K-MEGAS
Sign in
K-MEGAS

Privacy Policy

Last updated · 2026-07-02

DRAFT — placeholder wording pending legal counsel review (⚖️). Not legal advice.

English only for now — localized (Traditional Chinese) versions are pending.

1. Data We Collect

  • Account data: email address, username, hashed password, locale/language preference, and account status.
  • Age-declaration consent record: the timestamp, IP address, and locale captured at the moment you affirm you are 18 or older. This record is retained as evidence of consent; see Section 3 below.
  • Payment tokens: we do not store full card numbers. Payment is processed by a third-party payment gateway (PG), which returns a tokenized reference and transaction status to us.
  • Watch history: titles viewed, watch progress, and favorites, used to power your library and recommendations.
  • Cookies & similar technologies: session cookies, locale/age-gate preference cookies, and analytics identifiers.

2. How We Use Your Data

We use collected data to:

  • Provide, maintain, and secure the Service, including authentication and billing.
  • Verify age-gate consent and defend against regulatory or legal inquiries.
  • Personalize your experience (watch history, recommendations, locale).
  • Detect fraud, abuse, and violations of our Terms of Service.
  • Comply with legal, tax, and record-keeping obligations.

3. Legal Bases for Processing

Depending on your jurisdiction, we rely on one or more of the following legal bases: performance of a contract (delivering the Service you signed up for), consent (age declaration, marketing communications where applicable), legitimate interests (fraud prevention, service improvement), and legal obligation (record-keeping, tax, and law-enforcement requests).

4. Data Minimization

We do notcollect or store raw government-issued identification documents (e.g. photos of a passport or driver’s license) as part of standard registration. Where a jurisdiction requires enhanced identity or age verification, that verification is performed by an independent third-party vendor, which returns only a pass/fail result to us — not the underlying document image.

5. Sharing of Data

We share data only as necessary to operate the Service, with:

  • Payment gateway (PG) providers, to process transactions and prevent fraud.
  • Video CDN and hosting providers, to deliver streaming content reliably.
  • Third-party age/identity verification vendors, where enhanced verification applies.
  • Professional advisors and authorities, where required by law or legal process.

We do not sell your personal data to third parties.

6. Data Retention

We retain account and consent records for as long as your account is active and for a reasonable period thereafter to meet legal, tax, and dispute-resolution obligations. Age-declaration consent records are retained for the retention period required by applicable adult-content compliance law [placeholder — exact retention period TBD by legal counsel].

7. Security

We use industry-standard technical and organizational measures — encryption in transit, access controls, and tokenized payment handling — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details in Section 11 below.

9. International Data Transfers

Your data may be processed and stored in countries other than your own, including where our hosting, CDN, or payment providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect data transferred internationally.

10. Children’s Privacy

The Service is strictly for adults 18 years of age or older (or the age of majority in your jurisdiction). We do not knowingly collect data from minors. If we become aware that a minor has created an account, we will terminate the account and delete the associated data.

11. Contact & Data Protection Officer

For privacy inquiries or to exercise your data rights, contact our privacy team at [placeholder — DPO / privacy contact email TBD].