kisshp Privacy Policy
This Privacy Policy explains how kisshp collects, uses, discloses, stores, and protects the personal information of all individuals who register an account, access services, or interact with the kisshp platform at kisshp.cam. kisshp is committed to handling your personal data with transparency, security, and full respect for your rights under the Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable Philippine privacy regulations.
🛡️ Privacy at a Glance
How kisshp Approaches Your Privacy
These highlights summarise the key principles that govern how kisshp handles your personal data. The complete, binding policy is set out in full below and should be read in its entirety.
Data Collected With a Clear Purpose
kisshp collects only the personal information that is necessary for account registration, identity verification, payment processing, regulatory compliance, and the safe delivery of gaming services to Filipino players. We do not collect personal data speculatively or without a defined, lawful purpose.
256-Bit SSL Encryption on Every Session
Every kisshp session is protected by industry-standard 256-bit Secure Socket Layer (SSL) encryption. Your personal data, login credentials, and financial transaction information are fully encrypted in transit — the same level of protection used by major Philippine banks and financial institutions including BPI, BDO, and Metrobank.
Your Data Rights Are Actively Protected
Under the Data Privacy Act of 2012, Filipino players have the right to access, correct, object to, erase, and port their personal data. kisshp provides clear processes for exercising each of these rights, described in detail in this policy. Requests are handled within 10 business days of receipt.
No Sale of Personal Data to Third Parties
kisshp does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Data sharing with external parties is limited strictly to what is required for regulatory compliance, payment processing, and platform operation — and only with parties bound by appropriate data protection agreements.
Full Compliance With Philippine Privacy Law
This Privacy Policy is drafted in compliance with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. kisshp's data processing activities are also subject to PAGCOR's data governance requirements for licensed online gaming operators.
Transparent Cookie and Tracking Practices
kisshp uses cookies and similar tracking technologies strictly for session management, security, platform performance analysis, and the improvement of user experience. Marketing and analytics cookies are only activated with your consent. You can manage your cookie preferences at any time via your browser settings or the kisshp cookie preference centre.
1 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "kisshp," "we," "us," "our" — the kisshp online gaming platform operated at kisshp.cam, holding a valid PAGCOR online gaming licence.
- "Data Subject," "you," "your" — any individual whose personal information is collected, processed, or stored by kisshp, including registered players, prospective players, and website visitors.
- "Personal Data" / "Personal Information" — any information that identifies or can reasonably be used to identify a natural person, as defined under Section 3(g) of the Data Privacy Act of 2012.
- "Sensitive Personal Information" — personal data that falls within the special categories under Section 3(l) of the Data Privacy Act, including government-issued identification numbers, financial data, and information relating to health.
- "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, updating, retrieval, consultation, use, disclosure, combination, erasure, or destruction.
- "Data Privacy Act" / "DPA" — Republic Act No. 10173, the Data Privacy Act of 2012, together with its Implementing Rules and Regulations and applicable NPC issuances.
- "NPC" — the National Privacy Commission of the Philippines, the independent body responsible for data privacy enforcement and policy.
- "PAGCOR" — the Philippine Amusement and Gaming Corporation.
- "Platform" — the kisshp website, mobile web application, gaming services, and all related features accessible at kisshp.cam.
2 Data Controller Identity
kisshp is the data controller responsible for the personal information collected through the kisshp Platform. As data controller, kisshp determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with the Data Privacy Act of 2012.
kisshp has designated a Data Protection Officer (DPO) responsible for overseeing the platform's data protection compliance programme and handling data subject inquiries and complaints. Contact details for the DPO are provided in Section 14 of this Policy.
Regulatory Context: In addition to the Data Privacy Act, kisshp's data handling practices are subject to PAGCOR's data governance requirements for licensed operators, including obligations relating to player identity records, transaction data retention, and anti-money laundering reporting under the Anti-Money Laundering Act of 2001 (RA 9160, as amended).
