Privacy Policy — kis819

Section 1

Introduction

This Privacy Policy ("Policy") is issued by kis819 ("we", "us", "our"), the operator of the online gaming platform accessible at kis819.cam. This Policy applies to all personal data collected from individuals ("you", "Player", "User") who access or use the kis819 platform, whether through the website, mobile interface, or any other channel operated by or on behalf of kis819.

kis819 is committed to protecting the personal data of its players in accordance with applicable data protection laws and international best practices. Our platform is designed for Malaysian players, and we take particular care to handle personal information in a manner consistent with the expectations and legal rights of users in Malaysia.

This Policy describes in detail what personal data we collect, the purposes for which we use it, the legal bases upon which processing is conducted, how we store and secure that data, and the rights available to you as a data subject. By registering an account with kis819 and using our services, you acknowledge that you have read and understood this Policy.

Section 2

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Data Subject" — the individual to whom the personal data relates; in the context of this Policy, a registered or prospective player on the kis819 platform.
• "Data Controller" — kis819, the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of kis819 under a contractual obligation and in accordance with this Policy.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, amendment, or deletion.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Data" — identity and address verification documentation submitted by a player as part of the Know Your Customer verification process.
• "Cookies" — small text files placed on a user's device by a website for functional, analytical, or tracking purposes.

Section 3

Personal Data We Collect

kis819 collects the following categories of personal data in connection with operating the platform and delivering services to registered players:

Section 4

How We Collect Your Data

Personal data is collected through the following channels and interactions:

• Account Registration: Information you provide when creating a kis819 account, including name, date of birth, email address, and contact number.
• KYC Submission: Documents and photographs uploaded during the identity verification process, including MyKad, passport, proof of address, and selfie verification.
• Deposits and Transactions: Financial data collected when you make deposits or request withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency payment channels.
• Platform Usage: Technical and usage data collected automatically as you navigate the platform, including via cookies, log files, and session tracking tools.
• Customer Support Interactions: Information shared during live chat sessions, email correspondence, or other support channel communications.
• Promotional Participation: Data submitted when entering promotions, referring friends, or responding to platform surveys.
• Third-Party Sources: In limited circumstances, kis819 may receive supplementary data from fraud prevention agencies, identity verification service providers, or regulatory bodies where legally permitted.

Section 5

Data Processing & Use

kis819 processes your personal data for the following specific and legitimate purposes:

1. Account Administration: Creating, maintaining, and managing your kis819 player account, including processing login authentication and account updates.
2. KYC and Age Verification: Verifying your identity, age (21+), and residential address as required by responsible gambling and anti-money laundering obligations. Players on the kis819 platform must be at least 21 years of age.
3. Payment Processing: Facilitating deposit and withdrawal transactions via your selected payment method, and reconciling transaction records for accounting purposes.
4. Regulatory Compliance: Meeting obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements, including transaction monitoring and suspicious activity reporting.
5. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account takeovers, bonus abuse, and other platform integrity violations.
6. Responsible Gambling: Monitoring gaming patterns to identify indicators of problem gambling behaviour, enforcing self-exclusion orders, and applying deposit limits set by players.
7. Customer Support: Responding to enquiries, resolving disputes, and providing assistance through our 24/7 live chat and email support channels.
8. Platform Improvement: Analysing usage patterns and technical data to enhance the kis819 platform experience, fix bugs, and optimise performance for Malaysian users.
9. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. You may withdraw consent at any time by contacting support.
10. Legal Compliance: Complying with court orders, regulatory directions, law enforcement requests, and other legally mandated disclosures.

Section 6

Legal Basis for Processing

All processing of personal data by kis819 is conducted on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the account agreement with you — including payment processing, KYC verification, and account management — is conducted because it is necessary to perform the contract between us.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations — including AML/CTF legislation, responsible gambling regulations, and data retention requirements mandated by licensing authorities.
• Legitimate Interests: Processing conducted for the legitimate interests of kis819 where those interests are not overridden by your rights and interests — including fraud prevention, security monitoring, and platform optimisation. We conduct a balancing test before relying on this basis.
• Consent: Processing based on your specific, freely given, and informed consent — such as receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Section 7

Data Sharing & Disclosure

kis819 does not sell, rent, or trade personal data to third parties for their own commercial purposes. We share personal data only in the following specific circumstances and with appropriate safeguards in place:

• Payment Service Providers: Financial data is shared with the payment processors facilitating your transactions — including DuitNow operators, FPX banking network participants, and e-wallet providers such as Touch 'n Go, Boost, and GrabPay — solely for the purpose of processing your payment.
• Identity Verification Services: KYC data may be processed by third-party identity verification providers engaged by kis819, operating under strict data processing agreements and confidentiality obligations.
• Fraud Prevention Agencies: Where required to detect or prevent fraud, money laundering, or other criminal activity, data may be disclosed to fraud prevention agencies and law enforcement bodies.
• Game Content Providers: Limited technical data (such as session tokens and bet data) is shared with the game studios powering the games on our platform, solely for the purpose of delivering the game service.
• Regulatory and Legal Authorities: Personal data will be disclosed to relevant regulatory bodies, licensing authorities, law enforcement agencies, or courts where we are legally required or permitted to do so.
• Professional Advisers: In limited circumstances, personal data may be shared with legal advisers, auditors, or other professional consultants engaged by kis819, subject to professional confidentiality obligations.

