kisshp Privacy Policy

kisshp is committed to protecting the privacy and personal data of every Filipino player who chooses to use our platform. We understand that trust is the foundation of a good gaming experience — and that trust starts with being transparent about how we handle your information.

This Privacy Policy applies to all personal data collected through the kisshp website at kisshp.net, any related mobile-optimized interfaces, our customer support channels, and any other interaction you have with the kisshp platform. It applies to registered account holders as well as visitors who browse the platform without creating an account.

By creating a kisshp account or continuing to use the kisshp platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Policy, please do not use the kisshp platform.

For the purposes of the Data Privacy Act of 2012 (RA 10173), kisshp acts as the Personal Information Controller (PIC) with respect to all personal data collected from players and visitors of the kisshp platform. As PIC, kisshp determines the purposes for which personal data is collected and the means by which it is processed.

kisshp has designated a Data Protection Officer (DPO) as required under the NPC's implementing rules. The DPO is responsible for ensuring kisshp's ongoing compliance with RA 10173, handling data subject rights requests, and serving as the point of contact between kisshp and the National Privacy Commission (NPC).

kisshp collects only the personal data that is necessary for the specific purpose for which it is collected. We do not collect excessive or irrelevant information. The categories of personal data we collect are described below:

kisshp collects your personal data through the following channels and mechanisms:

1. Direct Submission. Information you provide when registering your kisshp account, completing the KYC verification process, submitting deposit or withdrawal requests, contacting our support team, or responding to promotions and surveys.
2. Automated Technologies. Technical and usage data collected automatically when you access and use the kisshp platform, including through cookies, web beacons, session tracking tools, and server log files. See Section 8 for full details on cookies.
3. Identity Verification Partners. Where kisshp uses third-party identity verification services to assist in KYC compliance, those services may return verification results and associated data to kisshp in accordance with their own privacy policies and applicable Philippine law.
4. Payment Processors. Transaction reference data and payment confirmation information received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment providers when you make deposits or request withdrawals.
5. Regulatory Bodies. In certain circumstances, kisshp may receive data from PAGCOR or other regulatory authorities in connection with compliance investigations or player protection matters.

kisshp processes your personal data only for specific, legitimate, and clearly defined purposes. We do not use your personal data for purposes that are incompatible with the ones listed below:

• Account Management. Creating, maintaining, and administering your kisshp player account, including processing login authentication and managing account settings.
• KYC and Age Verification. Verifying your identity and confirming that you meet the 21-year minimum age requirement as prescribed by PAGCOR regulations for online casino and sports betting participation in the Philippines.
• Financial Transactions. Processing your deposits and withdrawals through GCash, PayMaya, and bank channels, and maintaining accurate transaction records.
• Anti-Money Laundering (AML) Compliance. Fulfilling kisshp's obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR's AML regulations, including transaction monitoring and suspicious activity reporting.
• Customer Support. Responding to your inquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Responsible Gaming. Monitoring gameplay patterns to identify potential problem gambling behavior, administering deposit limits and self-exclusion requests, and complying with PAGCOR responsible gaming standards.
• Fraud Prevention and Security. Detecting and preventing unauthorized access, fraudulent activity, cheating, and multi-accounting through analysis of technical and behavioral data.
• Platform Improvement. Analyzing aggregated, anonymized usage data to improve the kisshp platform's features, performance, and user experience.
• Marketing Communications. Sending promotional offers, bonus notifications, and event updates to players who have consented to receive such communications. You may withdraw this consent at any time by contacting support.
• Legal Compliance. Meeting kisshp's obligations under applicable Philippine law, PAGCOR regulations, court orders, and regulatory directives.

Under the Data Privacy Act of 2012 (RA 10173), kisshp processes your personal data on the following legal bases:

1. Consent. For marketing communications, cookie-based tracking, and optional features — processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
2. Contractual Necessity. For account management, KYC verification, deposit and withdrawal processing, and customer support — processing is necessary for the performance of the contract between you and kisshp (i.e., the Terms and Conditions you accepted upon registration).
3. Legal Obligation. For AML reporting, age verification, responsible gaming interventions, and regulatory record-keeping — processing is required to comply with kisshp's obligations under Philippine law, including RA 9160, RA 10173, and PAGCOR regulations.
4. Legitimate Interests. For fraud detection, security monitoring, and platform improvement through aggregated analytics — processing is based on kisshp's legitimate interest in operating a safe, fair, and functional gaming platform, provided that interest is not overridden by your fundamental rights and freedoms.

kisshp does not sell, rent, lease, or trade your personal data to third parties for commercial purposes. We share your personal data only in the circumstances described below, and only to the extent necessary for the specified purpose:

1. Payment Service Providers. GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors receive transaction data necessary to execute your deposit and withdrawal instructions. These providers process data under their own privacy policies and applicable Philippine law.
2. KYC and Identity Verification Providers. Third-party services engaged by kisshp to assist in identity verification and document authentication may process your KYC data on kisshp's behalf as Personal Information Processors (PIPs) under RA 10173.
3. Game Content Providers. Third-party game studios and live dealer platform providers may receive a player session token and anonymized session data necessary to deliver the game experience. These providers do not receive your full identity or payment data.
4. PAGCOR and Regulatory Authorities. kisshp is required to submit player data, transaction records, and other information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other regulatory bodies as required by Philippine law.
5. Law Enforcement. kisshp will disclose personal data to law enforcement agencies, courts, or government authorities in response to a lawful order, warrant, or directive, or where disclosure is necessary to prevent fraud, criminal activity, or a threat to public safety.
6. Professional Advisors. kisshp's legal, audit, and compliance advisors may access player data on a strictly need-to-know basis, subject to confidentiality obligations.

The kisshp platform uses cookies and similar tracking technologies to provide a functional, secure, and personalized experience. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programs or deliver viruses to your device.

kisshp uses the following categories of cookies:

• Strictly Necessary Cookies. These cookies are essential for the kisshp platform to function correctly. They enable core features like session management, login authentication, and security controls. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies. These cookies remember your preferences, such as language settings, display preferences, and responsible gaming settings, so you do not have to re-enter them on each visit.
• Analytics Cookies. These cookies collect anonymized data about how players navigate and use the kisshp platform, helping us identify areas for improvement. We use aggregated data only — individual player behavior is not profiled for external reporting.
• Security Cookies. These cookies help kisshp detect and prevent fraudulent login attempts, multi-accounting, and other security threats by analyzing patterns in device and session data.

You can manage or disable cookies through your browser's settings. Note that disabling strictly necessary cookies will prevent you from logging in to your kisshp account. For detailed browser-specific instructions on managing cookies, please refer to your browser's help documentation.

kisshp retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and PAGCOR regulations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to any individual player. Data that is the subject of an active legal dispute, regulatory investigation, or pending data rights request will be retained until the matter is fully resolved.

kisshp implements a comprehensive set of technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

1. Encryption in Transit. All data transmitted between your device and kisshp servers is encrypted using TLS 1.3 protocol. We enforce HTTPS across the entire kisshp platform with no fallback to unencrypted connections.
2. Encryption at Rest. Sensitive personal data stored in our databases — including KYC documents, financial account details, and player identity records — is encrypted at rest using AES-256 encryption.
3. Access Controls. Access to personal data within kisshp's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality agreements and regular security training.
4. Multi-Factor Authentication. Administrative access to systems containing personal data requires multi-factor authentication. We also encourage players to enable 2FA on their kisshp accounts for additional protection.
5. Security Audits. kisshp conducts regular internal security reviews and engages third-party security specialists to perform periodic penetration testing and vulnerability assessments of our platform infrastructure.
6. Data Breach Response. kisshp maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, kisshp will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by RA 10173.

kisshp primarily stores and processes personal data on servers located within or accessible to the Philippines. In certain operational circumstances — such as the use of internationally-hosted game content providers, cloud infrastructure services, or KYC verification platforms — your personal data may be transferred to, stored in, or processed in jurisdictions outside the Philippines.

