Privacy Policy 916kiss – Our Commitment to Protecting Your Personal Data

916kiss collects various types of personal data required to deliver our services safely and effectively. The following are the categories of data we collect:

Your personal data is collected through several different methods as you interact with the 916kiss platform:

• Account Registration: When you register as a new 916kiss member, you provide basic information such as your name, phone number, and email address directly.
• KYC (Identity Verification) Process: To meet compliance and security requirements, we may request a copy of your identification document, such as your MyKad, when necessary.
• Financial Transactions: Payment-related information (such as your eWallet account holder name) is collected when you make a deposit or withdrawal via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX.
• Platform Usage: Technical and usage data is collected automatically through cookies, server logs, and other tracking technologies as you browse and use the 916kiss platform.
• Support Communications: When you contact the 916kiss support team via Live Chat, WhatsApp, or email, the content of those communications is stored for record-keeping and service improvement purposes.
• Third Parties: In certain cases, we may receive data from authorised business partners for verification or fraud prevention purposes.

916kiss uses the personal data collected for the following purposes, all grounded in a valid legal basis under Malaysia's PDPA:

916kiss takes a highly restrictive approach to sharing your personal data. We does not sell, rent or trade your personal data to any third party for their own marketing purposes. Data sharing only occurs in the following situations:

• Payment Providers: Information required to process financial transactions is shared with authorised payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX providers including Maybank and CIMB. Such sharing is kept to a minimum and limited strictly to what is necessary to complete the transaction.
• Game Software Provider: Your username (not your real identity) may be shared with casino and sports software providers for the purpose of managing game sessions.
• Legal Compliance: 916kiss will disclose personal data when required to do so by Malaysian law, court order or a duly authorised law enforcement agency.
• Fraud Prevention: In situations where we suspect fraud or illegal activity, information may be shared with relevant regulatory bodies or financial institutions for investigation purposes.

Protecting your personal data is our top technical and organisational priority. 916kiss implements multiple layers of security to keep your data safe from any threat:

• 256-bit SSL/TLS Encryption: All data communications between your device and 916kiss servers are fully encrypted using the latest encryption protocols.
• Encryption of Data at Rest: Sensitive data stored in our databases is also encrypted — including financial information and identity verification documents.
• Strict Access Controls: Only 916kiss staff who require access to specific data to perform their duties are permitted to do so, in accordance with the principle of least privilege.
• Two-Factor Authentication (2FA): 916kiss's internal administration system requires mandatory 2FA for all staff access to user data.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect any unauthorised access attempts or suspicious activity.
• Regular Security Audits: 916kiss undergoes penetration testing and security audits by independent third parties on a regular basis to identify and address vulnerabilities.

916kiss retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law:

• Active Account Data: Retained for the duration your account is active, plus one (1) year following account closure.
• Financial Transaction Data: Retained for seven (7) years in accordance with financial record requirements under Malaysian law.
• KYC Data (Identity Verification): Retained for five (5) years from the date of collection or account closure, whichever is later, in line with AML requirements.
• Technical Log Data: Retained for twelve (12) months for security and technical troubleshooting purposes.
• Communication Records: Emails and customer support records are retained for three (3) years.

Once the retention period expires, your personal data will be securely deleted or anonymised in line with industry best practices.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 916kiss:

To exercise any of the rights above, please contact our privacy team at support@916kiss.ws with the subject line "Data Privacy Rights Request". We will process your request within thirty (30) calendar days of receipt.

916kiss uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the 916kiss platform.

In the course of platform operations, certain personal data may be transferred to, stored, or processed outside Malaysia — for example, on cloud servers hosted in the Asia Pacific region.

In all cases of cross-border data transfers, 916kiss ensures that:

• The receiving country or entity provides a level of data protection equivalent to or greater than Malaysia's PDPA
• Appropriate data transfer agreements have been put in place with the relevant partners
• Data transferred is kept to a minimum and limited to only what is strictly necessary
• All data transfers comply with applicable legal requirements in Malaysia

The 916kiss platform is strictly for users aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

Should we become aware that personal data of a person under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians with concerns about underage use of the platform are welcome to contact us at support@916kiss.ws.

916kiss reserves the right to update this Privacy Policy from time to time in response to changes in law, technology or our business practices. Where material amendments are made, we will:

• Publishing the updated version on the 916kiss website with a clear effective date
• Sending a notification to your registered email address if the amendment is significant
• Displaying an in-platform notice for at least 14 days before the amendment takes effect

Continued use of the 916kiss platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 916kiss handles your personal data, please contact our Data Privacy Officer: