Privacy Policy kissdiamond — Your Personal Data Protection

Kissdiamond is an online gaming platform operating under the domain kissdiamond.vu, providing digital entertainment services to members in Malaysia. We fully recognise that member trust is our most valuable asset, and that trust begins with how we handle your personal information.

This Privacy Policy details the types of personal data we collect, the purposes of collection, parties who may have access to your data, data retention periods, and your rights as a data subject under applicable Malaysian law.

This Policy applies to all your interactions with KissDiamond, including use of the website, mobile app, live chat, email, and any other official communication channels operated by us. This document should be read together with the Terms and Conditions and Responsible Gaming Policy ours.

Kissdiamond collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect, along with specific examples:

In addition to data you provide directly, we also collect data automatically as you browse our platform. This includes information about pages visited, session duration, buttons clicked, and navigation patterns. This data is used solely to improve the user experience and is not used to identify you individually without a legitimate reason.

Every piece of data we collect has a clear and legitimate purpose. kissdiamond does not process your personal data arbitrarily. The following are the key purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your account, including processing registrations, secure logins, and profile updates.
• Transaction Processing: Verifying and processing all deposit and withdrawal transactions accurately and securely through supported payment methods.
• KYC & AML Compliance: Meeting legal obligations to verify member identities and detect suspicious activity to prevent money laundering.
• Customer Support: Answering enquiries, resolving complaints, and providing technical assistance via live chat, email, or other support channels.
• Experience Personalization: Recommending games, promotions, and content relevant to your preferences and gaming patterns on the platform.
• Platform Security: Detecting and preventing fraud, unauthorised access, account misuse, and activities that violate our terms of service.
• Promotional Communications: Sending information about promotions, bonuses, and special offers — but only if you have given consent to receive such communications.
• Analytics & Improvement: Understanding platform usage patterns to improve design, functionality, and the overall user experience.

We will not use your personal data for any purpose other than those stated above without first obtaining your additional consent.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), KissDiamond processes your personal data on the following valid legal bases:

• Consent: You have provided clear and informed consent for the processing of your data during account registration or when using certain platform features.
• Contract Execution: Processing is necessary to fulfill our contractual obligations to you, including providing gaming services and processing financial transactions.
• Legal Obligation: We are legally required to process certain data for compliance purposes, including KYC requirements and the reporting of suspicious financial activity.
• Legitimate Interest: In some cases, we process data based on our legitimate business interests, such as fraud detection and platform security, provided those interests do not override your rights.

You have the right to withdraw your consent at any time for processing that relies on consent. Withdrawing consent will not affect the validity of any processing carried out prior to the withdrawal. To withdraw your consent, please contact our support team.

Kissdiamond does not sell your personal data. However, in the course of running our business and delivering the best service to you, we may share certain information with the following parties under limited and controlled circumstances:

• Payment Processors: Required transaction information is shared with licensed payment processors such as local banks and digital wallet providers to securely process your deposits and withdrawals.
• Game Providers: Basic account information may be shared with licensed game software providers that partner with kissdiamond to deliver a seamless gaming experience.
• Technical Service Providers: Companies that assist us in managing IT infrastructure, cybersecurity, data analytics, and technical support may require limited access to your data solely to perform those functions.
• Legal Authorities: We will disclose the required information to government authorities, law enforcement, or regulatory bodies when required by law or court order.
• Auditors & Professional Advisors: Accountants, lawyers, and external consultants bound by strict confidentiality obligations may require access to certain information during legitimate audit or advisory processes.

All third parties who receive your data are required to sign data processing agreements that mandate privacy protection standards equal to or higher than our own. They are strictly prohibited from using your data for any purpose other than those specified.

Kissdiamond uses cookies and similar tracking technologies to enhance the functionality and user experience of our platform. Cookies are small text files stored in your browser when you visit our website. They help us recognise you on subsequent visits and personalise your experience.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining login sessions and processing transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve platform performance.
• Functional Cookies: Saving your preferences such as language, theme, and display settings to provide a more personalised experience on future visits.
• Analytics Cookies: Helping us understand aggregate traffic patterns and user behaviour for product improvement and business planning purposes.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of the KissDiamond platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's PDPA and KissDiamond's privacy policy, you have several rights you may exercise regarding your personal data. These rights are fundamental and we are committed to facilitating their exercise:

To exercise any of the above rights, please contact our support team via live chat or official email. We will process your request within 14 working days. In complex cases, this period may be extended up to 30 days with written notice to you.

Kissdiamond continuously invests in sophisticated security infrastructure to ensure your personal data is protected against unauthorised access, loss, destruction, or accidental disclosure.

Key security measures we have implemented include:

• Data in Transit Encryption: All communications between your browser and our servers are secured by TLS 1.3 protocol with 256-bit SSL encryption, ensuring no third party can intercept data in transit.
• Stored Data Encryption: Sensitive data stored in our databases is encrypted using the industry-standard AES-256 algorithm, meaning data remains unreadable even in the event of unauthorised physical access.
• Two-Factor Authentication (2FA): All member accounts can be secured with two-factor authentication for an added layer of security during login.
• 24/7 Security Monitoring: Our cybersecurity team monitors the platform in real time to detect and respond to any threats or suspicious activity.
• Periodic Penetration Testing: We conduct regular security assessments, including penetration testing by independent security experts, to identify and address potential vulnerabilities.
• Internal Access Controls: Access to members' personal data is restricted on a need-to-know basis. All staff access is automatically logged and audited.

In the course of platform operations, your personal data may be transferred to and processed outside Malaysia by certain service providers such as cloud computing and server infrastructure providers. KissDiamond takes appropriate steps to ensure such transfers are carried out securely and in compliance with applicable legal requirements.

Every international data transfer is carried out under the following conditions:

• The recipient country or region has a level of data protection equivalent to or higher than that of Malaysia.
• Comprehensive data transfer agreements have been signed with data recipients to ensure consistent protection standards.
• Additional safeguard mechanisms such as standard contractual clauses or binding corporate rules are applied where required.

You may obtain further information about the safeguards used for international data transfers by contacting our Data Protection Officer.

Kissdiamond retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. When data is no longer needed, it will be securely deleted or anonymised.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. This deletion process follows strict security procedures to ensure no recoverable data residue remains.

The kissdiamond platform is exclusively for adults aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we find that we have collected personal data from a child without valid parental or guardian consent verification, we will take immediate steps to delete that data from our systems. If you believe your child has provided personal information to us without your permission, please contact us immediately through the official kissdiamond support channel.

If you have any questions, concerns, or complaints regarding how kissdiamond handles your personal data, or if you wish to exercise any of your privacy rights, please contact our Data Protection Officer through the following channels:

We also accept written complaints via email. All complaints will be acknowledged within 3 business days and resolved within 30 business days. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department or the relevant regulatory body.

This Privacy Policy may be updated from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. We will notify you of any significant changes via in-platform notifications or email. The effective date of the latest version is always displayed at the top of this document.