1 Introduction
KIS198 ("we", "our", "us", "the Platform") operates the online gaming and sports betting platform accessible at kis198.cam. We are committed to protecting the privacy of our players ("you", "your", "User") and handling all personal data responsibly, transparently, and in accordance with applicable data protection principles.
This Privacy Policy describes in detail how KIS198 collects, processes, stores, shares, and protects your personal information when you access our platform, register an account, make deposits using Malaysian payment methods such as Touch 'n Go eWallet, Boost, Maybank FPX, CIMB, DuitNow, or USDT TRC20, or interact with any of our services.
This policy should be read alongside our Terms & Conditions, which govern the overall agreement between you and KIS198. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.
Scope: This Privacy Policy applies to all personal data collected through the KIS198 website (kis198.cam), any associated mobile-optimised pages, and direct communications channels including live chat and email support. It does not apply to third-party websites that may be linked from or to our platform.
2 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
3 Data We Collect
KIS198 collects Personal Data across several categories depending on your interaction with the Platform:
3.1 Registration Data
When you create a KIS198 account, we collect:
- Full legal name (as per your Malaysian MyKad or passport)
- Date of birth (to verify 21+ age eligibility)
- Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
- Email address and mobile phone number
- Preferred username and encrypted password (passwords are never stored in plaintext)
3.2 Identity Verification (KYC) Data
Before withdrawal privileges are activated, we collect identity verification documents including:
- Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent)
- Proof of residential address (utility bill, bank statement, or official correspondence — not older than 3 months)
- Source of funds documentation, where required under anti-money laundering (AML) obligations
- Payment method verification documents (e.g., screenshot of Touch 'n Go eWallet profile, bank account confirmation)
3.3 Transaction & Financial Data
- Deposit and withdrawal amounts, dates, and payment methods used (e.g., Boost eWallet, GrabPay, Maybank FPX, DuitNow, USDT TRC20)
- Transaction reference numbers and confirmation codes
- Account balance history and bonus transaction records
- Partial payment account identifiers (e.g., masked bank account numbers, e-wallet registered phone numbers)
3.4 Platform Usage Data
- Games played, bet amounts, wager history, and session durations
- Device type, operating system, browser version, and screen resolution
- IP address and approximate geolocation (country and city level)
- Click behaviour, navigation paths, and feature engagement data (collected in aggregate)
3.5 Support & Communication Data
- Content of live chat, email, and WhatsApp support interactions
- Feedback and complaint submissions
- Records of responsible gambling tool usage (e.g., deposit limit changes, self-exclusion requests)
4 How We Use Your Data
KIS198 processes your Personal Data for the following defined purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation & management | Registration data, contact details | Contract performance |
| Identity verification (KYC) | ID documents, address proof | Legal obligation |
| Payment processing | Transaction data, payment method details | Contract performance |
| Fraud & AML compliance | Transaction history, IP data, device fingerprints | Legal obligation |
| Customer support | Communication records, account history | Contract performance |
| Responsible gambling tools | Betting history, session data, limit settings | Legal obligation / Consent |
| Platform improvement | Usage analytics (anonymised) | Legitimate interest |
| Promotional communications | Email address, communication preferences | Consent |
| Legal compliance & reporting | Account data, transaction records | Legal obligation |
Marketing Communications: KIS198 may send promotional emails about bonuses, new games, and platform updates to players who have opted in. You may withdraw consent at any time by contacting support at [email protected] or by following the unsubscribe instructions in any marketing email.
5 Legal Basis for Processing
KIS198 processes your Personal Data on the following legal grounds, as applicable to each processing activity:
- Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered KIS198 player — including account management, payment processing, and game provision.
- Legal Obligation: Processing required to comply with applicable laws and regulatory obligations — including KYC identity verification, anti-money laundering record-keeping, and responsible gambling compliance.
- Legitimate Interest: Processing carried out in the legitimate interests of KIS198 where those interests are not overridden by your rights — including fraud prevention, platform security, and anonymised usage analytics to improve service quality.
- Consent: Processing activities for which KIS198 has obtained your prior explicit consent — primarily marketing communications and optional profiling. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Data Sharing & Disclosure
KIS198 does not sell, rent, or trade your Personal Data. We share data only in the following strictly controlled circumstances:
- Payment Processors: Licensed payment gateway operators handling your deposits and withdrawals — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services for USDT TRC20. These processors receive only the minimum data necessary to execute your transaction.
- KYC & Identity Verification Providers: Regulated third-party identity verification services that assist KIS198 in confirming player identity and verifying submitted documents in compliance with AML obligations.
- Fraud Detection & Security Services: Technology providers that assist KIS198 in detecting fraudulent activity, multi-accounting, and suspicious transaction patterns. All such providers operate under binding data processing agreements.
- Customer Support Platforms: Licensed live chat and support ticketing infrastructure providers. These providers process support communications on behalf of KIS198 under strict data processing terms.
- Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory directive, KIS198 may disclose Personal Data to relevant government bodies or law enforcement agencies. We will, where legally permitted, notify you of such disclosure.
- Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of KIS198's business, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations being maintained.
We do not share your Personal Data with advertising networks, data brokers, or unaffiliated third parties for marketing or commercial purposes.
7 Cookies & Tracking Technologies
KIS198 uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the Platform. The following categories of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Functional | Session authentication, login state, security tokens, language preference | No — required for platform to function |
| Performance / Analytics | Anonymous usage statistics (pages visited, session duration, device type) to improve platform performance | Yes — opt out via browser settings |
| Preference | Remembers your preferred game categories, display settings, and deposit method | Yes — clearing cookies resets preferences |
| Fraud Prevention | Device fingerprinting and session integrity checks to detect suspicious activity | No — required for platform security |
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using KIS198, but may affect certain personalisation features. KIS198 does not use cookies for cross-site advertising tracking.
