Privacy Policy
kissph takes the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use the kissph platform, how we use and store it, who we may share it with, and what rights you have over your data under Philippine law. By using kissph, you consent to the practices described in this policy.
Summary: kissph collects personal information that is necessary to operate a PAGCOR-regulated online casino in the Philippines — including identity verification, financial transaction data, and gameplay records. We do not sell your personal data to third parties. We retain data for the minimum period required by Philippine AML and gaming regulations. You have the right to access, correct, and request deletion of your data, subject to our legal retention obligations.
kissph is an online casino and sports betting platform operating in the Republic of the Philippines under authorisation from the Philippine Amusement and Gaming Corporation (PAGCOR). The kissph platform is accessible at kissph.pro and offers a range of gambling entertainment services — including live baccarat, slot games, bingo, sabong streaming, and sports betting — to eligible Filipino players aged 21 and above.
For the purposes of this Privacy Policy, kissph acts as the data controller in respect of personal data collected from registered players and platform visitors. As data controller, kissph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.
References to "kissph", "we", "us", or "our" throughout this Privacy Policy refer to the kissph platform and its operating entity. References to "you", "your", or "player" refer to any individual who accesses, registers on, or uses the kissph platform in any capacity.
kissph collects personal data from you in several ways — directly when you register and use the platform, automatically through your device and browser, and from third-party sources where permitted by law. The categories of personal data we collect include:
2.1 Registration & Identity Data
- Full legal name (as it appears on your government-issued ID)
- Date of birth and age verification confirmation
- Residential address (barangay, city/municipality, province, postal code)
- Philippine mobile number
- Email address
- Username and encrypted account password
- Nationality and citizenship status
2.2 KYC & Identity Verification Documents
- Copy or image of a Philippine government-issued ID (e.g., PhilSys National ID, Passport, Driver's Licence, UMID, SSS/GSIS card, PRC ID, Voter's ID)
- Selfie or liveness check image for facial verification
- Proof of address documents where requested (e.g., utility bills, barangay clearance)
- Source of funds documentation for high-value account tiers
2.3 Financial & Transaction Data
- Deposit and withdrawal history, including amounts, timestamps, and payment methods used
- GCash and PayMaya account references (partial, tokenised — kissph does not store full mobile wallet credentials)
- Bank account details (account holder name, bank name, account number) for bank transfer withdrawals
- Transaction reference numbers and payment provider responses
2.4 Gameplay & Betting Data
- Game session logs, wager amounts, game outcomes, and round results
- Sports betting slip data, including markets selected, odds, stakes, and settlement results
- Bingo, slot, and live baccarat session records
- Bonus claim history and wagering requirement progress
- Responsible gaming tool usage (deposit limits set, cooling-off periods activated)
2.5 Technical & Device Data
- IP address and geolocation data (used for jurisdiction compliance verification)
- Device type, operating system, and browser version
- Session tokens, login timestamps, and activity logs
- Cookie identifiers and similar tracking technologies
2.6 Communications Data
- Content of messages sent to kissph support via live chat, email, or contact forms
- Records of customer service interactions, including chat transcripts
- Feedback, complaints, and dispute correspondence
kissph collects only the minimum personal data necessary to provide its regulated gaming services, comply with PAGCOR's licensing requirements, and meet obligations under Philippine AML and tax legislation. We do not collect sensitive personal information — such as health data, religious beliefs, or political affiliation — unless specifically required for a regulatory process.
kissph uses your personal data for the following purposes. Where we rely on a specific legal basis for each use, this is set out in Section 4 of this Privacy Policy.
| Purpose | Data Categories Used |
|---|---|
| Account registration and identity verification | Registration data, KYC documents |
| Processing deposits and withdrawals | Financial data, identity data |
| Providing gaming and betting services | Gameplay data, account data |
| Anti-money laundering (AML) compliance and fraud prevention | Financial data, identity data, technical data |
| PAGCOR regulatory reporting and licence compliance | All categories as required |
| Customer support and dispute resolution | Communications data, account data, gameplay data |
| Responsible gaming monitoring and intervention | Gameplay data, financial data, account data |
| Platform security and fraud detection | Technical data, financial data, account data |
| Promotional communications (where consented) | Contact data, gameplay preferences |
| Platform improvement and analytics | Technical data, gameplay data (aggregated/anonymised) |
We do not sell your personal data. kissph does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Any data sharing that occurs is limited to what is described in Section 5 of this Privacy Policy and is conducted under strict data protection agreements.
Under the Philippine Data Privacy Act of 2012, kissph processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to perform the Terms & Conditions contract between you and kissph — including account management, game provision, and financial transactions.
- Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Anti-Terrorism Financing Act, and tax reporting obligations under the Bureau of Internal Revenue (BIR).
- Legitimate Interests: Processing necessary for kissph's legitimate business interests — including platform security, fraud prevention, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your data protection rights.
- Consent: Where kissph relies on your consent as the legal basis for processing — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Note on Withdrawal of Consent: Withdrawing your consent to marketing communications does not affect your ability to use the kissph platform. However, if you withdraw consent to processing that is also required for the performance of our contract or legal compliance obligations, this may result in kissph being unable to provide certain services to your Account.
kissph does not share your personal data except in the following circumstances, all of which are subject to strict contractual or regulatory controls:
5.1 Payment Service Providers
To process deposits and withdrawals, kissph shares relevant financial and identity data with our authorised payment partners, including GCash (Mynt), Maya Philippines, BPI, BDO, Metrobank, and payment aggregators facilitating 7-Eleven and Cebuana transactions. These providers receive only the minimum data required to process your specific transaction.
5.2 Identity Verification Partners
kissph uses third-party KYC and identity verification service providers to assist with document verification and liveness checks during the account verification process. These providers process your identity documents solely for verification purposes under a strict data processing agreement and may not use your data for any other purpose.
5.3 PAGCOR and Regulatory Authorities
As a PAGCOR-licensed operator, kissph is required to provide player data, transaction reports, and gameplay records to PAGCOR upon request or as part of scheduled regulatory reporting. kissph may also be required to disclose data to the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other Philippine government agencies pursuant to lawful orders, subpoenas, or regulatory directives.
5.4 Game Content Providers
Some games on the kissph platform are provided by licensed third-party software studios. These providers may receive anonymised session identifiers to facilitate game delivery and round integrity verification. They do not receive your name, contact details, or financial information.
5.5 Professional Advisers
kissph may share relevant data with its legal advisers, auditors, and accountants where necessary for the conduct of professional engagements, subject to professional confidentiality obligations.
5.6 Business Transfers
In the event of a merger, acquisition, or sale of all or part of kissph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change in data controller identity prior to the transfer taking effect.
All third parties with whom kissph shares personal data are required to maintain adequate data security standards and to process your data only for the specified purpose. kissph does not authorise any third party to use your personal data for their own independent marketing or commercial purposes.
kissph uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and — where you have consented — deliver personalised content. The following categories of cookies are used on the kissph platform:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, load balancing | No — essential for platform operation |
| Functional | Remembering your preferences (language, display settings, responsible gaming limits) | No — necessary for service delivery |
| Analytics | Aggregated page performance data, error tracking, session replay (anonymised) | Yes — opt-in via cookie banner |
| Marketing | Personalised promotion delivery, retargeting campaign attribution | Yes — opt-in via cookie banner |
You can manage your cookie preferences through the cookie preference centre accessible via the footer of the kissph platform. Most browsers also allow you to refuse or delete cookies through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the kissph platform.
kissph retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by Philippine law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Registration & identity data | 5 years after account closure | AMLA / PAGCOR requirement |
| KYC verification documents | 5 years after account closure | AMLA / PAGCOR requirement |
| Financial transaction records | 10 years | BIR / AMLA requirement |
| Gameplay and betting logs | 3 years after account closure | PAGCOR audit requirement |
| Customer support records | 3 years from date of interaction | Legitimate interests / dispute resolution |
| Marketing preferences / consent logs | Until consent withdrawn + 1 year | NPC accountability requirement |
| Technical / access logs | 12 months from creation | Security / fraud monitoring |
After the applicable retention period expires, kissph will securely delete or anonymise your personal data in accordance with its data destruction procedures. Where anonymisation is not technically feasible, data will be securely archived with access restrictions.
kissph implements a multi-layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- Encryption in Transit: All data transmitted between your browser or device and the kissph platform is encrypted using TLS 1.3 or higher. kissph enforces HTTPS across all pages and subdomains.
- Encryption at Rest: Sensitive personal data — including KYC documents, identity information, and financial records — is encrypted at rest using AES-256 encryption on all kissph data storage systems.
- Access Controls: Access to personal data is restricted to authorised kissph personnel who require it to perform their job functions. All staff with data access undergo background checks and receive mandatory data privacy training.
- SMS OTP Authentication: All kissph Account logins require SMS OTP verification using your registered Philippine mobile number, providing a second factor of authentication beyond your password.
- Intrusion Detection: kissph's platform is monitored 24/7 for suspicious activity, including anomalous login patterns, unusual transaction volumes, and potential bot or scripted access attempts.
- Regular Security Audits: kissph's platform and data infrastructure are subject to regular third-party security assessments and penetration testing.
Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, kissph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by kissph:
- Right to Be Informed: You have the right to be informed of how your personal data is collected, used, stored, and shared — which is the primary purpose of this Privacy Policy.
- Right to Access: You may request a copy of the personal data kissph holds about you. kissph will respond to verified data access requests within fifteen (15) working days.
- Right to Rectification: If any personal data kissph holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to identity-critical data (name, date of birth, ID number) may require re-submission of KYC documentation.
- Right to Erasure / Right to Be Forgotten: You may request deletion of your personal data where kissph no longer has a lawful basis for retaining it. This right is subject to kissph's legal retention obligations under AMLA, PAGCOR regulations, and BIR requirements — data that must be retained by law cannot be erased on request.
