Privacy Policy MegaKiss

MegaKiss collects several categories of information to ensure our platform operates smoothly and securely for all users in Malaysia. We only collect information that is strictly necessary for the purposes stated in this policy.

Information you provide directly:

• Full name as shown on your identity card or passport
• A valid and active email address
• Mobile phone number registered in your name
• Date of birth for age verification purposes
• Payment method details — including FPX, DuitNow, e-wallet, or cryptocurrency information
• Identity documents submitted during the KYC (Know Your Customer) process

Information collected automatically when you use the platform:

• IP address and approximate geographical location
• Device type, operating system, and browser version in use
• Gaming activity records — including bets placed, games played, and session duration
• Complete financial transaction records — deposits, withdrawals, and account balances
• Platform interaction data such as clicks, searches, and page navigation
• Communication logs with our customer support team

The data we collect is used responsibly for legitimate purposes. MegaKiss practises a data minimisation principle — we only process data for relevant and reasonable purposes.

We will not use your data to make automated decisions that could significantly affect your rights without appropriate human review.

MegaKiss does not sell or trade your personal information to any third party. However, there are limited situations where we need to share certain data with specific parties to ensure smooth operations and legal compliance:

• Payment processors and financial institutions — to verify and process your deposit and withdrawal transactions. All our payment partners comply with PCI-DSS security standards.
• KYC and identity verification service providers — to ensure a smooth and secure identity verification process, in compliance with AML (Anti-Money Laundering) requirements.
• Licensed game providers — game development companies that provide content on the megakiss platform may receive the technical data necessary to function, but not your full personal information.
• Authorities and regulatory bodies — when required by Malaysian law or a valid court order, we are obligated to disclose certain information to the relevant authorities.
• IT and cybersecurity service providers — which assist us in maintaining and protecting the platform infrastructure, subject to strict confidentiality agreements.

Your data security is our top priority at MegaKiss. We invest seriously in security infrastructure to ensure your information is always protected from cyber threats.

Security measures we implement include:

• 256-bit SSL Encryption for all data transmitted between your device and our servers
• Data encryption at rest for all personal information stored in our databases
• Two-factor authentication (2FA) available to all megakiss member accounts
• 24/7 security monitoring by our experienced cybersecurity team
• Penetration testing conducted regularly by independent parties to identify and patch vulnerabilities
• Role-based access control (RBAC) ensuring only authorised personnel can access sensitive data
• Automatic data backup encrypted and stored at a separate location for disaster recovery

In the event of a security incident involving your personal data, we will notify you within 72 hours of becoming aware of the incident, in accordance with industry best practices and applicable legal requirements.

MegaKiss uses cookies and similar tracking technologies to enhance user experience, understand how the platform is used, and deliver more relevant content to you.

Types of cookies we use:

• Essential cookies: Required for basic platform functionality — including login session verification, account security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them.
• Performance & analytics cookies: Helping us understand which pages are visited most frequently, how long users spend on the platform, and where technical issues occur — enabling us to continuously improve your experience.
• Functional cookies: Storing your personal preferences such as display settings, preferred currency, and language preferences so you do not have to reconfigure them each time.
• Marketing cookies (with consent): Used only if you have given consent to receive personalised promotional content based on your activity and interests on the platform.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the MegaKiss platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and MegaKiss's internal policies, you have the following rights regarding your personal data:

MegaKiss retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable Malaysian law.

Our data retention period guidelines:

• Active account data: Stored for the duration your account remains active on MegaKiss
• Financial transaction records: Stored for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's financial compliance and tax requirements
• KYC documents: Stored for 5 years after the business relationship ends, in accordance with AML requirements
• Customer support communication logs: Stored for 2 years for quality control and dispute resolution purposes
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information

Once the designated retention period expires, your data will be securely deleted using industry-recognised methods, ensuring it cannot be recovered by any party.

MegaKiss is a platform that for individuals aged 18 and above only. We do not knowingly collect, store, or process any personal information from children or individuals under the age of 18.

If we discover that personal information has been collected from someone under the age of 18, we will:

• Closing the account in question immediately
• Deleting all related personal data from our systems promptly
• Reporting the matter to the relevant authorities if required

If you are a parent or guardian and discover that your child has registered on MegaKiss without authorisation, please contact our support team immediately at [email protected] and we will take immediate action.

MegaKiss reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We are committed to keeping you informed of any significant changes.

When we make changes to this Privacy Policy:

• The "Updated" date at the top of this page will be revised
• For significant changes, we will send a notification to your registered email address at least 14 days before the changes take effect
• We may also display prominent notices in key areas of the platform to ensure you never miss important information.

Your continued use of the MegaKiss platform after the effective date of any Privacy Policy changes constitutes your acceptance of the updated terms. If you do not agree, you have the right to close your account before the changes take effect.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, MegaKiss's Data Protection Officer (DPO) team is ready to assist you.