kinph Privacy Policy

This Privacy Policy ("Policy") describes how kinph ("kinph," "we," "us," or "our") collects, processes, stores, and discloses personal data in connection with the operation of the kinph online gaming platform accessible at kinph.club (the "Platform"). kinph is the data controller responsible for the personal data of Users processed under this Policy.

This Policy applies to all individuals who access or use the kinph Platform, including registered account holders, applicants for account registration whose applications are pending or declined, and visitors to kinph.club who do not complete registration but whose usage data is collected passively through standard web analytics and cookie technologies.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the circulars and advisories issued by the National Privacy Commission (NPC) of the Philippines. kinph is committed to processing personal data lawfully, fairly, and transparently in accordance with the rights of data subjects under Philippine law.

kinph processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms and Conditions you accepted upon account registration — including account creation and management, payment processing, game delivery, KYC verification, and withdrawal processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act (RA 10173).
• Legitimate Interests: Processing is necessary for kinph's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by law or where processing is not covered by the above bases — for example, in connection with certain marketing communications — kinph will seek your prior, informed, and specific consent. You may withdraw consent at any time by contacting kinph's Data Protection Officer.

kinph collects personal data through the following means: directly from you during registration and account use, from your payment providers (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard), from automated systems monitoring your use of the Platform, and from identity verification processes. The specific categories of data collected are set out below.

kinph uses the personal data it collects for the following specified, explicit, and legitimate purposes:

1. Account Registration and Management: To create and administer your kinph account, verify your identity and age (21+), manage your Player Wallet, and maintain accurate account records.
2. Payment Processing: To process deposits and withdrawals through your nominated payment method (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard), verify payment account ownership, and maintain transaction records.
3. Gameplay and Platform Delivery: To provide access to kinph's games, calculate and credit winnings, apply bonus terms, and deliver the full range of kinph gaming services.
4. KYC and Identity Verification: To satisfy PAGCOR's regulatory requirements for player identity verification and age verification prior to enabling withdrawal functionality.
5. Anti-Money Laundering (AML) Compliance: To monitor transactions for patterns consistent with money laundering or terrorist financing, and to report suspicious transactions to the Anti-Money Laundering Council (AMLC) as required by Philippine law.
6. Responsible Gaming Monitoring: To identify behavioral patterns that may be indicative of problem gambling, and to administer self-imposed responsible gaming tools including deposit limits, loss limits, and self-exclusion requests.
7. Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, unauthorized access, and other violations of kinph's Terms and Conditions.
8. Customer Support: To respond to your queries, investigate complaints, and resolve disputes.
9. Platform Improvement and Analytics: To analyze usage patterns, improve the kinph user experience, and inform product development decisions. Analytics data is processed in aggregated or pseudonymized form wherever practicable.
10. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
11. Legal and Regulatory Compliance: To fulfill kinph's obligations under Philippine law, PAGCOR regulation, and applicable court orders or regulatory directives.

kinph uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the Platform, authenticate sessions, and analyze usage patterns. A cookie is a small data file stored on your device by your browser when you visit a website.

The following categories of cookies are used on the kinph Platform:

• Strictly Necessary Cookies: Essential for the operation of the kinph Platform. These include session authentication cookies and security tokens. They cannot be disabled without severely impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and game lobby display preferences. These improve your experience but are not strictly necessary for Platform operation.
• Analytics Cookies: Used to collect information about how users interact with kinph in aggregate — which pages are most visited, how long sessions last, and where users exit. This data helps kinph improve the Platform. Analytics data is processed in pseudonymized form.
• Responsible Gaming Cookies: Used to store session timer data and other responsible gaming tool states on your device for uninterrupted operation across page loads.

kinph does not sell, rent, or commercially transfer your personal data to third parties for their own purposes. kinph may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Service Providers: GCash (G-Xchange, Inc.), PayMaya Philippines, Inc., BPI, BDO Unibank, Metrobank, and card network processors — for the purpose of processing deposits and withdrawals. Data shared is limited to what is required to complete the transaction.
• KYC and Identity Verification Providers: Third-party identity verification service providers who assist kinph in processing and validating government ID documents. These providers are contractually bound to process data solely for verification purposes and to implement appropriate security measures.
• Game Content Providers: Licensed game software providers (such as PG Soft, Pragmatic Play, Evolution, Jili, JDB) receive player session identifiers and wager data necessary to deliver game services and maintain RNG integrity records. They do not receive full identity data.
• Regulatory Authorities: PAGCOR and other Philippine regulatory bodies, including the Anti-Money Laundering Council (AMLC) and the National Privacy Commission (NPC), as required by Applicable Law.
• Law Enforcement: Philippine law enforcement agencies, courts, and other competent authorities, pursuant to valid legal process including court orders, subpoenas, and regulatory directives.
• Professional Advisers: Lawyers, auditors, and accountants engaged by kinph in connection with the operation of the Platform, subject to professional confidentiality obligations.
• IT and Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers who process data on kinph's behalf under data processing agreements that require compliance with RA 10173 standards.