- Right to Restrict Processing: You may request that kissph restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
- Right to Data Portability: Where technically feasible, you may request that kissph provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
- Right to Object: You have the right to object to processing based on kissph's legitimate interests, including profiling. You may also opt out of direct marketing communications at any time.
- Right to Lodge a Complaint: If you believe kissph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of the rights above, submit a written request to kissph's Data Protection Officer at [email protected] with the subject line "Data Privacy Request". kissph may require you to verify your identity before processing the request. Responses will be provided within fifteen (15) working days of identity verification.
The kissph platform is strictly intended for individuals who are 21 years of age or older. kissph does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the kissph registration process, and all Accounts are subject to KYC review before withdrawals are processed.
If kissph becomes aware that personal data has been collected from a person under 21 years of age, we will:
- Immediately suspend the associated Account;
- Conduct a review of all financial activity on the Account;
- Delete or anonymise the personal data of the minor to the extent permitted by law;
- Report the matter to PAGCOR where required by our licensing conditions; and
- Cooperate with Philippine law enforcement authorities where appropriate.
If you are a parent or guardian and believe a minor has registered on the kissph platform, please contact us immediately at [email protected] so we can take prompt action.
With your consent, kissph may send you promotional communications about new games, bonuses, tournaments, and kissph platform updates via SMS, push notification, or email to your registered contact details. You can provide or withdraw consent to marketing communications through your Account Settings at any time.
kissph does not engage in unsolicited bulk SMS marketing. All marketing messages will clearly identify kissph as the sender and will include an opt-out instruction. Opting out of marketing communications does not affect your ability to receive transactional messages — such as deposit confirmations, withdrawal updates, and account security alerts — which are sent as part of kissph's contractual obligations to you.
Responsible Marketing: kissph's marketing practices are subject to PAGCOR's responsible gaming advertising guidelines. kissph does not target marketing at individuals who have activated self-exclusion tools, are in a cooling-off period, or have opted into kissph's responsible gaming programme. Players can request to be excluded from all kissph marketing by contacting [email protected].
kissph's primary data processing infrastructure is located within the Republic of the Philippines. However, some of our third-party service providers — including game content providers, cloud infrastructure partners, and analytics tools — may process or store data on servers located outside the Philippines.
Where such transfers occur, kissph ensures that adequate safeguards are in place to protect your personal data, including:
- Data processing agreements incorporating the NPC's standard contractual clauses for cross-border data transfers;
- Transfers only to jurisdictions that provide a comparable level of data protection to that afforded by the Philippine Data Privacy Act of 2012; and
- Technical and organisational measures required by the receiving party as a condition of their engagement with kissph.
You may request details of the specific safeguards in place for any international transfers affecting your personal data by contacting kissph's Data Protection Officer.
kissph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of the kissph platform. When material changes are made, kissph will notify registered players via email to the address on file and by posting a prominent notice on the platform at least seven (7) calendar days before the updated policy takes effect.
The "Effective Date" displayed at the top of this Privacy Policy reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the kissph platform after the effective date of any amended policy constitutes your acceptance of the updated terms.
kissph has appointed a Data Protection Officer (DPO) who is responsible for overseeing our compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this policy, please contact us:
- Data Protection Officer: [email protected] (subject: Data Privacy)
- General Support: [email protected]
- Responsible Gaming: [email protected]
- Live Chat: Available 24/7 within your logged-in kissph Account dashboard
If you are not satisfied with kissph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines:
- National Privacy Commission (NPC)
- 5th Floor, Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila
- Website: privacy.gov.ph (for reference only — kissph does not link externally)
kissph aims to respond to all data privacy requests and complaints within fifteen (15) working days of receipt and identity verification. For urgent account security matters — such as a suspected data breach or unauthorised account access — please use the 24/7 live chat for immediate assistance.
Your Privacy at a Glance
kissph's approach to data privacy is built on transparency, security, and respect for your rights as a Filipino player.
End-to-End Encryption
All data transmitted between your device and kissph is protected by TLS 1.3 encryption. Sensitive records stored on our servers use AES-256 encryption at rest — the same standard used by major Philippine banks.
Philippine DPA Compliance
kissph processes all personal data in accordance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and its implementing rules issued by the National Privacy Commission (NPC).
We Never Sell Your Data
kissph does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Data sharing is limited strictly to regulated partners and legal obligations.
Full Data Subject Rights
You have the right to access, correct, erase, and port your personal data. Submit a request to our Data Protection Officer and we will respond within 15 working days after verifying your identity.
Minimum Retention Periods
kissph retains your data only for as long as required by PAGCOR, AMLA, and BIR regulations. Once the retention period expires, data is securely deleted or anonymised under our data destruction procedures.
Regulatory Accountability
As a PAGCOR-regulated platform, kissph's data practices are subject to regulatory oversight. Players may escalate unresolved privacy complaints to the National Privacy Commission (NPC) of the Philippines.
Play with Confidence on kissph
Your personal data is handled with the same care we put into our games. kissph is a PAGCOR-regulated platform built for Filipino players — secure, fair, and fully compliant with Philippine data privacy law.
21+ only. Please play responsibly. kissph is regulated by PAGCOR.