Official Documents

Privacy Policy megakiss — Our Commitment to Protecting Your Personal Information

At megakiss, your privacy is more than a legal obligation — it is a core value we uphold. This document transparently explains how we collect, use, and protect every piece of information you entrust to us.

Updated: January 2026 256-bit SSL Encryption

Bank-Grade Encryption

All data transmitted between your device and megakiss servers is protected by 256-bit SSL encryption — the same technology used by leading banking institutions.

Data Controls in Your Hands

You have the full right to view, amend, and request deletion of your personal data at any time via your account settings or by contacting our team.

No Sale of Data to Third Parties

Megakiss has never and will never sell members' personal information to any third party for marketing or commercial purposes without your explicit consent.

Secure Data Storage

Your data is stored in data centres equipped with multi-layered physical and digital access controls, regular backups, and round-the-clock security monitoring.

Malaysia PDPA Compliance

Megakiss data handling practices are designed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring every step meets local data protection requirements.

Data Breach Notification

In the event of a security breach involving your data, megakiss will notify you within the stipulated timeframe and take immediate remedial action.

This Privacy Policy applies to all information collected through the megakiss.org website, the megakiss mobile app, and any of our official communication channels. By using our platform, you agree to the practices described in this document.

1 Information We Collect

Megakiss collects your personal information through several means — directly when you register or fill in a form, automatically while you use the platform, and in certain cases, from trusted third-party sources such as payment providers.

Information you provide directly:

  • Full name and date of birth
  • Email address and mobile number
  • Residential address
  • Copy of identity document (MyKad or passport) for the KYC process
  • Payment method details (bank account number, account holder name)
  • Any information you share when contacting our support team

Information collected automatically:

  • IP address and estimated location based on IP
  • Device type, operating system, and browser used
  • Gaming activity records including bets, winnings, and session duration
  • Deposit and withdrawal transaction data
  • Cookies and similar tracking technologies

We do not collect credit card numbers directly. All card payments are processed by PCI DSS-certified third-party payment processors and that information is never stored on megakiss servers.

2 How We Use Your Information

Every piece of information we collect has a clear purpose and will not be used beyond the scope described here. megakiss uses your data to:

  • Manage your account — processing registrations, identity verification (KYC), login management, and account security
  • Provide gaming services — processing deposits and withdrawals, recording gaming activity, disbursing winnings, and calculating bonuses
  • Service communications — sending transaction notifications, account updates, security alerts, and customer support responses
  • Platform improvements — analysing usage patterns to improve the interface, performance, and overall user experience
  • Legal compliance — fulfilling anti-money laundering (AML) requirements, PDPA compliance, and cooperation with authorities when required by law
  • Personalised promotions — with your consent, we send promotional offers and bonuses tailored to your gaming activity

3 Information Sharing with Third Parties

Megakiss does not sell, rent, or share your personal information with external parties for independent marketing purposes. However, there are limited situations where we may need to share your data:

Third Parties Purpose Shared Data
Payment Processors Process your deposits and withdrawals securely Name, bank account details, transaction amount
Game Providers Deliver games and ensure RNG fairness Anonymous player ID, game records
KYC Services Identity verification and document checks Identity documents, selfie photo if requested
Authorities Legal compliance and court orders Data required by law only

All third-party partners working with megakiss are bound by strict confidentiality agreements and are only permitted to use your data for the purposes that have been agreed upon.

4 Cookies and Tracking Technologies

Megakiss uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

  • Essential Cookies: Required for the platform to function properly — including login session verification and security controls. These cookies cannot be disabled.
  • Performance Cookies: Gather information on how you use our platform to help us improve functionality and performance.
  • Preference Cookies: Remember your preferences such as language selection and interface display settings.
  • Analytics Cookies: Help us understand aggregate usage patterns to make better-informed platform improvement decisions.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

5 Data Security

We continually invest in security infrastructure to keep your data protected at all times. The security measures we have in place include:

  • 256-bit SSL/TLS encryption for all transmitted data
  • AES-256 encryption for sensitive data stored in the database
  • Two-factor authentication (2FA) available for all member accounts
  • 24/7 system security monitoring by our internal information security team
  • Regular penetration testing by independent security experts
  • Strict access controls — staff can only access data required for their role
  • Regular data backups with storage at geographically separate locations

While we take all reasonable measures, no system is 100% immune to cyber threats. We encourage you to use a strong, unique password and enable 2FA for an added layer of protection on your account.

6 Your Rights as a User

As a megakiss member, you have the following rights regarding your personal data. We fully respect these rights and make it easy for you to exercise them:

Right of Access Request a copy of all personal data we hold about you in a readable format.
Right to Rectification Amend or correct any inaccurate or incomplete information in your profile.
Right to Erasure Request deletion of your data, subject to mandatory legal retention requirements.
Right to Restriction of Processing Request that we restrict how your data is processed in certain situations permitted by law.
Right to Data Portability Receive a copy of your data in a structured format that can be reused by other services.
Right to Object Object to the processing of your data for direct marketing or analytics purposes without affecting core services.

To exercise any of the above rights, contact our privacy team via email at [email protected] or through the in-platform live chat. We will process your request within 14 business days.

7 Data Retention Period

Megakiss does not retain your data longer than necessary. Retention periods vary by data type:

  • Active account data: Retained for as long as your account is active and for a defined period after account closure
  • Financial transaction records: Retained for 7 years as required by anti-money laundering laws
  • Support communication records: Retained for 3 years for reference and dispute resolution
  • Security and access logs: Retained for 12 months for threat detection and security investigation purposes
  • Cookie data: Expires according to cookie type, ranging from a single session to a maximum of 2 years

Once the retention period has ended and there is no legal requirement to retain data further, your data will be securely deleted using methods that ensure it cannot be recovered.

8 Children's Privacy

The megakiss platform is strictly for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18. Should we discover that a minor's information has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question.

If you are a parent or guardian who believes a child under your care has registered on megakiss, please contact us immediately at [email protected] so we can take the appropriate action.

9 Changes to This Privacy Policy

Megakiss reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. Any changes will be posted on this page with a revised update date.

For significant changes that materially affect your privacy rights, we will send a notification to your registered email address at least 14 days before the changes take effect. Continued use of the platform after that notification period constitutes your acceptance of the updated policy.

Question FAQ — Data Privacy

The most frequently asked questions about privacy at megakiss

No. megakiss has never and will never sell members' personal information to any advertiser or third-party marketing company. Your data is only shared with operational partners required to deliver our services — such as payment processors and game providers — and only within the strict limits described in Section 3 of this policy.

You can request a copy of your personal data by emailing [email protected] with the subject line "Data Access Request", along with your full name and account number. We will process your request and deliver your data in a readable format within 14 business days. This service is free for one request per 12-month period.

When an account is closed, your active data will be archived and no longer used for marketing or general communications. Financial transaction records will be retained for 7 years as required by anti-money laundering laws. Other data not required to be kept by law will be securely deleted after our minimum retention period.

Yes, you can withdraw consent to receive marketing communications at any time. Simply click the "Unsubscribe" link at the bottom of any marketing email we send, or update your communication preferences in your account settings. The request will be processed within 5 business days. Note: Withdrawing marketing consent does not affect your receipt of important account-related notifications.

Your Data Is Safe with megakiss

We protect your privacy with best-in-class technology and transparent policies. Register today and play with peace of mind — every piece of information you share with us is handled with full responsibility.

Bahasa Melayu