Privacy Policy

This Privacy Policy ("Policy") is issued by i1kiss ("i1kiss", "we", "us", or "our") and applies to all personal data collected through the i1kiss website and associated digital services accessible at https://i1kiss.cam, including the mobile-optimised platform, live chat system, and all ancillary member-facing features.

i1kiss is committed to handling your personal information with care, transparency, and in accordance with applicable international data protection standards. This Policy is intended to give you a clear and honest account of how your data is collected, processed, stored, and — where applicable — shared with trusted third parties.

By registering an account with i1kiss, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the platform and contact our support team to close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, email address, date of birth, phone number, financial details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means i1kiss, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of i1kiss under a contractual data processing agreement.
• "Member" / "User" means any individual who has registered an account or interacts with the i1kiss platform.
• "Cookies" means small text files stored on your device by the i1kiss platform to facilitate session management, analytics, and personalisation.
• "KYC" means Know Your Customer identity verification procedures carried out to satisfy compliance and anti-money laundering obligations.

i1kiss collects personal data that is necessary to provide you with a safe, functional, and compliant betting and gaming service. The categories of personal data we collect include, but are not limited to, the following:

i1kiss collects personal data through the following primary channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated technical collection: Data gathered automatically when you access and interact with the platform, including IP addresses, session logs, browser fingerprints, and cookie-based identifiers.
• Payment processors: Transaction confirmation data received from Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks such as Maybank, CIMB, and Public Bank.
• Identity verification partners: Data returned by third-party KYC and fraud detection services used to verify your identity and screen for sanctioned individuals.
• Publicly available sources: In limited circumstances, i1kiss may supplement your profile with information from publicly available records for fraud prevention and compliance purposes.

i1kiss processes your personal data for the following specific purposes:

• To create and maintain your i1kiss member account and verify your identity.
• To process MYR deposits and withdrawals via your chosen Malaysian payment method.
• To provide and continually improve the sports betting, live casino, and gaming services available on the platform.
• To communicate with you regarding your account, transactions, promotions, and platform updates.
• To comply with our legal, regulatory, and anti-money laundering obligations.
• To detect, investigate, and prevent fraudulent, abusive, or unlawful activity on the platform.
• To operate and enforce our responsible gambling framework, including monitoring for signs of problem gambling behaviour.
• To conduct analytics and improve platform performance, user experience, and marketing effectiveness.
• To respond to and resolve member support queries and formal complaints.

i1kiss processes your personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to enter into and perform the Member Agreement with you, including account management and payment processing.
• Legal obligation: Processing required for i1kiss to comply with applicable laws and regulatory requirements, including AML, KYC, and responsible gambling obligations.
• Legitimate interests: Processing carried out for i1kiss's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out with your explicit, freely given, and informed consent — for example, in relation to optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

i1kiss does not disclose your personal data to third parties except in the circumstances described below. All third-party data processors engaged by i1kiss are bound by contractual data processing agreements that require them to handle your data in accordance with applicable data protection standards.

• Payment service providers: Malaysian e-wallet operators, banks, and payment gateway providers process transaction data strictly for the purpose of completing your deposits and withdrawals.
• Identity verification services: Third-party KYC and anti-fraud partners receive identity data solely for the purpose of verifying your identity and screening against global sanctions and watchlists.
• IT and platform service providers: Cloud hosting, data storage, and cybersecurity service providers that maintain the technical infrastructure of the i1kiss platform.
• Game content providers: Licensed game studios and betting data providers may receive limited technical session data necessary to deliver their products within the i1kiss platform.
• Regulatory and law enforcement authorities: i1kiss may disclose personal data to competent authorities where required to do so by law, court order, or binding regulatory instruction.
• Corporate transactions: In the event of a merger, acquisition, or transfer of business assets, member data may be transferred to the acquiring entity under terms consistent with this Privacy Policy.

i1kiss uses cookies and similar tracking technologies to operate the platform effectively, recognise returning members, maintain session security, and understand how the platform is used. The types of cookies deployed include:

• Strictly necessary cookies: Essential for core platform functions such as maintaining your login session, processing transactions, and enforcing security settings. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings, preferred odds format, and notification choices — to personalise your i1kiss experience.
• Analytical cookies: Used to collect aggregated, anonymised data about how members navigate and use the platform, enabling us to identify and address usability issues and improve the service.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the i1kiss platform.

i1kiss retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Specific retention periods include:

• Active account data is retained for the full duration of your membership and for a period of no less than five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction and financial records are retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC and identity verification documents are retained for five (5) years post-account closure unless a longer retention period is required by applicable law.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Technical and analytical log data is typically retained for a rolling period of twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction or re-identification.

i1kiss deploys a multi-layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption across all platform connections and API communications.
• Encrypted storage of personal data and financial records in access-controlled server environments.
• Role-based access control ensuring that only authorised personnel with a demonstrated business need may access member data.
• Two-factor authentication (2FA) available for all member accounts and mandatory for internal staff systems.
• Continuous intrusion detection, DDoS protection, and real-time security monitoring.
• Regular independent security audits and penetration testing of the i1kiss platform infrastructure.

As a data subject, you hold a number of rights with respect to your personal data held by i1kiss. These rights may be subject to certain limitations and conditions under applicable law, but i1kiss is committed to honouring them in good faith. Your rights include:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, for example while a rectification request is pending.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a structured, machine-readable copy of your personal data.
• Right to Object: You may object to processing based on our legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team via the support channels listed in Section 15. We will acknowledge your request within 3 business days and aim to resolve it within 30 days of receipt.

i1kiss strictly prohibits access to and use of its platform by individuals under the age of 21. We do not knowingly collect or process personal data from anyone under 21 years of age.

Where i1kiss becomes aware that personal data of an individual under the age of 21 has been collected, we will promptly delete that data, suspend the associated account, and take appropriate steps to prevent further access. Age verification is conducted at the point of registration and may be repeated at any time during a member's lifetime with us.

In order to deliver the i1kiss service, your personal data may be transferred to and processed by our service providers and data processors operating outside of Malaysia. Such transfers may include cloud hosting providers, KYC verification partners, and payment processing infrastructure hosted in other jurisdictions.

Wherever personal data is transferred internationally, i1kiss takes appropriate contractual and technical safeguards to ensure that the transferred data receives a level of protection that is consistent with the principles set out in this Privacy Policy. These safeguards may include standard contractual clauses, data processing agreements, or assessments of the recipient jurisdiction's data protection framework.

i1kiss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Material changes will be communicated to registered members via email notification and/or a prominent notice on the i1kiss platform at least 7 days prior to the revised Policy taking effect.

The effective date at the top of this Policy will be updated upon each revision. Your continued use of the i1kiss platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the revised terms, you must cease using the platform and request account closure before the effective date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by i1kiss, please contact us through the following channels:

• Data Protection Enquiries — Email: [email protected] (plain text address — not a clickable link)
• Live Chat Support: Available 24 hours a day, 7 days a week directly on the i1kiss platform — average response time 3–5 minutes.
• Languages supported: English, Bahasa Melayu, and Mandarin.
• Response commitment: Data subject rights requests acknowledged within 3 business days and resolved within 30 calendar days of receipt.

i1kiss treats all privacy-related enquiries with the highest priority and is committed to resolving your concerns in a fair, transparent, and timely manner.