Rujukan Laman

Your Privacy, Handled With Care

At d918kiss, every piece of personal data you share — from your account registration details to your payment activity via Touch 'n Go, GrabPay, Boost dan FPX —…

Data Collected Only for Account OperationsTouch 'n Go, GrabPay, Boost dan FPX Transactions ProtectedYour Right to Access, Correct or DeleteNo Sale of Personal Data to Third PartiesRetention Periods Clearly Stated
d918kiss Your Privacy, Handled With Care
PRIVACY CONTACT CHANNELS

Reach Us About Your Data

Team online

Live Chat Support

Our live chat team handles privacy queries around the clock. Raise a data access, correction or deletion request directly in the chat window and we will log it within one business day. Response times average under two hours during peak Malaysia hours.

Email Privacy Desk

Send your written privacy request to our dedicated inbox. Include your registered account email and the specific data point you are querying. We acknowledge all email submissions within 24 hours and resolve most requests within five working days.

In-Account Request Form

Log in to your d918kiss account and navigate to Account Settings to submit a formal data request. The form routes directly to our data-handling team, creating an auditable ticket you can track until closure. No phone call needed.

HOW WE HANDLE YOUR DATA

Six Pillars of Our Privacy Practice

We run concrete, auditable processes behind every data decision on d918kiss — from the moment you deposit via Touch 'n Go through to how we respond when you ask us to delete…

Data Collection Minimisation

We collect only the data required to operate your account — identity verification details, contact information, device fingerprint and payment records from Touch 'n Go, GrabPay, Boost dan FPX. No surplus fields are stored beyond what account operation demands.

Cookie Usage Transparency

Our platform uses session cookies to maintain your login state and analytics cookies to measure page performance. No third-party advertising cookies are deployed. You can adjust cookie preferences via the banner shown on your first visit to d918kiss.com.

Account Security Practices

Passwords are stored as salted hashes — never in plain text. Payment credentials for Touch 'n Go, GrabPay and Boost are never stored server-side; they pass through the respective payment gateway only. Two-factor authentication is available for all accounts.

Data Retention Periods

Active account data is retained for as long as your account remains open. Closed account records are held for a maximum of seven years to meet financial compliance requirements, after which all personal identifiers are deleted from our systems automatically.

Your Rights to Access and Correct

You may request a full export of the personal data we hold for you at any time. Corrections to inaccurate records are processed within five working days. Deletion requests for closed accounts are actioned after the mandatory financial retention window expires.

Who to Contact for Data Matters

All data-related matters are handled by our internal privacy desk — reachable via live chat, the in-account request form, or our dedicated email channel. We do not route privacy queries through general customer support; your request goes directly to the data-handling team.

Frequently Asked Questions on Privacy

These questions reflect what Malaysian account holders most commonly ask us about how d918kiss collects, uses and protects personal data. If your question is not covered here, our privacy desk is reachable through the contact channels listed above.

We collect your name, email address, phone number, date of birth and a government-issued ID image for identity verification. Once you transact, we also log payment method references — such as your Touch 'n Go or GrabPay transaction IDs — for reconciliation and fraud prevention purposes.

No. Payment credentials and card or wallet details are processed directly by the respective payment gateway — Touch 'n Go, GrabPay, Boost or FPX. We retain only the transaction reference number and amount, not your full payment credentials or wallet login.

Closed account personal identifiers are retained for up to seven years to satisfy financial record-keeping requirements applicable where local law permits. After that retention window, all identifying data is permanently deleted from our active systems and backups on a rolling schedule.

Yes. Submit a data access request via your Account Settings form or by emailing our privacy desk. We will compile and send you a structured export of every data field we hold for your account, typically within five working days of receiving your request.

We share data only with the payment processors needed to complete your transactions — Touch 'n Go, GrabPay, Boost dan FPX — and with identity verification services used during account opening. We do not sell personal data to advertisers, data brokers or any unrelated commercial parties.

Log in and use the request form in Account Settings, or contact our privacy desk via live chat or email. Corrections are made within five working days. Deletion of closed account data follows the mandatory seven-year retention window before permanent removal is executed.

This policy applies to all accounts accessed through d918kiss.com. Whether you are accessing from Kuala Lumpur or any other location in Malaysia, the same data-handling practices apply — subject always to the local laws of the jurisdiction where access is permitted.