kishph Casino Privacy Policy

1 Introduction

kishph Casino ("kishph", "we", "us", or "the Company") operates the online gaming platform accessible at kishph.cam (the "Platform"). This Privacy Policy sets out in full detail how kishph collects, receives, processes, stores, uses, shares, and protects personal information pertaining to individuals ("you", "the Player", or "the Data Subject") who access or use the Platform, including all associated services, features, and communications offered by kishph.

kishph is committed to upholding the data privacy rights of all Filipino players in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA"), its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission (NPC) of the Philippines. kishph is registered as a Personal Information Controller (PIC) under applicable Philippine data protection regulations.

This Privacy Policy applies to all personal data processed by kishph in connection with your registration and use of the Platform, regardless of whether you access the Platform from Metro Manila, Cebu, Davao, Quezon City, Makati, Iloilo, or any other location in the Philippines. By registering a kishph account or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

This Privacy Policy should be read in conjunction with the kishph Terms & Conditions, which govern your overall use of the Platform and are incorporated herein by reference.

2 Personal Data We Collect

kishph collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

Information you provide when creating your kishph account, including your full legal name, date of birth, gender, Philippine mobile number, email address, and a username or display name of your choosing.

2.2 Identity Verification (KYC) Data

Government-issued identification documents required to verify your identity and age before withdrawals are processed. Acceptable documents include a Philippine National ID (PhilSys Card), UMID card, driver's license, and passport. We may also collect a selfie or live photograph for liveness verification purposes.

2.3 Financial & Transaction Data

Details of deposits, withdrawals, wagers, and winnings processed through your kishph account. Payment method details such as GCash account references, Maya account references, bank account names, and transaction reference numbers — but never full card numbers, PINs, or complete bank account numbers, which are handled directly by the respective payment service providers.

2.4 Technical & Usage Data

Information automatically collected when you access the Platform, including your IP address, device type and model, operating system, browser type and version, screen resolution, session start and end times, pages and games accessed, bet histories, and clickstream data.

2.5 Communications Data

Records of your communications with kishph support via live chat, email, or any other channel, including the content of those communications and associated metadata.

2.6 Responsible Gaming Data

Information relating to your use of kishph's responsible gaming tools, including deposit limits you have set, self-exclusion periods you have requested, and session duration data generated by reality check features.

3 How We Collect Your Data

kishph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or update your account profile.
• Automatically via the Platform — through server logs, session tracking technologies, analytics tools, and device fingerprinting when you access or use the Platform.
• From payment service providers — transaction confirmations, settlement data, and fraud alerts shared by GCash, Maya, BPI, BDO, and other payment partners in connection with your transactions.
• From third-party identity verification services — identity and document verification outcomes shared by kishph's KYC technology partners, which process your submitted documents on kishph's behalf.
• From fraud detection and AML compliance tools — risk scores and flagging data generated by kishph's compliance screening systems in connection with anti-money laundering obligations under Philippine law.

4 Purposes of Processing

kishph processes your personal data for the following specific and legitimate purposes:

kishph does not process personal data for direct marketing communications without your explicit prior consent. If you have consented to receive promotional communications from kishph, you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting kishph support.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its IRR, kishph processes your personal data on the following legal bases:

• Consent — You provide consent when you register your kishph account and agree to this Privacy Policy. You may withdraw consent at any time, subject to the limitations described in Section 10.
• Contractual necessity — Processing is necessary to perform kishph's obligations to you under the kishph Terms & Conditions, including account management, transaction processing, and delivery of gaming services.
• Compliance with a legal obligation — Processing is necessary for kishph to comply with applicable Philippine laws and regulations, including anti-money laundering laws (AMLA, RA 9160 as amended), PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate interests — Processing is necessary for kishph's legitimate interests in fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, provided these interests do not override your fundamental rights and freedoms.

6 Data Sharing & Disclosure

6.1 We Do Not Sell Your Data

kishph does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Your personal information is not a product — it is a responsibility.

6.2 Authorized Third-Party Processors

kishph may share your personal data with trusted third-party service providers acting as Personal Information Processors (PIPs) on kishph's behalf and under kishph's instruction, including:

• Payment service providers (GCash, Maya, BPI, BDO, and other PH payment partners) for transaction processing
• KYC and identity verification technology providers
• Cloud infrastructure and data hosting providers
• Fraud detection and AML compliance screening services
• Game software providers, solely to the extent necessary to deliver game services
• Customer support platform providers

All third-party processors engaged by kishph are bound by data processing agreements that require them to process your personal data only on kishph's documented instructions and to implement appropriate technical and organizational security measures consistent with the requirements of the DPA and its IRR.

