phksy Privacy Policy

phksy ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every player who uses the phksy platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This policy governs the collection, use, storage, sharing, and disposal of personal data provided to or collected by phksy in connection with your use of phksy.net and all phksy services. It applies to all registered players, prospective players who browse phksy.net, and any individual whose personal data is processed by phksy in the course of providing its services.

phksy acts as the Personal Information Controller (PIC) with respect to the personal data it collects directly from players. Where phksy engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements consistent with RA 10173.

phksy collects only the personal data that is necessary to provide its services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data phksy collects are set out in the table below:

phksy does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political or religious affiliations.

phksy collects personal data through the following means:

• Direct collection: Information you provide when registering a phksy account, completing identity verification, making deposits or withdrawals, contacting phksy support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access phksy.net, including IP address, device identifiers, browser information, and cookies. See Section 7 for details on our cookie practices.
• Third-party sources: Identity verification data from government-authorised verification providers; transaction data from payment processors such as GCash and Maya; fraud and AML screening data from compliance service providers.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory authorities in connection with compliance obligations.

phksy will always inform you at the point of collection what data is being collected and for what purpose, consistent with the transparency requirements of RA 10173.

phksy uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your phksy player account; verifying your identity and age (21+ requirement); processing your login and authentication.
• Service delivery: Enabling you to play phksy Casino, Slot, Bingo, Star Fishing, and other games; processing deposits and withdrawals via GCash, Maya, and Philippine bank transfers; managing your phksy Wallet balance.
• Legal and regulatory compliance: Fulfilling phksy's obligations under Philippine gaming regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act (RA 10173), and PAGCOR requirements; conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks.
• Responsible gaming: Monitoring gaming activity to identify potential problem gambling behaviour; administering self-exclusion, deposit limits, and other responsible gaming tools; complying with PAGCOR responsible gaming standards.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct on the phksy platform.
• Customer support: Responding to your enquiries, resolving disputes, and improving phksy's support services.
• Platform improvement: Analysing aggregated, anonymised usage data to improve phksy's games, features, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and phksy news — only where you have given your consent and only via channels you have opted into. You may withdraw marketing consent at any time.

Under the Philippine Data Privacy Act of 2012, phksy processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and phksy — i.e., to provide the gaming services you have registered for, process your transactions, and manage your account.
• Legal obligation: Processing required to comply with phksy's obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine legislation.
• Legitimate interests: Processing necessary for phksy's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where phksy relies on consent as the legal basis for processing, we will always obtain that consent through a clear, affirmative action and will maintain records of consent in accordance with NPC requirements.

phksy does not sell your personal data to third parties. We may share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya (PayMaya), and Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Third-party KYC and age verification services receive identity documents and data necessary to verify your identity and confirm you meet the 21+ age requirement.
• Fraud and AML compliance providers: Specialist compliance service providers receive transaction data and identity information necessary to conduct AML screening and fraud detection on phksy's behalf.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities may receive personal data where phksy is legally required to disclose it.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on phksy's behalf under data processing agreements consistent with RA 10173.
• Business transfers: In the event of a merger, acquisition, or sale of phksy's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections set out in this policy.

All third parties who receive personal data from phksy are required to handle that data in accordance with applicable Philippine privacy law and phksy's data protection standards. phksy does not transfer personal data outside the Philippines except where necessary and subject to appropriate safeguards consistent with NPC requirements.

phksy uses cookies and similar tracking technologies on phksy.net to ensure the platform functions correctly, to keep you securely logged in, and to understand how players use our services. The types of cookies phksy uses are:

• Strictly necessary cookies: Essential for the phksy platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core phksy functionality.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and your last visited game category. These improve your phksy experience but are not strictly required.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate phksy.net — which pages are visited most, where players encounter errors, and how long sessions last. This data helps phksy improve its platform. Analytics cookies are only set with your consent.
• Security and fraud-detection cookies: Help phksy identify suspicious login attempts, detect automated bots, and protect player accounts from unauthorised access.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain phksy services. phksy does not use third-party advertising cookies or sell cookie data to advertisers.

phksy retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account data: Retained for the duration of your active phksy account, plus a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for the duration of your consent and for three (3) years after withdrawal of consent, as evidence of compliance.
• Technical and log data: Retained for up to twelve (12) months, unless required for longer periods for security investigations or regulatory purposes.

When personal data is no longer required, phksy will securely delete or anonymise it in accordance with NPC-approved data disposal procedures. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

phksy implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phksy.net
• Encryption of sensitive data at rest, including financial data and identity documents
• Multi-factor authentication options for player accounts
• Role-based access controls limiting phksy staff access to personal data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• 24/7 automated monitoring for suspicious account activity and potential data breaches
• Secure, access-controlled data centres with physical security measures

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phksy will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173 and NPC Circular 16-03.

While phksy takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your phksy account credentials confidential and for notifying phksy immediately if you suspect unauthorised access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phksy. You may exercise any of these rights by contacting phksy's Data Protection Officer (see Section 13):

phksy will respond to all privacy rights requests within thirty (30) days of receipt. Where a request is complex or phksy receives a high volume of requests, we may extend this period by a further thirty (30) days, with notice to you. phksy will not charge a fee for exercising your privacy rights unless requests are manifestly unfounded or excessive.

If you are not satisfied with phksy's response to a privacy rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

phksy's services are strictly intended for individuals who are 21 years of age or older, as required by Philippine gaming regulations. phksy does not knowingly collect personal data from individuals under the age of 21.

phksy employs age verification procedures during account registration to prevent underage access. If phksy becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted to the extent permitted by law, and the matter will be reported to PAGCOR as required.

If you are a parent or guardian and believe that a minor has registered a phksy account or provided personal data to phksy, please contact our Data Protection Officer immediately using the contact details in Section 13.

phksy may update this Privacy Policy from time to time to reflect changes in our data practices, new phksy services, or updates to Philippine privacy law and NPC regulations. When material changes are made, phksy will notify registered players via the email address on file and/or through a prominent notice on phksy.net. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent update.

Your continued use of the phksy platform after the effective date of any update to this Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree with the updated policy, you should cease using phksy and may request account closure in accordance with our Terms & Conditions.

phksy encourages you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

phksy has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phksy, please contact our DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe phksy has violated your privacy rights under RA 10173. phksy encourages players to contact us first so we can attempt to resolve any concerns promptly and fairly.