Privacy Policy
How skyph Protects Your Personal Data

This Privacy Policy ("Policy") describes how skyph ("skyph," "we," "us," "our") collects, uses, stores, shares, and protects personal information submitted by users ("Player," "you") in connection with the online gaming and sports betting platform operated at skyph.one and any associated mobile applications (collectively, the "Platform").

skyph operates the Platform for Filipino players across the Philippines — Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. Because our player base is primarily Philippine-based, this Policy is written with the Republic Act No. 10173 (Data Privacy Act of 2012) and National Privacy Commission guidelines as its primary regulatory framework.

By registering for a skyph account, accessing the Platform, or transacting through supported Philippine payment channels including GCash, Maya, BPI, BDO, and Metrobank, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy applies exclusively to personal data collected and processed by skyph. It does not govern the data practices of third-party service providers, game developers, or payment processors — those are subject to their own privacy policies.

For the purposes of the Data Privacy Act of 2012 and this Policy, skyph is the personal information controller responsible for the personal data collected through the Platform. skyph determines the purposes and means of processing personal data submitted by players in the Philippines.

skyph has appointed a designated data privacy point of contact to oversee compliance with applicable data protection obligations. Inquiries relating to this Policy, data subject rights requests, and privacy complaints may be directed to the skyph support team via the contact details provided in Section 15 of this Policy.

skyph collects the following categories of personal data from players. We collect only what is necessary for the stated purposes — we do not collect personal data beyond what is reasonably required to operate the Platform and meet our regulatory obligations.

3.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification — players must be 21 years of age or older);
• Philippine mobile number;
• Email address;
• Username and password (stored in encrypted form);
• Preferred language and communication preferences.

3.2 Identity Verification (KYC) Data

• Government-issued identification document (e.g., PhilSys National ID, Philippine Passport, LTO Driver's License, UMID, Voter's ID, SSS/GSIS/Pag-IBIG ID);
• Selfie or facial image for document matching, where required;
• Proof of address documentation;
• Proof of payment method ownership for GCash, Maya, or bank accounts.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment channel details (GCash account reference, bank account details, etc.);
• Transaction history and wallet balance records;
• Wagering history including bets placed, games played, and outcomes;
• Bonus and promotion redemption records.

3.4 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, login timestamps, and page interaction data;
• Game session logs and error reports.

3.5 Communications Data

• Live chat transcripts and support ticket records;
• Email correspondence with the skyph team;
• Voluntary feedback and survey responses.

skyph collects personal data through the following channels and methods:

• Direct Submission: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or participate in promotions;
• Automated Collection: Technical data including IP addresses, device information, and session data is collected automatically when you access and use the Platform;
• Payment Providers: Transaction reference data and confirmation details are received from GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment channels when you initiate a transaction;
• Third-Party Verification Providers: Identity verification and document authentication data may be processed through certified third-party KYC service providers who are bound by confidentiality and data processing agreements with skyph;
• Cookies and Tracking Technologies: Usage and preference data is collected through cookies and similar technologies as described in Section 8 of this Policy.

skyph uses collected personal data for the following specific purposes:

5.1 Platform Operations

• Creating and managing your skyph account;
• Processing deposits and withdrawals through GCash, Maya, and other Philippine payment channels;
• Verifying your identity and age in compliance with PAGCOR requirements and the 21+ age restriction;
• Providing access to games, betting markets, promotions, and account features.

5.2 Regulatory & Legal Compliance

• Fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable Philippine law;
• Responding to lawful requests from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other Philippine regulatory authorities;
• Maintaining transaction records as required by applicable gaming and financial regulations;
• Enforcing the skyph Terms & Conditions and detecting prohibited activities.

5.3 Security & Fraud Prevention

• Detecting and preventing fraudulent transactions, bonus abuse, account sharing, and unauthorized access;
• Monitoring for unusual account activity and applying security measures in response;
• Operating responsible gaming tools including deposit limits, loss limits, cooling-off periods, and self-exclusion.

