🔒 Kiss917 Privacy Policy last updated — Effective 1 January 2026 | Your personal data, protected 🛡️ SSL 256-bit Encryption — All player transactions & data protected to bank-grade standards | Kiss917 📋 Full compliance with Malaysia's PDPA 2010 — Your data is safe with kiss917 💰 Secure deposits via Touch 'n Go, GrabPay & DuitNow — Zero risk of data leaks | Kiss917 🎁 Welcome Bonus up to RM917 — Register now with a secure account | Kiss917 👁️ No data sharing with third parties without your consent | kiss917 committed 📱 Full control over your data — Delete, edit or export your data at any time | Kiss917 🔒 Kiss917 Privacy Policy last updated — Effective 1 January 2026 | Your personal data, protected 🛡️ SSL 256-bit Encryption — All player transactions & data protected to bank-grade standards | Kiss917 📋 Full compliance with Malaysia's PDPA 2010 — Your data is safe with kiss917 💰 Secure deposits via Touch 'n Go, GrabPay & DuitNow — Zero risk of data leaks | Kiss917 🎁 Welcome Bonus up to RM917 — Register now with a secure account | Kiss917 👁️ No data sharing with third parties without your consent | kiss917 committed 📱 Full control over your data — Delete, edit or export your data at any time | Kiss917
Last Updated: 1 January 2026

Official Kiss917 Documents

Privacy Policy Kiss917 – Personal Data Protection for Malaysian Players

Kiss917 is fully committed to protecting the privacy and personal data security of all Malaysian players. This document transparently explains how we collect, use, store and safeguard your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

SSL 256-bit PDPA 2010 No Data Sharing Full Control AES-256 Encryption

Kiss917's Data Protection Commitment

Six core principles that guide how kiss917 handles the personal data of Malaysian players.

Bank-Grade Encryption

All data transmitted between your device and kiss917's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banks such as Maybank and CIMB. Stored data is further protected by AES-256 encryption at the database level.

PDPA 2010 Compliance

Kiss917 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the processing of personal data in Malaysia. Every aspect of our data handling has been reviewed to ensure compliance with all provisions of this Act.

No Data Sales

Kiss917 has never sold and will never sell players' personal data to any third party. Your data is not our business commodity. Data sharing with external parties only occurs in limited circumstances explicitly stated in this policy and only with your consent.

Your Data, Your Control

Kiss917 players have full rights to access, correct, delete or export their personal data at any time. These rights can be exercised easily through your account settings or by contacting our Privacy Officer directly.

Minimal Data Retention

Kiss917 retains personal data only for as long as necessary for the stated purpose or as required by law. Data that is no longer needed is deleted or anonymised in accordance with strict, auditable security procedures.

Data Breach Notification

In the event of any data breach affecting your personal information, kiss917 is committed to notifying you and the relevant authorities within the timeframe required by law, along with the steps taken to address the incident.

Section 1

Personal Data Collected by Kiss917

To provide a complete and secure service, kiss917 collects several categories of personal data from players. We only collect what is strictly necessary for the stated purposes — no excessive or irrelevant data collection.

Categories of data collected during registration and account use:

  • Identity information: Full name, date of birth, Malaysian identity card number (MyKad) or passport number
  • Contact information: Email address, mobile phone number.
  • Financial information: Bank account numbers, e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals, transaction history.
  • Verification information (KYC): Photo or scanned copy of your identity document, proof of address such as a utility bill or recent bank statement
  • Platform usage data: IP address, device and browser type, operating system, login history, game and betting activity history.
  • Communication information: Records of interactions with the customer support team, complaints submitted, and feedback provided.

Note: Kiss917 does not collect sensitive data such as health information, religious beliefs, political opinions, or biometric data unless specifically required by regulatory obligations.

Data may also be collected indirectly through your use of the platform — for example, your betting records, games played, session times and duration, and interactions with specific platform features on kiss917 are automatically logged as part of normal system operations.