3 Personal Data We Collect
3.1 Information You Provide Directly
When you register a kisshp account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions, we collect the following categories of personal data:
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Account registration, age and identity verification (KYC) |
| Contact Data | Philippine mobile number, email address | Account authentication, OTP delivery, support communications |
| Government ID Data | Philippine government-issued ID number, ID document image, selfie photograph | Mandatory KYC age and identity verification under PAGCOR regulations |
| Financial Data | GCash or PayMaya account number, bank account name and number (BPI, BDO, Metrobank), transaction history | Payment processing, withdrawal verification, AML compliance |
| Gaming Activity Data | Game history, wager amounts, win/loss records, session durations, bonus usage | Game provision, responsible gaming monitoring, dispute resolution |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support, complaint handling, service improvement |
3.2 Information Collected Automatically
When you access or use the kisshp Platform, we automatically collect certain technical and usage data, including:
- Internet Protocol (IP) address and approximate geolocation;
- Device type, operating system, and browser information;
- Pages visited, features used, and time spent on the Platform;
- Session identifiers and authentication tokens;
- Clickstream data and navigation patterns within the Platform.
This automatically collected data is used for security monitoring, fraud detection, platform performance optimisation, and ensuring geographic compliance with PAGCOR's Philippine-jurisdiction licensing requirements.
3.3 Information From Third Parties
kisshp may receive limited personal data from authorised third-party payment providers (such as GCash and PayMaya) necessary for the processing and verification of transactions, as well as from identity verification service providers engaged to assist with KYC processes. All third-party data sharing arrangements are governed by appropriate data processing agreements.
4 How We Use Your Personal Data
kisshp processes your personal data for the following specific, declared purposes:
- Account Creation and Management: To register, maintain, authenticate, and administer your kisshp account, including processing deposits and withdrawals via your linked Philippine payment methods (GCash, PayMaya, BPI, BDO, Metrobank).
- Age and Identity Verification: To comply with PAGCOR's mandatory KYC requirements, confirming that all kisshp players are aged 21 years and above and are legally permitted to engage in online gaming.
- Gaming Services Delivery: To operate and deliver all game types available on the Platform, including slots, live dealer games, bingo, sports betting, and the Money Wheel, and to maintain accurate records of all gaming activity.
- Responsible Gaming: To monitor gaming patterns and apply responsible gaming controls, including enforcing deposit limits, session restrictions, and self-exclusion measures, and to identify accounts that may require protective intervention.
- Regulatory Compliance: To fulfil our obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and all other applicable Philippine laws, including the mandatory reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC).
- Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and any other conduct that violates the kisshp Terms and Conditions or applicable law.
- Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 Tagalog- and English-language support channels.
- Platform Improvement: To analyse usage data and player feedback for the purposes of improving the Platform's features, performance, game selection, and overall user experience.
- Promotional Communications: To send you information about promotions, bonuses, and new features on the kisshp Platform, where you have consented to receive such communications. You may withdraw this consent at any time.
5 Legal Basis for Processing
kisshp processes your personal data on the following legal bases as provided under the Data Privacy Act of 2012:
- Contractual Necessity: Processing required to fulfil our obligations under the kisshp Terms and Conditions, including account management, game provision, and payment processing.
- Legal Obligation: Processing necessary to comply with PAGCOR licensing requirements, anti-money laundering obligations, age verification mandates, and other applicable Philippine legal requirements.
- Legitimate Interests: Processing conducted for kisshp's legitimate business interests where these interests do not override your fundamental privacy rights — including fraud prevention, security monitoring, and Platform improvement.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for promotional communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
6 Data Sharing and Disclosure
kisshp does not sell, rent, or trade your personal data to any third party. We share personal information only in the following limited circumstances and only to the minimum extent necessary:
6.1 Regulatory Authorities
kisshp is required by Philippine law to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities upon lawful request or as required by mandatory reporting obligations. All such disclosures are made in compliance with applicable law.
6.2 Payment Processing Partners
Financial data necessary to process your deposits and withdrawals is shared with our approved Philippine payment partners — GCash, PayMaya, BPI, BDO, and Metrobank — solely for the purpose of executing your requested transactions. These partners operate under their own data protection frameworks and are contractually bound to process your data only as instructed.
6.3 Identity Verification Service Providers
To fulfil PAGCOR's mandatory KYC requirements, kisshp engages accredited identity verification service providers. These providers process your identity document images and verification data under strict confidentiality agreements and may not use your data for any purpose other than identity verification as instructed by kisshp.
6.4 Technology and Platform Service Providers
kisshp uses third-party technology providers for hosting infrastructure, cybersecurity services, and Platform operation. These providers act as data processors on kisshp's behalf and are bound by data processing agreements that prohibit independent use of your personal data.
6.5 Law Enforcement
kisshp may disclose personal data to Philippine law enforcement agencies where required by a valid court order, subpoena, or applicable law, or where disclosure is reasonably necessary to prevent fraud, money laundering, or other criminal activity.
No International Marketing Transfers: kisshp does not transfer your personal data to marketing companies, data brokers, or advertising networks. Your personal information is processed exclusively for the purposes described in this Privacy Policy.
7 Cookies and Tracking Technologies
7.1 Types of Cookies Used
The kisshp Platform uses the following categories of cookies and similar tracking technologies:
- Strictly Necessary Cookies: Essential for Platform operation, including session authentication, security tokens, and load balancing. These cannot be disabled without affecting core Platform functionality.
- Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform, enabling kisshp to identify and fix issues and improve the overall gaming experience. Activated only with your consent.
- Functional Cookies: Remembering your language preferences, display settings, and other personalisation choices. These enhance your experience but are not essential to Platform operation.
- Security Cookies: Supporting fraud detection, bot prevention, and account security measures to protect the integrity of your kisshp account.
7.2 Managing Your Cookie Preferences
You may manage, restrict, or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to access or use certain features of the kisshp Platform. Instructions for managing cookies are available in your browser's help documentation.
No Third-Party Advertising Cookies: kisshp does not permit third-party advertising networks or social media platforms to place tracking cookies on the kisshp Platform for the purpose of building advertising profiles or serving targeted advertisements to kisshp players on external websites.
8 Data Retention
kisshp retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by applicable Philippine law and regulation:
- Account and Identity Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and anti-money laundering regulations.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act and Bangko Sentral ng Pilipinas (BSP) record-keeping requirements applicable to e-money transactions.
- Gaming Activity Records: Retained for a minimum of three (3) years following your last gaming session, for dispute resolution and regulatory audit purposes.
- Support and Communications Records: Retained for two (2) years from the date of the last communication, unless the subject matter requires longer retention for ongoing legal or compliance proceedings.
- Marketing Consent Records: Retained for the duration of the account and for three (3) years following account closure or consent withdrawal, as evidence of lawful processing.
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with kisshp's data disposal procedures.
9 Data Security Measures
kisshp implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- Transport Layer Encryption: 256-bit SSL/TLS encryption applied to all data transmitted between your device and the kisshp Platform;
- Password Security: Player passwords are stored using one-way cryptographic hashing algorithms — kisshp does not store passwords in readable form;
- Two-Factor Authentication: SMS OTP verification on logins from new or unrecognised devices, providing an additional layer of protection for your account;
- Access Controls: Strict internal access controls ensuring that personal data is accessible only to kisshp personnel with a legitimate operational need;
- Data Minimisation: Personal data collected is limited to what is strictly necessary for each stated purpose;
- Security Monitoring: Continuous monitoring of Platform infrastructure for intrusion attempts, anomalous activity, and potential security incidents;
- Vendor Security Standards: All third-party data processors are required to maintain security standards equivalent to or exceeding those applied by kisshp.