kinph retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by Applicable Law. The following general retention principles apply:

• Account Data and Transaction Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulation and the Philippine AMLA's record-keeping requirements.
• KYC Documents: Retained for the duration of the account relationship plus five (5) years following account closure, in accordance with AML regulatory requirements.
• Gaming and Wallet History: Retained for five (5) years from the date of each transaction, to support regulatory audits, dispute resolution, and AMLC reporting obligations.
• Support and Communication Records: Retained for two (2) years from the date of the last communication, unless the subject matter is the subject of an ongoing dispute or regulatory investigation.
• Marketing Preference Records: Retained for the duration of the account relationship, plus six (6) months following account closure, to document opt-in and opt-out history.
• Technical and Analytics Data: Anonymized or aggregated analytics data may be retained indefinitely. Identifiable technical data (server logs, IP records) is retained for up to twelve (12) months for security and fraud investigation purposes.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification. Where deletion is not technically immediate due to backup rotation schedules, the relevant data will be isolated and treated as if deleted pending full removal.

kinph implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, and disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the kinph Platform is encrypted using SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data — including identity documents and financial data — is stored in encrypted form at rest on kinph's infrastructure.
• Access Controls: Access to personal data within kinph's systems is restricted on a role-based, need-to-know basis. System administrators with elevated access undergo enhanced background screening and are subject to strict access logging.
• Password Security: Account passwords are stored as cryptographic hashes — kinph's systems do not store or process plain-text passwords.
• Penetration Testing and Audits: kinph conducts regular security assessments of its Platform infrastructure to identify and remediate vulnerabilities.
• Incident Response: kinph maintains an incident response plan for personal data breaches. In the event of a breach that poses a risk to your rights, kinph will notify you and the NPC within the timeframe required by RA 10173.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by kinph. kinph will respond to valid rights requests within a reasonable period, generally within thirty (30) calendar days of receipt.

To exercise any of the above rights, please contact kinph's Data Protection Officer using the contact details set out in Section 13 of this Policy. We may require you to verify your identity before processing any rights request.

The kinph Platform is strictly intended for adults aged twenty-one (21) years and above, as required by Philippine gaming law. kinph does not knowingly collect personal data from persons under the age of 21.

All account registrations at kinph are subject to government ID-based KYC verification for age confirmation. Where kinph identifies that an account has been created by or on behalf of a person under 21 years of age, the account will be immediately and permanently closed, all balances will be managed in accordance with Applicable Law, and the personal data of the minor will be deleted to the extent technically possible and legally permissible.

kinph's primary operations, including its core data processing infrastructure, are based in the Philippines. However, certain service providers — including game content providers, cloud infrastructure providers, and identity verification services — may process personal data on kinph's behalf from locations outside the Philippines.

Where personal data is transferred outside the Philippines, kinph ensures that appropriate safeguards are in place to provide a level of data protection equivalent to that required under the Philippine Data Privacy Act. These safeguards may include: contractual clauses adopted in accordance with NPC standards; binding corporate rules where applicable to corporate group service providers; or transfers to jurisdictions that have been assessed as providing adequate data protection under NPC guidance.

kinph does not transfer personal data to jurisdictions or entities where kinph cannot ensure adequate protection. All international transfers are documented in kinph's internal data processing register.

kinph reserves the right to amend this Privacy Policy at any time to reflect changes in law, regulatory guidance, NPC directives, or kinph's data processing practices. The effective date and last-updated date at the top of this Policy will be updated accordingly.

Where amendments are material — meaning they significantly affect your rights or how your personal data is used — kinph will provide advance notice through in-platform notification, email, or both. Your continued use of the kinph Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how kinph is protecting your personal data. The version published at kinph.club/privacy-policy is always the current version.

kinph has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing kinph's data protection compliance, handling data subject rights requests, and serving as the point of contact with the National Privacy Commission.

If you are unsatisfied with kinph's response to a privacy concern, you have the right to escalate the matter directly to the National Privacy Commission of the Philippines, which has jurisdiction over personal data protection complaints involving Philippine-based data controllers.