Privacy Policy

1.1 For the purposes of applicable data protection legislation, 888kiss is the data controller in respect of personal data collected through the Platform. As data controller, 888kiss determines the purposes and means of processing your personal data.

1.2 888kiss operates under an international gaming authority licence. Our data processing practices are designed to comply with applicable data protection laws and the requirements of our licensing authority. Enquiries relating to this Privacy Policy should be directed to our Data Protection contact at [email protected].

2.1 Depending on how you interact with the 888kiss Platform, we may collect and process the following categories of personal data:

2.2 We do not collect special category personal data (as defined under applicable data protection legislation) except where strictly required for responsible gaming obligations (for example, processing a self-exclusion request that involves health-related information) and where you have provided explicit consent or where processing is necessary for the establishment, exercise, or defence of legal claims.

3.1 Directly from you. We collect personal data that you voluntarily provide when you register an 888kiss account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, participate in a promotion, or respond to a survey.

3.2 Automatically. When you access the 888kiss Platform, we automatically collect certain Technical Data and Usage Data through cookies, log files, and similar tracking technologies. See Section 8 (Cookies) for further detail.

3.3 From third parties. We may receive personal data about you from identity verification providers (for KYC compliance), payment processors, fraud prevention services, and analytics partners. Where we receive your data from a third party, we take reasonable steps to verify that the third party had lawful authority to share it with us.

4.1 888kiss processes your personal data only where we have a lawful basis to do so. The primary purposes for which we process your data and the corresponding legal bases are set out below:

• Account registration and platform access — performance of a contract with you;
• Identity verification (KYC) — compliance with legal obligations under our gaming licence;
• Processing deposits and withdrawals — performance of a contract with you;
• Fraud prevention and anti-money laundering checks — compliance with legal obligations and our legitimate interests in protecting the Platform;
• Customer support — performance of a contract with you and our legitimate interests;
• Sending promotional communications — your consent, where obtained, or our legitimate interests where you are an existing member and we are marketing similar services (you may opt out at any time);
• Improving Platform functionality and game selection — our legitimate interests in operating and improving a quality service;
• Responsible gaming monitoring and intervention — compliance with our licensing obligations and protection of your vital interests.

4.2 Where we rely on legitimate interests as our legal basis, we have considered and balanced those interests against your rights and interests and are satisfied that our processing does not override your fundamental rights and freedoms.

5.1 888kiss does not sell your personal data to third parties. We do not disclose your personal data to external parties for their own marketing purposes.

5.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment service providers (e.g., Touch 'n Go eWallet, DuitNow, FPX processing partners) — to process deposits and withdrawals;
• Identity verification and KYC providers — to comply with our gaming licence obligations;
• Fraud prevention and anti-money laundering services — to protect the integrity of the Platform and comply with legal obligations;
• Responsible gaming organisations — where required under self-exclusion schemes or regulatory mandates;
• Regulatory and law enforcement authorities — where required by law, court order, or the lawful request of a competent authority;
• IT infrastructure and hosting providers — who process data on our behalf under strict data processing agreements.

5.3 In the event of a merger, acquisition, or sale of all or substantially all of the assets of 888kiss, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer by prominent notice on the Platform and, where required, your consent will be sought.

6.1 888kiss retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

6.2 Account data and transaction records are generally retained for a minimum of five (5) years following the closure of your account, in compliance with anti-money laundering regulations applicable to gaming operators under international licensing standards.

6.3 Responsible gaming data, including self-exclusion records, may be retained for longer periods where necessary to enforce exclusion decisions and prevent the creation of new accounts by excluded individuals.

6.4 Technical Data and Usage Data collected through cookies may be retained for shorter periods as described in Section 8.

6.5 Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

7.1 888kiss employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive stored data, including financial data and identity documents;
• Access controls — personal data is accessible only to 888kiss personnel who require it to perform their functions, and all such access is logged and audited;
• Regular security assessments and penetration testing of the Platform;
• Two-factor authentication (2FA) available on all member accounts.

7.2 While we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant regulatory authority as required by law.

8.1 The 888kiss Platform uses cookies and similar tracking technologies to distinguish you from other users, remember your preferences, and analyse how the Platform is used. This helps us provide you with a better experience and allows us to improve the Platform.

8.2 The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function (e.g., session management, login state). These cannot be disabled.
• Functional cookies — remember your preferences and settings (e.g., language, display preferences). Retention: up to 12 months.
• Analytics cookies — help us understand how members use the Platform so we can improve it. Data is aggregated and anonymised where possible. Retention: up to 24 months.
• Marketing cookies — used to show you relevant promotional content. Only placed with your consent. Retention: up to 12 months.

8.3 You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the 888kiss Platform. Instructions for managing cookies in common browsers are available from the respective browser provider's help documentation.

9.1 Subject to applicable law, you have the following rights in respect of your personal data held by 888kiss:

• Right of access — you may request a copy of the personal data we hold about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where we no longer have a lawful basis for processing it, subject to our legal retention obligations;
• Right to restriction of processing — you may request that we restrict processing of your personal data in certain circumstances;
• Right to data portability — where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format;
• Right to object — you may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

9.2 To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may need to verify your identity before processing your request.

9.3 If you are dissatisfied with our response or believe our processing infringes applicable data protection law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

10.1 The 888kiss Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals below this age. If we become aware that we have inadvertently collected personal data from a minor, we will take prompt steps to delete that data and close the associated account.

10.2 If you believe that a minor has registered on the 888kiss Platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

11.1 888kiss may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered members via their registered email address and by prominent notice on the Platform, with at least 14 days' advance notice before the changes take effect.

11.2 The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how we protect your data.

12.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which 888kiss processes your personal data, please contact our Data Protection team:

Email: [email protected]

Please include "Privacy Policy Enquiry" in your subject line and provide your registered username and a clear description of your query. We aim to acknowledge all enquiries within 48 hours and provide a substantive response within 30 calendar days.