kisapk Privacy Policy — How We Handle Your Personal Data

1 Introduction

This Privacy Policy ("Policy") sets out how kisapk ("kisapk", "we", "us", "our") collects, processes, stores, uses, and protects personal data provided by or collected from users ("you", "User", "Player") of the kisapk website accessible at kisapk.cam and all associated services, including online casino games, sports betting, live dealer platforms, account management tools, and customer support channels.

By registering an account, making a deposit, or otherwise using any part of the kisapk platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the kisapk platform.

This Policy applies to all personal data collected through the kisapk Platform, whether you access it from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location in Malaysia. For Malaysian users, this Policy should be read alongside our Terms & Conditions.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, email address, date of birth, identity document numbers, IP address, and payment account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" — kisapk, as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" — any third-party service provider that processes Personal Data on kisapk's behalf, under written instruction and subject to appropriate data protection obligations.
• "KYC" — Know Your Customer; the identity and age verification process required by kisapk's licensing obligations before processing withdrawals or as part of ongoing account monitoring.
• "Cookie" — a small text file placed on your device by the kisapk Platform to enable certain technical functionality, session management, analytics, and personalisation features.
• "User" or "Player" — any natural person who has registered an account on kisapk.cam or accesses the Platform, whether or not they have completed registration.

3 Data We Collect

kisapk collects personal data in the following categories:

3.1 Identity & Account Data

• Full legal name as it appears on your identity document
• Date of birth (used to verify the mandatory 21+ age requirement)
• Nationality and country of residence
• Username and encrypted password
• Malaysian Identity Card (MyKad) number or passport number, collected during KYC verification
• Selfie or photograph submitted as part of KYC

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (where provided during KYC for proof-of-address purposes)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR and timestamps
• Payment method details — e-wallet identifiers (Touch 'n Go, Boost, GrabPay), DuitNow account references, FPX bank account identifiers, or bank account numbers for Maybank, CIMB, Public Bank, and Hong Leong transfers
• Account balance history and bonus transaction records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Session timestamps and duration
• Pages visited, games played, bets placed, and in-game actions
• Referring URLs and search terms used to reach the Platform

3.5 Communications Data

• Live chat transcripts between you and our support team
• Email correspondence with kisapk
• Records of complaints, disputes, and their resolution

4 How We Collect Data

kisapk collects personal data through the following channels:

Collection Method	Data Types Collected
Account Registration	Name, email, date of birth, username, password, phone number
KYC Verification	MyKad / passport number, address document, selfie photograph
Deposit & Withdrawal Transactions	Payment method identifiers, transaction amounts, timestamps
Platform Usage	IP address, device data, session logs, games played, bets placed
Customer Support Interactions	Live chat content, email correspondence, complaint records
Cookies & Tracking Technologies	Session cookies, analytics data, preference settings

We do not purchase personal data lists from third parties. We do not collect data from social media platforms without your explicit consent. We do not collect sensitive personal data categories (such as health data, political opinions, or biometric data beyond the photograph required for KYC) unless specifically required by our licensing obligations.

5 Data Processing & Use

kisapk processes your personal data for the following purposes:

• Account Management: Creating and maintaining your registered Account, authenticating your identity at login, and managing your Account settings and preferences.
• KYC & Age Verification: Verifying that you meet the mandatory 21+ minimum age requirement and confirming your identity in compliance with our licensing obligations. This is a non-negotiable requirement; Accounts that cannot be verified will have withdrawals suspended.
• Transaction Processing: Processing your deposits and withdrawals through your chosen payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong bank transfers.
• Fraud Prevention & Anti-Money Laundering: Monitoring transaction patterns and account behaviour for indicators of fraud, money laundering, account sharing, or other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling Monitoring: Tracking deposit patterns, session durations, and behavioural indicators to identify players who may be experiencing gambling-related harm, and applying responsible gambling interventions where appropriate.
• Customer Support: Responding to your queries, processing complaints, and resolving disputes.
• Platform Improvement: Analysing aggregated usage data to improve game performance, payment flows, and the overall user experience on kisapk.
• Legal & Regulatory Compliance: Maintaining records required by our licensing authority, responding to lawful requests from regulatory bodies, and exercising or defending legal claims.
• Marketing Communications: Where you have provided explicit consent, sending promotional communications about bonuses, new games, and platform updates. You may withdraw this consent at any time by contacting our support team.

