Privacy Policy – skyphp Casino Philippines

1. Data Controller

skyphp (referred to herein as "skyphp", "we", "us", or "our") is the data controller responsible for the personal information collected through the website located at skyphp.club and all associated services and applications. skyphp processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on the skyphp platform or otherwise using our services, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

skyphp collects personal data that is necessary to provide you with a secure, compliant, and functional gaming experience. The categories of data we collect include:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by applicable law or regulatory obligation.

3. How We Collect Personal Data

skyphp collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support on the skyphp platform.
• Automated Collection: Technical and usage data collected automatically through cookies, log files, and similar technologies when you access and interact with the skyphp website.
• Third-Party Sources: Identity verification data from KYC service providers; fraud-prevention data from security screening partners; payment verification data from GCash, Maya, and banking partners to confirm transaction legitimacy.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, skyphp processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and skyphp — including account management, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, anti-money laundering requirements under RA 9160 as amended, and the Data Privacy Act of 2012.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain optional features, where we have obtained your specific, informed consent. You may withdraw consent at any time without affecting processing carried out before withdrawal.

5. How We Use Your Personal Data

skyphp uses the personal data we collect for the following purposes:

• Creating, verifying, and managing your skyphp player account.
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment channels.
• Delivering casino games, sports betting markets, bingo, and all other services offered on the skyphp platform.
• Verifying your identity and age (21+) in compliance with PAGCOR and anti-money laundering requirements.
• Detecting, investigating, and preventing fraudulent activity, account abuse, and security incidents.
• Monitoring gaming behaviour for responsible gaming purposes, including detecting patterns associated with problem gambling and triggering intervention tools where appropriate.
• Administering bonuses, promotions, and loyalty rewards.
• Responding to your customer support inquiries and resolving disputes.
• Sending transactional communications — account confirmations, security alerts, OTPs, withdrawal notifications.
• Sending marketing communications about skyphp promotions and new features, where you have consented to receive such communications.
• Improving platform performance, user experience, and game content based on aggregated usage analytics.
• Complying with applicable Philippine law and responding to lawful requests from government authorities.

6. Sharing and Disclosure of Personal Data

skyphp does not sell your personal data. We may share your personal data with third parties only in the following circumstances:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, InstaPay operators, and other payment infrastructure providers receive the minimum data necessary to process your transactions.
• Identity Verification Providers: Third-party KYC and identity verification services that assist skyphp in meeting its regulatory obligations. These providers are bound by data processing agreements and are prohibited from using your data for any purpose other than identity verification.
• Fraud Prevention Services: Security and fraud screening partners who assist in detecting and preventing unauthorized account access and financial crime.
• Cloud Infrastructure and IT Providers: Technology vendors who host and maintain the skyphp platform infrastructure, operating under binding data processing agreements with appropriate security obligations.
• Regulatory and Law Enforcement Authorities: skyphp will disclose personal data to PAGCOR, the AMLC (Anti-Money Laundering Council), the National Privacy Commission, or other Philippine government authorities when required to do so by law, court order, or regulatory directive.
• Business Successors: In the event of a merger, acquisition, or sale of substantially all of skyphp's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third parties with whom skyphp shares personal data are required to process that data lawfully, securely, and in accordance with their obligations under applicable data protection law.

7. Data Retention

skyphp retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including legal, regulatory, and compliance obligations. Specific retention periods include:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, consistent with PAGCOR and AMLC record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction, consistent with anti-money laundering record-keeping requirements under Philippine law.
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection, after which it is anonymized or deleted.
• Customer Support Communications: Retained for three (3) years from the date of the communication or resolution of the associated matter, whichever is later.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual.

8. Cookies and Tracking Technologies

The skyphp website uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and support security monitoring. The categories of cookies used include:

• Strictly Necessary Cookies: Required for the skyphp website to function. These include session management cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Used to understand how players interact with the skyphp platform — pages visited, game categories accessed, session duration. Analytics data is aggregated and anonymized.
• Functionality Cookies: Remember your preferences, such as language settings and display options, to personalize your skyphp experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized login attempts.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies does not affect your ability to use the core skyphp platform services.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by skyphp:

• Right to Be Informed: The right to know what personal data skyphp holds about you, the purposes for which it is processed, and the third parties with whom it is shared. This Privacy Policy fulfils skyphp's obligation to inform you.
• Right of Access: The right to request a copy of the personal data skyphp holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to applicable legal retention obligations. Note that data subject to PAGCOR or AMLC record-keeping requirements cannot be erased before the mandatory retention period expires.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to Data Portability: The right to receive personal data you have provided to skyphp in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe skyphp has violated your data privacy rights.

To exercise any of the above rights, please contact the skyphp Data Protection Officer using the contact details in Section 14 of this Policy. skyphp will respond to verified data subject requests within thirty (30) days of receipt.

10. Data Security

skyphp implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the skyphp platform.
• Bcrypt password hashing — passwords are never stored in plain text and cannot be retrieved, only reset.
• Role-based access controls restricting employee access to personal data to those with a legitimate operational need.
• Two-factor authentication (2FA) options for all player accounts.
• Real-time security monitoring and intrusion detection on all platform infrastructure.
• Regular third-party security audits and penetration testing.
• Segregated storage of player financial data from operational systems.

While skyphp takes all reasonable precautions to protect your personal data, no system is completely immune to security threats. In the event of a personal data breach that poses a risk to your rights and freedoms, skyphp will notify the National Privacy Commission and affected players in accordance with the requirements of RA 10173.

11. Children and Minors

The skyphp platform is strictly restricted to individuals who are 21 years of age or older, consistent with PAGCOR's guidelines for online gaming in the Philippines. skyphp does not knowingly collect personal data from individuals under 21 years of age. If skyphp becomes aware that it has collected personal data from a person under 21, that data will be deleted and the associated account will be immediately closed. Parents or guardians who believe their child under 21 may have created an account on the skyphp platform should contact us immediately using the details in Section 14.

12. Cross-Border Data Transfers

In certain circumstances, personal data collected by skyphp may be transferred to, stored in, or processed in jurisdictions outside the Philippines — for example, where skyphp uses cloud infrastructure or technology vendors operating internationally. Where such transfers occur, skyphp ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections afforded under Philippine data privacy law. These safeguards include contractual data processing agreements incorporating data transfer clauses consistent with NPC requirements.

13. Updates to This Privacy Policy

skyphp reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page. Where changes are material, skyphp will provide advance notice to registered players via email or a prominent in-platform notification before the updated Policy takes effect. Continued use of the skyphp platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

14. Contact the Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by skyphp, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Data Privacy Request – [Your skyphp Account Email]"
• Response Time: skyphp will acknowledge your request within 72 hours and provide a substantive response within 30 days.
• Regulatory Authority: You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph if you are not satisfied with our response.