Privacy Policy apkkiss

Apkkiss ("we", "Company", "Platform") takes our responsibility to every user's privacy seriously. This Privacy Policy explains in detail how we collect, process, store and protect your personal data when you use the apkkiss platform, including our website and mobile application.

This document is written in clear, plain language — not packed with hard-to-digest legal jargon. We believe you deserve to know exactly what happens with your personal information, and we are committed to ensuring that transparency exists in every aspect of our operations.

By using the apkkiss platform, you consent to this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us for assistance with account termination and data deletion.

Apkkiss collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data collected:

We do not collect sensitive data such as your health information, religious beliefs, or political views. All data collected is for legitimate platform operational purposes and is described in the sections below.

Every piece of data we collect has a clear and legitimate purpose. apkkiss does not collect data simply because it "might be useful in the future" — every item is collected because there is a genuine operational need:

• Account management: To create, verify and manage your account, including the KYC process required by regulation
• Transaction processing: To process deposits, withdrawals and all financial transactions securely and accurately
• Fraud prevention: To detect and prevent fraudulent activity, money laundering and other security threats
• Regulatory compliance: To meet legal and regulatory obligations including anti-money laundering (AML) requirements
• Customer support: To identify you and provide effective assistance when you contact our team
• Service improvement: To understand how the platform is used in order to make meaningful improvements
• Responsible gaming: To monitor gaming patterns and provide necessary interventions for member wellbeing
• Marketing communications: To send relevant promotional information — only where you have given your consent

Under Malaysia's Personal Data Protection Act 2010 (PDPA), apkkiss processes your personal data on one or more valid legal bases. We do not process data without a clear legal justification:

• Contract performance: Processing required to fulfill the service agreement between you and apkkiss
• Legal obligation: Processing required under Malaysian law, including KYC and AML requirements
• Legitimate interest: Processing for platform security, fraud prevention, and service improvement purposes
• Consent: For marketing communications and use of data for purposes beyond the core contract — you may withdraw this consent at any time

Apkkiss does not sell your personal data. However, in the course of operating the platform, there are situations where your data needs to be shared with certain trusted third parties. All such sharing occurs within a limited scope and for defined purposes:

• Payment processors: Information required to process deposits and withdrawals is shared with integrated payment processors that comply with PCI-DSS standards
• Technology service providers: Cloud and infrastructure providers supporting our platform operations, bound by strict confidentiality agreements
• Regulatory body: Authorities and law enforcement agencies where required by court order or regulation
• Identity verification services: Third-party KYC service providers used to verify your identity documents
• Analytics providers: Aggregated and anonymised data for platform analytics purposes — no identifiable personal data is shared

Apkkiss retains your personal data only for as long as necessary for the stated purposes, or as required by law. The following is a guide to our data retention periods:

• Active account data: Retained for the duration your account is active plus 7 years after account closure to meet legal compliance requirements
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysian financial legal requirements
• KYC records and identity verification: Retained for 5 years after the business relationship ends
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes
• Technical data and access logs: Retained for 12 months for security purposes
• Marketing data (consent-based): Retained until you withdraw consent

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. For data in physical format (where applicable), secure destruction is carried out in accordance with established procedures.

Apkkiss invests seriously in security technology and procedures to protect your personal data from unauthorised access, loss or damage:

• 256-bit SSL/TLS encryption for all data transmission between client and server
• Data encryption at rest using AES-256 standard
• Role-based access control — only authorized staff with a legitimate work need may access personal data
• Multi-factor authentication (MFA) for all staff access to internal systems containing user data
• Security scans and penetration testing are conducted regularly by independent parties
• 24/7 security monitoring with automated intrusion detection systems
• Mandatory data security and privacy training for all apkkiss staff

Apkkiss uses cookies and similar tracking technologies to enhance the user experience, maintain security and understand how the platform is used. Cookies are small text files stored in your web browser.

• Essential cookies: Required for core platform functions such as login authentication and session management — cannot be disabled
• Performance cookies: Collects information on how the platform is used for improvement purposes — in anonymized aggregate data form
• Functional cookies: Remembers your preferences such as language and display settings for a more personalized experience
• Security cookies: Helps identify suspicious activity and protect your account from unauthorized access

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the apkkiss platform. For non-essential cookies, you may opt out via the cookie management panel presented on your first visit.

As an apkkiss user whose personal data is processed in Malaysia, you have rights protected under the Personal Data Protection Act 2010. apkkiss respects and facilitates the exercise of these rights:

Apkkiss is a platform permitted only for users aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.

If we find that we have collected personal data from someone below the required age, we will take immediate steps to delete that information and terminate the associated account. Age verification is a mandatory part of our KYC procedure.

Apkkiss reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or developments in our services. Any material amendments will be communicated to you via:

• In-app or apkkiss website notifications
• Email the address registered to your account
• Update the "Last Updated" date at the top of this page

We encourage you to review this page periodically. Continued use of the apkkiss platform after an amendment notification is considered your acceptance of the revised policy. If you disagree with any changes, you have the right to close your account and request data deletion before the changes take effect.

If you have any questions, concerns, or requests regarding your data privacy at apkkiss, we encourage you to reach out to us. Our team is ready to help you understand how your data is handled and ensure your privacy rights are respected.