skyphp Casino – Privacy Policy

1. Introduction

1.1 skyphp ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all registered players and website visitors. This Privacy Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC").

1.2 This Policy describes in detail: (a) what categories of personal data skyphp collects from you; (b) the legal bases on which we process that data; (c) the purposes for which your data is used; (d) with whom your data may be shared; (e) how long your data is retained; and (f) the rights you hold as a data subject under Philippine law.

1.3 This Policy should be read in conjunction with the skyphp Terms and Conditions and Responsible Gaming Policy, both of which are available on this website.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, skyphp is the personal information controller ("PIC") in respect of the personal data it processes in connection with the provision of its gaming and betting services through the skyphp.vip platform.

2.2 skyphp has appointed a Data Protection Officer ("DPO") who is responsible for overseeing the Platform's data protection programme and ensuring ongoing compliance with RA 10173. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration Data. When you create an account on skyphp, we collect: full legal name; date of birth; residential address (municipality/city, province, and postal code within the Philippines); email address; Philippine mobile number; and username.

3.2 Identity Verification (KYC) Data. To comply with anti-money laundering requirements and verify your age (21+ requirement), we collect: copies of government-issued photo identification (e.g., PhilSys National ID, UMID, Passport, Driver's License, SSS/GSIS ID); selfie or liveness verification images; and, where required, proof of residential address (utility bill or bank statement).

3.3 Financial Data. We collect data related to your financial transactions on skyphp, including: GCash account number or PayMaya account details used for deposits and withdrawals; bank account details (account name, account number, bank name) for bank transfer transactions; deposit and withdrawal history; account balance history; and bonus and promotional credit records.

3.4 Gaming Activity Data. We collect records of your gaming activity on the Platform, including: games played and session durations; bet amounts and outcomes; game category preferences; and responsible gaming tool usage (deposit limits set, self-exclusion periods, etc.).

3.5 Technical and Device Data. We automatically collect certain technical data when you access skyphp, including: IP address; device type and operating system; browser type and version; mobile network operator (where applicable); session timestamps and duration; and referral URL.

3.6 Communications Data. We retain records of communications between you and skyphp support, including live chat transcripts, email correspondence, and any account-related notifications sent to you.

4. How We Collect Your Data

4.1 skyphp collects your personal data through the following channels:

• Directly from you — during account registration, KYC submission, payment transactions, support interactions, and responsible gaming tool activation;
• Automatically — via cookies, server logs, and analytics tools as you interact with the skyphp website and gaming platform;
• From third parties — identity verification service providers (for KYC processing), payment processors (for transaction verification), and fraud prevention services, where necessary for the purposes described in this Policy.

5. Legal Basis for Processing

5.1 skyphp processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contract Performance: Processing necessary to provide you with the gaming services you have registered for, including account management, payment processing, and game delivery;
• Legal Obligation: Processing required for compliance with Philippine law, including the Anti-Money Laundering Act (RA 9160 as amended), the DPA itself, and any applicable PAGCOR regulatory requirements;
• Consent: Processing for marketing communications, promotional offers, and optional analytics, where you have provided specific, informed consent;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.

6. How We Use Your Personal Data

6.1 skyphp uses your personal data for the following purposes:

• To create, maintain, and administer your skyphp account;
• To verify your identity and age in compliance with the 21+ requirement and applicable Philippine law;
• To process deposits and withdrawals via GCash, PayMaya, and bank transfer channels;
• To deliver live casino games, slots, fishing arcade games, bingo, and all other Platform services to you;
• To apply and administer bonuses, promotions, and loyalty programme benefits;
• To comply with anti-money laundering obligations and report suspicious transactions to the Anti-Money Laundering Council (AMLC) as required by law;
• To detect, prevent, and investigate fraud, cheating, collusion, and other prohibited conduct;
• To monitor and support responsible gaming — including enforcing deposit limits, session limits, and self-exclusion requests you have activated;
• To provide 24/7 customer support;
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, account alerts) via SMS or email;
• To send you promotional and marketing communications, subject to your consent and the opt-out options available in your account settings;
• To improve the Platform through aggregated, anonymised analytics.