Data Breach Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, kisshp will notify the National Privacy Commission (NPC) and affected data subjects within the timeframes prescribed by the Data Privacy Act and NPC Circular No. 16-03. Notification will include the nature of the breach, the data affected, the likely consequences, and the measures taken to address it.
10 Your Privacy Rights
As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by kisshp. You may exercise any of these rights by contacting the kisshp Data Protection Officer using the contact details in Section 14:
Right to Access
You have the right to obtain confirmation of whether kisshp processes your personal data, and to receive a copy of the personal data we hold about you, together with information about how it is used and with whom it has been shared.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data kisshp holds about you. Requests to update registered contact details or identity information may require identity verification before changes are applied.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to kisshp's legal retention obligations described in Section 8.
Right to Object
You have the right to object to kisshp's processing of your personal data where processing is based on legitimate interests, or where data is used for direct marketing purposes. An objection to marketing communications will result in immediate cessation of such communications.
Right to Data Portability
Where technically feasible, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another organisation of your choice, where processing is based on consent or contractual necessity.
Right to Lodge a Complaint
You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe kisshp has processed your personal data in violation of the Data Privacy Act of 2012. We encourage you to contact kisshp's Data Protection Officer first, as many concerns can be resolved directly and more quickly.
Response Timeline: kisshp will acknowledge all data subject rights requests within five (5) business days and will provide a substantive response within ten (10) business days. Where a request is particularly complex, we will notify you of the reason for any extension within the initial 10-business-day period.
11 Children's Privacy
The kisshp Platform is strictly restricted to individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. kisshp does not knowingly collect, process, or retain personal data from individuals under the age of 21.
Where kisshp becomes aware that personal data has been collected from an individual under the age of 21 through any means, including misrepresentation during registration, kisshp will immediately suspend the relevant account, refund any real-money deposits (net of any winnings derived from the underage account), and permanently delete all personal data associated with that account.
If you have reason to believe that a person under 21 has registered or accessed a kisshp account, please contact our support team immediately at [email protected].
12 Cross-Border Data Transfers
Where personal data is transferred outside the Philippines — for example, to technology infrastructure providers or game content providers operating in other jurisdictions — kisshp ensures that such transfers are conducted only where adequate protections are in place, including:
- Contractual clauses that impose data protection standards equivalent to those required under Philippine law;
- Transfers to jurisdictions recognised by the NPC as providing adequate levels of data protection;
- Transfers to entities that have implemented binding corporate rules or equivalent privacy frameworks approved by the NPC.
No cross-border transfer of kisshp player data is conducted for marketing, advertising, or data brokerage purposes.
13 Amendments to This Privacy Policy
kisshp reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via SMS to the mobile number registered on their account and/or via a prominent notice on the kisshp Platform, not less than seven (7) days prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this Policy. Your continued use of the kisshp Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. We encourage you to review this Policy periodically.
14 Contact & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact kisshp's designated Data Protection Officer through the following channels:
- Email: [email protected] — please include "Data Privacy Request" in the subject line for priority routing to the DPO team.
- Live Chat: Available 24/7 from any page on the kisshp Platform. Support agents are available in Tagalog and English and can route data privacy matters to the DPO team.
For concerns about kisshp's compliance with the Data Privacy Act that are not resolved through the above channels, you may contact the National Privacy Commission of the Philippines directly.
Commitment to Data Privacy: kisshp is committed to being a trusted online gaming platform for Filipino players — and that trust depends on handling your personal data with care, transparency, and full respect for your rights. If we've fallen short of that standard in any way, we want to know so we can make it right.
Your Data Is Safe With kisshp
PAGCOR-regulated, Data Privacy Act compliant, 256-bit encrypted — your kisshp account is built on a foundation of security and transparency. Ready to play?
21+ only · PAGCOR Licensed · RA 10173 Compliant · Play Responsibly