8 Data Retention
KIS198 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active Account Data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
- KYC & Identity Documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, as required by anti-money laundering regulations.
- Transaction Records: Financial transaction records are retained for a minimum of seven (7) years to comply with financial reporting and audit requirements.
- Support Communications: Chat logs and email records are retained for two (2) years from the date of the interaction, unless the communication relates to an ongoing dispute or investigation.
- Marketing Consent Records: Retained for three (3) years from the date of consent withdrawal, to evidence compliance in the event of a regulatory inquiry.
- Anonymous Analytics Data: Retained indefinitely in anonymised, aggregated form for platform improvement purposes. This data cannot be used to identify individual users.
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.
9 Data Security
KIS198 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction:
- Encryption: All data transmitted between your device and KIS198 servers is protected using TLS 1.3 (Transport Layer Security). Personal Data stored in our databases is encrypted at rest using AES-256 encryption.
- Access Controls: Access to Personal Data systems is restricted to authorised KIS198 personnel and verified third-party processors only, and is governed by role-based access control (RBAC) policies. All access is logged and audited.
- Two-Factor Authentication: KIS198 offers 2FA for player accounts and mandates it for all internal administrative access to player data systems.
- Infrastructure Security: KIS198 servers are hosted in ISO 27001-certified data centre facilities with physical security controls, redundant connectivity, and 24/7 infrastructure monitoring.
- Penetration Testing: The KIS198 platform undergoes regular independent security assessments and penetration testing to identify and remediate potential vulnerabilities.
- Incident Response: KIS198 maintains a documented data breach response procedure. In the event of a security incident affecting player data, we will notify affected players and relevant authorities in accordance with applicable legal obligations.
While KIS198 employs robust security measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account login credentials. If you suspect your account has been accessed without authorisation, contact our support team immediately at [email protected].
10 User Rights
As a KIS198 player, you hold the following rights with respect to your Personal Data. These rights may be exercised by submitting a written request to [email protected] with your verified account details. KIS198 will respond to all valid requests within thirty (30) days.
Right of Access
Request a copy of the Personal Data KIS198 holds about you and information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data in your account profile.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary, subject to legal retention obligations.
Right to Restriction
Request that KIS198 restrict processing of your data in certain circumstances (e.g., while accuracy is disputed).
Right to Portability
Receive your Personal Data in a structured, machine-readable format for transfer to another service provider.
Right to Object
Object to processing based on legitimate interests, including direct marketing and profiling activities.
Note that certain rights may be limited where processing is required to comply with a legal obligation (e.g., AML record-keeping) or to defend against legal claims. KIS198 will clearly communicate any such limitations in our response to your request.
11 Children's Privacy & Age Verification
KIS198 is strictly intended for players who are 21 years of age or older. The Platform does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. This age threshold applies in accordance with the minimum age requirements applicable to casino-style gambling activities.
All new registrations are subject to age verification as part of the account creation process. KYC identity verification — which includes submission of a government-issued identification document confirming date of birth — is required before withdrawal privileges are activated. Any account found to belong to a person under the age of 21 will be immediately suspended, all balances forfeited, and any collected Personal Data deleted in accordance with our retention policy.
If you are a parent or guardian and believe a minor has registered on KIS198 using false details, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports without delay.
12 International Data Transfers
KIS198 operates primarily in and for the Malaysian market. However, some of our Third-Party Processors — including cloud infrastructure providers and KYC service providers — may be located in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, KIS198 ensures that appropriate safeguards are in place, including:
- Binding data processing agreements incorporating standard contractual clauses requiring recipient organisations to maintain data protection standards equivalent to those applicable in Malaysia.
- Use of service providers operating within jurisdictions recognised as providing adequate data protection under applicable law.
- Technical encryption measures ensuring that data transferred internationally is protected to the same standard as data processed locally.
You may request details of the specific safeguards applicable to any international transfer of your Personal Data by contacting [email protected].
13 Third-Party Services
The KIS198 Platform may contain links to third-party websites or services — for example, game content provided by external casino software studios, or payment confirmation pages hosted by payment providers such as Touch 'n Go eWallet, Boost, GrabPay, or the Maybank and CIMB FPX gateways. This Privacy Policy does not apply to the data handling practices of those third-party services.
We encourage you to review the privacy policies of any third-party services you interact with through or in connection with KIS198. KIS198 is not responsible for the data practices of external websites or services, even where access was initiated from within the KIS198 Platform.
14 Amendments to This Policy
KIS198 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal obligations, or operational developments. The most current version of this policy — including the last-updated date and version number displayed at the top of this page — is always the applicable version.
Where changes are material (i.e., they affect how your data is used in ways that may affect your rights or reasonable expectations), KIS198 will notify registered players via their registered email address and/or through an in-platform notification at least fourteen (14) days before the updated policy takes effect.
Your continued use of the KIS198 Platform following publication of a revised Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the revised policy, you may request account closure by contacting our support team.
15 Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the KIS198 Data Support team through the channels below. We are committed to responding to all privacy-related enquiries promptly and transparently.
All formal data subject rights requests must be submitted in writing (email) and will require identity verification before processing to prevent unauthorised access to another person's data. KIS198 does not charge a fee for standard data subject access requests.