Minimal Data Collection
We collect only the personal information strictly necessary to operate your account, process payments and comply with regulatory obligations. We do not collect data for its own sake.
Data & Privacy
kis999 Privacy Policy
kis999 is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how it is used and stored, and the rights available to you as a player on our platform. Please read this document carefully alongside our Terms & Conditions.
Effective Date: 1 January 2026
Version: 2.0
Language: English
Our Core PrivacyCommitments
Six principles guide every decision we make about how your personal data is handled at kis999.
Secure Data Storage
All personal data held by kis999 is stored on encrypted servers protected by industry-standard access controls. Data in transit is secured using 256-bit TLS encryption.
No Unauthorised Sharing
kis999 does not sell, rent or share your personal information with third parties for marketing purposes. Data is only shared with partners necessary to deliver the service.
Transparent Purpose
You are entitled to know exactly why your data is collected and what it is used for. This policy explains each processing purpose in plain, accessible English.
Your Rights Respected
Players retain the right to access, correct, delete or restrict processing of their personal data. Requests are handled within a reasonable time following identity confirmation.
Limited Retention
Personal data is retained only for as long as necessary to fulfil its original purpose or to meet legal, regulatory and dispute-resolution requirements, after which it is securely deleted.
1
Introduction
This Privacy Policy ("Policy") issued by kis999 ("we," "us," "our," "Platform") and governs the collection, processing, storage, disclosure and deletion of personal data relating to individuals ("you," "Player "User") who access or use the website located at kis999.cam and any associated services.
kis999 operates the Platform for the benefit of online casino and sports betting players based primarily in Malaysia. This Policy is intended to be clear, specific and consistent with the data protection principles applicable to international online gaming operators serving the Malaysian market.
By creating an account, making a deposit or otherwise accessing the Platform, you acknowledge that you have read this Policy, that you understand how your personal data will be handled and that you consent to the processing activities described herein to the extent that such consent is required as a legal basis. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.
Note to Players
If you have any questions about how your personal data is used, or if you wish to exercise any of the rights described in Section 12, please contact our support team using the details provided in Section 14.
2
Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Definition |
|---|---|
| Personal Data | Any information that directly or indirectly identifies a living individual, including name, identification number, contact details, device identifiers and financial information. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, restriction or deletion, whether performed automatically or manually. |
| Data Controller | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is kis999. |
| Third-Party Processor | An external organisation that processes personal data on behalf of kis999, under written instruction and subject to data processing obligations equivalent to those in this Policy. |
| Cookie | A small text file stored on your device by the Platform to support functionality, session management and analytics. |
| KYC | Know Your Customer — the identity and payment verification process described in the Terms & Conditions and referenced in this Policy. |
3
Personal Data We Collect
The categories of personal data that kis999 collects depend on the nature of your interaction with the Platform. The following data categories may be collected:
Identity Data
Full Legal Name
Date of Birth
MyKad / NRIC
Passport Number
Driver's License
Selfie / Photo ID
Contact Data
Email Address
Mobile Number
Residential Address
City & Postcode
Financial Data
Deposit Amounts (MYR)
Withdrawal Requests
E-Wallet Account ID
Bank Account Reference
Crypto Wallet Address
Transaction History
Technical & Device Data
IP Address
Browser Type & Version
Device Model & OS
Session Timestamps
Referer URL
Behavioural & Usage Data
Pages Visited
Game Titles Accessed
Wager Amounts
Session Duration
Bonus Interactions
kis999 does not collect or store full payment card numbers or banking login credentials. Payment processing is handled by certified third-party payment partners, including Touch'n Go eWallet, Boost, DuitNow, FPX and GrabPay, who manage their own security environments.
4
How We Collect Your Data
Personal data is collected through the following mechanisms:
- Direct submission — information you provide voluntarily when registering an account, completing KYC verification, contacting support, or submitting a deposit or withdrawal request;
- Automated technical collection — data generated automatically by your device and browser when you access the Platform, including IP addresses, session identifiers and cookies;
- Payment partner integration — transaction references and payment status information transmitted to kis999 by integrated payment processors including Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow and e-wallet providers; and
- Identity verification providers — confirmation data returned by third-party KYC and document verification services engaged by kis999 to validate identity documents.
5
Purposes & Legal Basis for Processing
kis999 processes personal data for the following purposes, each supported by a corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract between the Player and kis999 |
| Identity verification (KYC) | Legal obligation under anti-money laundering and fraud prevention requirements |
| Processing deposits and withdrawals | Performance of a contract |
| Customer support and complaint handling | Legitimate interests of kis999 in providing effective service |
| Fraud detection and platform security | Legitimate interests and legal obligation |
| Responsible gambling tools and monitoring | Legitimate interests and legal obligation |
| Platform improvement and analytics | Legitimate interests, subject to anonymisation where possible |
| Promotional communications (where opted-in) | Consent, which may be withdrawn at any time |
6
Data Sharing & Disclosure
kis999 does not sell, rent or otherwise transfer your personal data to any third party for their own commercial or marketing purposes. Personal data may be disclosed to the following categories of recipient solely to the extent necessary for the purposes described in this Policy:
- Payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and direct banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank) — to process deposits and withdrawals in MYR or cryptocurrency;
- Identity verification providers — third-party KYC and document verification services engaged to confirm the authenticity of identity documents submitted during account opening or review;
- Fraud prevention and security services — providers of automated risk-assessment and anti-fraud tools used to identify suspicious activity;
- Customer support infrastructure — live chat and ticketing platform providers who process communications on behalf of kis999 under strict confidentiality obligations; and
- Regulatory and law enforcement authorities — where kis999 is legally compelled to disclose information in connection with an investigation, court order or binding regulatory directive.