Where such international transfers occur, kisshp ensures that adequate safeguards are in place to protect your personal data at a standard equivalent to the protections afforded under RA 10173. These safeguards may include:

• Contractual data protection clauses incorporated into agreements with international service providers;
• Transfers to jurisdictions recognized by the National Privacy Commission (NPC) as providing an adequate level of data protection;
• Binding corporate rules or equivalent data governance frameworks applied by the receiving entity.

By using the kisshp platform and consenting to this Privacy Policy, you acknowledge and consent to the transfer of your personal data to international service providers under the safeguards described above.

As a data subject under RA 10173, you have the right to access, correct, delete, restrict, object to, and port your personal data. You also have the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with the National Privacy Commission (NPC).

To exercise any of your data rights with respect to your kisshp account, please contact our Data Protection Officer using the following process:

1. Send an email to [email protected] with the subject line "Data Privacy Request — [Your Request Type]" (e.g., "Data Privacy Request — Access Request" or "Data Privacy Request — Erasure Request").
2. Include your full name, registered kisshp email address, and a description of your specific request. For erasure or portability requests, specify the data categories involved.
3. For security purposes, we may ask you to verify your identity before processing your request. This may involve confirming information associated with your registered account.
4. kisshp will acknowledge your request within 3 business days and provide a substantive response within 15 business days from the date of receipt. Complex requests may require an extension, in which case we will notify you promptly.

The kisshp platform is strictly intended for adults who are 21 years of age or older, in accordance with PAGCOR regulations governing online casino and sports betting services in the Philippines. kisshp does not knowingly collect, process, or retain personal data from individuals under the age of 21.

All account registration applications are subject to mandatory age verification as part of the KYC process. Any account found to belong to a person under 21 years of age will be immediately suspended, all associated funds will be reviewed in accordance with applicable regulatory requirements, and the personal data of the minor will be deleted or handled in accordance with PAGCOR's prescribed procedures for underage account detection.

If you are a parent or guardian and you believe that a minor in your care has registered a kisshp account or submitted personal data to the kisshp platform, please contact us immediately at [email protected] so that we can take prompt remedial action.

The kisshp platform integrates with third-party service providers to deliver its full range of features — including game content from licensed studios, payment processing through GCash, PayMaya, and Philippine banks, and identity verification services. While kisshp takes care to partner only with reputable providers that maintain strong data protection standards, each third-party provider operates under its own privacy policy.

kisshp is not responsible for the privacy practices or data handling of third-party providers once data is transferred to them under a legitimate purpose described in Section 7 of this Policy. We encourage you to review the privacy policies of any third-party services whose platforms you access in connection with your kisshp experience.

The kisshp platform may display informational references to external resources. kisshp does not control the content or privacy practices of any external websites and accepts no responsibility for their data handling practices.

kisshp reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, the kisshp platform, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. The most current version of this Privacy Policy will always be available at kisshp.net/privacy-policy.

When we make material changes to this Privacy Policy, we will notify registered players by posting a prominent notice on the kisshp platform and, where appropriate, by sending a notification to your registered email address. The updated Policy will display a revised "Last Updated" date at the top of the document.

Your continued use of the kisshp platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the kisshp platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to kisshp's handling of your personal data, please do not hesitate to get in touch. Our Filipino-speaking support team is available 24 hours a day, 7 days a week — including Philippine public holidays.

For formal complaints or regulatory escalations, you may also contact the National Privacy Commission (NPC) — the Philippine government body responsible for enforcing RA 10173. The NPC provides accessible complaint mechanisms for Filipino data subjects whose privacy rights have been violated.