phskay Privacy Policy

This Privacy Policy is issued by phskay ("phskay," "we," "us," or "our"), the operator of the online gaming platform accessible at phskay.net. phskay operates in accordance with the guidelines and regulations of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the laws of the Republic of the Philippines.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), phskay acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and website visitors. This means phskay determines the purposes and means by which your personal data is processed.

phskay collects personal data that is necessary and proportionate to the purposes described in this Privacy Policy. The categories of personal data we collect include the following:

phskay collects your personal data through the following channels:

• Direct submission: Data you provide when registering a phskay account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the phskay website, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party verification providers: Identity and age verification data received from third-party KYC service providers engaged by phskay to verify the authenticity of documents you submit.
• Payment processors: Transaction confirmation data received from GCash, Maya, and partner banks when you make deposits or withdrawals. phskay does not receive or store full payment credentials — only transaction reference data.
• Regulatory authorities: In limited circumstances, phskay may receive data from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

phskay uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your phskay player account, including processing your registration, verifying your identity, and managing your account preferences.
• Age and identity verification: To confirm that you meet the 21+ age requirement mandated by Philippine law and PAGCOR regulations before permitting access to real-money gaming features.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and securely, and to maintain a complete and auditable record of all financial transactions on your account.
• Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Terrorism Financing Prevention and Suppression Act, and other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct on the phskay platform.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, to enforce deposit and loss limits you have set, and to administer self-exclusion requests in accordance with our Responsible Gaming policy.
• Customer support: To respond to your queries, complaints, and feedback, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To analyze usage patterns and player behavior in aggregate to improve the phskay platform, optimize game offerings, and enhance the overall player experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time.

Under the Data Privacy Act of 2012, phskay processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, identity verification, transaction processing, and customer support — is necessary for the performance of the agreement between you and phskay.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing carried out for phskay's legitimate business interests, including fraud prevention, platform security, and aggregate analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing of your data for marketing communications and certain optional features is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phskay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Identity verification providers: Third-party KYC and age verification service providers engaged to verify the authenticity of identity documents submitted during account registration.
• Payment processors: GCash, Maya, and partner Philippine banks, to the extent necessary to process your deposit and withdrawal transactions.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulatory mandate.
• Law enforcement: Philippine law enforcement agencies, where phskay is legally compelled to disclose data in connection with a criminal investigation or court order.
• Technology service providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by phskay to operate the platform, subject to strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary for phskay to obtain professional advice or conduct internal investigations.

phskay retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active phskay account, plus a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer where the interaction relates to an unresolved dispute or regulatory matter.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and usage data: Retained for up to twenty-four (24) months from collection, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, phskay will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

The phskay website uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session, and collect usage analytics. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the phskay website, including session management, login authentication, and security features. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, responsible gaming limits, and display preferences, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregate, anonymized data about how players use the phskay platform, including pages visited, session duration, and navigation paths. This data helps phskay improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts on the phskay platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phskay platform. phskay does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phskay. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

phskay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to phskay personnel and authorized service providers who have a legitimate need to access it. All access is logged and subject to regular audit.
• Two-factor authentication: phskay's internal systems require multi-factor authentication for all staff accessing player data. Players are also encouraged to enable two-factor authentication on their phskay accounts.
• Penetration testing: phskay conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the platform.
• Incident response: phskay maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, phskay will notify the NPC and affected players within the timeframes required by the Data Privacy Act.

While phskay takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your phskay account credentials and for notifying phskay immediately if you suspect unauthorized access to your account.

The phskay platform is strictly intended for adults aged 21 years and older, in accordance with Philippine law and PAGCOR regulations. phskay does not knowingly collect personal data from individuals under the age of 21.

If phskay discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, it will immediately close the associated account, delete all personal data collected from that individual, and refund any deposits made, less any amounts already wagered, in accordance with our Terms and Conditions.

phskay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how phskay processes your personal data — phskay will provide advance notice to registered players via email or a prominent notice on the phskay platform at least fourteen (14) days before the changes take effect.

Your continued use of the phskay platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree to the revised Privacy Policy, you must cease using the platform and may request closure of your account.

phskay has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phskay, please contact our DPO using the details below.

Data Protection Officer: phskay Data Protection Office
Email: [email protected]
General Support: [email protected]
Platform: phskay.net
Response Time: Within 5 business days