7. Disclosure to Third Parties

7.1 skyphp does not sell, rent, or trade your personal data to any third party. We may disclose your personal data to the following categories of recipients only where necessary and on a lawful basis:

• KYC and Identity Verification Providers: Third-party services engaged to verify your government-issued ID and perform liveness checks. These providers process data solely for verification purposes on our behalf;
• Payment Processors: GCash, PayMaya, and banking partners who process financial transactions on your behalf. Data shared is limited to what is necessary for transaction completion;
• Game Technology Providers: Certified game providers (e.g., JILI, PG Soft, Pragmatic Play) who provide the gaming content available on skyphp. These providers may receive anonymised session and bet data for game functionality and RTP auditing purposes;
• Fraud and Security Services: Third-party fraud detection services that help us identify and prevent fraudulent or abusive account activity;
• Regulatory and Law Enforcement Authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other Philippine government authorities, where we are required by law to disclose information or where disclosure is necessary to prevent illegal activity;
• Professional Advisors: Legal counsel, accountants, and auditors, subject to professional confidentiality obligations, where necessary for the operation of skyphp's business.

7.2 All third-party service providers who process personal data on behalf of skyphp are required to enter into data sharing agreements or data processing agreements that impose obligations consistent with the DPA and skyphp's data protection standards.

8. Cookies and Tracking Technologies

8.1 skyphp uses cookies and similar tracking technologies on its website to: maintain your login session; remember your language and display preferences; analyse website traffic and usage patterns through anonymised analytics; and detect and prevent fraudulent activity.

8.2 Essential Cookies (required for the Platform to function, including session authentication) cannot be disabled without affecting your ability to use skyphp. Analytics Cookies (used to understand how players use the Platform) and Marketing Cookies (where applicable) are subject to your consent, which can be managed through your browser settings.

8.3 Most web browsers allow you to control cookie behaviour through their settings. Disabling certain cookies may affect the functionality of the skyphp platform.

9. Data Security

9.1 skyphp implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include: 256-bit SSL/TLS encryption for all data transmitted between your device and skyphp servers; encryption of sensitive data fields at rest in our databases; bcrypt hashing for all account passwords (meaning even skyphp staff cannot read your password); role-based access controls restricting staff access to personal data on a strict need-to-know basis; multi-factor authentication for all staff with access to production systems; and regular security audits and penetration testing.

9.2 In the event of a personal data breach affecting the security, confidentiality, integrity, or availability of your personal data, skyphp will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and affected data subjects within a reasonable timeframe, in accordance with the DPA and NPC Circular 16-03.

10. Data Retention

10.1 skyphp retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your account and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under RA 9160;
• Financial Transaction Records: Retained for five (5) years from the date of the transaction, as required by applicable Philippine financial regulations;
• Gaming Activity Logs: Retained for three (3) years from the date of the gaming session;
• Support Communications: Retained for two (2) years from the date of the last interaction;
• Technical and Device Logs: Retained for twelve (12) months from the date of the logged event.

10.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

11. Your Rights as a Data Subject

11.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by skyphp:

• Right to be Informed: The right to be told what data we collect, how we use it, and with whom we share it — as set out in this Policy;
• Right of Access: The right to request a copy of the personal data skyphp holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to overriding retention requirements under Philippine law;
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format, or to have it transferred to another data controller where technically feasible;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe skyphp has violated your data privacy rights.

11.2 To exercise any of the above rights, please contact skyphp's Data Protection Officer at the contact details provided in Section 15. We will respond to your request within fifteen (15) working days, as required by NPC guidelines.

12. Children's Privacy

12.1 skyphp is strictly an adult gaming platform. We do not knowingly collect or process personal data from individuals under the age of twenty-one (21). Age verification is applied during registration, and any account found to be held by a minor will be immediately closed and any deposited funds returned to the source payment method. If you become aware that a minor has registered on skyphp, please contact our support team immediately.

13. Cross-Border Data Transfers

13.1 Where it is necessary to transfer your personal data to a recipient outside the Philippines — for example, to an international game technology provider or cloud infrastructure service — skyphp ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include standard contractual clauses approved by the National Privacy Commission or adequacy determinations by the NPC in respect of the recipient country.

14. Changes to This Privacy Policy

14.1 skyphp may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operational circumstances. Material changes will be communicated to registered players via their registered email address and/or a notice on the skyphp website. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of skyphp following notification of a material change constitutes acceptance of the updated Policy.

15. Contact and Data Protection Officer

15.1 For any queries, concerns, or requests relating to this Privacy Policy, or to exercise any of your data subject rights under the Data Privacy Act of 2012, please contact the skyphp Data Protection Officer through the following channels: