Privacy Policy

This Privacy Policy ("Policy") describes how kis711 ("the Company", "we", "us", "our") collects, processes, stores, uses, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the online gaming platform available at https://kis711.cam ("the Platform").

This Policy applies to all personal data collected through the Platform, including data provided during account registration, data generated through your use of gaming services, and data collected automatically through cookies and similar tracking technologies. It applies equally to Malaysian players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations.

We are committed to handling your personal data in a manner that is transparent, lawful, and respectful of your privacy rights. Where we collect personal data, we do so only to the extent necessary to provide our services, fulfil our legal obligations, and protect the legitimate interests of both you and the Company.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the Company, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by the Company to process personal data on its behalf, acting under the instructions of the Company.
• "Consent" means any freely given, specific, informed, and unambiguous indication of agreement by a data subject to the processing of their personal data.
• "KYC" means Know Your Customer — the identity verification process required under our compliance obligations before certain transactions are processed.
• "Cookies" means small text files placed on your device by the Platform to store preferences, session information, and analytical data.
• "Account" means the individual registered user account held by a Player on the Platform.

The Company collects personal data across several categories depending on how you interact with the Platform. The table below provides an overview of the categories of data we collect, along with illustrative examples and the primary purpose for which each category is processed.

4.1 Data Provided Directly by You

We collect personal data that you provide to us directly when you: register an Account on the Platform; complete KYC identity verification; make a deposit or request a withdrawal; contact our support team via live chat, email, or other channels; participate in promotions, surveys, or feedback requests; or update your account profile and preferences.

4.2 Data Collected Automatically

When you access and use the Platform, certain data is collected automatically through technical systems. This includes your IP address, browser type, device type and identifiers, operating system, referring URLs, pages viewed, time spent on the Platform, clickstream data, and session identifiers. This data is collected through server logs, cookies, web beacons, and similar tracking technologies as described in Section 8.

4.3 Data Received from Third Parties

In certain circumstances, we may receive personal data about you from third parties, including: payment service providers (such as FPX processors, DuitNow operators, and e-wallet platforms) confirming transaction details; identity verification partners processing your KYC documents; fraud prevention services providing risk assessments; and analytics providers supplying aggregated usage data.

All third-party data sources are vetted to ensure they operate in accordance with applicable data protection standards. We do not purchase personal data from data brokers or unrelated third parties.

Where applicable data protection legislation requires the Company to identify a lawful basis for processing personal data, we rely on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of our contract with you — specifically, to provide you with access to the Platform, process your deposits and withdrawals, manage your Account, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary for compliance with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and responsible gambling regulations.
• Legitimate Interests: Processing is necessary for the pursuit of legitimate interests of the Company or a third party, including fraud prevention, platform security, service improvement, and responsible gambling monitoring — provided such interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent as the lawful basis for processing — for example, for marketing communications — we will make this clear at the point of data collection and provide you with a straightforward mechanism to withdraw your consent at any time.

Personal data collected by kis711 is used for the following purposes:

• Account Management: To create, verify, maintain, and administer your Account on the Platform, including processing login credentials and enforcing the one-account-per-player policy.
• Service Delivery: To provide you with access to all gaming products and services available on the Platform, including live casino games, sports betting markets (EPL, Liga Super Malaysia, UFC, and others), slot games, and live football betting.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, including Malaysian e-wallets (Touch 'n Go eWallet, GrabPay, Boost), DuitNow, FPX, local bank transfers, and cryptocurrency.
• KYC and Compliance: To verify your identity and age (minimum 21 years), fulfil anti-money-laundering obligations, and comply with other applicable regulatory requirements.
• Customer Support: To respond to your support queries, resolve disputes, and maintain records of our communications with you.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised access, and other unlawful conduct on the Platform.
• Responsible Gambling: To monitor your gaming activity in accordance with our responsible gambling obligations, including identifying patterns that may indicate problem gambling behaviour and enabling the delivery of responsible gambling tools such as deposit limits and self-exclusion.
• Personalisation and Analytics: To improve the Platform's features and user experience, personalise content recommendations, and conduct internal research and analytics.
• Marketing Communications: Where you have provided your consent, to send you information about promotions, bonuses, and new features on the Platform. You may withdraw this consent at any time by contacting our support team.

kis711 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your personal data with the following categories of recipients in specific circumstances:

• Payment Service Providers: We share necessary transaction data with payment processors, Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), FPX operators, DuitNow operators, and e-wallet platforms to facilitate deposits and withdrawals. These parties act as Data Processors under contractual obligations consistent with this Policy.
• Identity Verification Partners: We engage third-party KYC service providers to assist with identity document verification. These providers process personal data solely for the purpose of identity verification on our behalf.
• Fraud Prevention Services: We may share transaction and behavioural data with fraud detection services and industry-standard blacklist screening systems to protect the integrity of the Platform.
• Technology Infrastructure Providers: We use cloud hosting, content delivery networks, and other technology service providers who may process limited personal data as part of their service delivery. All such providers are bound by data processing agreements.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other government bodies where we are legally required to do so or where we have a good-faith belief that disclosure is necessary to investigate or prevent unlawful activity.
• Professional Advisers: We may share personal data with lawyers, accountants, auditors, and other professional advisers where necessary for the conduct of their professional services, subject to confidentiality obligations.

