1. Introduction
This Privacy Policy ("Policy") describes how apk918kiss ("the Platform", "we", "us", "our"), operating at apk918kiss.cam, collects, processes, stores, and protects the personal data of individuals ("User", "you", "your") who register accounts, access platform services, or otherwise interact with apk918kiss.
apk918kiss respects the privacy of every player and is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection standards. By registering an account or using any service provided by apk918kiss, you confirm that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling policy, both of which form part of your overall agreement with apk918kiss.
2. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including name, contact details, identification documents, and account activity. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, or deletion. |
| "Data Controller" | apk918kiss, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third party engaged by apk918kiss to process personal data on its behalf, such as payment processors (e.g., FPX gateway providers) or cloud infrastructure providers. |
| "KYC Data" | Identity verification documents provided by Users during the Know Your Customer process, including government-issued IDs, proof of address, and selfie photographs. |
| "Cookie" | A small text file placed on your device by the Platform to enable functionality, analytics, and session management. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for specified purposes. |
3. Data We Collect
apk918kiss collects personal data across several categories, depending on your level of interaction with the Platform. The categories of data we may hold about you include:
3.1 Registration & Account Data
- Full legal name;
- Date of birth;
- Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
- Email address;
- Malaysian mobile phone number;
- Username and encrypted password hash;
- Preferred language and currency (MYR).
3.2 Identity Verification (KYC) Data
- Copies of government-issued identification (MyKad, Passport, or Driver's Licence);
- Proof of residential address (utility bill or bank statement);
- Selfie photograph holding identification document;
- Verification status and review timestamps.
3.3 Financial & Transaction Data
- Deposit and withdrawal history in MYR;
- Payment method details (FPX bank code, e-wallet identifiers for Touch 'n Go eWallet, Boost, DuitNow — we do not store full card numbers or bank login credentials);
- Bonus and promotional credit history;
- Account balance records.
3.4 Gameplay & Behavioural Data
- Games played, bet amounts, session durations, and win/loss records;
- Sports betting markets accessed (e.g., EPL, Liga Super Malaysia, UFC);
- Platform features accessed and navigation patterns;
- Responsible gambling tool usage (deposit limits, cooling-off periods, self-exclusion status).
3.5 Technical & Device Data
- IP address and approximate geolocation;
- Device type, operating system, and browser version;
- Session tokens and authentication logs;
- Cookie identifiers and analytics data.
3.6 Communications Data
- Support chat transcripts and email correspondence;
- Feedback and survey responses;
- Marketing communication preferences.
4. How We Collect Your Data
We collect personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings;
- Automatically — through cookies, session tracking, server logs, and analytics tools as you navigate the Platform;
- From third parties — including payment service providers (e.g., FPX gateway operators, DuitNow infrastructure), identity verification partners, and fraud detection services, where necessary to fulfil our legal and operational obligations.
5. Data Processing & Legal Basis
apk918kiss processes personal data only where a lawful basis exists for doing so. The legal bases we rely upon are as follows:
| Legal Basis | Processing Activity |
|---|---|
| Contractual Necessity | Processing required to create and manage your account, facilitate deposits and withdrawals in MYR, and deliver gaming services as described in our Terms & Conditions. |
| Legal Obligation | KYC identity verification, anti-money laundering (AML) checks, age verification (21+), and record-keeping obligations imposed by applicable regulatory frameworks. |
| Legitimate Interests | Fraud detection, security monitoring, platform abuse prevention, and improving Platform performance and user experience — where these interests are not overridden by your privacy rights. |
| Consent | Marketing communications and non-essential cookies, where you have provided explicit, revocable consent. |
6. How We Use Your Data
The personal data collected by apk918kiss is used for the following purposes:
- Creating and maintaining your apk918kiss account and player profile;
- Processing deposits and withdrawals via Malaysian payment channels (FPX, DuitNow, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong Connect);
- Verifying your identity and age (21+) to comply with regulatory requirements and prevent underage gambling;
- Delivering personalised gaming experiences, bonus offers, and VIP programme rewards;
- Providing multilingual customer support in English, Bahasa Melayu, and Mandarin;
- Detecting and preventing fraud, money laundering, account hacking, and other prohibited activities;
- Monitoring responsible gambling indicators and applying account protections (e.g., triggering deposit limit reviews, initiating responsible gambling outreach);
- Complying with legal and regulatory reporting obligations;
- Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts);
- Sending marketing communications about promotions and new features, where you have opted in to receive them.
7. Data Sharing & Disclosure
apk918kiss does not sell, rent, or trade personal data to any third party for their own commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly as required to deliver our services or meet our legal obligations:
- Payment processors and banking partners — FPX gateway operators, DuitNow infrastructure providers, e-wallet platforms (Touch 'n Go, Boost), and card processing networks, for the purpose of processing your financial transactions;
- Identity verification and KYC partners — third-party identity checking services engaged to verify your submitted documents;
- Fraud prevention and security services — services that help detect suspicious login activity, payment fraud, and platform abuse;
- Cloud infrastructure and hosting providers — who store Platform data on secured, encrypted infrastructure under strict data processing agreements;
- Regulatory and law enforcement authorities — where we are compelled by applicable law, court order, or regulatory directive to disclose information;
- Professional advisors — including legal, accounting, and compliance consultants, bound by professional confidentiality obligations.
All third-party data processors engaged by apk918kiss are bound by contractual data protection obligations consistent with this Policy. We require all processors to implement appropriate technical and organisational security measures.
8. Cookies & Tracking Technologies
apk918kiss uses cookies and similar tracking technologies to enable core Platform functionality and to improve user experience. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session authentication, login state management, security tokens, and fraud prevention signals. These cookies are essential for the Platform to function. | No — Exempt |
| Functional | Language preferences, display settings, and game state persistence between sessions. | Yes |
| Analytics | Aggregated usage data to understand how users navigate the Platform and identify areas for improvement. No personally identifiable data is transmitted to analytics providers. | Yes |
| Marketing | Tracking user responses to promotional content displayed within the Platform, to improve relevance of bonus and offer messaging. | Yes |
You may manage your cookie preferences through your browser settings or via the cookie consent banner presented upon first visiting the Platform. Disabling strictly necessary cookies will impair core Platform functionality.
9. Data Retention
apk918kiss retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Indicative retention periods are as follows:
- Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping requirements;
- Transaction records: Retained for a minimum of seven (7) years, consistent with standard financial record-keeping standards;
- Support communications: Retained for three (3) years from the date of the most recent interaction;
- Marketing data: Retained until you withdraw your marketing consent or request erasure, whichever occurs first;
- Technical and device logs: Typically retained for ninety (90) days, unless retention is required for an active investigation or security incident.
Where retention is no longer necessary and no legal obligation requires otherwise, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.
10. Data Security
apk918kiss implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform;
- AES-256 encryption at rest for all stored sensitive data, including KYC documents and financial records;
- Two-factor authentication (2FA) available for all player accounts;
- Role-based access controls ensuring that only authorised personnel can access specific categories of personal data;
- Real-time fraud and anomaly detection systems monitoring for suspicious login activity, payment irregularities, and account takeover attempts;
- Regular internal security audits and penetration testing of the Platform's infrastructure.
11. Your Rights
As a User of the apk918kiss platform, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting our support team via live chat or email:
Right of Access
You may request a copy of the personal data we hold about you at any time. We will provide this within 30 days of a verified request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you may request correction. Account details can also be updated directly in your profile settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to overriding legal retention obligations.
Right to Restrict Processing
In certain circumstances, you may request that we restrict the processing of your personal data while a dispute or investigation is ongoing.
Right to Data Portability
Where technically feasible, you may request a structured, machine-readable export of the personal data you provided to us.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time via your account notification settings.
We will respond to verified data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days with prior notification. We reserve the right to verify your identity before processing any data rights request.
12. Minors & Age Restriction
apk918kiss operates a strict 21+ age requirement. We do not knowingly collect personal data from individuals under the age of 21. During registration, all Users are required to confirm they meet the minimum age requirement, and age verification is conducted as part of the KYC process.
If apk918kiss becomes aware that personal data has been collected from a person under 21, the associated account will be immediately suspended and all personal data pertaining to that individual will be deleted in accordance with our data retention procedures. If you believe a minor has registered an account on our Platform, please notify our support team immediately.
13. International Data Transfers
apk918kiss may store and process personal data on servers located outside Malaysia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than that provided under applicable data protection law. These safeguards include contractual data protection clauses in agreements with all international data processors.
We do not transfer personal data to jurisdictions that do not provide adequate data protection standards without first implementing appropriate legal safeguards.
14. Policy Amendments
apk918kiss reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, we will notify registered Users via email and via a prominent notice on the Platform at least seven (7) calendar days prior to the changes taking effect.
The effective date of the current version of this Policy is stated at the top of this document. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically.
15. Contact Us
If you have any questions, requests, or complaints regarding this Privacy Policy or the way apk918kiss handles your personal data, please contact us through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 on the Platform in English, Bahasa Melayu, and Mandarin
- Data Rights Requests: Please mark your subject line clearly as "Data Rights Request" so it is routed to our data protection team promptly
- Response Commitment: Data-related enquiries are acknowledged within 48 hours and resolved within 30 calendar days