Section 2

How Kiss917 Uses Your Personal Data

Kiss917 uses the personal data collected for the following purposes, all of which are directly related to providing a safe and quality platform experience to players in Malaysia:

  • Account management: To create, manage, and maintain your account on kiss917, including processing your registration, verifying your identity, and managing your account settings.
  • Transaction processing: To process deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX and other payment methods, and to process withdrawals to your bank account or e-wallet
  • Legal and regulatory compliance: To fulfil legal obligations including Know Your Customer (KYC) requirements, anti-money laundering (AML) compliance, and reporting to the relevant regulatory authorities
  • Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account use, system exploitation and any other illegal activity that could harm other players or the platform
  • Product improvements: To analyse platform usage patterns in order to understand player needs and make data-driven decisions on improvements to be made
  • Customer support: To handle your inquiries, complaints, and support requests effectively.
  • Service communications: To send important notifications related to your account such as deposit confirmations, withdrawal alerts, policy updates and security information
  • Marketing (with consent): To send information about kiss917 promotions, bonuses, and new offers — only to players who have given consent to receive marketing communications

Kiss917 does not use your personal data to make automated decisions that adversely affect you without appropriate human review. Any significant decision affecting your account — such as a suspension or closure — involves a review by trained staff.

Section 3

Data Sharing with Third Parties

Kiss917 does not sell, rent, or share players' personal data with third parties for their own marketing purposes. Data sharing only occurs in the following limited circumstances and with appropriate safeguards in place:

  • Payment providers: Required transaction information is shared with payment providers such as TNG Digital (Touch 'n Go), Grab Financial Group (GrabPay), and the banks handling FPX solely to process your deposits and withdrawals.
  • Technology service providers: Cloud infrastructure providers and technical service partners that help operate the kiss917 platform may have limited access to data strictly for technical operational purposes, under strict confidentiality agreements.
  • Game software providers: Live casino game providers and betting platforms may receive the transaction data necessary to verify game outcomes and resolve technical disputes
  • Legal authorities: kiss917 will disclose personal data to legal, regulatory or enforcement authorities when lawfully required to do so by court order, warrant, or applicable legislation in Malaysia
  • Business transfer: If kiss917 is involved in a merger, acquisition or asset sale, players' personal data may be transferred as part of that transaction, subject to appropriate notification to affected players

All third parties that receive data from kiss917 are required to protect it to a standard at least equivalent to the protection we provide, and are prohibited from using it for any purpose other than those specified.

Section 4

Kiss917 Data Security Measures

Kiss917 continually invests in security infrastructure to ensure that Malaysian players' personal data is always protected using the latest technology. The following are the key security measures we have in place:

  • Data encryption in transit: All communications between your device and kiss917's servers use TLS 1.3 with 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.
  • Data encryption at rest: Personal data stored in the kiss917 database is protected with AES-256-bit encryption — the same encryption standard used by government security agencies worldwide
  • Internal access controls: Access to players' personal data within the kiss917 organisation operates on a "need-to-know" basis — only staff who require access to carry out their duties are permitted to do so, and all access is logged and monitored.
  • Two-factor authentication: Internal staff with access to data systems are required to use two-factor authentication (2FA) for all access, reducing the risk of unauthorised entry even in the event of a compromised password
  • Regular penetration testing: kiss917 conducts penetration testing at least every six months through accredited independent cybersecurity firms to identify and patch any vulnerabilities before they can be exploited
  • 24-hour security monitoring: Automated security monitoring systems operate around the clock to detect any unusual activity or unauthorised access attempts
  • Incident response plan: Kiss917 has a comprehensive security incident response plan that sets out procedures for responding to any data breach within defined timeframes.

While no security system can guarantee 100% protection under all circumstances, kiss917 is committed to maintaining the highest security standards achievable with current technology.

