9kiss Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 9kiss ("9kiss", "we", "us", or "our") collects, uses, stores, and discloses personal data when you register for, access, or use the 9kiss platform at 9kiss.win and all associated services.

9kiss is committed to protecting the privacy of all players and visitors. We process personal data in a manner that is lawful, fair, and transparent — and we collect only the data that is necessary for the purposes described in this Policy.

By using the 9kiss platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how 9kiss handles your personal data, please discontinue use of the platform and contact us to close your account.

This Policy should be read together with the 9kiss Terms & Conditions and Responsible Gaming Policy. All 9kiss accounts are strictly restricted to individuals aged 21 and above.

2. Data Controller

9kiss is the data controller responsible for the personal data collected through the 9kiss platform. If you have any questions about how your data is processed, or wish to exercise your data rights, you may contact our Data Protection point of contact at:

• Email: [email protected]
• Live Chat: Available daily from 8:00 AM to 2:00 AM (MYT) via the 9kiss platform.

3. Data We Collect

9kiss collects personal data across the following categories:

9kiss does not collect sensitive personal data (such as racial or ethnic origin, political opinions, or health data) beyond what is strictly necessary for age and identity verification purposes.

4. How We Use Your Data

9kiss uses collected personal data for the following purposes:

• To create and maintain your 9kiss account and verify your identity and age (21+).
• To process deposits, withdrawals, and bonus transactions in MYR through your chosen payment method.
• To detect and prevent fraud, money laundering, and unauthorised account access.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
• To monitor gameplay patterns for the purposes of responsible gaming intervention, where required.
• To send transactional communications (account confirmations, payment notifications, security alerts).
• To send promotional communications where you have provided explicit consent to receive them.
• To improve the 9kiss platform's performance, features, and user experience based on aggregated analytical data.
• To resolve disputes and enforce the 9kiss Terms & Conditions.

5. Legal Basis for Processing

9kiss processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 9kiss — including account operation, payment processing, and customer support.
• Legal obligation: Processing required for 9kiss to comply with applicable laws, including AML regulations, age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, which you may withdraw at any time.

6. Data Sharing and Disclosure

9kiss does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. These processors handle data only as instructed by 9kiss.
• Identity verification providers: To perform KYC checks and confirm that players meet the 21+ age requirement.
• Fraud prevention and security services: To identify and investigate suspicious activity, chargebacks, or potential money laundering.
• Regulatory authorities: Where required by applicable law, court order, or regulatory investigation, 9kiss may disclose personal data to the relevant governmental or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all assets of 9kiss, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom 9kiss shares personal data are required to process that data only for the specified purpose and in accordance with applicable data protection requirements.

7. Data Retention

9kiss retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in compliance with AML and regulatory obligations.
• Transaction and gameplay records: Retained for a minimum of 5 years from the date of the transaction.
• Communication records: Retained for a minimum of 2 years from the date of the communication.
• Marketing consent records: Retained until consent is withdrawn plus 1 year thereafter.

When personal data is no longer required, 9kiss will securely delete or anonymise it in accordance with our internal data disposal procedures.

8. Security Measures

9kiss implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS encryption for all data transmitted between your device and the 9kiss platform — the same standard used by Malaysian banking applications such as Maybank2u and CIMB Clicks.
• Encryption of stored sensitive data, including identity documents and payment credentials.
• Role-based access controls ensuring that only authorised 9kiss personnel can access personal data, limited to their specific operational need.
• Regular security assessments and penetration testing of the 9kiss platform infrastructure.
• Comprehensive audit logging of all data access events.
• Multi-factor authentication for administrative access to systems holding personal data.

Notwithstanding the above, no internet transmission or electronic storage system is guaranteed to be 100% secure. If you have reason to believe that your 9kiss account has been compromised, please contact our support team immediately.

9. Cookies and Tracking Technologies

9kiss uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies used are as follows:

• Essential cookies: Required for the 9kiss platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled.
• Analytical cookies: Used to collect aggregated, anonymised data about how players navigate and use the 9kiss platform, enabling us to improve features and performance.
• Preference cookies: Store your platform preferences such as language and display settings across sessions.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 9kiss platform.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data 9kiss holds about you:

• Right of access: You may request a copy of the personal data 9kiss holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that legal and regulatory retention obligations may limit this right.
• Right to restriction: You may request that 9kiss restrict the processing of your personal data in certain circumstances.
• Right to data portability: You may request that certain personal data be provided to you in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on legitimate interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time.

To exercise any of the above rights, please contact 9kiss support via live chat or email at [email protected]. We will respond to all requests within 30 days. Identity verification may be required before we can fulfil your request.

11. Children's Privacy

The 9kiss platform is strictly restricted to individuals aged 21 and above. 9kiss does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account and delete all associated personal data.

If you have reason to believe that a minor has accessed or registered on the 9kiss platform, please notify us immediately at [email protected].

12. Changes to This Policy

9kiss reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or a prominent notice on the 9kiss platform at least 7 days prior to the changes taking effect.

Your continued use of the 9kiss platform after any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically. The "Last Updated" date at the top of this page reflects when the Policy was most recently revised.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 9kiss holds about you, please contact us through any of the following channels:

• Email: [email protected]
• Live Chat: Available daily from 8:00 AM to 2:00 AM (MYT) via the 9kiss platform.

This Privacy Policy was last reviewed and updated in June 2026.