phksy Privacy Policy

phksy ("phksy", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use our online casino and sports betting platform accessible at phksy.club ("the Platform"). This Privacy Policy ("Policy") describes how phksy collects, processes, stores, shares, and protects personal data relating to registered players, website visitors, and any other individuals who interact with phksy services.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC").

By accessing phksy.club, registering a phksy account, making a deposit, or using any phksy service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must discontinue use of phksy services immediately.

This Policy should be read in conjunction with phksy's Terms & Conditions and Responsible Gaming policy, which form part of the overall agreement between you and phksy.

The data controller responsible for your personal data is phksy, the operator of phksy.club. For all data privacy inquiries, requests, and complaints, phksy has appointed a Data Protection Officer ("DPO") who can be contacted via the support email: [email protected]. All data subject requests will be acknowledged within 72 hours and resolved within 30 calendar days in accordance with the DPA IRR timelines.

phksy collects the following categories of personal data from registered players and platform visitors:

3.1 Registration Data: Full legal name, date of birth (for 21+ age verification), residential address (including barangay, city, and province for Philippine players in Manila, Cebu, Davao, and nationwide), email address, and Philippine mobile number.

3.2 Identity Verification (KYC) Data: Government-issued Philippine identification documents (e.g., PhilSys National ID, passport, driver's licence, SSS/GSIS/PhilHealth/TIN cards), selfie photographs for biometric verification, and proof of residential address documents submitted for KYC compliance.

3.3 Financial Data: GCash account number, PayMaya account details, bank account details (BPI, BDO, Metrobank), and transaction records including deposits, withdrawals, wagers, and bonus claims. phksy does not store complete card numbers for Visa/Mastercard transactions — card processing is handled by PCI-DSS certified payment processors.

3.4 Gaming Activity Data: Gameplay history, bet amounts, game preferences, session durations, win/loss records, and bonus participation records. This data is used for responsible gaming monitoring, fraud prevention, and service personalisation.

3.5 Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, referring URLs, and geolocation data (country and region level). This data is collected automatically when you access phksy.club.

3.6 Communications Data: Records of communications between you and phksy customer support, including live chat transcripts, email correspondence, and support ticket histories.

3.7 Marketing Preference Data: Your consent status and preferences for receiving phksy marketing communications via email, SMS, and push notifications.

phksy uses your personal data for the following purposes:

• Account creation and management: Creating and maintaining your phksy player account, processing login authentication (including 2FA), and managing account settings and preferences;
• Identity verification and KYC compliance: Verifying that you meet phksy's 21+ age requirement, confirming your identity before processing withdrawals, and complying with PAGCOR licensing requirements for player identification;
• Payment processing: Processing GCash, PayMaya, and bank transfer deposits and withdrawals in Philippine Peso, and maintaining accurate financial records;
• Service delivery and improvement: Operating phksy casino games, sports betting, bingo, and live dealer services, and improving platform features based on usage patterns;
• Fraud prevention and security: Detecting and preventing fraudulent account activity, unauthorised access, money laundering, and bonus abuse;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators, administering player-requested limits and self-exclusions, and fulfilling PAGCOR responsible gaming obligations;
• Customer support: Responding to inquiries, resolving disputes, and maintaining support interaction records;
• Legal and regulatory compliance: Fulfilling AML/CTF reporting obligations to the Anti-Money Laundering Council (AMLC), responding to PAGCOR regulatory requests, and complying with court orders or law enforcement requests;
• Marketing communications (with consent only): Sending promotional offers, bonus notifications, and platform updates to players who have provided explicit consent to receive marketing communications.

phksy processes your personal data on the following lawful bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform phksy's obligations under the Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with Philippine laws including PAGCOR licensing requirements, AML/CTF obligations under Republic Act No. 9160 (AMLA), and the Data Privacy Act of 2012;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring that is necessary for phksy's legitimate business operations and does not override your fundamental privacy rights;
• Consent: Processing for marketing communications, where phksy relies on your freely given, specific, informed, and unambiguous consent that you may withdraw at any time.

phksy shares personal data only in the following circumstances and with the following categories of recipients:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (PayMongo), BPI, BDO, Metrobank, and card processing partners receive transaction data necessary to process deposits and withdrawals in Philippine Peso;
• Game providers: Licensed casino game software providers (such as Pragmatic Play, PG Soft, Jili, and others) receive session tokens and game configuration data as required for game delivery. These providers are contractually prohibited from using player data for their own purposes;
• KYC and identity verification providers: Third-party KYC service providers who assist phksy in verifying Philippine government-issued identification documents and performing biometric checks;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies where disclosure is required by law, court order, or regulatory direction;
• Professional advisers: Legal counsel, auditors, and compliance consultants under strict confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of phksy's business, player data may be transferred to the acquiring entity subject to equivalent data protection obligations.

phksy does not sell, rent, or otherwise transfer personal data to unaffiliated third parties for their independent marketing or commercial purposes.

