Privacy Policy kis819 — Member Data Protection in Malaysia

When you register and use the platform kis819, we collect several categories of information to ensure our services function properly, securely, and in compliance with regulatory requirements. We only collect what is strictly necessary — nothing more.

In general, the information we collect can be divided into three main categories: information you provide directly during registration or interaction with the platform, information automatically generated while you use our services, and information received from legitimate third parties such as payment processors.

Every piece of information we collect is used for a specific and legitimate purpose. kis819 does not use member data for purposes unrelated to the provision of platform services, legal compliance or the improvement of user experience.

• Account Registration & Verification: Name, phone number, and email are used to create and verify member accounts and to facilitate account recovery when needed.
• KYC & Compliance Process: Identity documents are used to fulfill Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations in line with regulatory compliance requirements.
• Financial Transaction Processing: Bank account information is used solely to process your deposits and withdrawals securely and accurately.
• Customer Support: Account information is used by our support team to identify you and resolve inquiries or issues more efficiently.
• Platform Security: Technical data such as IP addresses and device information is used to detect and prevent unauthorized access, fraud, and suspicious activity.
• Experience Personalisation: Game history and member preferences help us recommend relevant games and promotions suited to your interests.
• Platform Communications: Email and phone number are used to send important notifications related to your account, transactions, and platform updates.
• Service Improvement: De-identified usage data is used to analyze usage patterns and continuously improve platform performance and features.

We do not use your information to send marketing communications from third parties. Any promotional communications from kis819 itself is directly related to our platform and services, and you may opt out at any time through your account settings.

kis819 takes our responsibility to protect member privacy seriously. We do not share, sell or transfer your personal information to third parties except in limited and legitimate circumstances as outlined below.

• Payment Service Providers: Required financial transaction information is shared with authorised payment processors such as local banks and digital wallet providers operating in Malaysia, solely to process your transactions.
• Game Software Providers: Minimum data required to enable gameplay is shared with our game provider partners, who have signed strict data protection agreements.
• Regulatory Authority: We comply with legal obligations to disclose information to law enforcement agencies or government authorities when required by law or a valid court order.
• KYC Verification Services: Your KYC documents may be shared with recognized third-party identity verification service providers who are bound by confidentiality agreements.

Member data security is our highest priority kis819. We continuously invest in the latest security infrastructure to ensure your personal information is always protected against cyber threats, unauthorized access, and data breaches.

Our security system is designed with a layered defence approach — each layer acts as an additional barrier that must be passed before any access to member data can occur. This means that even if one layer of defence is breached, the subsequent layers continue to protect your data.

• Data Encryption in Transit: All communications between your browser or app and kis819 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 encryption.
• Role-Based Access Control: Access to member data is restricted by role and staff job responsibilities. All access is automatically logged and monitored.
• Firewall & Intrusion Detection System: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection systems (IDS) operating 24/7.
• Two-Factor Authentication: All staff accounts with access to internal systems are protected by mandatory two-factor authentication.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. Should any security incident occur that affects your data, we will notify impacted members within a reasonable timeframe and take immediate action to mitigate the impact of the incident.

Platform kis819 uses cookies and similar tracking technologies to enhance your experience, maintain session security and understand how members interact with our platform.

Cookies are small text files stored in your web browser when you visit our platform. They do not contain information that directly identifies you, such as passwords or ID numbers, but help us recognise your browser and remember your preferences.

You can manage or delete cookies through your web browser settings at any time. Please note that deleting or blocking essential cookies may affect platform functionality and your login experience. Analytics cookies can be disabled without affecting core platform functions.

As a member kis819, you have certain rights regarding the personal information we hold about you. We fully respect these rights and provide clear channels for you to submit any requests related to your personal data.

• Right of Access: You have the right to request a copy of the personal information we hold about you. Such requests will be processed within 14 working days.
• Right of Rectification: If your personal information is inaccurate or incomplete, you have the right to request that we correct or complete it promptly.
• Right to Erasure: In certain circumstances, you may request that we delete your personal information. Please note that some data may need to be retained to fulfill legal or contractual obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain situations, such as while the accuracy of the data is under investigation.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.

kis819 retains members' personal information for as long as your account is active or as long as necessary to provide services to you. Following account closure, we retain required records for a specified period to fulfil legal obligations, resolve disputes and enforce our agreements.

• Active Account Data: Retained for the duration your account remains active and updated whenever you provide new information.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with applicable financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or the end of the business relationship, whichever is later.
• Support Communication Logs: Retained for 2 years for quality control purposes and reference in the event of a dispute.
• Technical Data & System Logs: Retained for 90 days for security monitoring and technical troubleshooting purposes.
• Analytics Cookie Data: Automatically deleted after 90 days or when you clear cookies in your browser.

Once the defined retention period has elapsed, your data will be securely deleted or permanently anonymised so it can no longer be associated with you as an individual. This deletion process is carried out in accordance with established procedures to ensure the data cannot be recovered.

We take your privacy seriously and are always ready to address any inquiries, concerns, or requests related to this Privacy Policy or how we handle your personal data.

If you find any inaccuracies in your personal information, or if you wish to raise a complaint regarding data processing, our privacy team will respond within 5 business days.

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or new platform features. The latest update date will always be displayed at the top of this document. Significant changes will be communicated to all active members via email or in-platform notifications.