It's true, all of Kongregate.com is not https/SSL. However, the necessary parts of the site, such as log-in and purchasing, are completely secure.
Passwords: We submit passwords through a secure iframe, so the password is not sent via plaintext.
Credit cards: Credit card info is transmitted securely and directly to our credit card processor, it is not transmitted through our servers at all.