How 91kiss Protects Your Data
These cards summarise the key privacy principles 91kiss follows. Full details are set out in the policy sections below.
AES-256 Encryption at Rest
All personal data stored by 91kiss is encrypted using AES-256 — the same standard used by financial institutions globally. Your information is protected even in the event of an infrastructure breach.
TLS 1.3 Data in Transit
Every data transmission between your device and the 91kiss platform — login, deposit, withdrawal, support chat — is secured with TLS 1.3 encryption. Your data cannot be intercepted in transit.
No Sale of Personal Data
91kiss does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your information is used exclusively for the operational purposes described in this Policy.
Minimal Third-Party Sharing
Personal data is shared only with regulated payment partners (such as Maybank, CIMB, Touch 'n Go) and KYC verification services strictly necessary for platform operation. All partners are contractually bound to handle your data securely.
Your Rights Are Upheld
You have the right to access, correct, and request deletion of your personal data at any time. Requests are handled by our Data Protection team within 14 working days of receipt.
Defined Retention Periods
91kiss retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Financial transaction records are retained for a minimum of 5 years in compliance with anti-money laundering obligations.
This Privacy Policy ("Policy") is issued by 91kiss ("91kiss", "we", "us", "our"), the operator of the online entertainment platform accessible at https://91kiss.cam and all associated interfaces. This Policy governs the collection, use, storage, disclosure, and protection of personal data belonging to players ("you", "Player", "User") who access or use the 91kiss platform.
91kiss is committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Policy is designed to give you a clear and transparent understanding of how your information is used at every stage of your relationship with the 91kiss platform — from initial account registration through to account closure.
By registering a 91kiss account, depositing funds, participating in any game or promotion, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are available on the 91kiss platform and are incorporated by reference.
If you have any questions about this Policy or how 91kiss handles your personal data, please contact our Data Protection team at [email protected] before using the platform.
The following terms have the meanings assigned to them below throughout this Policy:
91kiss collects personal data across several categories depending on your level of engagement with the platform. The table below sets out the categories of data collected and the context in which each category arises:
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, MyKad or passport number | Account registration, KYC verification |
| Contact Data | Email address, Malaysian mobile number, residential address (Kuala Lumpur, Penang, Johor Bahru, etc.) | Account registration, support enquiries |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history in MYR | Deposit and withdrawal processing |
| Identity Documents | Scanned MyKad, passport photo page, selfie verification image | KYC identity verification (first withdrawal) |
| Technical Data | IP address, device type, browser version, operating system, session timestamps | Automatic collection during platform use |
| Behavioural Data | Game history, betting patterns, session duration, pages visited, bonus activity | Automatic collection during gameplay |
| Communication Data | Live chat transcripts, email correspondence, support ticket records | Customer support interactions |
| Preference Data | Language preference, notification settings, responsible gambling tool configurations | Account settings, responsible gambling setup |
91kiss does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless explicitly required for responsible gambling compliance purposes and with your prior consent.
91kiss collects personal data through the following channels and mechanisms:
The majority of personal data we hold is provided directly by you during account registration, KYC submission, deposit and withdrawal requests, completion of responsible gambling tool configurations, and communications with our support team via live chat, WhatsApp, or email correspondence addressed to [email protected].
Technical and behavioural data is collected automatically when you access the 91kiss platform. This includes data collected through browser cookies, server logs, session tracking scripts, and analytics tools. This data helps us maintain platform security, investigate fraud, improve game performance, and personalise your experience.
In limited circumstances, 91kiss may receive personal data about you from regulated third-party sources, including: identity verification service providers used to conduct KYC checks; payment processors such as FPX, DuitNow, and e-wallet operators for the purpose of transaction verification; and fraud prevention databases where permitted by applicable law.
91kiss processes personal data for the following specific, legitimate, and documented purposes:
- Account Creation and Management: Processing registration information to create and maintain your 91kiss account, including email verification, password reset procedures, and account settings management.
- Identity Verification (KYC): Verifying your identity and age using government-issued documentation to comply with responsible gambling requirements and anti-money laundering obligations before processing withdrawal requests.
- Transaction Processing: Processing deposits and withdrawal requests in MYR via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, and FPX.
- Responsible Gambling Compliance: Monitoring account activity for indicators of problematic gambling behaviour; administering self-exclusion orders, deposit limits, and session timers configured by you or applied by our compliance team.
- Fraud Prevention and Security: Analysing transaction patterns, login activity, and device data to detect and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorised access.
- Customer Support: Using communication records to respond to and resolve support enquiries raised via live chat, WhatsApp, or email, and to improve support quality through internal training.
- Platform Personalisation: Using behavioural and preference data to present relevant game recommendations, promotional offers, and interface settings tailored to your activity patterns.
- Legal and Regulatory Compliance: Retaining financial records and identity data for the minimum periods required by applicable anti-money laundering regulations and other mandatory legal obligations.
91kiss does not use your personal data for unsolicited marketing to third parties, nor does it process your data in ways that have not been disclosed in this Policy.
