Retrieves the authenticated client's fraud notification preferences (per-transaction and daily-digest toggles, minimum risk level, recipient emails). Clients that never configured the feature get the default settings with both delivery channels disabled. Gameball-internal recipients are excluded from the returned recipient list — they remain configured and keep receiving notifications, they are just not exposed