Section 5

Your Rights Over Personal Data at kiss917

As a kiss917 player and data subject under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold about you:

  • Right to access: You have the right to obtain a copy of the personal data we hold about you. Access requests will be processed within 21 business days.
  • Right to rectification: If the personal data we hold about you is inaccurate, outdated or incomplete, you have the right to request that we correct it
  • Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal data from our systems — known as the "right to be forgotten"
  • Right to object to processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and we will cease such processing immediately
  • Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
  • Right to data export: You may request a copy of your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform at any time

To exercise any of the above rights, contact kiss917's Privacy Officer by email at privacy@kiss917.click or through customer support. We will verify your identity before processing any data-related request, as a security measure to ensure no third party can access or delete your data.

These rights do have limitations — for example, we may be unable to delete data required for legal compliance, such as financial transaction records that Malaysian law mandates be retained for a specified period.

Section 6

Cookies, Tracking Technologies & Analytics

The kiss917 platform uses cookies and similar tracking technologies to enhance the user experience and collect analytical data that helps us understand how players use the platform. The types of cookies we use are as follows:

  • Essential cookies (required): Required for core platform functions such as maintaining your login session, remembering your preferences and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality
  • Performance cookies: Collecting information about how you use the platform — such as the pages you visit most often and any error messages you encounter — to help us improve the user experience. This data is gathered in aggregate form and does not personally identify you.
  • Functional cookies: Allows the platform to remember your preferences such as your selected language, your usual betting limits and personal display settings
  • Analytics cookies: Kiss917 uses internal analytics tools to understand platform usage patterns. This data is used solely for product improvement and is not shared with third parties for advertising purposes

You can manage cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality of the kiss917 platform. For more information on managing cookies in popular browsers, refer to your browser's help documentation.

Kiss917 does not use third-party cookies for advertising or cross-site tracking purposes. We do not partner with any ad networks that track user behaviour across the internet.

Section 7

Data Retention & Deletion

Kiss917 retains players' personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. The following are general guidelines on our data retention periods:

  • Active account data: Retained for as long as your account is active with kiss917 and for a reasonable period after account closure for security and compliance purposes
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
  • KYC data (identity verification documents): Retained for a minimum of 5 years after account closure in accordance with regulatory requirements
  • System and security logs: Retained for 12 months for security investigation and audit purposes
  • Customer support communication records: Retained for 3 years for dispute resolution and service improvement purposes
  • Marketing data (with consent): Retained until you withdraw consent or request deletion

Once the applicable retention period has ended, data will be permanently deleted from all kiss917 systems using secure deletion methods that ensure the data cannot be recovered — or irreversibly anonymised so that it can no longer be personally associated with you.

Section 8

Contact Kiss917's Privacy Officer

Kiss917 has appointed a Privacy Officer responsible for overseeing compliance with this privacy policy and handling enquiries and complaints relating to personal data. If you have any questions, concerns or complaints regarding how kiss917 handles your personal data, you may reach us through the following channels:

  • Privacy Officer Email: privacy@kiss917.click
  • General Support Email: support@kiss917.click
  • Live Chat: Available 24 hours within the kiss917 platform (response time <3 minutes)

Kiss917 is committed to responding to all privacy-related enquiries within 14 business days from the date the request is received. For more complex requests such as data deletion or data export, the full process will be completed within 21 business days.

If you are dissatisfied with how kiss917 has handled your complaint, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) under the Ministry of Communications and Digital.

All privacy enquiries submitted via email or live chat are formally logged and handled by dedicated trained staff specialising in privacy matters — not by general support agents.

Understanding Kiss917's Privacy Policy — A Quick Guide for Malaysian Players

When you register an account on kiss917 and start playing — whether you're betting on the Malaysia Super League, playing baccarat at the live casino, or competing in MPL Malaysia esports — you naturally share personal information with the platform. A fair question to ask is: where does that information go, and who can see it? Kiss917's Privacy Policy answers these questions transparently, without confusing legal jargon.

The key thing to understand is that kiss917 collects data solely for legitimate operational purposes — not to sell to advertisers or third-party marketers. When you deposit using Touch 'n Go or GrabPay, transaction information is shared with the respective payment provider solely to process your payment. These providers are bound by strict confidentiality agreements and may not use the data for any other purpose.