7.1 Some of phksy's service providers, game providers, and technical infrastructure partners may be located outside the Republic of the Philippines. Where personal data is transferred internationally, phksy ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

7.2 International transfers are protected by contractual data processing agreements incorporating NPC-approved data transfer mechanisms, ensuring that overseas recipients maintain equivalent standards of data protection to those required under Philippine law.

8.1 phksy retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting requirements.

8.2 Registered player account data (including KYC documents and transaction records) is retained for a minimum of five (5) years from the date of account closure or last transaction, in compliance with AMLC record-keeping requirements under Republic Act No. 9160.

8.3 Marketing consent records are retained for the duration of the consent period plus three (3) years to demonstrate compliance with consent obligations.

8.4 Technical and log data collected for security and fraud prevention purposes is retained for twelve (12) months from the date of collection, unless required to be retained longer for ongoing investigations or legal proceedings.

8.5 Upon expiry of the applicable retention period, phksy will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

9.1 phksy uses cookies and similar tracking technologies on phksy.club to operate the platform, maintain login sessions, remember your preferences, detect fraudulent activity, and measure platform usage.

9.2 Essential Cookies: Required for phksy.club to function. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without affecting platform functionality.

9.3 Analytics Cookies: Used to understand how Filipino players interact with phksy.club — which games are most popular, how players navigate the lobby, and where technical issues occur. This data is aggregated and not used to identify individual players.

9.4 Marketing Cookies: Used only where you have provided consent to receive personalised promotional content. Marketing cookies are not deployed for players who have not opted into marketing communications.

9.5 You can manage cookie preferences through your browser settings. Blocking essential cookies may impair your ability to login to phksy and use platform features.

Under Republic Act No. 10173 and its IRR, you have the following rights regarding your personal data held by phksy:

• Right to be Informed: The right to know what personal data phksy collects and how it is processed — addressed by this Privacy Policy;
• Right of Access: The right to obtain a copy of your personal data held by phksy and information about how it is being used;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected — update most details directly in your phksy account settings;
• Right to Erasure / Right to be Forgotten: The right to request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to phksy's legal retention obligations;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used format, and to transmit that data to another controller;
• Right to Object: The right to object to processing of your personal data for direct marketing purposes, including profiling for marketing. Objection to marketing can be exercised by unsubscribing from phksy communications;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phksy has violated your data privacy rights.

To exercise any of the above rights, contact phksy's Data Protection Officer at [email protected]. Include "Data Subject Request" in the subject of your message and provide sufficient identification information to verify your identity. phksy will respond within 30 calendar days of receiving a valid request.

11.1 phksy implements technical and organisational measures appropriate to the risk of processing your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and phksy servers;
• AES-256 encryption for personal data stored at rest in phksy databases;
• Two-factor authentication (2FA) for player accounts and all phksy administrative access;
• Role-based access controls limiting phksy staff access to personal data on a strict need-to-know basis;
• Regular security vulnerability assessments and penetration testing of phksy infrastructure;
• Logging and monitoring of all data access events for anomaly detection;
• Regular staff training on data privacy obligations and secure data handling.

11.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phksy will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects as required by the DPA IRR.

phksy services are strictly for adults aged 21 years and above in the Philippines, in compliance with PAGCOR licensing requirements. phksy does not knowingly collect personal data from individuals under 21 years of age. If phksy discovers that personal data of an underage individual has been collected, the account will be immediately suspended, all gameplay data voided, and the data deleted or securely destroyed in accordance with phksy's data retention procedures.

Parents and guardians who believe their child under 21 has registered with phksy should contact us immediately at [email protected] for prompt account closure and data removal.

13.1 phksy reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine laws, or regulatory guidance from the National Privacy Commission.

13.2 When material changes are made, phksy will notify registered players by email or in-platform notification at least 15 days before the changes take effect. The updated Policy will be published at phksy.club/privacy-policy with the revised effective date.

13.3 Your continued use of phksy services after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must close your phksy account before the effective date.

For all privacy-related inquiries, data subject access requests, consent withdrawals, and complaints, contact phksy's Data Protection Officer:

If you are not satisfied with phksy's response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Republic of the Philippines.