phsky1 Privacy Policy

phsky1 ("phsky1," "we," "us," "our") operates the online casino and sports betting platform accessible at phsky1.cam, which serves players located in the Republic of the Philippines. In providing our Services, we collect and process certain personal data relating to our players, visitors, and prospective registrants.

This Privacy Policy sets out, in clear and accessible terms, what personal data phsky1 collects, why we collect it, how it is used and stored, and the rights available to you as a data subject under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations.

This Policy applies to all personal data processed by phsky1 in connection with: the phsky1 website and mobile-optimized platform; account registration, KYC verification, and ongoing account management; financial transactions including deposits, withdrawals, and fraud prevention; customer support interactions; promotional and marketing communications; and regulatory compliance activities.

This Policy should be read together with the phsky1 Terms & Conditions and Responsible Gaming Policy, which form part of your overall agreement with phsky1.

For the purposes of Republic Act No. 10173 and its implementing rules, the Personal Information Controller responsible for your personal data is the operator of the phsky1 platform at phsky1.cam.

phsky1 has appointed a Data Protection Officer (DPO) responsible for overseeing the platform's data protection practices and ensuring compliance with the DPA. The DPO is the first point of contact for all data subject requests and privacy-related inquiries. Contact details for the phsky1 DPO are set out in Section 15 of this Policy.

phsky1 is registered with the National Privacy Commission (NPC) as required under the DPA and its implementing regulations for personal information controllers processing personal data exceeding the threshold prescribed by the NPC.

phsky1 collects the following categories of personal data in connection with the provision of its Services:

phsky1 collects personal data through the following means:

• Direct submission by you: Information you provide when completing the phsky1 registration form, submitting KYC documents, initiating deposits or withdrawal requests, contacting customer support via live chat or email, or updating your account profile and responsible gaming settings.
• Automated collection during platform use: Technical and gameplay data collected automatically as you navigate and interact with the phsky1 platform, including through cookies, server logs, and session tracking technologies described in Section 9.
• Payment and financial service providers: Transaction confirmation data and fraud signals received from GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other integrated payment processors when you conduct financial transactions through phsky1.
• Identity verification providers: Data returned by third-party KYC and identity verification service providers used to confirm player identity and age in accordance with PAGCOR requirements and the DPA.
• Regulatory and fraud-prevention sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other public authorities where phsky1 is required or permitted to obtain such data for compliance purposes.

phsky1 processes your personal data on the following legal bases and for the following purposes:

Where phsky1 relies on your consent as the legal basis for processing — in particular for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing does not affect the processing carried out on other legal bases.

phsky1 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data in the following circumstances:

• Payment service providers: GCash, Maya / PayMaya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and 7-Eleven CLiQQ receive transaction data necessary to process deposits and withdrawals on your behalf. These providers operate under their own privacy policies and are independently regulated by the Bangko Sentral ng Pilipinas (BSP).
• KYC and identity verification providers: Third-party providers engaged by phsky1 to perform identity and age verification receive the KYC documentation you submit. These providers are bound by data processing agreements requiring compliance with the DPA.
• Game content providers: Licensed game suppliers (including JILI, Pragmatic Play, PG Soft, and others) may receive anonymized or pseudonymized session data necessary for game delivery, dispute resolution, and game integrity assurance. They do not receive your full identity data.
• Regulatory and law enforcement authorities: phsky1 is required by Philippine law to share certain player information with PAGCOR, the AMLC, the NPC, and other competent authorities upon lawful request or as part of mandatory regulatory reporting obligations.
• Professional advisers: phsky1 may disclose personal data to legal counsel, auditors, and compliance consultants under strict confidentiality obligations where necessary to protect phsky1's legal rights or comply with regulatory requirements.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of phsky1's assets, player data may be transferred to the successor entity, subject to equivalent privacy protections and prior notification where required by the NPC.

All third-party processors engaged by phsky1 are required to enter into data processing agreements that mandate compliance with RA 10173 and impose appropriate security and confidentiality obligations.

phsky1 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods prescribed by Philippine law and PAGCOR regulations.

The following retention periods apply as a general guide:

• Account and identity data (including KYC documents): Retained for a minimum of five (5) years following account closure or the last transaction, as required for AMLC compliance and PAGCOR audit purposes.
• Financial transaction records: Retained for a minimum of five (5) years in accordance with BSP and AMLC record-keeping requirements applicable to online gaming operators.
• Gameplay and wagering records: Retained for up to three (3) years following the relevant activity to support dispute resolution, responsible gaming monitoring, and regulatory reporting.
• Customer support communications: Retained for up to two (2) years following closure of the relevant support interaction.
• Marketing preference data: Retained until you withdraw consent or request erasure, subject to any overriding legal retention obligations.
• Technical and log data: Typically retained for twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification, unless continued retention is required by a court order, regulatory direction, or ongoing legal proceedings.

phsky1 implements reasonable and appropriate organizational, physical, and technical security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction, consistent with the standards required under the DPA and NPC guidelines.