Why Does Kiss917 Need to Verify Your Identity (KYC)?

Many new kiss917 players ask this question — especially when asked to submit a MyKad image or bank statement before their first withdrawal is processed. The KYC (Know Your Customer) process is an industry-standard requirement that exists for several important reasons, all of which are there to protect players themselves.

First, KYC protects you from account misuse — if someone else attempts to access your account and make a withdrawal, the verification process ensures that withdrawals are only processed to the legitimate account holder. Second, it is a legal requirement in Malaysia under Anti-Money Laundering regulations — as a financial platform handling significant fund flows, kiss917 has a legal obligation to know its customers. Third, it protects all players from being on a platform used by criminals — platforms that enforce strict KYC are safer for everyone.

KYC documents submitted to kiss917 are stored with full encryption and are accessible only to authorised personnel. They will not be shared with any party unless required by a court order or Malaysian legal obligation.

What Happens to Your Data If You Close Your Account?

This is an important question, and kiss917 addresses it clearly. When you close your kiss917 account, not all data is deleted immediately, as certain legal obligations require specific records to be retained. Financial transaction records, for instance, must be kept for a minimum of 7 years under Malaysian laws relating to financial institutions and anti-money laundering. This is not discretionary — it is a legal requirement that applies to all financial platforms operating in Malaysia.

However, data not subject to legal retention requirements — such as marketing preferences, cookie data, and older customer support communications — will be deleted or anonymised within a reasonable period after account closure. If you would like to know exactly what data we retain about you after your account is closed, contact our Privacy Officer for a detailed breakdown.

Financial Transaction Security at kiss917

For most kiss917 players, the most privacy-sensitive area involves financial transactions — deposits and withdrawals. When you make a deposit using Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay or FPX, the data flow works as follows: your payment details are transmitted directly to the respective payment provider via an encrypted connection — kiss917 does not store your full account number or sensitive card details in our systems.

What kiss917 stores are transaction records — the amount, time, method and status — not the full details of your payment instrument. This means that even in the highly unlikely event of a kiss917 system breach, an attacker would not gain access to your full bank account or e-wallet number, as that information has never been fully stored by us.

Privacy Policy Updates

Kiss917 will update this Privacy Policy from time to time to reflect changes in how we operate, applicable legal developments, or improvements to our privacy practices. When significant updates are made, we will notify players via in-platform notifications and by email to the address registered to your account.

We encourage players to review this Privacy Policy periodically — at least once a year — to stay informed about how your data is handled. The date of the most recent update is always displayed at the top of this document. If you have any questions or concerns after reading this policy, do not hesitate to reach out to the kiss917 privacy team — we are here to help.

Document Information

Version v3.1
Updated 1 Jan 2026
Legal PDPA 2010 MY
Language Bahasa Melayu
Status Effective

Your Data Rights

Data Access

Request a copy of your data

Amend Data

Correct inaccurate data

Delete Data

Right to erasure

Data Export

Download your data

Object to Processing

Opt out of direct marketing

Contact the Privacy Officer

privacy@kiss917.click
In-platform 24/7 Live Chat
Response within 14 business days

Join Kiss917 Safely

Your data is fully protected. Claim your welcome bonus of up to RM917.

Register Now

Your Rights as a Kiss917 Data Subject

A plain-language summary of your rights over the personal data kiss917 holds about you.

Right of Access

Request a complete copy of the personal data we hold about you. We will provide a detailed report within 21 working days.

Right to Rectification

If your data is inaccurate or outdated, you may request a correction. Amendments are processed within 7 business days of verification.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data — subject to any applicable legal retention requirements.

Data Portability

Export your personal data in a machine-readable format such as CSV for your own use or to transfer to another platform.

Right to Object

Object to the processing of your data for direct marketing purposes at any time. Processing will cease immediately upon receipt of your request.

Right to Withdraw Consent

Withdraw your consent for any consent-based processing at any time, without affecting the validity of processing that took place before the withdrawal.