Section 8

Cookies & Tracking Technologies

kis819 uses cookies and similar tracking technologies to operate the platform, maintain session security, analyse user behaviour, and deliver a consistent experience. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the platform to function — including session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, previously used payment methods, and display preferences — to provide a more personalised experience.
• Analytical Cookies: Used to collect anonymised data about how users navigate the platform, which pages are most visited, and where technical errors occur. This data helps us improve the kis819 experience for Malaysian players.
• Security Cookies: Used to detect fraudulent activity, prevent account takeovers, and monitor for suspicious login patterns.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the platform. kis819 does not currently support third-party advertising cookies.

Section 9

Data Retention

kis819 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account relationship and for a period following account closure as required by law.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of five (5) years in accordance with applicable financial record-keeping obligations.
• Gaming Logs: Bet history and game session logs are retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support Communications: Customer support transcripts and correspondence are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Marketing Data: Marketing consent records are retained until you withdraw consent, plus a period sufficient to demonstrate the basis of the consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. You may request deletion of your data before the end of the retention period by exercising your Right to Erasure as described in Section 11, subject to our legal retention obligations taking precedence where applicable.

Section 10

Data Security

kis819 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and the kis819 platform is protected using 256-bit SSL/TLS encryption. Look for the padlock icon in your browser address bar confirming the HTTPS connection.
• Storage Encryption: Sensitive data stored within kis819's infrastructure — including KYC documents, financial records, and authentication credentials — is encrypted at rest using industry-standard algorithms.
• Access Controls: Personal data is accessible only to kis819 personnel and authorised data processors who have a documented legitimate need to access it. Role-based access controls and audit logging are applied.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. Internal systems handling personal data require multi-factor authentication for staff access.
• Security Monitoring: Continuous monitoring systems detect and respond to anomalous access patterns, potential account takeover attempts, and other security incidents in real time.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, kis819 will notify affected individuals and relevant authorities as required by applicable law, within the timeframes specified by those laws.

Section 11

Your Data Protection Rights

As a data subject, you have a number of rights in relation to your personal data held by kis819. These rights may be subject to conditions and limitations under applicable law, but we are committed to facilitating their exercise in good faith. Your rights include:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will respond to valid requests within 30 days. Identity verification may be required before a request is actioned to protect against unauthorised requests.

Section 12

Minors & Age Policy

The kis819 platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. All player registrations are subject to age verification through our KYC process, and accounts where the account holder is found to be under 21 will be closed immediately.

If you believe that a minor has registered on the kis819 platform or that we have inadvertently collected personal data from a person under 21, please contact us immediately via live chat or at [email protected]. Upon confirmation, we will take immediate steps to close the account and delete the associated personal data.

Section 13

International Data Transfers

In the course of operating the kis819 platform, personal data may be transferred to and processed in countries outside Malaysia — for example, where our data processors or game content providers operate internationally. Such transfers are made only where appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent data transfer mechanisms approved by relevant regulatory authorities.
• Contractual data processing agreements with all international data processors requiring them to apply security standards equivalent to those described in this Policy.
• Transfer only to jurisdictions that provide an adequate level of data protection, or where specific adequacy measures have been implemented.

Where personal data is transferred internationally, it remains subject to the protections described in this Privacy Policy and the applicable contractual safeguards governing the transfer.

Section 14

Third-Party Services

The kis819 platform integrates with third-party services necessary to deliver our gaming and payment offerings. These include payment gateway providers, identity verification services, game content delivery networks, and customer support tooling. Each of these third parties operates under a data processing agreement with kis819 and is required to handle personal data in accordance with this Policy.

kis819 is not responsible for the privacy practices of third-party services accessed independently of the kis819 platform. If you follow any link that takes you away from kis819.cam to a third-party website or service, you are advised to review that party's own privacy policy.

Section 15

Changes to This Privacy Policy

kis819 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material, we will provide advance notice to registered players via email notification or a prominent in-platform notice prior to the changes taking effect.

The "Last Updated" date displayed at the top of this document indicates the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the platform following notification of changes constitutes acceptance of the updated Policy.

Section 16

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kis819 handles your personal data, please contact our privacy and data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the kis819 website. For data-related enquiries, please indicate "Privacy Request" at the start of your message.
• Email: [email protected] (plain text — not a clickable link). Include "Privacy Request" in your subject line for faster routing.
• Response Commitment: We acknowledge all data-related requests within 5 business days and complete them within 30 calendar days, unless the complexity of the request requires a reasonable extension — in which case we will notify you of the delay.