skyph Privacy Policy

1 Introduction

1.1 skyph is committed to protecting the privacy and personal data of all players who use the skyph online casino platform. We understand that trust is the foundation of any long-term relationship, and that trust begins with being transparent about how we handle your information.

1.2 This Policy applies to all personal data collected through the skyph website at skyph.vip, the skyph mobile platform, customer support communications, and any other skyph service or channel through which personal data may be submitted.

1.3 skyph processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

2 Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, skyph is the personal information controller responsible for your personal data collected through the skyph platform.

2.2 skyph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

3.1 skyph collects the following categories of personal data:

3.2 skyph does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for regulatory compliance, such as government-issued ID details for KYC purposes.

4 How We Collect Your Data

4.1 skyph collects personal data through the following means:

• Direct submission — information you provide when registering a skyph account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies — data collected automatically when you access the skyph platform, including cookies, web beacons, server logs, and similar tracking technologies;
• Third-party sources — identity verification data from KYC service providers, fraud prevention data from security partners, and payment data from payment processors such as GCash and Maya.

5 How We Use Your Personal Data

5.1 skyph uses your personal data for the following purposes:

• To create, manage, and maintain your skyph account;
• To verify your identity and age in compliance with PAGCOR regulations and the Data Privacy Act;
• To process deposits, withdrawals, and other financial transactions;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• To provide customer support and respond to your enquiries;
• To send you transactional communications, including account notifications, security alerts, and promotional offers (where you have opted in);
• To monitor gaming activity for responsible gaming purposes and to enforce self-exclusion requests;
• To comply with applicable laws, regulations, and orders from competent authorities including PAGCOR and the NPC;
• To improve the skyph platform through analytics and user experience research.

6 Legal Basis for Processing

6.1 skyph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform the contract between you and skyph (i.e., providing the gaming platform and related services);
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements and anti-money laundering obligations;
• Legitimate interests — processing necessary for skyph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent — processing based on your freely given, specific, and informed consent, such as for marketing communications.

7 Data Sharing & Disclosure

7.1 skyph does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors — GCash, Maya, and partner banks for the processing of deposits and withdrawals;
• KYC and identity verification providers — third-party services that assist skyph in verifying player identities and ages;
• Fraud prevention and security partners — services that help skyph detect and prevent fraudulent activity;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities, where required by law;
• IT and platform service providers — cloud hosting, data storage, and technical infrastructure providers operating under strict data processing agreements.

7.2 All third-party service providers engaged by skyph are required to process personal data only on skyph's instructions and in accordance with applicable data privacy laws.

8 Data Retention

8.1 skyph retains your personal data for as long as your skyph account is active and for such additional periods as are required by applicable law or regulation. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC requirements;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Customer support records — retained for three (3) years from the date of the interaction;
• Technical and usage data — retained for up to twelve (12) months, unless required for longer periods for security or legal purposes.

8.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with skyph's data disposal procedures.

9 Data Security

9.1 skyph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing;
• Multi-factor authentication for administrative access to skyph systems;
• Incident response procedures for detecting and responding to data breaches.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, skyph will notify the National Privacy Commission and affected players in accordance with the timeframes prescribed by the Data Privacy Act and NPC Circular No. 16-03.

10 Cookies & Tracking Technologies

10.1 skyph uses cookies and similar technologies (such as web beacons and local storage) on the skyph platform. The following types of cookies are used:

• Strictly necessary cookies — essential for the operation of the skyph platform, including maintaining your login session and security tokens. These cannot be disabled.
• Functional cookies — used to remember your preferences, such as language settings and display options.
• Analytics cookies — used to collect aggregated, anonymised data about how players use the skyph platform, helping us improve performance and user experience.

10.2 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the skyph platform.

10.3 skyph does not use cookies to track your activity across unrelated third-party websites or to build advertising profiles.

11 Your Data Subject Rights

11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by skyph:

11.2 To exercise any of the above rights, please submit a written request to skyph's Data Protection Officer at the contact details provided in Section 14. skyph will respond within fifteen (15) days of receiving a verifiable request, in accordance with NPC guidelines.

12 Children's Privacy

12.1 The skyph platform is strictly intended for persons aged 21 years and above. skyph does not knowingly collect personal data from individuals under the age of 21. If skyph becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be closed.

12.2 If you believe that a minor has registered a skyph account or submitted personal data to skyph, please contact us immediately at [email protected] so that we can take appropriate action.

13 Changes to This Privacy Policy

13.1 skyph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. Material changes will be communicated to registered players via email or a prominent notice on the skyph platform.

13.2 The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of the skyph platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

14 Contact & Data Protection Officer

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by skyph, please contact our Data Protection Officer:

14.2 If you are not satisfied with skyph's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through its official channels.