Frequently Asked Questions on Kiss917's Privacy Policy

The most common questions asked by Malaysian players about privacy and data protection at kiss917.

kiss917 does not sell or share players' personal data with third parties for their own marketing purposes. Data sharing occurs in limited cases only: with payment providers such as TNG Digital and Grab Financial solely to process your deposits and withdrawals, with technical infrastructure providers who assist in operating the platform under strict confidentiality agreements, and with legal authorities when required by court order or applicable Malaysian law. In all such cases, data is shared only to the extent necessary and recipients may not use it for any other purpose.

When you make a deposit using Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay or FPX, the payment process takes place over a 256-bit SSL encrypted connection. Sensitive details such as your full account number are never stored in kiss917's systems — they are transmitted directly to the respective payment providers, and only a transaction token is returned to us. This means kiss917 retains a record that a transaction occurred and its amount, but not the full details of your payment instrument. This approach is known as payment tokenisation and is the gold standard of security in the digital finance industry.

Yes, you can request the deletion of your personal data from kiss917's systems. However, there are important limitations to be aware of: financial transaction records must be retained for a minimum of 7 years under Malaysian laws governing financial institutions and anti-money laundering — this is a legal obligation that cannot be waived. KYC documents must also be retained for a minimum of 5 years following account closure. Data outside these categories — such as marketing preferences, cookie data, and support communications — can be deleted upon your request. To submit a deletion request, contact our Privacy Officer at privacy@kiss917.click with the subject line "Data Deletion Request".

In the event of a security incident that may affect your personal data, kiss917 has comprehensive incident response procedures in place. We will: first identify and isolate the incident to prevent any further exposure; then assess the scope and severity of the breach; notify affected players via email and platform notification within the timeframe required by law, explaining what occurred, what data may have been affected, and the steps taken; and report to Malaysia's Personal Data Protection Department if the incident is significant. We will also provide players with guidance on steps they can take to protect themselves, such as changing their password or monitoring account activity.

There are several straightforward ways to stop receiving marketing communications from kiss917. The easiest is to click the "Unsubscribe" link found at the bottom of any marketing email we send. You can also manage your communication preferences through your kiss917 account settings under "Notification Preferences", where you can choose in detail which types of communications you wish to receive or opt out of. A third option is to contact kiss917 customer support via live chat or email and request that your email address be removed from the marketing list. Such requests will be processed within 5 business days. Opting out of marketing emails does not affect important transactional emails such as deposit or withdrawal confirmations — you will still receive communications necessary for the operation of your account.

Secure Account, Protected Data — Ready to Play?

Create a free account at kiss917 with confidence that your personal data is always protected. Claim your welcome bonus of up to RM917 today.

Register Free Now View All Bonuses
Touch 'n Go GrabPay DuitNow Boost ShopeePay FPX
Officially Licensed
SSL 256-bit
PDPA 2010
24x7 Support
No Data Sales
Awards 2026

Responsible Gaming

Player well-being is at the heart of everything we do at kiss917. Enjoy our platform in a safe and responsible way.

Self Deposit Limit

Set your own daily or weekly deposit limits through your kiss917 account settings. The control is in your hands — adjust it to reflect your actual financial situation.

Self-Exclusion Feature

Suspend your own account for a period of your choosing — anywhere from 24 hours to 6 months — if you feel you need a break from the platform without having to contact anyone.

18 Years and Above Only

All kiss917 games and services are intended for individuals aged 18 and above. Age verification is strictly enforced on all new accounts and prior to withdrawals.

Kiss917's Privacy Commitment at a Glance

Kiss917 is committed to protecting the personal data of all Malaysian players in accordance with the Personal Data Protection Act 2010. We use 256-bit SSL and AES-256 encryption to safeguard your data, do not sell data to third parties, and give you full control over your personal information. For privacy-related inquiries, please contact our Privacy Officer at privacy@kiss917.click or read Terms & Conditions for more information on how we operate.

Bahasa Melayu