phskay Privacy Policy

This Privacy Policy ("Policy") describes how phskay ("phskay," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of users ("you," "your," "Player") who access the phskay online gaming platform at https://phskay.vip and its associated mobile applications (collectively, the "Platform").

phskay is committed to safeguarding the privacy of every person who interacts with our Platform. This Policy is drafted in compliance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission of the Philippines.

By registering an account with phskay, accessing the Platform, or providing your personal information in any manner, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal information as described herein. If you do not agree to this Policy, you must discontinue use of the Platform and close your account.

This Policy should be read in conjunction with phskay's Terms & Conditions, which govern your use of the Platform generally. Defined terms used in this Policy and not defined herein carry the meanings given to them in the Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 and this Policy, phskay is the personal information controller ("PIC") in respect of the personal data collected from users of the Platform. As the personal information controller, phskay determines the purposes for which and the means by which personal data is processed.

phskay has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable Philippine data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy. Inquiries, requests to exercise data subject rights, and privacy-related complaints should be directed to the DPO in the first instance.

Where phskay engages third-party service providers who process personal data on phskay's behalf — such as payment processors, KYC verification partners, and analytics providers — those parties act as personal information processors ("PIPs") under written agreements that impose data protection obligations consistent with this Policy and applicable Philippine law.

phskay collects personal information from you through a number of channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from verified third-party sources where permitted by law. The categories of personal information we collect are described below.

phskay does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, political opinions, or religious beliefs) except where strictly necessary for regulatory compliance — for example, where responsible gaming procedures require documentation of a self-exclusion arrangement on health grounds. Where sensitive information must be collected, phskay will seek explicit consent and will process such data only to the extent required for the stated purpose.

phskay processes your personal information for the following documented purposes. Each processing activity is associated with a specific legal basis, which is described in Section 5.

• Account creation and management: Processing your registration information, verifying your identity and age, maintaining your account, and enabling phskay Login access to the Platform.
• Know Your Customer (KYC) and age verification: Verifying that you are at least twenty-one (21) years of age and confirming your identity using government-issued Philippine identification documents, as required by gaming regulations and anti-money laundering obligations.
• Payment processing: Executing deposit and withdrawal transactions through GCash, Maya, BPI, BDO, UnionBank, and other supported payment channels; maintaining transaction records; processing refunds where applicable.
• Platform operation and game delivery: Delivering the games, features, and services available on phskay, maintaining game records, and ensuring the technical integrity of the Platform.
• Anti-fraud and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, collusion, money laundering, and other unlawful conduct on the Platform.
• Regulatory compliance: Fulfilling obligations under Philippine gaming regulations, anti-money laundering laws, and data privacy laws, including reporting obligations to relevant regulatory authorities where legally required.
• Responsible gaming: Monitoring gaming behavior to identify potential indicators of problem gambling; administering deposit limits, cool-off periods, and self-exclusion arrangements; contacting players where welfare concerns arise.
• Customer support: Responding to inquiries, managing complaints, resolving disputes, and providing technical assistance.
• Marketing and promotions: Sending you promotional communications, bonus offers, and platform updates, subject to your communication preferences and where you have provided the required consent or where a legitimate interest exists.
• Platform analytics and improvement: Analyzing usage patterns and player behavior (in aggregate and at individual level where necessary) to improve Platform performance, game selection, user experience, and support quality.

Under the Data Privacy Act of 2012, phskay is required to identify a lawful basis for each category of personal data processing. The legal bases on which phskay relies are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between you and phskay — i.e., to provide the Platform services you have registered for. This includes account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with a legal or regulatory obligation, including KYC and age verification, anti-money laundering reporting, and gaming regulatory compliance.
• Legitimate interests: Processing necessary for phskay's legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests. This covers fraud prevention, security operations, responsible gaming monitoring, and platform analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This primarily applies to direct marketing communications and the processing of any sensitive personal information that may be required in limited circumstances.

Where phskay relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal, and does not affect processing conducted on a different legal basis.

phskay does not sell your personal information to third parties for their independent commercial purposes. phskay shares personal information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: GCash (operated by Mynt), Maya (operated by Voyager Innovations), BPI, BDO, UnionBank, and other payment service providers receive the personal information necessary to process your transactions. These providers are bound by their own privacy policies and applicable Philippine financial data privacy regulations.
• KYC and identity verification providers: Third-party identity verification services process government ID images and facial biometric data on phskay's behalf as personal information processors for the sole purpose of completing KYC verification.
• Game content providers: Certified game providers whose content is accessible through the phskay Platform may receive the minimum information necessary to deliver the game (such as a session token and bet amount) but are not provided with your full profile data.
• Regulatory authorities: phskay may be legally required to disclose personal information to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities in response to lawful orders, subpoenas, or regulatory reporting obligations.
• Fraud prevention and security services: Personal information may be shared with fraud detection partners and industry fraud prevention databases to identify and prevent fraudulent activity across the gaming industry.
• Professional advisers: phskay's legal counsel, auditors, and insurance providers may access personal information where necessary in connection with the professional services they provide to phskay, subject to binding confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of phskay's business, personal information held by phskay may be transferred as part of that transaction. phskay will notify affected users of any such transfer and the applicable data protection arrangements prior to completion.

phskay retains your personal information for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any applicable legal, regulatory, accounting, or reporting requirements. The specific retention periods that apply to different categories of personal data are set out below.

