phksy Privacy Policy

1.1 This Privacy Policy is issued by phksy ("phksy," "we," "our," or "us"), the operator of the online gaming platform accessible at phksy.vip. phksy operates the Platform for Filipino players and is the data controller responsible for personal data collected and processed in connection with your use of the Platform.

1.2 References to "you," "your," or "player" in this Privacy Policy mean any individual who accesses, browses, registers an account on, or otherwise interacts with the phksy Platform.

1.3 This Privacy Policy should be read together with the phksy Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform. By creating a phksy account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2.1 This Privacy Policy applies to all personal data collected by phksy through: the phksy website and mobile interface; the account registration and KYC verification process; deposits, withdrawals, and other financial transactions; gameplay activity across all games on the Platform; customer support interactions; marketing communications; and the phksy Loyalty Program.

2.2 This Policy does not apply to third-party websites, platforms, or services that may be linked to or referenced from phksy but that are operated independently. phksy is not responsible for the privacy practices of third-party providers, including game providers whose titles appear in the phksy lobby. Players should review the privacy policies of those third parties separately.

phksy collects the following categories of personal data from players. We collect only what is necessary for the stated purposes:

3.1 phksy does not intentionally collect special categories of sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where a player voluntarily provides such information in the context of a responsible gaming request or a customer support interaction.

phksy uses collected personal data for the following purposes:

To create and maintain your phksy account; process deposits and withdrawals; provide access to games, promotions, and the Loyalty Program; and deliver customer support in Tagalog and English. This is the primary purpose for which most personal data is collected and is necessary for the performance of the contract between phksy and the player.

To verify your identity, confirm age eligibility (21+), and comply with Know Your Customer (KYC) obligations. This includes reviewing government-issued identification documents and, where required, conducting source-of-funds assessments for players with elevated transaction volumes.

To detect, investigate, and prevent fraud, money laundering, terrorist financing, and other financial crimes. phksy is obligated under applicable Philippine law — including the Anti-Money Laundering Act (Republic Act No. 9160, as amended) — to conduct transaction monitoring and report suspicious activity to relevant authorities.

To enforce player-set responsible gaming tools (deposit limits, session caps, cooling-off periods, self-exclusion); to identify patterns of play that may indicate problem gambling; and to contact players proactively where the Platform detects potentially harmful gaming behavior, as part of phksy's duty of care to Filipino players.

To maintain the security of the phksy Platform and player accounts; detect and prevent unauthorized access; investigate and respond to security incidents; and enforce the phksy Terms & Conditions, including action against prohibited conduct such as multi-accounting and bot use.

Where you have provided consent, to send you promotional communications about phksy bonuses, new games, loyalty rewards, and special events tailored to Filipino players' interests. You may withdraw consent for marketing communications at any time through your account settings or by contacting phksy support.

To analyze gameplay patterns, Platform usage trends, and player behavior in aggregate (non-identifiable) form for the purpose of improving Platform features, game selection, and user experience. phksy may use anonymized data for internal reporting and product development.

To comply with applicable Philippine laws, regulations, court orders, and directions from regulatory bodies with jurisdiction over gaming, data privacy, and financial services. phksy may be required by law to disclose personal data to government authorities and will do so in accordance with its legal obligations.

5.1 phksy processes personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to enter into or perform the contract with the player — including account creation, deposit processing, game access, and withdrawal of winnings.
• Legal Obligation: Processing required to comply with applicable Philippine laws — including KYC obligations, AML reporting, and data security requirements.
• Legitimate Interest: Processing carried out for phksy's legitimate business interests — including fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by the player's fundamental rights.
• Consent: Processing based on a player's freely given, specific, informed, and unambiguous consent — principally for marketing communications. Consent may be withdrawn at any time without detriment to the player's account status or service access.

5.2 Where processing is based on legitimate interest, phksy has conducted an assessment to confirm that the legitimate interest pursued is proportionate and does not unduly prejudice player privacy rights.

6.1 phksy uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that enable the Platform to function correctly, remember your preferences, and analyze usage patterns.

