Privacy Policy

1 Overview

This Privacy Policy ("Policy") describes how skyphp ("skyphp," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the skyphp website, mobile platform, games, and related services (collectively, the "Platform").

skyphp is committed to protecting the privacy and security of all personal data entrusted to us by Filipino players. This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account or using the skyphp Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2 Data We Collect

skyphp collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

Registration & Identity Data:

• Full legal name, date of birth, and gender
• Residential address (city, province, Philippines)
• Valid government-issued ID details (for KYC verification)
• Email address and mobile number
• Username and encrypted password

Financial & Transaction Data:

• Deposit and withdrawal records, including amounts and timestamps
• Payment method details (GCash number, PayMaya account, bank account name – we do not store full card numbers)
• Transaction history and wallet balance records

Gameplay & Activity Data:

• Game session logs, bet history, win/loss records, and RTP data
• Bonus and promotion usage history
• Login timestamps, session duration, and Platform navigation patterns

Technical & Device Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens

Communications Data:

• Records of customer support interactions via live chat or email
• Feedback, complaints, and dispute correspondence
• Marketing preference settings and communication opt-in/opt-out records

3 How We Use Your Data

skyphp processes your personal data only for specified, explicit, and legitimate purposes. The legal bases for processing under the Data Privacy Act include your consent, the performance of a contract (your player account agreement), compliance with legal obligations, and our legitimate interests as a licensed gaming operator.

We use your personal data for the following purposes:

• Account Management: To create, maintain, and administer your skyphp player account.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• Transaction Processing: To process deposits, withdrawals, and bonus credits accurately and securely.
• Game Delivery: To provide access to games, record outcomes, and maintain fair play integrity.
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support services.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized account access.
• Legal Compliance: To comply with PAGCOR licensing requirements, AMLC reporting obligations, NPC regulations, and other applicable Philippine laws.
• Responsible Gaming: To monitor gameplay patterns and apply responsible gaming tools where appropriate, including deposit limits and self-exclusion.
• Marketing Communications: To send you promotional offers, bonuses, and Platform updates – only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the skyphp Platform.

4 Data Sharing

skyphp does not sell your personal data. We may share your personal information with the following categories of third parties only to the extent necessary and under appropriate data protection agreements:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and eligibility.
• Game Software Providers: Licensed game developers and RNG certification bodies who supply and audit the games available on the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory obligation.
• Fraud Prevention & Security Services: Third-party fraud detection and cybersecurity providers who help us protect the Platform and player accounts.
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants engaged by skyphp, subject to professional confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom skyphp shares personal data are required to handle that data in accordance with the Data Privacy Act and are prohibited from using it for any purpose beyond what is specified in our data sharing agreements.

5 Cookies & Tracking Technologies

skyphp uses cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and personalize your experience.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform, including pages visited, session duration, and navigation paths. This data helps us improve Platform performance.
• Functional Cookies: Used to remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the skyphp Platform. For detailed information on managing cookies in your browser, refer to your browser's help documentation.

6 Data Retention

skyphp retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AMLC record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years as required under the Anti-Money Laundering Act (AMLA) and its amendments.
• KYC Documents: Identity verification documents are retained for the period required by PAGCOR and AMLC regulations, typically five (5) years from the date of the last transaction.
• Customer Support Records: Communications with our support team are retained for three (3) years to facilitate dispute resolution and service improvement.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymized within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, it will be retained until the matter is resolved.

7 Data Security

skyphp implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial account details.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals.
• Multi-factor authentication options for player accounts to prevent unauthorized access.
• Continuous monitoring of Platform activity for suspicious behavior and potential security incidents.
• Incident response procedures to detect, contain, and notify affected parties of any personal data breach in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, skyphp will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act and NPC Circular No. 16-03.

8 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by skyphp:

• Right to Be Informed: The right to know what personal data skyphp collects about you and how it is used, as described in this Policy.
• Right of Access: The right to request a copy of the personal data skyphp holds about you, including information on how it has been processed.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data in your skyphp account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Request." We will respond to all verified requests within fifteen (15) business days, as required by the Data Privacy Act.

9 Minors & Age Restriction

The skyphp Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations enforced by PAGCOR. skyphp does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the matter to the appropriate regulatory authorities as required.

10 Cross-Border Data Transfers

skyphp primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines, such as international game software providers or cloud infrastructure partners.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data flows. skyphp ensures that recipient countries or organizations provide an adequate level of data protection, and that appropriate safeguards such as data sharing agreements and standard contractual clauses are in place before any transfer occurs.

11 Changes to This Policy

skyphp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-Platform notification.

Your continued use of the skyphp Platform after any amendments have been posted constitutes your acknowledgment of the revised Policy. We encourage you to review this page periodically to stay informed about how skyphp protects your personal data.

12 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact skyphp's Data Protection Officer:

• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 via the skyphp Platform
• Response Time: Within 2 hours for urgent matters (8AM–10PM PST); within 15 business days for formal data subject requests

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information on filing a complaint with the NPC is available through official Philippine government channels.