When the applicable retention period expires, phskay will securely delete or anonymize personal information so that it can no longer be linked to an identifiable individual. Where deletion is not immediately possible due to technical constraints (such as data held in backup systems), phskay will isolate the data from active processing until deletion can be performed securely.

phskay implements and maintains a comprehensive set of technical and organizational security measures designed to protect personal information against unauthorized access, loss, alteration, disclosure, or destruction. These measures are reviewed and updated regularly in line with evolving security standards and threat landscapes.

• Encryption in transit: All data transmitted between your device and phskay's servers is encrypted using 256-bit SSL/TLS protocols, equivalent to the encryption standards applied by major Philippine financial institutions.
• Encryption at rest: Personal and financial data stored on phskay's systems is encrypted at rest using industry-standard encryption algorithms.
• Password security: Account passwords are processed through one-way cryptographic hashing before storage. phskay's systems never store or transmit passwords in readable form.
• Access controls: Access to personal information is restricted on a strict need-to-know basis. phskay staff access to player data is logged, monitored, and subject to role-based access controls.
• Two-factor authentication: phskay offers and encourages all players to enable two-factor authentication (2FA) via OTP to their registered Philippine mobile number as an additional layer of account security.
• Intrusion detection and monitoring: phskay operates continuous security monitoring, anomaly detection, and intrusion detection systems on its infrastructure.
• Incident response: phskay maintains a documented data breach response procedure. In the event of a personal data breach that is likely to adversely affect data subjects, phskay will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected individuals without undue delay, as required by Philippine law.

phskay uses cookies and similar tracking technologies on the Platform to support essential functionality, improve performance, and where consent is given, to deliver personalized content and analyze usage patterns. The categories of cookies used are described below.

• Strictly necessary cookies: These cookies are essential to the operation of the Platform and cannot be disabled. They support core functions such as maintaining your logged-in session, remembering your language preference, and processing transactions securely. No consent is required for strictly necessary cookies.
• Performance and analytics cookies: These cookies collect information about how users interact with the Platform — which pages are visited most, how long sessions last, and where users encounter errors. Information collected is used in aggregate to improve the Platform. phskay will request your consent before setting analytics cookies.
• Functionality cookies: These cookies allow the Platform to remember your preferences and settings between sessions, such as your preferred game view or display settings. Consent is requested before setting functionality cookies that are not strictly necessary.
• Fraud detection and security cookies: These cookies support phskay's fraud detection and account security systems by identifying unusual patterns of device or browsing behavior that may indicate unauthorized access attempts or automated activity.

You may manage cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from using core features including phskay Login, deposits, and gameplay. For other cookie categories, you may withdraw consent at any time through your browser settings without affecting your ability to access the Platform.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal information held by phskay. These rights are subject to certain exceptions and limitations where processing is required for legal compliance or the exercise of legal claims.

To exercise any of the rights listed above, please contact phskay's Data Protection Officer using the details in Section 14. phskay will respond to verified requests within thirty (30) calendar days. Where the request is complex or phskay receives a high volume of requests, this period may be extended by a further sixty (60) days, of which you will be notified within the initial thirty-day period.

phskay will not charge a fee for processing rights requests in most circumstances. However, where requests are manifestly unfounded or excessive — in particular where they are repetitive — phskay may charge a reasonable fee or refuse to act on the request, providing written reasons for doing so.

phskay is strictly a 21+ platform. The Platform is not directed at, and phskay does not knowingly collect personal information from, individuals under the age of twenty-one (21). Age verification is a mandatory step in phskay's registration process and is enforced using government-issued Philippine identification.

If you believe that a minor may have registered with phskay using false information, please notify us immediately through the contact details provided in Section 14. phskay will investigate all such reports promptly.

Some of phskay's service providers — including game content providers, technical infrastructure partners, and fraud prevention services — may process personal information in jurisdictions outside the Republic of the Philippines. Where personal information is transferred to a jurisdiction that does not provide the same level of data protection as the Philippines, phskay will ensure that appropriate safeguards are in place.

Such safeguards may include:

• Binding contractual clauses that impose data protection standards equivalent to those required under Philippine law.
• Processing limited to jurisdictions that have been assessed as providing an adequate level of data protection.
• Processing by recipients certified under recognized data protection frameworks applicable to the receiving jurisdiction.

You may request information about the specific safeguards applied to cross-border transfers of your personal data by contacting phskay's Data Protection Officer at the details set out in Section 14.

phskay reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, Platform features, or applicable law. The current version of this Policy, together with its effective date, is always available on the Platform at https://phskay.vip/privacy-policy.

Where a change to this Policy materially affects the way phskay collects, uses, or shares your personal information, phskay will notify you via the email address registered to your account and/or through a prominent notice on the Platform at least fourteen (14) days prior to the change taking effect.

Your continued use of the phskay Platform after the effective date of any updated Policy constitutes your acknowledgment of the revised Policy. If you do not accept a revised Policy, you should discontinue use of the Platform and close your account prior to the effective date of the change.

For all privacy-related inquiries, requests to exercise your data subject rights, or complaints regarding phskay's handling of your personal information, please contact phskay's Data Protection Officer through the following channels:

• Data Protection Officer — Email: [email protected] (please include "Privacy Inquiry" or "Data Subject Request" in the subject line)
• Live Chat: Available 24/7 through the phskay Platform for general privacy questions and account-related data inquiries.

phskay's DPO will acknowledge receipt of your inquiry or request within five (5) Philippine Standard Time business days and will endeavor to respond fully within thirty (30) calendar days.

If you are not satisfied with phskay's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which is the competent supervisory authority for data protection in the Philippines. Information about the NPC's complaint procedures is available at the NPC's official website.