6.2 phksy uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to operate — including session authentication, account security, and payment processing. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, game lobby layout, and bet history display options — to personalize your phksy experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate and use the phksy Platform. This information helps phksy improve the player experience without identifying individual players.
• Marketing Cookies: Used to deliver promotional content relevant to your interests, where you have provided consent. These cookies may track your browsing activity across sessions.

6.3 You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use some features of the phksy Platform. Marketing cookies may be opted out of through your phksy account settings.

7.1 phksy does not sell, rent, or trade personal data to third parties for their own commercial purposes. Data is shared with third parties only in the following circumstances and only to the extent necessary:

• Payment Processors: GCash, PayMaya, BDO, BPI, and Metrobank receive the financial data necessary to process deposits and withdrawals on your phksy account. These providers are subject to their own regulatory obligations and privacy standards.
• Game Providers: Third-party game software providers — including the studios whose titles appear in the phksy lobby — may receive technical session data necessary to deliver their games to your device. Game providers do not receive your full identity or financial details.
• KYC and Identity Verification Partners: phksy engages licensed identity verification services to assist with KYC document review. These partners process identification data under strict data processing agreements and are prohibited from using it for any purpose beyond identity verification for phksy.
• Technology and Infrastructure Providers: Cloud hosting, data security, analytics, and platform infrastructure providers may process certain technical and operational data as part of delivering the phksy Platform. All such providers are subject to confidentiality and data processing agreements.
• Regulatory Authorities and Law Enforcement: phksy may disclose personal data to the National Privacy Commission, relevant gaming regulators, the Anti-Money Laundering Council (AMLC), the Philippine National Police, and other competent authorities where required by law, court order, or regulatory direction.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by phksy may access personal data to the extent necessary to provide professional services, subject to professional confidentiality obligations.

7.2 In all cases of third-party data sharing, phksy implements contractual safeguards — including data processing agreements with binding data protection obligations — to ensure that your personal data is handled appropriately by recipient parties.

8.1 phksy implements technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS 1.3) and 256-bit SSL encryption for all data in transit between your device and phksy servers;
• Encryption at rest for sensitive stored data, including financial records and KYC documents;
• Industry-standard password hashing (bcrypt) — phksy never stores account passwords in plaintext;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Login anomaly detection and account lockout mechanisms to prevent unauthorized account access;
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure;
• Staff data privacy and security training for all personnel with access to player data.

8.2 While phksy maintains robust security measures, no online platform can guarantee absolute security against all threats. In the event of a personal data breach that poses a risk to your rights and freedoms, phksy will notify affected players and relevant regulatory authorities in accordance with applicable Philippine law.

8.3 Players are responsible for maintaining the security of their own account credentials. phksy recommends enabling two-factor authentication (2FA) and using a strong, unique password for your phksy account. phksy will never contact you to request your account password.

9.1 phksy retains personal data for as long as necessary to fulfill the purpose for which it was collected, subject to the following general retention periods:

• Account and Identity Data: Retained for the duration of the player's active account and for a period of five (5) years following account closure, in accordance with applicable record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, as required under Philippine AML legislation;
• KYC Documents: Retained for five (5) years following account closure or the last significant transaction, whichever is later;
• Gaming Activity Data: Retained for the duration of the account and for two (2) years following account closure, unless retention for longer is required for regulatory or legal proceedings;
• Responsible Gaming Records: Self-exclusion records are retained indefinitely to prevent re-registration by excluded players. Other responsible gaming tool records are retained for five (5) years;
• Marketing Preferences and Consent Records: Retained for three (3) years following the last marketing communication or withdrawal of consent, whichever is later.

9.2 At the end of applicable retention periods, personal data is securely deleted or anonymized in accordance with phksy's data destruction procedures.

10.1 Under the Philippine Data Privacy Act of 2012, Filipino players have the following rights in relation to their personal data held by phksy. These rights may be exercised by contacting phksy support via in-platform live chat after signing in, or via email to the address set out in Section 16:

10.2 phksy will respond to data rights requests within thirty (30) calendar days. Where a request is complex or phksy receives a high volume of requests, this period may be extended by a further thirty (30) days with prior notice to you.

10.3 phksy may decline a data rights request where fulfilling it would conflict with phksy's legal obligations — for example, where deletion of AML transaction records is requested before the legally required retention period has elapsed. phksy will explain the grounds for any declined request.

