99kiss Privacy Policy – Malaysia User Data Protection

99kiss collects various types of information to provide you with a secure and high-quality service. The information collected includes:

Every piece of information we collect is used for legitimate and reasonable purposes only. The following are the main reasons we process your personal data:

• Account management: Creating, verifying, and maintaining your user account securely.
• Transaction processing: Processing deposits, withdrawals, and all financial activity in your account accurately and promptly.
• Identity verification (KYC): Ensuring every user is a verified individual who meets the age eligibility requirements under Malaysian law.
• Platform security: Detecting and preventing fraudulent activity, hacking, and system abuse.
• Customer support: Enabling our team to assist you more effectively whenever you need support.
• Personalize your experience: Personalizing content, promotions, and game recommendations based on your preferences.
• Service communications: Sending important notifications related to your account, transactions, and platform updates.
• Legal compliance: Meeting our obligations under Malaysian law, including PDPA 2010 and related regulations.

99kiss does not sell, rent, or trade your personal information to any third party for commercial purposes. However, there are limited circumstances where we may need to share your information:

• Payment service providers: Carefully selected financial institutions and payment processors handle your transactions — all parties are bound by strict confidentiality agreements.
• Technology service providers: Companies that help us manage the technical infrastructure, hosting, and platform security — their access is limited to technical requirements only.
• Identity verification agencies: Third parties that assist with the KYC process to verify user identity.
• Legal authority: We are required to comply with valid court orders or official requests from Malaysian law enforcement authorities.
• Business transfers: In the event of a merger, acquisition, or asset sale, user information may be transferred as part of the business assets — users will be notified in advance.

We invest seriously in security infrastructure to ensure your personal data is always protected. The key security measures we employ include:

• 256-bit SSL encryption: All data transmitted between your device and our servers is protected with industry-grade encryption — no information is sent in plain text.
• Database encryption: Sensitive information such as passwords and financial details are stored in encrypted form on our servers.
• Two-factor authentication (2FA): An additional security layer is available for all user accounts to prevent unauthorized access.
• Continuous threat monitoring: Our systems are monitored around the clock to detect any suspicious activity or intrusion attempts.
• Regular security audits: Internal security audits and penetration testing are carried out regularly by our dedicated security team.
• Internal access control: Only authorised staff may access user data, and every access is logged for audit purposes.

The 99kiss platform uses cookies and similar tracking technologies to enhance the user experience and analyze platform usage. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use our platform — this data is used to improve user experience and website performance.
• Functional Cookies: Saving your preferences such as language, region, and display settings for a seamless ongoing experience.
• Analytics Cookies: Helping us understand overall usage patterns without identifying individual users.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal information. 99kiss respects and facilitates the exercise of these rights:

99kiss retains your personal information for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.

• Active account data: Retained for the duration your account is active and for 7 years after account closure for financial compliance purposes.
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• Security logs: Retained for 2 years for security incident investigation purposes if required.
• Support communication data: Retained for 3 years to ensure continuity of customer support services.
• Marketing data (with consent): Retained until you withdraw consent or close your account.

Once the retention period has ended, your data will be securely deleted or fully anonymized so it can no longer be linked to your identity. The deletion process is carried out automatically by our system on a scheduled basis.