Key security measures in place include:

• Encryption: All data transmitted between your device and the phsky1 platform is protected by SSL/TLS encryption. Sensitive stored data, including financial details and KYC documents, is encrypted at rest.
• Access controls: Access to personal data within phsky1's systems is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and security training.
• Two-factor authentication: phsky1 offers two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access.
• Intrusion detection and monitoring: phsky1 employs real-time monitoring tools and intrusion detection systems to identify and respond to security threats.
• Data breach procedures: phsky1 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to data subjects, phsky1 will notify affected individuals and the NPC within the timeframes prescribed by the DPA.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. phsky1 cannot provide an absolute guarantee of security and is not liable for breaches caused by circumstances beyond its reasonable control, including cyberattacks or force majeure events.

phsky1 uses cookies and similar tracking technologies on the phsky1 platform to operate essential site functions, analyze usage patterns, and deliver a consistent player experience. The following types of cookies are used:

• Strictly necessary cookies: Required for the phsky1 platform to function. These include session cookies that maintain your logged-in state, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences and settings, such as language preference, responsible gaming limit reminders, and display preferences. These improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect anonymized information about how players interact with the phsky1 platform — including pages visited, session duration, and navigation paths — to help phsky1 improve the platform experience. Analytics data is aggregated and does not identify individual players.
• Security and fraud-detection cookies: Used to identify suspicious login patterns, detect automated bot activity, and protect the integrity of the phsky1 platform and its players.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the phsky1 platform. phsky1 does not use third-party advertising cookies or share cookie data with advertising networks for behavioral advertising purposes.

Under Republic Act No. 10173 and its implementing rules, you have the following rights with respect to your personal data held by phsky1. You may exercise any of these rights by submitting a written request to the phsky1 Data Protection Officer at the contact details set out in Section 15.

phsky1 will respond to data subject requests within thirty (30) calendar days of receipt, as required under the DPA. In complex cases, this period may be extended by a further thirty (30) days with prior written notification and explanation. phsky1 will not charge a fee for handling data subject requests unless the request is manifestly unfounded or excessive.

Some of phsky1's third-party service providers — including game content suppliers, cloud infrastructure providers, and KYC platform operators — may process personal data outside the Republic of the Philippines. Where such cross-border transfers occur, phsky1 ensures that adequate safeguards are in place to protect your personal data consistent with the requirements of RA 10173 and NPC guidelines on cross-border data flows.

Such safeguards may include contractual clauses approved by or consistent with NPC guidelines, transfers to jurisdictions recognized as providing adequate levels of data protection, or other appropriate transfer mechanisms as prescribed by the NPC. phsky1 does not transfer personal data internationally beyond what is strictly necessary for the delivery of its Services.

The phsky1 platform is strictly restricted to persons who are twenty-one (21) years of age or older, as required by PAGCOR regulations governing online gaming in the Philippines. phsky1 does not knowingly collect personal data from individuals below the age of twenty-one (21).

If phsky1 discovers or is notified that personal data has been collected from a person below the age of twenty-one (21), we will take immediate steps to close the associated account, delete or anonymize the personal data concerned, and void any transactions conducted through that account. Any balance associated with an underage account will be returned to the depositing payment method after verification.

Parents and guardians who believe that a minor has accessed or registered on the phsky1 platform are encouraged to contact phsky1's support team immediately via live chat or by email at the address set out in Section 15.

phsky1 may send you promotional messages, bonus notifications, and platform updates via SMS to your registered Philippine mobile number and via email, where you have provided your consent to receive such communications during registration or at a later date.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your phsky1 account settings;
• Following the unsubscribe instructions included in any promotional email; or
• Contacting the phsky1 support team via live chat and requesting removal from marketing communications.

Withdrawal of consent for marketing communications does not affect your ability to receive transactional or service-related communications from phsky1, such as deposit confirmations, withdrawal notifications, account security alerts, or mandatory responsible gaming notifications, which are sent on the basis of contractual or legal necessity rather than consent.

Players who have activated self-exclusion on phsky1 will be automatically excluded from all marketing communications for the duration of their exclusion period.

phsky1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The revised Policy will be published on this page with an updated Effective Date prominently displayed at the top of the document.

Where changes are material — meaning they significantly affect your rights as a data subject or the manner in which phsky1 processes your personal data — phsky1 will provide prior notice via account notification, email to your registered address, or a prominent site announcement, where practicable and as required under the DPA.

Your continued use of the phsky1 platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the revised Policy, you should cease using the platform and request closure of your phsky1 account. phsky1 recommends that you review this Policy periodically to stay informed of any changes.

For all data privacy inquiries, data subject requests, or concerns relating to this Privacy Policy and phsky1's handling of your personal data, please contact the phsky1 Data Protection Officer using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the phsky1 platform. Live chat is the fastest way to reach phsky1 support and is available in both English and Tagalog. For formal data subject requests, please indicate "Data Privacy Request" at the start of your message so it can be directed to the DPO promptly.
• Email: [email protected] (plain text — not a clickable link). Please include "Data Privacy" in the subject line. Formal responses to data subject requests will be provided within thirty (30) calendar days of receipt.

phsky1 is committed to resolving all data privacy inquiries promptly and in good faith. If you are not satisfied with phsky1's response to your data privacy concern, you have the right to file a complaint directly with the National Privacy Commission of the Philippines through its official government channels.