kissph Privacy Policy – How We Protect Your Personal Data

1. Introduction and Scope of This Policy

This Privacy Policy applies to all personal data collected by kissph through our website, mobile applications, customer support channels, payment processors, and any other touchpoints where you interact with the kissph platform. It covers both the personal data you provide directly to us and the data we collect automatically through your use of our services.

This Privacy Policy should be read in conjunction with our Terms and Conditions and our Responsible Gaming Policy. In the event of any conflict between this Privacy Policy and other kissph policies, this Privacy Policy shall prevail with respect to personal data handling.

2. Data Controller and Contact Information

kissph is the data controller responsible for the collection, processing, and protection of your personal information. This means that kissph determines the purposes and means of processing your personal data and is accountable for compliance with applicable data protection laws.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer at:

• Email: [email protected]
• Subject Line: "Data Privacy Inquiry" or "Data Subject Request"

3. What Personal Information We Collect

kissph collects several categories of personal information in order to provide our services, comply with legal obligations, and improve the user experience. The specific data we collect includes:

3.1 Information You Provide Directly

When you register for a kissph account, make a deposit, contact customer support, or otherwise interact with the platform, you provide us with the following types of personal data:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, and chosen username and password.
• Identity Verification Data: Government-issued identification documents (passport, driver's license, UMID, or other Philippine ID), photographs or scans of identification documents, and proof of address documents (utility bills, bank statements).
• Payment Information: GCash account details, PayMaya account details, bank account numbers, transaction history, deposit and withdrawal records, and payment method verification documents.
• Communication Data: Any information you provide when you contact customer support via live chat, email, or phone, including the content of your messages and support tickets.
• Responsible Gaming Data: Deposit limits you set, self-exclusion periods, time-out requests, and any information you provide related to responsible gaming tools.

3.2 Information We Collect Automatically

When you access and use the kissph platform, we automatically collect certain technical and usage data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Log Data: IP address, access times and dates, pages viewed, clickstream data, referring URLs, time spent on pages, and interaction with platform features.
• Gameplay Data: Games played, bets placed, bet amounts, winnings and losses, game session duration, betting patterns, and bonus usage.
• Location Data: Approximate geographic location based on IP address to verify that you are accessing the platform from within the Philippines.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and similar technologies (see Section 9 for details).

3.3 Information from Third-Party Sources

In certain circumstances, we may receive personal data about you from third-party sources, including:

• Payment Providers: Transaction data, payment verification status, and fraud screening results from GCash, PayMaya, banks, and other payment processors.
• Identity Verification Services: Age verification results, identity authentication results, and fraud detection signals from third-party KYC (Know Your Customer) service providers.
• Affiliate Partners: Referral source information if you arrived at kissph through a marketing partner or affiliate.

4. How We Use Your Personal Information

kissph uses your personal data for the following purposes:

4.1 Provision of Services

• To create, maintain, and manage your kissph account.
• To process deposits, withdrawals, and other financial transactions.
• To provide access to casino games, sports betting, live dealer tables, and other gaming services.
• To process bets, calculate winnings, and credit your account balance.
• To communicate important account information, transaction confirmations, and service notifications.

4.2 Legal and Regulatory Compliance

• To verify your age and ensure you meet the minimum age requirement of 21 years.
• To verify your identity and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• To detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited activities.
• To comply with reporting obligations to PAGCOR and other regulatory authorities.
• To respond to legal requests, court orders, and law enforcement inquiries.

4.3 Responsible Gaming and Player Protection

• To implement and enforce deposit limits, self-exclusion periods, and other responsible gaming tools.
• To monitor gameplay patterns and identify signs of problem gambling.
• To provide access to responsible gaming resources and support organizations.

4.4 Customer Support and Communication

• To respond to your inquiries, support requests, and complaints.
• To send you important service announcements, security alerts, and account updates.
• To notify you of changes to our Terms and Conditions, Privacy Policy, or other policies.

4.5 Platform Improvement and Analytics

• To analyze platform usage patterns and user behavior to improve the user experience.
• To conduct research and development for new features and services.
• To optimize platform performance, speed, and mobile compatibility.
• To test and debug software and resolve technical issues.

4.6 Marketing and Promotions (With Your Consent)

• To send you promotional offers, bonus notifications, and marketing communications (only if you have consented to receive such communications).
• To personalize marketing messages based on your gaming preferences and activity.
• To conduct surveys and request feedback about your kissph experience.

You may opt out of marketing communications at any time by adjusting your account settings or by contacting customer support. Opting out of marketing communications does not affect essential service communications related to your account and transactions.

