KissDiamond Privacy Policy — Data Protection What You Deserve

1 Information We Collect

To provide a safe and personalised gaming experience, kissdiamond collects your personal information through several means. The types of data we collect are as follows:

Data you provide directly:

• Full name as shown on your official identification document.
• Active email address used for official account communications.
• A valid Malaysian mobile number for two-factor authentication (2FA).
• Date of birth for age verification (18 years and above).
• Bank account or e-wallet details for processing deposits and withdrawals.
• Copies of KYC documents such as MyKad, passport, or a recent utility bill.
• Any information you share when contacting our support team.

Data collected automatically:

• IP address and general geographic location information.
• Device type, operating system, and web browser version.
• Activity log data including pages visited, session duration, and in-platform actions.
• Cookie and session identifier data for a seamless login experience.
• Transaction history and gaming activity on the platform.

2 How We Use Your Data

The personal data we collect is used solely for legitimate purposes related to the operation of the KissDiamond platform. We will not use your data beyond the scope stated below without first obtaining your consent:

For marketing communications and personalised promotional offers, we rely on your consent. You may withdraw this consent at any time without affecting your access to the platform's core services.

3 Sharing Information With Third Parties

Kissdiamond maintains a strict policy on data sharing. As a rule, your personal information will not be shared with any external party except in the following situations required for platform operations:

• Approved payment providers: Information required to process your deposits and withdrawals is shared securely with registered payment providers such as FPX, Touch 'n Go, GrabPay, and Boost. This sharing is minimal and limited strictly to what is needed to complete the transaction.
• KYC service providers: Your identity verification documents may be shared with trusted third-party KYC verification platforms to meet AML (Anti-Money Laundering) and gambling regulatory requirements.
• Technical infrastructure providers: Companies providing cloud computing, cybersecurity, and technical support services may have limited access to your data — however, they are bound by strict confidentiality agreements.
• Regulatory Authority: If required by Malaysian law, a court order, or an authorised gambling regulatory body, KissDiamond may be obligated to disclose certain information to the relevant authorities.

4 Cookies & Tracking Technologies

Kissdiamond uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage patterns. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential to your account security.
• Functional Cookies: Remembering your preferences such as language, display settings, and game choices to deliver a more personalized experience during your session.
• Analytics Cookies: Helping us understand how users interact with the platform — which pages are most visited, where users encounter issues, and how we can improve the interface design.
• Security Cookies: Used to detect suspicious login activity, fraud attempts, and cyberattacks. These cookies form part of your account protection system.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality or require you to log in more frequently. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

5 Data Retention & Security

Kissdiamond retains your personal data for as long as your account is active and for the required period after account closure based on legal and regulatory obligations:

• Active account data is retained for the duration of your membership with KissDiamond.
• Financial transaction records are retained for a minimum of 7 years as required under Malaysia's accounting and AML laws.
• Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
• Anonymised analytics data may be retained longer for platform improvement purposes.

On the technical security front, KissDiamond implements multi-layered protection measures that include:

• Data encryption in transit using TLS 1.3 and at rest using AES-256.
• Role-based access control (RBAC) ensuring staff can only access data required for their specific responsibilities.
• Regular penetration testing by independent cybersecurity firms.
• Real-time threat monitoring system operating around the clock.
• A comprehensive incident response plan to handle any data breaches promptly.

6 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding your personal data that we hold. KissDiamond fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, contact our privacy team via 24/7 Live Chat or the official kissdiamond email. We will process your request within 30 business days.

7 Child Data Protection

Kissdiamond services are intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under 18 years of age.

All account registrations require strict age verification through our KYC process. If we determine that a user is under 18 years of age, the account will be closed immediately and all associated data will be deleted promptly in accordance with our secure deletion procedures.

8 Changes to This Privacy Policy

Kissdiamond reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or platform service improvements.

When material changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice within the platform at your next login.
• Sending notification emails to all registered members for significant changes that affect how we use your data.

Continued use of the kissdiamond platform after an updated Privacy Policy takes effect means you accept the revised terms. We encourage you to review this page periodically — at least every few months — to stay informed about how your data is managed.

9 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how KissDiamond handles your personal data, our privacy and support team is ready to assist you:

Our target response time for privacy-related inquiries is within 2 business days. For official data subject requests, processing takes up to 30 business days as required by law.