phsky2 Privacy Policy

1. Introduction

phsky2 ("phsky2," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the phsky2 online gaming platform at phsky2.app. This Privacy Policy ("Policy") explains in clear terms what personal information we collect, why we collect it, how we use and protect it, and what rights you have over your own data.

This Policy applies to all users of the phsky2 Platform, including registered account holders, visitors who browse without registering, and individuals who contact our customer support team. It covers data collected through the phsky2 website, any associated mobile interfaces, and all communications between you and phsky2.

By accessing or using the phsky2 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform. This Policy should be read together with our Terms & Conditions.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phsky2 is the Personal Information Controller in respect of the personal data collected through the Platform.

phsky2 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with applicable data privacy laws and this Policy. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

phsky2 collects personal data in the following categories, depending on how you interact with the Platform:

• Registration Data: Full legal name, date of birth, gender, nationality, residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati), email address, and mobile number.
• Identity Verification (KYC) Data: Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's licence, UMID), proof of address, and selfie photographs for identity matching.
• Financial Data: GCash account details, PayMaya / Maya account details, bank account information (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details (card number masked), transaction history, deposit and withdrawal records.
• Gaming Activity Data: Game history, wager amounts, win/loss records, session duration, bonus usage, and responsible gaming tool settings (deposit limits, loss limits, self-exclusion status).
• Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and connection type.
• Communications Data: Records of live chat conversations, email correspondence, and support ticket history with phsky2 customer service.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications from phsky2.

phsky2 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data beyond identity-matching photographs submitted during KYC.

4. How We Use Your Personal Data

phsky2 uses the personal data we collect for the following purposes:

• Account Management: To create, verify, maintain, and administer your phsky2 account, including processing deposits and withdrawals.
• Identity Verification: To verify your identity and age (21+) in compliance with Philippine gaming regulations and anti-money laundering requirements.
• Service Delivery: To provide access to games, live dealer tables, sports betting markets, and all other features of the phsky2 Platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other prohibited activities.
• Regulatory Compliance: To fulfil our obligations under Philippine law, including reporting requirements to relevant regulatory authorities.
• Responsible Gaming: To monitor gaming patterns, enforce self-exclusion and limit settings, and identify players who may be at risk of gambling-related harm.
• Customer Support: To respond to your enquiries, resolve disputes, and improve our support services.
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the performance, security, and features of the phsky2 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications.

5. Legal Basis for Processing

phsky2 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you (the phsky2 Terms & Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, gaming regulations, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for phsky2's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent, which you may withdraw at any time.

6. Data Sharing and Disclosure

phsky2 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, and banking partners, to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Third-party identity verification services used to authenticate your identity documents and confirm your eligibility to use the Platform.
• Game Content Providers: Licensed game studios and live dealer operators whose content is integrated into the phsky2 Platform, to the extent necessary to deliver their services.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on phsky2's behalf under strict data processing agreements.
• Regulatory Authorities: Philippine government agencies, law enforcement bodies, and courts, where disclosure is required by law, court order, or regulatory directive.
• Anti-Fraud Networks: Industry fraud prevention and anti-money laundering networks, where sharing is necessary to protect the integrity of the Platform and the broader gaming industry.

All third-party service providers who process personal data on phsky2's behalf are contractually required to implement appropriate technical and organisational security measures and to process data only in accordance with phsky2's instructions.

7. Cookies and Tracking Technologies

phsky2 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use the Platform — which pages are visited most, where errors occur — to help us improve performance and user experience.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming limit configurations, to personalise your experience.
• Analytics Cookies: Help us understand aggregate traffic patterns and player behaviour to inform platform development decisions. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the phsky2 Platform. For strictly necessary cookies, no consent is required as they are essential to service delivery.

8. Data Retention

phsky2 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention periods:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to legal retention obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phsky2's data disposal procedures.

9. Data Security

phsky2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256.
• Access Controls: Access to personal data is restricted to authorised phsky2 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Network Security: phsky2's infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments.
• Security Audits: phsky2 conducts periodic internal and third-party security audits to identify and remediate potential vulnerabilities.
• Staff Training: All phsky2 personnel with access to personal data receive regular data privacy and security training.

While phsky2 takes all reasonable precautions to protect your data, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying phsky2 immediately if you suspect unauthorised access to your account.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phsky2:

• Right to Be Informed: The right to be told what personal data phsky2 collects and how it is used — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data phsky2 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to legal retention obligations and ongoing contractual or regulatory requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. phsky2 will respond to all verified data subject requests within thirty (30) days of receipt.

11. Children's Privacy

The phsky2 Platform is strictly intended for individuals aged 21 years and older, in accordance with Philippine casino-style gambling regulations. phsky2 does not knowingly collect personal data from individuals under the age of 21.

If phsky2 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the phsky2 Platform, please contact us immediately at the details provided in Section 14.

12. International Data Transfers

phsky2 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international game studios — phsky2 ensures that such transfers are subject to appropriate safeguards, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to jurisdictions that the National Privacy Commission has recognised as providing an adequate level of data protection.

phsky2 will not transfer your personal data internationally in a manner that reduces the protections afforded to you under this Policy or applicable Philippine law.

13. Updates to This Privacy Policy

phsky2 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered players via email and post a prominent notice on the Platform indicating the effective date of the revised Policy.

We encourage you to review this Policy periodically. Your continued use of the phsky2 Platform following the posting of an updated Policy constitutes your acceptance of the changes. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by phsky2, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat widget on the phsky2 Platform.
• Response Time: phsky2 aims to acknowledge all privacy-related enquiries within 72 hours and resolve them within 30 days.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with phsky2's response to your data privacy concern.