5. Legal Basis for Processing Your Data

Under the Data Privacy Act of 2012, kissph must have a lawful basis for processing your personal data. We process your personal information on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., the kissph Terms and Conditions) and to provide the gaming services you have requested.
• Legal Obligation: Processing is necessary to comply with legal obligations under Philippine law, including age verification, KYC/AML requirements, tax reporting, and regulatory compliance.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and customer support, provided that these interests do not override your fundamental rights and freedoms.
• Consent: For certain processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

6. When and How We Share Your Personal Data

kissph does not sell your personal information to third parties. However, we may share your data with the following categories of recipients in order to provide our services and comply with legal obligations:

6.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who assist us in operating the kissph platform, including:

• Payment Processors: GCash, PayMaya, banks, and other payment service providers who process deposits and withdrawals on our behalf.
• Game Providers: Third-party software developers who supply casino games, live dealer tables, and sports betting platforms.
• Identity Verification Services: KYC and AML compliance providers who verify your age, identity, and address.
• Cloud Hosting and IT Services: Providers of server infrastructure, cloud storage, data backup, and cybersecurity services.
• Customer Support Platforms: Live chat software, ticketing systems, and communication tools used by our support team.
• Analytics and Marketing Tools: Providers of web analytics, user behavior tracking, and marketing automation platforms.

All service providers are contractually required to protect your personal data, use it only for the specified purposes, and comply with applicable data protection laws.

6.2 Regulatory Authorities and Law Enforcement

We may disclose your personal data to PAGCOR, the National Privacy Commission of the Philippines, law enforcement agencies, courts, and other government authorities when required by law or when necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests.
• Investigate and prevent fraud, money laundering, underage gambling, or other illegal activities.
• Protect the rights, property, and safety of kissph, our users, and the public.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate transaction involving kissph, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the acquiring entity will be required to continue protecting your data in accordance with this Privacy Policy.

6.4 With Your Consent

We may share your personal data with third parties not listed above if you provide explicit consent for such disclosure.

7. How Long We Retain Your Personal Data

kissph retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal and regulatory obligations. Specific retention periods include:

• Account Data: Retained for the duration of your account's active status and for a period of five (5) years after account closure, as required by anti-money laundering regulations.
• Transaction Records: Financial transaction data, including deposits, withdrawals, and gameplay records, are retained for seven (7) years to comply with tax, accounting, and regulatory requirements.
• Identity Verification Documents: Retained for five (5) years after account closure or for as long as required by KYC/AML regulations.
• Communication Records: Customer support interactions are retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or for two (2) years of inactivity, whichever comes first.

After the applicable retention period expires, we securely delete or anonymize your personal data in accordance with data protection best practices.

8. How We Protect Your Personal Data

8.1 Technical Security Measures

• Encryption: All data transmitted between your device and kissph servers is protected by 256-bit SSL/TLS encryption.
• Secure Storage: Personal data is stored on secure servers with access controls, firewalls, and intrusion detection systems.
• Password Protection: Account passwords are hashed and salted using industry-standard cryptographic algorithms.
• Two-Factor Authentication: Optional 2FA is available for enhanced account security.

8.2 Organizational Security Measures

• Access Controls: Only authorized kissph employees and service providers with a legitimate need have access to your personal data.
• Employee Training: All staff members with access to personal data receive regular training on data protection and privacy obligations.
• Security Audits: We conduct regular security audits and vulnerability assessments to identify and address potential risks.
• Incident Response: We maintain a data breach response plan to quickly detect, contain, and remediate security incidents.

8.3 Your Security Responsibilities

While kissph employs robust security measures, you also play a role in protecting your account. You are responsible for:

• Choosing a strong, unique password and keeping it confidential.
• Enabling two-factor authentication on your account.
• Not sharing your account credentials with anyone.
• Logging out of your account when using shared or public devices.
• Notifying kissph immediately if you suspect unauthorized access to your account.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide information to website owners. kissph uses cookies and similar tracking technologies to enhance your experience and analyze platform usage.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly. These cookies enable core features such as account login, session management, and security functions. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how you use the kissph platform, such as which pages you visit and which features you use. This data helps us improve platform performance and user experience.
• Functional Cookies: Remember your preferences and settings, such as language selection, display options, and previously viewed games.
• Marketing Cookies: Track your activity across websites to deliver personalized advertising and measure the effectiveness of marketing campaigns. These cookies are only set with your consent.

9.3 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, although this may affect the functionality of the kissph platform. To learn more about cookies and how to manage them, visit your browser's help section or visit www.aboutcookies.org.

10. Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

10.1 Right to Access

You have the right to request a copy of the personal data we hold about you. You may access most of your account data directly through your kissph account dashboard. For additional data access requests, contact our Data Protection Officer.

10.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You may update most of your account information directly through your account settings.

10.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. However, we may be required to retain certain data to comply with legal obligations (e.g., AML record-keeping requirements).

10.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider.

10.5 Right to Object

You have the right to object to processing of your personal data when we rely on legitimate interests as the legal basis. You may also object to direct marketing at any time by adjusting your account settings or contacting customer support.

10.6 Right to Withdraw Consent

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10.7 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Request." We will respond to your request within thirty (30) days. We may request additional information to verify your identity before processing your request.

11. Protection of Minors

If you are a parent or guardian and believe that your child has provided personal information to kissph, please contact us immediately at [email protected] so that we can take appropriate action.

12. Changes to This Privacy Policy

kissph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes to this Privacy Policy will be communicated to you via email, platform notification, or prominent notice on the kissph website.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. Your continued use of the kissph platform after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Data Privacy Inquiry" or "Data Protection Officer"
• Support Hours: 24 hours a day, 7 days a week (Manila time, PHT)

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that your data protection rights have been violated. For more information about the National Privacy Commission, visit their official website.