Third-Party Obligations
All third-party processors engaged by kis999 are required to enter into written data processing agreements that prohibit further disclosure of your data without authorisation and mandate security standards equivalent to those applied by kis999 directly.
7
International Data Transfers
As an internationally operated online gaming platform, some of the third-party processors engaged by kis999 may process personal data in jurisdictions outside Malaysia. Where such transfers occur, kis999 takes steps to ensure that appropriate contractual safeguards are in place to maintain a level of data protection consistent with this Policy.
Data transfers to payment processors serving Malaysian players — including e-wallet providers and FPX-connected banks — are subject to the data governance requirements applicable to those institutions under Malaysian financial services regulation.
8
Data Retention
kis999 retains personal data for no longer than is necessary for the purposes set out in this Policy, unless a longer retention period is required by applicable law, regulatory obligation or legitimate dispute-resolution need. The following indicative retention periods apply:
- Account and identity data — retained for the duration of the account relationship plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements;
- Transaction and financial data — retained for a minimum of five years from the date of the transaction in line with financial record obligations;
- Support communications — retained for three years from the date of the communication or longer where related to an unresolved dispute; and
- Technical and device data — retained for twelve months unless extended for active fraud investigation purposes.
Following the expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous. Players who request account closure may still have certain data retained for the minimum statutory periods described above.
9
Cookies & Tracking Technologies
The kis999 Platform uses cookies and similar tracking technologies to support the operation of the website, maintain session continuity and collect usage analytics. The following categories of cookie are used:
- Strictly necessary cookies — required for the Platform to function correctly, including session management, account authentication and security token verification. These cannot be disabled;
- Performance and analytics cookies — used to understand how Players interact with the Platform, which pages are visited most frequently and where technical issues arise. Data collected through these cookies is aggregated and anonymised where possible; and
- Preference cookies — used to remember settings and choices you have made on the Platform, such as language or display preferences.
Cookie Management
You may adjust your browser settings to block or delete cookies, though disabling strictly necessary cookies may prevent the Platform from functioning correctly. Please refer to your browser's help documentation for instructions on managing cookie preferences.
10
Children & Minors
The kis999 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect, process or retain personal data from any individual who is under the age of 21. Account registration requires confirmation of age, and identity verification procedures are in place to detect and prevent underage access.
If kis999 becomes aware that personal data has been collected from an individual who is under the age of 21, that data will be deleted promptly, the associated account will be permanently closed and any deposits received will be returned where practicable. If you believe that a minor has registered on the Platform or provided personal data to us, please contact our support team immediately using the details in Section 14.
11
Security Measures
kis999 implements a range of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration and disclosure. These measures include but are not limited to:
- 256-bit TLS encryption for all data transmitted between your device and the Platform;
- Encrypted storage of personal data at rest on protected servers with restricted access;
- Multi-factor authentication requirements for all internal staff accounts that interact with Player data;
- Role-based access controls ensuring that personnel can only access personal data necessary for their specific function;
- Regular internal security reviews and penetration testing by qualified security professionals; and
- Automated monitoring for anomalous access patterns or data handling activities that may indicate a security incident.
While kis999 takes all reasonable steps to protect your personal data, no digital system can be guaranteed to be entirely free from risk. If you become aware of any unauthorised access to your account, you should change your password immediately and notify our support team without delay.
12
Your Data Rights
Subject to applicable law and to verification of your identity, you may exercise the following rights in relation to your personal data held by kis999. Requests should be submitted to the support address in Section 14 and will be processed within 30 days of identity confirmation.
Right of Access
Request a copy of the personal data kis999 holds about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held your account profile.
Right to Erasure
Request deletion of your personal data where retention is no longer necessary and no overiding legal obligation exists.
Right to Restrict Processing
Request that processing of your personal data is limited to storage only while a dispute or accuracy query is being resolved.
Right to Data Portability
Request a machine-readable copy of personal data you have provided directly to kis999, where technically feasible.
Right to Withdraw Consent
Withdraw consent for processing activities based on consent, such as marketing communications, at any time without affecting prior lawful processing.
13
Amendments to This Policy
kis999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, regulatory requirements or the services we offer. Where changes are material, affected Players will be notified by email to their registered address or through a prominent notice on the Platform prior to the change taking effect.
The revised Policy will display an updated effective date at the top of this page. Your continued use of the kis999 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to any updated version of this Policy, you should cease using the Platform and may request voluntary account closure.
14
Contact Us
If you wish to exercise any of the rights described in Section 12, have a question about this Policy or wish to raise a concern about the handling of your personal data, please contact the kis999 data support team in writing using the contact details below.
Data & Privacy Contact
Email (plain text — not a clickable link): support@kis999.cam
Please mark the subject of your message clearly as a privacy or data request. Include your registered name and account email address so that we can verify your identity before processing the request. We aim to acknowledge all written requests within 5 business days and to provide a substantive response within 30 days.
For responsible gambling enquiries, including self-exclusion or deposit limit requests, please refer to our Responsible Gambling Policy page for guidance and the relevant contact procedure.
Your Data Is Protected
Play atkis999 with Confidence
Your privacy and security are foundational to the kis999 experience. If you are satisfied with how we handle your personal data, visit the homepage to explore our full range of VIP games and sports betting markets. Play responsibly —21+ only.