phsky2 Privacy Policy

1. Overview and Scope of This Policy

This Privacy Policy ("Policy") describes how phsky2 ("phsky2," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information provided by users ("you," "your," or "User") who access or use the phsky2 online gaming platform at phsky2.cam, including all related subdomains, mobile web interfaces, application programming interfaces (APIs), and associated services (collectively, the "Services").

phsky2 is committed to protecting your personal information and handling it responsibly, fairly, and transparently. This Policy is designed to comply with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as administered and enforced by the National Privacy Commission (NPC). We are also committed to alignment with the applicable guidelines and directives issued by the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to player data management.

This Policy applies to all personal data we process about Users of phsky2 Services regardless of the device or method of access. It does not apply to third-party websites, applications, or services that may be linked to or accessible through the phsky2 platform. phsky2 is not responsible for the privacy practices of third parties.

By registering an account, depositing funds, or otherwise using phsky2 Services, you confirm that you have read, understood, and agree to the collection and processing of your personal information as described in this Policy. If you do not agree with any part of this Policy, you must immediately discontinue use of phsky2.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, complete verification, or contact phsky2 customer support, you provide information that we collect and process. This includes:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, nationality, and gender.
• Contact Information: Email address, Philippine mobile number (required for SMS OTP authentication), and residential address.
• Account Credentials: Username, encrypted password hash, and security questions or preferences.
• Identity Verification Documents: Copies of government-issued photo identification (such as Philippine passport, PhilSys National ID, UMID, or driver's license), proof of address, and selfie photographs taken for biometric verification.
• Payment Information: Bank account numbers, GCash or Maya account numbers linked to your registered mobile, BDO/BPI account details, and transaction references. phsky2 does not store complete card numbers or CVV codes.
• Responsible Gaming Information: Self-imposed limits, self-exclusion requests, or voluntary disclosures made in connection with responsible gaming programs.

2.2 Information Collected Automatically

When you access and use phsky2, we automatically collect certain technical and behavioral information through cookies, web beacons, server logs, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifier, and hardware configuration.
• Network Information: IP address, internet service provider, mobile network operator (e.g., Globe, Smart, DITO), and approximate geographic location derived from IP address.
• Usage Data: Pages visited, time spent on each page, game sessions initiated, bets placed, features accessed, click patterns, and session duration.
• Transaction Logs: Complete history of deposits, withdrawals, bonuses claimed, wagers placed, game outcomes, and account balance changes, retained for regulatory and fraud-detection purposes.
• Session and Authentication Data: Login timestamps, session tokens, OTP requests, and login location data used to detect unauthorized access attempts.

2.3 Information from Third Parties

phsky2 may receive personal information about you from third-party sources in limited circumstances, including:

• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers who verify the authenticity of your identification documents and perform biometric checks.
• Payment Processors: GCash, Maya, and Philippine banks that provide transaction confirmation and account holder name verification.
• Fraud and Risk Analytics: Third-party fraud detection services that cross-reference device fingerprints, IP reputation data, and behavioral signals against known fraud indicators.
• PAGCOR Regulatory Systems: Where required under applicable gaming regulations, phsky2 may receive or transmit player data through PAGCOR-mandated reporting systems.

3. Purposes for Which We Process Your Information

phsky2 processes your personal information for the following specific, legitimate, and proportionate purposes:

Purpose	Description
Account Registration	Creating and managing your phsky2 account, verifying your identity and age, and providing access to the Services.
Service Delivery	Processing deposits and withdrawals, recording game sessions, calculating winnings, and facilitating all gaming-related transactions.
Identity Verification (KYC)	Verifying that you are who you claim to be, that you are at least 21 years of age, and that your payment methods are registered in your own name, in compliance with PAGCOR and AML requirements.
Security and Fraud Prevention	Detecting unauthorized access, preventing money laundering, identifying bonus abuse, and protecting both phsky2 and its Users from fraud and financial crime.
Regulatory Compliance	Fulfilling legal obligations under Philippine gaming law, the Anti-Money Laundering Act (AMLA), and PAGCOR directives, including mandatory player data reporting.
Responsible Gaming	Administering deposit limits, session limits, cooling-off periods, self-exclusion requests, and player protection tools. Monitoring for signs of problem gambling behavior.
Customer Support	Responding to inquiries, resolving disputes, handling complaints, and providing account assistance via live chat, email, or other support channels.
Marketing & Promotions	Sending promotional offers, bonus notifications, and platform updates where you have given your consent or where permitted under applicable law. You may opt out at any time.
Analytics & Improvement	Analyzing platform usage, game performance, and user behavior in aggregate to improve the phsky2 platform, game selection, and user experience.
Legal Claims	Establishing, exercising, or defending phsky2's legal rights and claims in the event of disputes, investigations, or regulatory proceedings.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its implementing rules, phsky2 processes personal information on one or more of the following lawful bases:

• Consent: Where you have expressly given your consent to specific processing activities, such as receiving marketing communications or enabling enhanced analytics features. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual Necessity: Processing that is necessary to perform the contract between you and phsky2 — specifically, to provide gaming services, process payments, and manage your Account as set out in our Terms & Conditions.
• Legal Obligation: Processing required to comply with Philippine legal obligations, including PAGCOR licensing requirements, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable regulations.
• Legitimate Interests: Processing necessary to pursue phsky2's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, abuse detection, and business analytics.

5. Sharing and Disclosure of Your Personal Information

5.1 Service Providers and Data Processors

phsky2 shares personal information with carefully selected third-party service providers who process data on our behalf and under our instruction. These providers are bound by contractual data processing agreements requiring them to protect your information and process it only for specified, authorized purposes. Categories of such providers include:

• Identity verification and KYC service providers
• Payment processors and Philippine banking partners (GCash, Maya, BPI, BDO, Metrobank)
• Cloud hosting and infrastructure providers operating under applicable data protection standards
• Fraud detection and risk analytics platforms
• Customer support and live chat software providers
• Email and SMS communication service providers
• Game content providers (Pragmatic Play, PG Soft, Jili, NetEnt, and others) to the extent required for game delivery and dispute resolution

5.2 Regulatory and Law Enforcement Disclosure

phsky2 may disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other Philippine government authorities where required by law, court order, valid legal process, or to protect the rights, property, or safety of phsky2, its Users, or the public. Such disclosures will be made only to the extent required by law and with appropriate safeguards where permitted.

5.3 No Sale of Personal Information

phsky2 does not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. Any sharing of personal data is limited to the purposes described in this Policy and conducted under appropriate contractual protections.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or other corporate transaction involving phsky2, your personal information may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and your rights under applicable law will be preserved.

6. Data Retention

phsky2 retains personal information for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory requirements:

• Account Information: Retained for the duration of your active Account plus a minimum period of five (5) years following Account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with AMLA reporting obligations and PAGCOR record-keeping requirements.
• Identity Verification Documents: Retained for the duration of Account activity plus five (5) years, or longer if required by law or ongoing legal proceedings.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant inquiry or complaint.
• Marketing Consent Records: Retained for the duration of your account relationship plus three (3) years to demonstrate consent compliance.

Upon expiration of applicable retention periods, phsky2 will securely delete or anonymize personal information in accordance with its data disposal procedures and the requirements of the National Privacy Commission.

7. Security of Your Personal Information

phsky2 implements appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, disclosure, or destruction. Our security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and phsky2 servers is encrypted using 256-bit SSL/TLS encryption protocols.
• Encryption at Rest: Sensitive personal data, including identity documents and financial account details, is encrypted when stored on phsky2 servers.
• Access Controls: Access to personal data is restricted to authorized phsky2 personnel with a legitimate need-to-know basis, governed by role-based access control policies.
• Multi-Factor Authentication: Administrative access to phsky2 systems is protected by multi-factor authentication. Users are encouraged to enable SMS OTP two-factor authentication on their Accounts.
• Intrusion Detection and Monitoring: phsky2 operates continuous network monitoring, intrusion detection systems, and security incident response procedures.
• Penetration Testing: phsky2 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities.
• Data Breach Response: In the event of a personal data breach that is likely to result in risk to affected individuals, phsky2 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected Users without undue delay.

While phsky2 takes reasonable steps to protect your personal information, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your Account credentials and for notifying phsky2 immediately if you suspect unauthorized access to your Account.

8. Cookies and Tracking Technologies

phsky2 uses cookies and similar tracking technologies to operate the platform, improve your experience, prevent fraud, and understand how Users interact with the Services. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the operation of the phsky2 platform, including session management, authentication, security validation, and core functionality. These cookies cannot be disabled without impairing your ability to use phsky2.
• Functional Cookies: Store your preferences such as language settings, game display preferences, and interface customizations to provide a personalized experience.
• Performance and Analytics Cookies: Collect anonymized and aggregated data about how Users navigate phsky2, which pages and games receive the most engagement, and where technical errors occur, enabling us to improve the platform.
• Security and Fraud Prevention Cookies: Identify and prevent fraudulent activity, detect unauthorized Account access, and support compliance with anti-money laundering obligations by maintaining device fingerprint and session integrity data.