91kiss processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:
| Legal Basis | Processing Activities |
|---|---|
| Contractual Necessity | Account registration, transaction processing, KYC verification, customer support — processing necessary to fulfil our contractual obligations to you under the Terms & Conditions |
| Legitimate Interests | Fraud prevention, security monitoring, platform analytics, responsible gambling monitoring, multi-accounting detection — where our legitimate operational interests do not override your privacy rights |
| Legal Obligation | Anti-money laundering record retention, age verification, mandatory reporting to regulatory authorities where required by applicable law |
| Consent | Optional marketing communications (where you have opted in), non-essential cookies, and any processing for purposes not covered by the above bases |
91kiss does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:
- Payment Service Providers: Financial institutions and payment processors including Maybank, CIMB, Public Bank, RHB, Hong Leong Bank, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay receive transaction-relevant data strictly necessary to process your deposits and withdrawals in MYR.
- KYC and Identity Verification Partners: Regulated third-party identity verification providers receive identity documents submitted during KYC verification. These providers process data under strict data processing agreements and are not permitted to use your data for any purpose other than identity verification.
- Game Software Providers: Third-party game developers whose titles are hosted on the 91kiss platform may receive anonymised session data necessary for game delivery and fairness certification. No personally identifiable information is shared with game providers.
- Fraud Prevention Services: Anonymised or pseudonymised technical data may be shared with fraud prevention databases to identify and block known fraudulent actors or devices.
- Legal and Regulatory Authorities: 91kiss will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
All third parties with whom 91kiss shares personal data are contractually required to implement appropriate technical and organisational security measures and to process your data only for the specific purposes authorised by 91kiss.
The 91kiss platform uses cookies and similar tracking technologies to support platform functionality, maintain session security, and gather anonymised usage analytics. The cookies used by 91kiss fall into the following categories:
These cookies are essential for the platform to function correctly. They enable secure login sessions, maintain your authenticated state while you navigate the platform, and facilitate secure transaction flows. These cookies cannot be disabled without materially impairing your ability to use the platform.
Functional cookies store your interface preferences, including language settings, responsible gambling tool configurations, and notification preferences. They ensure that the platform remembers your choices between sessions.
Anonymised analytics cookies collect aggregated data about how players use the 91kiss platform — including which pages are visited most frequently, session duration, and game category preferences. This data is used solely to improve platform performance and user experience. No personally identifiable information is included in analytics data sets.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. 91kiss does not use third-party advertising or cross-site tracking cookies.
91kiss retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Anti-money laundering obligations |
| Financial Transaction Records | Minimum 5 years from transaction date | Legal and regulatory requirement |
| KYC Identity Documents | Duration of account + 5 years post-closure | Regulatory compliance |
| Support Communication Records | 3 years from last interaction | Legitimate interest — quality and compliance |
| Technical & Log Data | 12 months from collection | Security and fraud prevention |
| Analytics Data (Anonymised) | 24 months (rolling) | Platform improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.
91kiss implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:
- AES-256 encryption for all personal data stored at rest on 91kiss infrastructure
- TLS 1.3 protocol for all data transmitted between your device and the 91kiss platform
- Multi-factor authentication options for player account access
- Role-based access controls limiting staff access to personal data strictly on a need-to-know basis
- Real-time intrusion detection systems and security event monitoring
- Regular penetration testing conducted by independent third-party security specialists
- Formal data breach response procedures, including notification protocols where a breach is likely to result in a risk to your rights and freedoms
While 91kiss implements robust security measures, no system is entirely impervious to security risks. You play an important role in protecting your data — keep your login credentials confidential, enable two-factor authentication, and notify us immediately if you suspect unauthorised access to your account.
Subject to applicable law and certain conditions, you hold the following rights in respect of your personal data held by 91kiss. To exercise any of these rights, submit a written request to our Data Protection team at [email protected]:
You have the right to obtain confirmation of whether 91kiss processes your personal data and, if so, to receive a copy of the personal data we hold about you along with information about how it is processed.
You have the right to request correction of inaccurate personal data held about you, and to have incomplete data completed. Some corrections may require re-submission of KYC documents.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, or where you withdraw consent. This right is subject to overriding legal retention obligations.
You may request that 91kiss restrict the processing of your data in certain circumstances — for example, where the accuracy of the data is contested or where processing is unlawful but you prefer restriction to deletion.
Where processing is based on legitimate interests, you have the right to object. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
91kiss will respond to all data subject rights requests within 14 working days of receipt. In complex cases, this may be extended to 30 days with notification. We do not charge a fee for handling data rights requests in normal circumstances.
The 91kiss platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the associated account and delete the relevant data without retention.
If you are a parent or guardian and believe that your child has registered or accessed the 91kiss platform, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and operate a zero-tolerance policy.
Age Enforcement: 91kiss requires all players to complete identity verification confirming their date of birth before processing their first withdrawal. Any account where the registered holder is found to be under 21 years of age will be immediately and permanently closed.
91kiss reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. Where amendments are material, we will notify registered players by displaying a prominent notice on the platform or by email to the address registered on your account, providing at least 7 days' advance notice before the updated Policy takes effect.
The current version of this Privacy Policy, together with its effective date, is always available on this page. We encourage you to review this page periodically. Your continued use of the 91kiss platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.
If you do not agree with any amendment to this Policy, you should cease using the platform and may request account closure by contacting our support team via live chat or at [email protected].
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 91kiss, please contact our Data Protection team using the details below. We endeavour to respond to all privacy-related enquiries within 14 working days.
Available 24/7 via the support button on the platform — available in English, Bahasa Melayu, and Mandarin
Data rights requests: within 14 working days. General privacy enquiries: within 3 working days.
More from 91kiss
Now that you've reviewed our Privacy Policy, explore what else 91kiss has to offer. For players aged 21 and above only.