Privacy Policy KissMega – Malaysian Player Data Security

This privacy policy explains how KissMega ("we", "Platform") collects, uses, stores, discloses and protects your personal information ("data") when you use the kissmega platform — including the website, mobile app, and all related communication channels.

This document applies to all registered members, users browsing the platform without registering, and any individual who interacts with kissmega through our customer support channels.

KissMega reserves the right to update this privacy policy from time to time to reflect changes in our data processing practices or new legal requirements. The latest update date will be stated at the top of this document. It is your responsibility to review this page periodically.

KissMega collects two main types of information: information you provide directly to us, and information collected automatically when you use the platform.

2.1 Information You Provide Directly

• Registration information: Full name, phone number, email address, date of birth, username, and password.
• KYC information: A copy of your identity card (MyKad), passport or other valid identity document, along with proof of current address such as a utility bill or bank statement.
• Financial information: Bank account number, bank name, and related information required to process deposits and withdrawals.
• Support communications: The content of inquiries, complaints, and correspondence you submit to the kissmega support team.

2.2 Information Collected Automatically

• Technical data: IP address, browser type, operating system, device information and unique device identifiers.
• Usage data: Pages visited, games played, session duration, login frequency and in-platform activity.
• Cookie data: Information collected through cookies and similar tracking technologies to enhance the user experience.
• Location data: General location information based on your IP address for regulatory compliance purposes.

KissMega uses your personal data responsibly and only for the following legitimate purposes:

KissMega does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where sharing information may be necessary:

4.1 Trusted Service Providers

Kissmega works with trusted third-party service providers to handle certain aspects of our platform. These providers are only permitted to use your data for purposes we specify and are subject to strict data protection agreements:

• Payment processors: To facilitate deposits and withdrawals through integrated Malaysian payment channels.
• KYC verification services: To securely verify your identity using recognised authentication technology.
• Hosting and infrastructure providers: To securely store and process platform data.
• Analytics services: To understand platform usage patterns and improve the user experience.

4.2 Disclosures Required by Law

Kissmega may be required to disclose your information when mandated by law or by a legitimate regulatory authority in Malaysia — including for criminal investigations, anti-money laundering purposes, or valid court orders. In such situations, kissmega will disclose only the minimum information required.

KissMega uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand platform usage patterns. The following types of cookies are used:

• Essential cookies (required): Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled.
• Performance cookies: Collects information about how you use the platform to help us improve the overall experience. All information is anonymous.
• Preference cookies: Stores your preferences such as display settings and language to make using the platform more convenient.
• Marketing cookies: Used to display relevant promotional content. You may disable these cookies through your browser settings.

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality and security of the kissmega platform.

KissMega implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Security

• 256-bit SSL encryption for all data transmitted between your device and the kissmega server.
• Passwords are stored using strong hashing algorithms — your password is never stored in plain text.
• Two-factor authentication (2FA) is available and encouraged for all member accounts.
• Real-time security threat monitoring and active intrusion detection systems.
• Periodic security assessments and penetration testing conducted by independent experts.

6.2 Organisational Security

• Access to member personal data is restricted to staff who require it to carry out their duties only.
• All staff who handle personal data have completed privacy and data security training.
• A clear security incident response procedure to address any data breaches promptly.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by kissmega:

KissMega retains your personal data for as long as necessary to fulfill the purposes stated in this policy, or as required by Malaysian law. Once the retention period expires, data will be securely deleted or anonymized.

• Active account data: Retained for the duration your account is active plus 7 years after account closure (Malaysia legal requirement).
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering regulations.
• Transaction records: Retained for 7 years for audit and regulatory compliance purposes.
• Support communication data: Retained for 3 years from the date of last interaction.
• Log and security data: Retained for 12 months for security and fraud detection purposes.

In operating the kissmega platform, there are situations where your personal data may be processed outside Malaysia — for example, when using cloud computing services or infrastructure located abroad.

In all such situations, kissmega ensures equivalent protection is provided for your data through:

• Selection of partners and vendors operating in countries with an equivalent or higher level of data protection.
• Contractually binding data processing agreements with all parties involved.
• Consistent technical security measures regardless of data processing location.

If you have any questions, concerns or complaints regarding this privacy policy or how kissmega handles your personal data, please do not hesitate to contact us. kissmega takes every privacy-related inquiry seriously.

• Email: [email protected] (response within 24 working hours)
• Live Chat: Available 24 hours a day, 7 days a week via the kissmega platform
• WhatsApp & Telegram: Chat with our support agents directly

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.