9kiss servers.
• Encryption at rest for sensitive stored data, including identity documents and financial references.
• Role-based access controls ensuring that only authorised 9kiss personnel can access personal data relevant to their specific function.
• Regular security assessments and vulnerability reviews of Platform infrastructure.
• Audit logging of access to sensitive data records, enabling investigation of any suspected unauthorised access.
• Data processing agreements with all third-party service providers requiring equivalent security standards.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. 9kiss encourages users to protect their own account credentials, enable any available two-factor authentication, and report any suspected security incident to [email protected] promptly.

Subject to applicable law and certain exceptions described below, you have the following rights in relation to the personal data that 9kiss holds about you. To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 calendar days of receipt, or inform you if additional time is required.

Certain rights may be subject to exceptions where compliance would prejudice regulatory obligations, legal proceedings or the rights of other parties. 9kiss will explain any applicable exception when responding to your request.

The 9kiss Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals below this age. If you are under 21 years of age, you must not attempt to register, access gaming features or provide any personal information on the Platform.

If 9kiss becomes aware or has reasonable grounds to suspect that personal data has been collected from a person below the age of 21 — whether as a result of a false age declaration or any other circumstance — we will take immediate steps to close the relevant account, delete the personal data collected, and where appropriate refer the matter to the relevant authorities.

9kiss reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The effective date displayed at the top of this page will be updated whenever a revision is published.

Where changes are material — meaning they could significantly affect your rights or the way in which your personal data is processed — 9kiss will notify registered users by email to the address on record at least 14 days before the changes take effect. Non-material clarifications or corrections may be made without prior notice.

Your continued use of the 9kiss Platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised terms, you should cease using the Platform and may request account closure and data erasure as described in Section 11.

Archived versions of previous Privacy Policies are available upon written request to [email protected].

For any questions, concerns, complaints or requests relating to this Privacy Policy or the processing of your personal data by 9kiss, please contact us using the details below. All communications must be submitted in English.

Related platform documents available for review: Terms & Conditions and Responsible Gambling.