6.3 Regulatory and Legal Disclosure

kishph may be required to disclose your personal data to regulatory authorities, law enforcement bodies, or courts of competent jurisdiction where such disclosure is required by applicable Philippine law, PAGCOR regulations, a court order, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activities. In such cases, kishph will disclose only the minimum data necessary to satisfy the legal requirement.

7 Data Retention

kishph retains your personal data for the period necessary to fulfill the purposes for which it was collected, and thereafter only as required by applicable law or regulation. The following retention guidelines apply:

Upon expiry of the applicable retention period, kishph will securely delete or anonymize your personal data in a manner that renders it permanently irrecoverable. Where data is anonymized rather than deleted, the resulting anonymized data set does not constitute personal data and may be retained indefinitely for statistical and analytical purposes.

8 Security Measures

kishph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the kishph Platform is protected by Transport Layer Security (TLS) using 256-bit SSL encryption. No personal data is transmitted in plaintext over public networks.
• Encryption at rest: Sensitive data fields stored in kishph's databases are encrypted using industry-standard encryption algorithms.
• Access controls: Access to personal data within kishph's systems is restricted on a strict need-to-know basis. All personnel with access to personal data undergo background screening and are bound by confidentiality obligations.
• Two-factor authentication (2FA): kishph supports 2FA for player accounts and enforces it for all internal administrative access to systems containing personal data.
• Penetration testing and vulnerability management: kishph conducts regular security assessments and penetration tests of its platform and infrastructure.
• Incident response: kishph maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kishph will notify the NPC and affected players in accordance with the DPA's breach notification requirements.
• Vendor security assessments: All third-party processors engaged by kishph are subject to security due diligence reviews prior to engagement and periodic reassessment thereafter.

9 Cookies & Tracking Technologies

The kishph Platform uses cookies and similar tracking technologies to enhance your experience, ensure the Platform functions correctly, and analyze usage patterns. A cookie is a small text file placed on your device when you access the Platform.

9.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged into your kishph account during a browsing session. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and regional settings to improve your experience on return visits.
• Analytics cookies: Collect anonymized data about how players use the Platform — which pages are visited most, how long sessions last, and where players navigate from. This data is used solely to improve Platform performance and user experience.
• Security cookies: Used for fraud detection, bot prevention, and session security purposes.

9.2 Managing Cookies

You may control and delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging into or using the kishph Platform. Blocking other cookie types may reduce Platform functionality but will not prevent access to your account.

kishph does not use third-party advertising cookies or behavioral profiling technologies for marketing purposes on the Platform.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by kishph. You may exercise any of these rights by contacting kishph's Data Protection Officer (DPO) using the contact details provided in Section 13.

kishph will respond to all verifiable data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case kishph will notify you of the extension and the reason for it. kishph may ask you to verify your identity before processing any data subject request to prevent unauthorized disclosure. Note that certain legal retention obligations may limit kishph's ability to delete specific data categories even upon a valid erasure request.

11 Children's Privacy

The kishph Casino platform is strictly intended for individuals who are twenty-one (21) years of age or older. kishph does not knowingly collect personal data from individuals below this age threshold. The collection of personal data from any individual below the age of 21 would constitute a breach of kishph's Terms & Conditions and applicable PAGCOR regulations, and such an account would be immediately closed upon discovery.

If you are a parent or guardian and believe that a minor has accessed or registered on the kishph platform without authorization, please contact kishph's DPO immediately at the contact details in Section 13. kishph will promptly investigate and, if confirmed, delete all personal data relating to the minor's account and return any deposited funds to the originating payment method.

12 Updates to This Privacy Policy

kishph reviews and updates this Privacy Policy periodically to reflect changes in applicable law, regulatory guidance from the NPC, changes to kishph's data processing practices, or changes to the Platform's features and functionality. When material changes are made to this Privacy Policy, kishph will notify registered players via their registered email address and display a prominent notice on the Platform for a period of not less than fourteen (14) days prior to the revised Policy taking effect.

The date on which this Privacy Policy was last updated is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the kishph platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. The current version of this Privacy Policy is always accessible at kishph.cam/privacy-policy.

13 Contact & Data Protection Officer

kishph has appointed a Data Protection Officer (DPO) responsible for overseeing kishph's compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact kishph through the following channels:

If you are not satisfied with kishph's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC's complaint process and contact details are available on the NPC's official website. kishph cooperates fully with the NPC in all regulatory matters.