11.1 phksy's services are strictly available to individuals aged 21 years and above. phksy does not knowingly collect personal data from anyone under the age of 21. The age of 21 applies as the minimum gaming age for casino-style online gambling in the Philippines under applicable regulations.

11.2 All phksy account registrations require submission of date of birth, and all accounts are subject to KYC age verification before withdrawal privileges are activated. Where phksy discovers that an account has been created or used by an individual under 21 years of age, the account will be immediately suspended, all associated data will be handled in accordance with applicable legal requirements, and deposits will be returned to the verified depositor.

11.3 If you believe that phksy has inadvertently collected personal data from a minor, please contact phksy support immediately so the matter can be investigated and remedied promptly.

12.1 Data related to a player's responsible gaming tools — including deposit limits, session time caps, cooling-off periods, and self-exclusion — is treated as sensitive operational data by phksy. This data is used exclusively for the purposes of enforcing responsible gaming protections and is not used for marketing profiling.

12.2 Self-exclusion records are retained indefinitely to ensure that excluded players cannot circumvent the exclusion by opening new accounts. Where required by applicable Philippine gaming regulations, phksy may share self-exclusion status with relevant regulatory bodies or third-party self-exclusion schemes.

12.3 Gaming activity data — including loss patterns, session frequency, and bet escalation — may be analyzed internally for the purpose of identifying players who may benefit from proactive responsible gaming interventions. phksy may contact players identified through this analysis to offer support information. This analysis is conducted to fulfill phksy's duty of care and is not used to profile players for marketing purposes.

12.4 For more information about phksy's responsible gaming tools and resources, please visit the Responsible Gaming page.

13.1 phksy may send marketing communications about bonuses, promotions, new games, Loyalty Program updates, and phksy platform features to players who have opted in to receive such communications during registration or via their account settings. Marketing communications are delivered via email, SMS to your registered Philippine mobile number, and in-platform notifications.

13.2 You may opt out of marketing communications at any time by: updating your communication preferences in your phksy account settings; clicking the unsubscribe link in any marketing email received from phksy; or contacting phksy support via live chat and requesting to be removed from marketing lists.

13.3 Opting out of marketing communications does not affect transactional communications — phksy will continue to send essential account communications such as deposit confirmations, withdrawal notifications, security alerts, and Terms update notices regardless of your marketing communication preferences.

13.4 phksy does not send unsolicited marketing communications to individuals who have not opted in. If you receive a marketing communication from a source claiming to be phksy that you did not opt in to, please report it to phksy support immediately, as it may be fraudulent.

14.1 In the course of operating the phksy Platform, personal data may be processed in countries outside the Philippines — for example, where cloud infrastructure, game provider servers, or certain technology partners are based in other jurisdictions.

14.2 Where personal data is transferred outside the Philippines, phksy ensures that appropriate safeguards are in place to protect the data in transit and at the destination. These safeguards include: contractual obligations in data processing agreements requiring recipient parties to maintain data protection standards equivalent to those applicable under Philippine law; selection of service providers with internationally recognized privacy and security certifications; and, where applicable, reliance on jurisdictions recognized by the National Privacy Commission as providing adequate data protection.

14.3 By using phksy, you acknowledge that your personal data may be transferred to and processed in other jurisdictions as described in this Section, subject to the safeguards set out above.

15.1 phksy reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made — particularly changes that affect how your personal data is used or shared — phksy will notify registered players via email or in-platform notification before the changes take effect, with reasonable advance notice.

15.2 The updated Privacy Policy will be published on the phksy Platform with a revised "Last Updated" date. We encourage you to review this page periodically to stay informed about how phksy handles your personal data. Your continued use of the phksy Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

16.1 If you have questions about this Privacy Policy, wish to exercise any of your data rights under Section 10, or have a concern about how phksy handles your personal data, please contact the phksy Data Privacy team via the in-platform live chat (available after signing in) or via the email address displayed below:

16.2 phksy aims to respond to all privacy-related inquiries and data rights requests within thirty (30) calendar days. If you are not satisfied with phksy's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through the NPC's official channels.