kis711 Privacy Policy

This Privacy Policy ("Policy") is issued by kis711 ("we", "us", "our", "the Company") and applies to all personal data processed in connection with your use of the kis711 Platform, accessible at kis711.app.

By registering an account with kis711 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to the terms of this Policy, you must cease using the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the kis711 Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

We may update this Policy from time to time in response to changes in law, our operations, or platform functionality. The "Effective Date" at the top of this page reflects the date of the most recent revision. Continued use of the Platform after an update constitutes acceptance of the revised Policy.

We collect the following categories of personal data in connection with your use of the kis711 Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or for responsible gaming assessment purposes, in which case your explicit consent will be obtained.

kis711 processes your personal data for the following purposes:

• Account Management: Creating and maintaining your Member account, authenticating your identity at login, and managing account settings including responsible gaming configurations.
• Service Delivery: Providing access to games, processing bets, crediting winnings, and operating all gaming and betting products on the Platform.
• Payment Processing: Processing deposits and withdrawals via Touch n Go eWallet, Boost, and local bank transfers; verifying ownership of payment methods; preventing payment fraud.
• KYC and Identity Verification: Verifying your identity and age (21+) prior to processing withdrawals, as required by applicable gaming authority obligations.
• Legal and Regulatory Compliance: Meeting obligations under applicable gaming licences, anti-money laundering (AML) requirements, and data protection laws.
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, multi-accounting, bonus abuse, and unauthorised access.
• Customer Support: Responding to queries, resolving disputes, and providing assistance through live chat and email channels.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, administering self-exclusion requests, and enforcing deposit and wagering limits.
• Marketing Communications: Sending promotional offers and updates where you have provided consent. You may withdraw consent at any time by contacting support.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.

Where applicable data protection law requires a legal basis for processing, kis711 relies on the following:

• Contractual Necessity: Processing required to perform the contract between you and kis711, including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable law, including AML obligations, gaming licence conditions, and tax reporting requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain cookies, where your consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

kis711 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

Some of our third-party service providers are located outside Malaysia. Where personal data is transferred to a recipient in a country that does not provide an equivalent level of data protection, kis711 takes appropriate safeguards to ensure your data remains protected. These safeguards may include standard contractual clauses, data processing agreements, or equivalent contractual protections consistent with applicable data protection requirements.

By using the kis711 Platform, you acknowledge that your personal data may be transferred internationally in accordance with this Section.

kis711 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five years following account closure, to meet AML and gaming authority record-keeping requirements.
• Transaction and financial data: Retained for a minimum of seven years following each transaction, as required by applicable financial record-keeping regulations.
• Gaming activity data: Retained for a minimum of three years following each gaming session, for dispute resolution and regulatory audit purposes.
• Support and communication records: Retained for two years following the resolution of each support interaction.
• Marketing consent records: Retained until consent is withdrawn, plus a short period thereafter to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised, except where further retention is required by law.

The kis711 Platform uses cookies and similar tracking technologies to ensure proper functionality, maintain session security, and analyse Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for Platform functionality, including login session management, security tokens, and load balancing. These cannot be disabled without affecting Platform operation.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gaming configurations between sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members use the Platform, enabling us to improve performance and game availability.
• Security Cookies: Used for fraud detection, bot prevention, and unusual activity identification, including device fingerprinting used to protect your account from unauthorised access.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the Platform, including the ability to log in to your account.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by kis711:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of certain personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the kis711 support team via live chat or at the email address listed in Section 14. We will respond to requests within 30 days. Identity verification may be required before we can fulfil a request.

If you believe that we may have inadvertently collected personal data from a minor, please contact us immediately at the details provided in Section 14. We take all such reports seriously and will investigate and act promptly.

kis711 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Measures in place include:

• SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data fields at rest, including identity documents and financial data;
• Access controls limiting internal data access to authorised personnel on a need-to-know basis;
• Multi-factor authentication for administrative and operational system access;
• Regular security assessments and penetration testing by qualified third-party security firms;
• Intrusion detection systems and real-time security monitoring;
• Staff training on data protection and information security obligations.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you in accordance with applicable legal requirements.

We reserve the right to update this Privacy Policy at any time. Where changes are material, we will provide reasonable prior notice via the Platform or by email to your registered address. The updated Policy will take effect on the stated effective date.

We recommend that you review this Policy periodically to stay informed about how kis711 handles your personal data. The current version is always accessible from the footer of every page on the kis711 Platform.

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a privacy concern, please contact the kis711 data team through the following channels:

• Live Chat: Available 24/7 through the kis711 Platform — the fastest channel for most queries.
• Email: [email protected] — for written data access requests, deletion requests, and formal complaints.

Formal written requests will receive a response within 30 days of receipt. Identity verification is required before we can action any data rights request. For complex requests, we may extend the response period by a further 60 days with notice to you.