The Platform uses cookies and similar tracking technologies to enhance your experience, maintain session integrity, and collect analytical data. The following categories of cookies may be used:

Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core functions such as session management, login authentication, and fraud prevention. You cannot opt out of strictly necessary cookies without significantly impairing the functionality of the Platform.

Performance and Analytics Cookies

These cookies collect information about how users interact with the Platform — such as which pages are visited most frequently, session duration, and navigation patterns. This data is used in aggregate form to improve Platform performance and user experience. Individual user data is not identifiable from these analytics.

Functional Cookies

These cookies remember your preferences and settings — such as your preferred language, display settings, and previously used payment methods — to provide a more personalised experience on return visits.

Managing Cookies

You may manage or disable certain cookies through your browser settings. Please note that disabling non-essential cookies may affect the functionality and user experience of the Platform. For instructions on managing cookies, refer to your browser's help documentation. Continued use of the Platform following acceptance of our cookie notice constitutes your consent to the use of cookies as described in this section.

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable laws and regulations. Our general retention principles are as follows:

• Active Account Data: Personal data associated with an active Account is retained for the duration of your registration on the Platform and for a minimum period of five (5) years following Account closure, in accordance with standard financial record-keeping requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven (7) years to comply with anti-money-laundering regulations and applicable financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following Account closure or the termination of our business relationship with you.
• Support Communications: Chat logs and email correspondence with our support team are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Technical and Log Data: Server logs and technical data are typically retained for a maximum of twelve (12) months unless a longer retention period is required for ongoing security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

The Company implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes the following measures:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Data Storage Security: Personal data stored on our servers is protected by access controls, encryption at rest, and regular security audits conducted by internal and external security teams.
• Access Controls: Access to personal data within the Company is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Multi-Factor Authentication: Administrative access to our systems is protected by multi-factor authentication. Players are encouraged to enable two-factor authentication on their Accounts where available.
• Intrusion Detection: We employ real-time intrusion detection and threat monitoring systems to identify and respond to security incidents promptly.
• Incident Response: In the event of a data breach that may affect your rights or freedoms, we will notify affected individuals and relevant regulatory authorities within the timeframes required by applicable law.

Subject to applicable data protection laws and any overriding legal obligations, you have the following rights in relation to your personal data held by kis711. To exercise any of these rights, please contact our support team as described in Section 15.

• Right of Access: You have the right to request a copy of the personal data we hold about you and to be informed about the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. You may update certain Account details directly via your Account settings.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right may be limited where we are required to retain data for legal or regulatory compliance purposes.
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of the data or the lawfulness of our processing activities.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, or where we process your data for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The Platform is strictly intended for adult players aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory component of our KYC process.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will take immediate steps to delete such data and close the associated Account. Any deposits made by underage users will be returned where legally permissible.

If you have reason to believe that a minor has registered an Account on the Platform using false information, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

In the course of operating the Platform, personal data collected from Malaysian users may be transferred to, stored in, or processed in countries outside of Malaysia. Such transfers may occur where, for example, our cloud hosting infrastructure, payment processing partners, or KYC verification providers are located in different jurisdictions.

Where personal data is transferred outside Malaysia, the Company takes appropriate safeguards to ensure that such transfers are conducted in accordance with applicable data protection requirements. These safeguards may include standard contractual clauses, data processing agreements that impose equivalent protection standards, or transfers to jurisdictions recognised as providing an adequate level of data protection.

By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia as described in this section. We will always take reasonable steps to ensure that your data receives the same level of protection wherever it is processed.

The Company reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, regulatory requirements, or the features and functionality of the Platform.

Where amendments are material — meaning they significantly affect your rights or the way we use your personal data — we will provide advance notice via a notice posted on the Platform's homepage or, where we hold your contact details, by email to your registered address. The effective date of any revised Policy will be stated at the top of this document.

Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you should cease using the Platform and request Account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kis711, please contact our Data Protection team using any of the following methods:

• Live Chat: Available 24 hours a day, 7 days a week through the live chat function on the Platform — including Malaysian public holidays such as Hari Raya Aidilfitri, Chinese New Year, and Deepavali.
• Email: [email protected] — for data-related enquiries, please include "Privacy Request" in the subject line. We aim to respond within 2 to 4 hours during standard operating hours and within 24 hours for after-hours submissions.

When submitting a data rights request, please provide sufficient information to allow us to verify your identity before processing the request. This is to protect you from unauthorised third parties attempting to access your personal data.