Kissh5 Privacy Policy — Protection of Your Personal Data

Welcome to the kissh5 Privacy Policy. This document is kissh5's official statement of our commitment to the privacy and personal data protection of all members and users of the kissh5.net platform in Malaysia. This Privacy Policy clearly and transparently explains how kissh5 handles your personal information — from the point of collection through to its final deletion.

Kissh5 is an online entertainment platform offering a wide range of game categories including slots, live casino, table games, roulette, digital lottery, and e-sports betting for Malaysian users. In operating the platform, kissh5 needs to collect and process certain personal information to enable members to enjoy our services safely and seamlessly.

This kissh5 Privacy Policy is prepared in compliance with the requirements of the Malaysia Personal Data Protection Act 2010 (PDPA 2010) and internationally recognised data protection principles. By registering a kissh5 account, making a deposit, or using any kissh5 services, you hereby consent to kissh5 processing your personal data as described in this Privacy Policy.

Kissh5 collects various categories of personal data depending on how you interact with our platform. The table below details the data that kissh5 may collect:

Kissh5 only collects data that is strictly necessary for legitimate operational purposes. We adhere to the principle of data minimisation — meaning we do not collect data beyond what is genuinely required to operate the kissh5 platform. Any sensitive data such as MyKad numbers is collected solely for KYC identity verification purposes as required under Malaysian law.

Kissh5 processes member personal data on a valid legal basis and only for clearly stated purposes. Below are the primary purposes for which kissh5 collects and processes data:

• Identity Verification (KYC): Verifying member identity, age, and eligibility in compliance with Malaysian legal requirements and to prevent fraud and money laundering.
• Financial Transaction Processing: Enables deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as secure and accurate processing of winnings withdrawals.
• Service Delivery: Provides access to all kissh5 games including slots, live casino, table games, roulette, lottery, and e-sports based on member preferences and profile.
• Customer Support: Enabling the kissh5 support team to provide efficient and accurate assistance whenever members reach out via live chat or email.
• Platform Security: Detects and prevents fraudulent activity, bot usage, duplicate accounts, and any security threats against the kissh5 platform.
• Service Improvement: Analysing aggregated, anonymised usage patterns to improve platform performance, user experience, and the range of games offered.
• Legal Compliance: Fulfilling reporting obligations to the relevant Malaysian authorities in accordance with current legislation.
• Marketing Communications (with consent): Sends promotional information, the latest bonuses, and exclusive kissh5 offers to members who have consented to receive such communications.

Kissh5 will not process your personal data for any purpose beyond those listed above without first obtaining your fresh consent. If you wish to withdraw consent for any specific processing purpose, please contact the kissh5 privacy team at support@kissh5.net.

Kissh5 understands how important your privacy is. We therefore enforce strict policies on who may access member personal data and under what circumstances it may be shared. kissh5 does not sell members' personal data to any third party for marketing or commercial purposes.

Your personal data may be shared with the following limited categories of third parties, solely in the context of operating the kissh5 platform:

• Payment Service Providers: Authorised payment processors including DuitNow, FPX, Touch 'n Go, GrabPay providers and participating banks, to facilitate secure financial transactions.
• Game Software Provider: Licensed game development companies that provide slots, Live Casino, and table game platforms to kissh5 — data sharing is minimal and strictly for technical integration purposes.
• Cloud Service Providers: Server hosting and data storage companies that store kissh5 data in a secure environment under strict confidentiality agreements.
• Malaysian Authority: Government agencies, law enforcement bodies, or courts where kissh5 is legally required to disclose certain information.
• Anti-Fraud Consultant: Specialist companies that assist kissh5 in detecting and preventing fraud, money laundering, and online financial crime.

All third parties working with kissh5 are required to sign Data Processing Agreement binding them to the same strict security and confidentiality standards as kissh5's internal policies. They are prohibited from using kissh5 member data for their own personal purposes.

Kissh5 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand overall platform usage patterns. Below are the types of cookies used by kissh5:

You can manage your cookie settings through your web browser or via the kissh5 cookie settings panel. Please note that disabling certain cookies may affect the functionality and user experience of the kissh5 platform.

