Privacy Policy

This Privacy Policy ("Policy") describes how appkiss ("appkiss", "we", "us", "our"), the operator of the online gaming platform at https://appkiss.cam ("Platform"), collects, processes, stores, and shares personal data relating to players, visitors, and other users ("you", "your") of the Platform.

appkiss is committed to responsible data stewardship. We collect only the information necessary to deliver a safe, personalised, and regulatory-compliant gaming experience. This Policy has been drafted in alignment with internationally recognised data protection principles, including those set out under the General Data Protection Regulation (GDPR) and equivalent frameworks.

By accessing the Platform, creating a player account, or making a deposit, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described in this Policy. If you do not agree, please discontinue use of the Platform.

The following terms have the meanings specified below wherever they appear in this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means appkiss, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of appkiss, such as payment service providers and KYC verification partners.
• "KYC" means Know Your Customer — the mandatory identity and age verification process required before withdrawals can be processed.
• "Cookies" means small text files stored on your device by the Platform to facilitate session management, analytics, and personalisation.
• "Platform" means the appkiss website, mobile application, and all associated services accessible at https://appkiss.cam.

appkiss collects Personal Data through several channels. The categories of data collected, and the context in which each is collected, are set out in the table below:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gambling self-assessment tools, in which case your explicit consent will be sought separately.

appkiss processes your Personal Data on one or more of the following legal bases:

1. Contractual Necessity: Processing required to enter into or perform our agreement with you — including account creation, payment processing, and game delivery.
2. Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC obligations, and regulatory reporting requirements.
3. Legitimate Interests: Processing necessary for the legitimate business interests of appkiss, including fraud detection, platform security, responsible gambling monitoring, and business analytics — where such interests are not overridden by your rights and interests.
4. Consent: Where you have given explicit, informed consent, such as for receiving promotional communications by email or SMS. You may withdraw consent at any time via your account settings or by contacting our support team.

appkiss uses collected Personal Data for the following purposes:

• Account Management: Creating and maintaining your player account, verifying your identity and age (21+ requirement), and providing access to Platform features.
• Payment Processing: Facilitating deposits via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels; processing withdrawal requests; and maintaining accurate transaction records.
• Regulatory Compliance: Fulfilling AML and KYC obligations, conducting ongoing transaction monitoring, and responding to lawful requests from regulatory or law enforcement authorities.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, preventing multi-accounting, identifying bonus abuse, and protecting Platform integrity.
• Customer Support: Responding to enquiries, resolving disputes, and managing support interactions through live chat and email.
• Responsible Gambling: Monitoring usage patterns to identify potential problem gambling behaviour, enforcing self-imposed limits, and managing self-exclusion requests.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates — only where you have provided consent and have not subsequently opted out.
• Platform Improvement: Analysing aggregated usage data to improve game selection, platform performance, and user experience.

appkiss does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We may share your data only in the following limited circumstances:

• Payment Service Providers: We share transaction-relevant data with authorised payment processors to facilitate deposits and withdrawals. All processors are contractually bound to handle your data securely and only for the stated purpose.
• KYC / AML Verification Partners: Identity and document verification data is shared with licensed third-party KYC providers to fulfil regulatory obligations. These partners operate under strict data processing agreements.
• Game Software Providers: Technical identifiers (not full personal profiles) may be shared with licensed game software providers to enable game session management, RNG certification logging, and responsible gambling tool integration.
• Regulatory & Legal Authorities: appkiss may be required to disclose Personal Data to regulatory bodies, law enforcement agencies, or courts in response to lawful requests, court orders, or to comply with applicable legislation.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving appkiss, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party data processors engaged by appkiss are required to implement appropriate technical and organisational security measures and to process Personal Data solely for the purposes for which they were engaged.

appkiss retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to regulatory retention obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of 5 years following account closure, in compliance with AML and gaming regulatory requirements.
• KYC / Verification Documents: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping obligations.
• Communications Data: Live chat transcripts and email correspondence retained for up to 3 years from the date of the interaction.
• Technical and Usage Data: Retained in anonymised or aggregated form for up to 24 months for analytics purposes.
• Marketing Consent Records: Retained for the duration of your consent plus 3 years following withdrawal, for compliance audit purposes.

When retention periods expire, Personal Data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

appkiss employs a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• TLS 1.3 / 256-bit SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting internal access to Personal Data to staff with a documented operational need.
• Multi-factor authentication (MFA) enforced for all internal administrative systems.
• Regular third-party penetration testing and vulnerability assessments of the Platform.
• 24/7 automated intrusion detection and anomaly monitoring.

In the event of a Personal Data breach that poses a risk to your rights and freedoms, appkiss will notify affected individuals and relevant authorities in accordance with applicable data protection law, without undue delay.

appkiss uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, load balancing cookies, and security cookies. These cannot be disabled without impairing core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised information about how players use the Platform — including pages visited, session duration, and navigation paths. This data informs platform improvements and game selection decisions.
• Preference Cookies: Used to remember your language preference, display settings, and other personalisation choices across sessions.

appkiss does not use cross-site advertising trackers, retargeting pixels from third-party ad networks, or social media tracking cookies. You can manage and clear cookies via your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to log in or use certain Platform features.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your Personal Data held by appkiss:

1. Right of Access: You may request a copy of all Personal Data appkiss holds about you. We will respond to access requests within 30 days.
2. Right to Rectification: You may request the correction of inaccurate or incomplete Personal Data. Account details can be updated directly via your Account Settings for most fields.
3. Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our regulatory retention obligations (see Section 7).
4. Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to our legitimate interests basis.
5. Right to Data Portability: You may request a machine-readable copy of the Personal Data you have provided to us, to facilitate transfer to another service provider.
6. Right to Object: You may object to processing based on our legitimate interests at any time. You also have an absolute right to opt out of direct marketing communications at any time.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to our Data Protection team at [email protected] (plain text — not a link). We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days, or notify you of any lawful extension of that period.

appkiss operates on an international basis, and your Personal Data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, appkiss takes steps to ensure that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that applied within Malaysia.

Safeguards used for international transfers include standard contractual clauses approved by relevant data protection authorities, binding corporate rules applicable to group entities, and transfers to countries recognised as providing adequate levels of data protection.

The appkiss Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory step in our registration and KYC processes.

If appkiss becomes aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, close the associated account, and notify relevant parties as required by law. If you believe a minor has registered on the Platform, please contact our support team immediately.

appkiss reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email notification and/or a prominent notice on the Platform at least 7 days before the updated Policy takes effect.

The effective date shown at the top of this page indicates when the current version was last revised. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] — displayed as plain text, not a clickable link
• Live Chat: Available 24/7 via the appkiss Platform — average response time 3–5 minutes
• Subject Line: For privacy-specific enquiries, please use the subject line "Privacy Request — [Your Account Username]" to ensure prompt routing to the Data Protection team

For data access and erasure requests (Section 10), please include your full registered name, registered email address, and a brief description of the specific request. Identity verification may be required before Personal Data is disclosed or deleted.