You may control cookie settings through your browser's privacy controls. Disabling strictly necessary cookies will affect your ability to log in and use phsky2. phsky2 does not use third-party advertising cookies or behavioral advertising trackers for external retargeting purposes.

9. Your Privacy Rights Under Philippine Law

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by phsky2:

• Right to be Informed: The right to know what personal information phsky2 collects about you, how it is used, and with whom it is shared — as described in this Policy.
• Right of Access: The right to obtain confirmation of whether phsky2 holds personal information about you and to receive a copy of that information, along with details of how it is processed.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal information we hold about you.
• Right to Erasure: The right to request deletion of your personal information where it is no longer necessary for the purposes it was collected, subject to legal retention obligations under PAGCOR, AMLA, and other applicable laws that may require us to retain certain data regardless of your request.
• Right to Object: The right to object to specific processing activities, including direct marketing communications. If you object to marketing, we will cease sending promotional communications to you.
• Right to Data Portability: The right to receive a copy of personal information you have provided to phsky2 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phsky2 has violated your data privacy rights. The NPC may be contacted through its official channels at privacy.gov.ph.

To exercise any of these rights, please contact phsky2's Data Protection Officer as described in Section 13 of this Policy. phsky2 will respond to verified requests within thirty (30) calendar days. We may ask you to verify your identity before processing your request to prevent unauthorized disclosure.

Some rights are subject to limitations — for example, phsky2 cannot delete transaction records that we are legally required to retain under PAGCOR licensing conditions or the Anti-Money Laundering Act.

10. Minors and Age Restriction Policy

phsky2 strictly prohibits the use of its Services by individuals under the age of 21 years, in compliance with PAGCOR's minimum age requirement for online casino gaming in the Philippines. phsky2 does not knowingly collect or process personal information from individuals under 21 years of age.

Age verification is performed during Account registration and is a mandatory step before any user may deposit funds, claim bonuses, or access real-money gaming. If phsky2 becomes aware that personal information has been collected from an individual under 21 years of age, we will take immediate steps to delete that information and close the relevant Account without prior notice.

If you believe that phsky2 has inadvertently collected personal information from a minor, please contact us immediately at [email protected] so that we may investigate and take appropriate remedial action.

11. International Data Transfers

phsky2 primarily operates within the Philippines. However, some of the third-party service providers and infrastructure partners described in Section 5 of this Policy may be located outside the Philippines. When personal information is transferred internationally, phsky2 ensures that appropriate safeguards are in place to protect your information, including:

• Requiring third-party recipients to maintain data protection standards equivalent to those required by Philippine law.
• Entering into data processing agreements that include cross-border transfer safeguards compliant with NPC requirements.
• Limiting the scope of international transfers to what is strictly necessary for service delivery purposes.

phsky2 does not transfer personal information to international recipients for the purpose of circumventing Philippine data privacy law. All international transfers are conducted for legitimate operational purposes and subject to appropriate contractual protections.

12. Changes to This Privacy Policy

phsky2 reserves the right to update, amend, or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws and regulations, or the nature of our Services. When changes are made, we will update the "Effective Date" and "Last Reviewed" dates at the top of this Policy.

For material changes that significantly affect your rights or our data processing practices, phsky2 will provide notice through one or more of the following means: a prominent notice on the phsky2 platform, an email to your registered address, or an SMS to your registered mobile number. Your continued use of phsky2 following the effective date of any revision constitutes your acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how phsky2 protects your personal information.

13. Contact Information and Data Protection Officer

phsky2 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have questions, concerns, or requests regarding your personal information or phsky2's data practices, you may contact our Data Protection Officer through the following channels:

• Email: [email protected] (please include "Data Privacy Request" in the subject line)
• Platform Live Chat: Available 24/7 on phsky2.cam — state that you are submitting a data privacy inquiry.

phsky2 will acknowledge receipt of your request within five (5) business days and will respond substantively within thirty (30) calendar days. If additional time is required to process your request due to its complexity, we will notify you of the expected response timeline.

If you are not satisfied with phsky2's response to your privacy request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the statutory body responsible for enforcing the Data Privacy Act of 2012.