Kis918 ori Privacy Policy – Personal Data Protection for Malaysian Players

kis918 ori ("we", "our platform") are committed to protecting the privacy of every individual who uses our services. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you register for and use our online betting platform.

This policy is drawn up in accordance with sound data protection principles and is intended to ensure that every Malaysian player who trusts kis918 ori clearly understand how their information is managed. We believe transparency is the foundation of trust, and your trust is something we take seriously.

This Privacy Policy covers all information you provide to us directly during registration, deposits, withdrawals, and use of the platform, as well as information collected automatically through your use of our website and app. If you have any concerns about how we handle your data, please reach out to our support team via live chat 24/7.

kis918 ori collects your personal data through two main methods — information you provide directly, and information collected automatically when you use our platform.

Information you provide directly:

• Registration Information: Username, password (stored in encrypted hash form), Malaysian phone number, and email address.
• Identity Verification Information (KYC): Full name, national identification number (MyKad), date of birth and supporting documents where required for verification.
• Financial Information: The eWallet or bank account details you registered for deposit and withdrawal purposes — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u or CIMB Clicks.
• Communication Records: History of conversations with our support team via live chat or email.

Information collected automatically:

• Usage Data: Pages visited, features used, time spent on the platform, and navigation history.
• Technical Data: IP address, browser type, operating system, screen resolution, and device information.
• Approximate Location Data: Geographic location based on IP address for compliance and security purposes – we do not collect precise GPS coordinates.
• Betting Records: Betting history, deposits, withdrawals, and all financial transactions within your account.
• Cookie Data: Session information and cookies that help enhance your experience on our platform.

kis918 ori uses the personal data collected solely for legitimate purposes that are relevant to the provision of our services. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying and managing your account; processing login requests; granting access to platform features appropriate to your account status.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX; processing withdrawals to your registered payment method; settling winning transactions.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate account usage, and any violations of the platform's Terms & Conditions.
• Legal Compliance: To fulfil regulatory compliance requirements, including KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures.
• Customer Support: Responding to your enquiries and complaints; resolving disputes related to betting or transactions; providing technical assistance.
• Platform Improvements: Analysing usage patterns to improve platform design, performance and features; testing new features prior to launch.
• Service Communications: Sending important notices regarding your account, changes to our terms, relevant promotions, and platform updates via email or SMS.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and to enforce limits you have set yourself in your account settings.

kis918 ori does not share your personal data with third parties except in the following limited and controlled circumstances:

• Payment Service Providers: To process your deposit and withdrawal transactions, we are required to share the necessary financial information with providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks that support FPX. This sharing is strictly limited to the information needed to complete the relevant transaction.
• Game Providers: To facilitate live casino games, slots and Sports Betting, providers such as Evolution Gaming and Pragmatic Play may receive limited game session data. These providers are bound by strict data protection agreements.
• Legal Authorities: Where required by Malaysian law or a directive from a competent authority, we may be obliged to disclose certain information. We will endeavour to notify you of any such disclosure unless prohibited by law.
• Fraud Prevention: In cases involving suspected fraud, money laundering, or other illegal activity, we may share relevant information with the appropriate law enforcement authorities.

All third parties we work with are bound by data protection agreements that prohibit them from using your data for any purpose other than what has been specified, or from disclosing your data to other parties without our authorisation.

kis918 ori implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Technical security measures we have in place:

• Encryption in Transit: All communications between your browser and our servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Storage Encryption: Sensitive data such as passwords is stored using a strong hashing algorithm (bcrypt) – meaning that even if an attacker gains access to the database, your actual password cannot be retrieved.
• Two-Factor Authentication (2FA): The 2FA feature is available to all accounts and is strongly recommended as an added layer of protection.
• Multi-Layered Firewall: Our server infrastructure is protected by multi-layered firewalls and an intrusion detection and prevention system (IDS/IPS) that monitors threats in real time.
• Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent third parties.
• Internal Access Controls: Only employees who require access to specific data in order to perform their duties are granted such access — in accordance with the principle of least privilege.

While we take all reasonable steps to protect your data, no system is 100% immune to every threat. You also play an important role in keeping your account secure by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

kis918 ori retains your personal data only for as long as necessary to fulfil the purposes of collection stated in this Privacy Policy, or as required by applicable law.

Our general data retention guidelines are as follows:

• Active Account Data: For the duration that your account remains active on the platform kis918 ori.
• Financial Records: Minimum 7 years after each transaction, as required by Malaysian financial and anti-money laundering laws.
• KYC Records: Minimum 5 years after account closure, for compliance purposes and to resolve any disputes that may arise at a later date.
• Communication Logs: 2 years after the last interaction, for customer support reference purposes.
• Responsible Gambling Data: Data relating to self-limits and self-exclusion is retained for the prescribed period to ensure its continued effectiveness.

Once the retention period has elapsed, data will be securely deleted or anonymised in accordance with established procedures. You may request early deletion of your data within the limits permitted by law – please refer to the Your Rights section below for more details.

As a player kis918 ori, you have several important rights regarding your personal data. We respect these rights and make it easy for you to exercise them:

To exercise any of the rights above, please contact the support team kis918 ori via live chat 24/7 or by email at support@kis918ori.com. We will respond to your request within 14 business days. For complex cases, this period may be extended to 30 days, with prior notice to you.

kis918 ori uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of some platform features. kis918 ori. Session cookies are automatically deleted when you close your browser, while persistent cookies have a set expiry date.

kis918 ori is an online betting platform strictly restricted to individuals aged 18 and above. We do not knowingly collect personal data from children or minors under the age of 18.

If we determine that personal data has been collected from an individual under the age of 18, we will take the following steps immediately:

• Immediate suspension of the account in question without prior notice.
• Deleting all personal data collected from that individual.
• Freezing any financial balance in the account until the investigation is complete.
• Reporting the matter to the relevant authorities if necessary.

Parents and guardians are advised to use parental control software on devices shared with children to prevent access to betting websites. If you suspect that a child has registered an account at kis918 ori, please contact our support team immediately.

In the course of its operations, kis918 ori may need to transfer your personal data to servers or service providers located outside Malaysia, particularly international game providers we work with such as Evolution Gaming and Pragmatic Play Live.

All such data transfers are carried out with adequate safeguards in place:

• Binding data processing agreements with all third-party providers that receive player data.
• Use of standard contractual clauses recognised for cross-border data transfers.
• Selection of service providers operating in jurisdictions with equivalent or stronger data protection laws.
• Regular audits of the data protection practices of our third-party providers.

We do not transfer data to countries that lack adequate data protection standards without appropriate additional safeguards in place.

kis918 ori reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. The "Updated" date at the top of this document will always reflect the date of the most recent revision.

For material changes — that is, changes that significantly affect your privacy rights or the way we use your data — we will:

• Sending a notice to your registered email address at least 14 days before the changes take effect.
• Displaying a clear notice within the platform when you log in.
• Providing a summary of key changes so you can easily understand how they affect you.

Continued use of the platform kis918 ori after the effective date of any such amendment will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the procedures set out herein.

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data at kis918 ori, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the platform kis918 ori. This is the fastest way to get a response.
• Email: support@kis918ori.com – for more detailed privacy enquiries or formal requests relating to your data rights. We will respond within 2 business days.

When submitting a personal data request, please include your user ID or account email so we can identify and process your request more efficiently. For security purposes, we may need to verify your identity before processing certain requests.