The security of member personal data is kissh5's highest priority. We continually invest in the latest security infrastructure to keep your data protected against increasingly sophisticated cyber threats. Below are the technical and organisational security measures implemented by kissh5:

• 256-bit SSL/TLS Encryption: All communications between your device and kissh5's servers are encrypted using the latest SSL/TLS protocols. This ensures that data in transit — including login credentials and payment details — cannot be intercepted.
• Hashed Password Storage: Member passwords are never stored in plain text. kissh5 uses strong cryptographic hashing algorithms with a unique salt for each password, ensuring your password cannot be recovered even in the event of a security incident.
• Two-Factor Authentication (2FA): kissh5 supports two-factor authentication as an added security layer for member accounts. We strongly encourage all members to enable 2FA to keep their accounts protected.
• 24/7 Security Monitoring: kissh5's security monitoring system operates around the clock to detect any suspicious activity, intrusion attempts, or anomalies in account usage patterns.
• Data Segregation: Sensitive financial data is stored separately from user profile data using strict role-based access controls (RBAC).
• Regular Security Audits: kissh5 conducts regular penetration testing and security audits by qualified independent parties to identify and address any potential vulnerabilities.

Under Malaysia's Personal Data Protection Act 2010, you as a kissh5 member have the following rights regarding your personal data processed by kissh5. kissh5 is committed to facilitating the exercise of these rights in a prompt and hassle-free manner:

• Right of Access: You have the right to request a copy of the personal data kissh5 holds about you. We will process this request within 21 business days.
• Right to Rectification: If the personal data kissh5 holds about you is inaccurate or incomplete, you have the right to request prompt correction. Please contact kissh5 support with the correct information.
• Right to Erasure: You may request kissh5 to delete your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose or when you withdraw your consent. Such requests are subject to kissh5's legal data retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes, or where kissh5 processes data based on legitimate interests.
• Right to Data Portability: You may request kissh5 to provide your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: You may withdraw consent for any consent-based data processing activity at any time, without affecting the validity of processing that took place prior to withdrawal.

To exercise any of the rights above, please contact the kissh5 Privacy Officer by email at support@kissh5.net with the subject line "Privacy Rights Request". kissh5 will respond to your request within 21 business days of receipt.

Kissh5 adheres to the principle of data storage limitation — meaning your personal data will not be retained longer than necessary for its original purpose. The following is the data retention schedule observed by kissh5:

Once the retention period expires, kissh5 will securely delete or anonymise your data using industry-recognised methods such as cryptographic erasure or secure overwriting. Backup copies will also be deleted in accordance with kissh5's backup management schedule.

Kissh5 takes child protection extremely seriously. The kissh5 platform is for adult users aged 18 and above only and is not designed for or directed at minors under the age of 18. kissh5 does not knowingly collect personal data from individuals under 18 years of age.

Measures taken by kissh5 to protect children include:

• Age Verification at Registration: All kissh5 account applicants are required to confirm that they are 18 years of age or older during the registration process. This is supported by a KYC process that requires valid proof of identity.
• Mandatory KYC Process: kissh5 requires all members to complete identity verification using a MyKad or valid Malaysian passport. This ensures that only adults are able to fully access the kissh5 platform.
• Immediate Data Deletion: Should kissh5 discover that personal data of a minor has been collected without our knowledge, we will promptly delete that data and close the relevant account.
• No Marketing to Minors: kissh5 does not send any marketing communications to individuals known to be under the age of 18.

If you are a parent or guardian and believe your child under the age of 18 has registered a kissh5 account, please contact us immediately at support@kissh5.net so we can take the appropriate action without delay.

Kissh5 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, new Malaysian legal requirements, or improvements in how we protect member privacy. Any amendments take effect immediately upon publication of the updated Privacy Policy on this page.

When material amendments are made to the kissh5 Privacy Policy — that is, amendments that significantly affect how we process your personal data — kissh5 will take the following steps to inform you:

• Sending a notice to your registered email address at least 14 days before the amendment takes effect.
• Displaying a clear notice on the kissh5 platform's homepage and login page regarding upcoming amendments.
• Updating the "Last Updated" date at the top of this Privacy Policy page.
• Maintaining an archive of past versions of the Privacy Policy for members who need to refer to them.

Your continued use of the kissh5 platform after the effective date of any Privacy Policy amendment constitutes your acceptance of the updated terms. If you do not agree with any changes, you have the right to close your kissh5 account and request deletion of your personal data in accordance with the rights set out in Section 7.

If you have any questions, concerns, or complaints regarding the kissh5 Privacy Policy or how we handle your personal data, please contact the kissh5 Data Protection Officer (DPO) through the channels below. We are committed to responding within the specified timeframe:

• Privacy Email: support@kissh5.net (please use the subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Live Chat: Available 24/7 directly on the kissh5 platform — click the chat icon in the bottom right corner of your screen.
• Response Time: Within 3 business days for general enquiries; within 21 business days for formal privacy rights requests.
• Support Language: Bahasa Malaysia and English.

If you are not satisfied with how kissh5 has handled your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia which is the regulatory authority for personal data protection in Malaysia.