6 Legal Basis for Processing

kisapk processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your Account — including account management, transaction processing, and KYC verification.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gambling enforcement, and platform analytics — where our legitimate interests do not override your fundamental rights and freedoms.
• Legal Obligation: Processing required to comply with applicable licensing requirements, anti-money laundering regulations, and lawful orders from competent authorities.
• Consent: Processing for optional purposes — such as marketing communications — where you have given specific, informed, and freely given consent. This consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

kisapk does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment Service Providers: E-wallet operators and banking partners (including those facilitating Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and bank transfers) receive the minimum data necessary to process your transactions.
• KYC & Identity Verification Partners: Third-party identity verification service providers who assist in authenticating your identity documents and verifying your age during the KYC process.
• Game Content Providers: Game studios that power the titles available on kisapk may receive anonymised or pseudonymised session data necessary to deliver their games; they do not receive your full identity data.
• Analytics & IT Service Providers: Technology partners who provide cloud infrastructure, data storage, cybersecurity monitoring, and platform analytics services — all operating under data processing agreements with kisapk.
• Regulatory Authorities: In response to lawful requests from our licensing authority, or where required by applicable law, we may disclose personal data to competent authorities. kisapk will notify you of such requests where legally permissible.
• Professional Advisers: Lawyers, auditors, and financial advisers engaged by kisapk, operating under legal obligations of confidentiality.

8 Cookies & Tracking Technologies

kisapk uses cookies and similar tracking technologies on our Platform. Cookies are small data files stored on your device that enable us to recognise returning visitors, maintain session state, and gather analytics data.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login sessions, secure connections, and basic navigation. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously visited game categories. These improve your experience but are not required for the Platform to operate.
• Analytics Cookies: Help us understand how users navigate the Platform — which pages are visited most, where users encounter errors, and how sessions progress. Data collected is aggregated and not linked to individual identities.
• Session Security Cookies: Used by our fraud and security systems to detect unusual login patterns and protect against unauthorised account access.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in or use core platform features. kisapk does not use cookies for third-party advertising or cross-site tracking.

9 Data Retention

kisapk retains personal data for as long as is necessary for the purposes described in this Policy, and for no longer than required by applicable laws or licensing obligations. The following general retention principles apply:

• Active Account Data: Retained for the full duration of your registered Account being open and active on kisapk.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years from the date of the interaction.
• Responsible Gambling Records: Self-exclusion requests and deposit limit records are retained for a minimum of five (5) years to prevent re-registration by excluded players during exclusion periods.
• Closed Accounts: Following account closure, kisapk will retain minimum necessary records for the periods described above, after which they will be securely deleted or anonymised.

10 Data Security

kisapk implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kisapk servers;
• Encryption of sensitive data fields (including identity document numbers and payment account references) at rest in our databases;
• Role-based access controls ensuring that only authorised kisapk personnel can access personal data, on a strict need-to-know basis;
• Regular security audits and penetration testing conducted by independent third-party security specialists;
• Two-factor authentication options for registered Account holders;
• Intrusion detection systems and 24/7 security monitoring of our infrastructure.

Notwithstanding the above, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your own Account credentials. If you suspect unauthorised access to your Account, please contact our support team immediately.

11 Your Rights

As a data subject, you have the following rights with respect to your personal data held by kisapk. These rights may be subject to applicable legal exemptions and our licensing obligations.

To exercise any of the above rights, please contact our support team at [email protected]. We will respond to all valid requests within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, with notification.

12 Children & Minors

kisapk is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If kisapk becomes aware that personal data has been collected from a person under 21, we will promptly close the associated Account, delete the personal data, and void any transactions associated with that Account.

If you are a parent or guardian and believe a minor in your care has created an Account on kisapk, please contact us immediately at [email protected]. We take underage access extremely seriously and will act on all such reports without delay.

13 International Data Transfers

As an internationally operated platform, kisapk may transfer your personal data to servers, service providers, or processors located outside of Malaysia. Where such transfers occur, kisapk will ensure that appropriate safeguards are in place — including contractual protections with receiving parties that provide a standard of data protection equivalent to that applicable under our licensing framework.

By using the kisapk Platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia where such transfers are necessary for the purposes described in this Policy.

14 Changes to This Privacy Policy

kisapk may update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or platform functionality. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we use your personal data or your rights as a data subject — we will provide advance notice by email to your registered address or by prominent on-platform notification. Your continued use of the kisapk Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you do not accept any amendment to this Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15 Contact Us

For all data protection enquiries, requests to exercise your rights under Section 11, or concerns about how kisapk handles your personal data, please contact our support team using the details below. We are available around the clock to assist Malaysian players and all users of the kisapk Platform.

Data access and erasure requests will be acknowledged within 5 business days and fulfilled within the 30-day statutory period described in Section 11. For urgent Account security concerns — such as suspected unauthorised access — please use our 24/7 live chat so that we can act immediately.