phhsky Privacy Policy

1. Introduction

phhsky ("phhsky," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who access the phhsky online gaming platform (the "Platform"). This Privacy Policy ("Policy") describes how phhsky collects, uses, stores, shares, and protects your personal information when you use the Platform, including our website, mobile interface, and all associated services.

This Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and phhsky.

2. Personal Data We Collect

phhsky collects personal data that is necessary for the operation of the Platform, compliance with legal obligations, and the delivery of a safe and personalized gaming experience. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you are at least 21 years of age, as required by Philippine gaming regulations).
• Gender (optional, for personalization purposes).
• Nationality and country of residence.
• Email address and mobile phone number registered to your account.
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents, such as a Philippine passport, SSS ID, UMID, PhilSys National ID, or driver's license.
• Proof of residential address, such as a utility bill or bank statement issued within the last three months.
• Proof of payment method ownership, such as a screenshot of your GCash or PayMaya account showing your registered name.
• Selfie or facial photograph for identity verification purposes, where required.

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references.
• Payment method details, including GCash mobile number, PayMaya account reference, or bank account details (BPI, BDO, Metrobank, UnionBank). phhsky does not store full card numbers or CVV codes.
• Wagering history, game activity records, and account balance information.
• Bonus and promotion redemption records.

2.4 Technical and Usage Data

• IP address and approximate geographic location derived from your IP address.
• Device type, operating system, browser type and version.
• Session duration, pages visited, and features used on the Platform.
• Log files and error reports generated during your use of the Platform.
• Cookie identifiers and similar tracking technologies (see Section 7).

2.5 Communications Data

• Records of your communications with phhsky customer support, including chat transcripts, emails, and call recordings where applicable.
• Feedback, survey responses, and complaints submitted to phhsky.

3. How We Use Your Personal Data

phhsky uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your phhsky player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to the games, features, and services available on the phhsky Platform, including processing deposits, withdrawals, and wagers.
• Legal and Regulatory Compliance: To comply with our obligations under Philippine law, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and PAGCOR regulatory requirements. This includes conducting KYC verification, filing suspicious transaction reports where required, and responding to lawful requests from regulatory authorities and law enforcement agencies.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion, in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your inquiries, complaints, and support requests, and to maintain records of our communications with you.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and content of the phhsky Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about phhsky products and services, where you have consented to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

phhsky processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phhsky, including account registration, service delivery, and transaction processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR compliance requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for phhsky's legitimate interests in operating a secure, compliant, and commercially viable gaming platform, provided that such interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as marketing communications and the use of non-essential cookies, phhsky relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing and Disclosure

phhsky does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Service Providers and Data Processors

phhsky engages third-party service providers to assist in the operation of the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), identity verification providers, cloud hosting providers, customer support platforms, and analytics providers. These service providers are contractually bound to process your data only on phhsky's instructions and in accordance with applicable data protection law.

5.2 Regulatory Authorities and Law Enforcement

phhsky may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government agencies where required by law or in response to a lawful order, subpoena, or regulatory request.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phhsky's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

5.4 Fraud Prevention and Security Partners

phhsky may share data with fraud prevention agencies, cybersecurity providers, and other gaming operators (where permitted by law) for the purpose of detecting and preventing fraudulent activity, money laundering, and other illegal conduct.

6. Data Retention

phhsky retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years following the closure of your account, in accordance with PAGCOR requirements and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine tax and AML regulations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for the resolution of a dispute or legal claim.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, phhsky will securely delete or anonymize your personal data in accordance with its data disposal procedures.

7. Cookies and Tracking Technologies

phhsky uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the Platform.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymized data about how players use the Platform, helping us identify areas for improvement.
• Functionality Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and gaming activity, where you have consented to receive marketing communications.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

8. Your Data Protection Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by phhsky:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right to Access: The right to request a copy of the personal data phhsky holds about you, including information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 14 of this Policy. phhsky will respond to all verified data subject requests within thirty (30) days of receipt.

9. Data Security

phhsky implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phhsky Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals.
• Multi-factor authentication (MFA) for administrative access to systems containing personal data.
• Incident response procedures for the detection, containment, and notification of personal data breaches in accordance with NPC requirements.

While phhsky takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phhsky will notify you and the NPC in accordance with applicable law.

10. Children's Privacy and Age Restriction

The phhsky Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine gaming regulations. phhsky does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register for or use the phhsky Platform.

If phhsky becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that phhsky may have collected data from a minor, please contact us immediately at the details provided in Section 14.

11. International Data Transfers

phhsky's primary operations and data processing activities are based in the Philippines. Where it is necessary to transfer your personal data to service providers or partners located outside the Philippines, phhsky will ensure that such transfers are carried out in accordance with the Data Privacy Act of 2012 and that appropriate safeguards are in place to protect your data, including contractual clauses approved by the NPC or equivalent data protection standards.

12. Third-Party Links

The phhsky Platform may contain links to third-party websites or services for informational purposes. phhsky is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. This Policy applies solely to personal data collected by phhsky through the Platform.

13. Updates to This Privacy Policy

phhsky reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The effective date of the most recent version is displayed at the top of this page. Where changes are material, phhsky will notify registered players via email or an in-platform notification prior to the changes taking effect.

Your continued use of the phhsky Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request closure of your account.

14. Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phhsky, please contact our Data Protection Officer (DPO):

Data Protection Officer — phhsky

Email (plain text — not a link): [email protected]

Our support team and DPO are available 24 hours a day, 7 days a week, on Philippine Standard Time (PST). We aim to acknowledge all data subject requests within five (5) business days and to resolve them within thirty (30) days.