5.4 Customer Support

• Responding to your queries, complaints, and requests through live chat, email, and other support channels;
• Maintaining support records to ensure consistent and accurate assistance.

5.5 Platform Improvement

• Analysing aggregated usage data to improve the platform, game selection, and user experience for Filipino players;
• Conducting internal audits, quality assurance, and performance testing.

5.6 Marketing Communications

• Sending promotional offers, bonus notifications, and game updates where you have provided consent or where permitted under applicable law;
• You may opt out of marketing communications at any time through your account settings or by contacting skyph support.

skyph processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Consent: Processing carried out with your express agreement, including marketing communications and certain optional data collection;
• Contract Performance: Processing necessary to fulfil skyph's obligations under the Player Agreement (Terms & Conditions), including account management, payment processing, and game access;
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including gaming regulations, AML obligations, and NPC requirements;
• Legitimate Interests: Processing necessary for skyph's legitimate business interests, including fraud detection, security operations, platform improvement, and responsible gaming enforcement, where these interests do not override your rights and freedoms.

skyph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary:

• Payment Processors: Transaction data shared with GCash, Maya, BPI, BDO, Metrobank, InstaPay, GrabPay, and other Philippine payment service providers to process your deposits and withdrawals;
• Game Providers: Limited technical data (such as session tokens and game session identifiers) shared with certified game providers (e.g., JILI Games, Pragmatic Play, PG Soft) to deliver game content;
• Identity Verification Services: KYC documentation shared with certified identity verification providers who process data under strict confidentiality agreements;
• Regulatory Authorities: Data disclosed to PAGCOR, the AMLC, the NPC, law enforcement agencies, or other Philippine government bodies when required by law, court order, or official regulatory request;
• Technology Service Providers: Data processed by cloud hosting, security, customer support, and analytics service providers who are bound by data processing agreements that restrict them from using the data for any purpose other than providing services to skyph;
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to the same data protection obligations as described in this Policy. Affected players will be notified in advance where practicable.

skyph uses cookies and similar tracking technologies on the Platform to enhance functionality, maintain session continuity, and collect usage analytics. The following types of cookies are used:

Essential cookies are necessary for the Platform to function and cannot be disabled without severely impairing your ability to use skyph. Functional and analytics cookies may be disabled through your browser settings, though doing so may affect your experience on the Platform.

skyph does not use cookies to display third-party advertising on the Platform.

skyph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with Philippine financial record-keeping requirements;
• KYC / Identity Documentation: Retained for a minimum of five (5) years from the date of last transaction, as required by AML regulations and PAGCOR compliance standards;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Support Communications: Retained for up to three (3) years from the date of the last communication, or longer where required for dispute resolution;
• Technical & Usage Logs: Typically retained for 12 to 24 months depending on the nature of the log data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents its reconstruction or re-identification.

skyph implements a layered approach to data security that is designed to protect your personal information against unauthorized access, loss, alteration, or disclosure. The security measures in place include:

• Encryption in Transit: All data transmitted between your device and skyph's servers is protected using TLS 1.3 encryption. The HTTPS padlock on your browser confirms this connection is active;
• Encryption at Rest: Sensitive personal data including passwords and payment references are stored in encrypted form using industry-standard encryption algorithms;
• Access Controls: Access to personal data is restricted to authorized skyph personnel on a need-to-know basis. All staff with access to personal data are bound by confidentiality obligations;
• Two-Factor Authentication: Players are encouraged and supported to enable 2FA on their skyph accounts as an additional layer of personal account security;
• Intrusion Detection: skyph's infrastructure is monitored 24/7 using automated security monitoring systems that detect and respond to anomalous activity;
• Regular Security Audits: skyph conducts periodic security reviews and penetration testing to identify and remediate vulnerabilities.

Under the Data Privacy Act of 2012 and NPC implementing rules, you have the following rights with respect to your personal data held by skyph. To exercise any of these rights, contact skyph through the channels in Section 15.

The skyph Platform is strictly prohibited for individuals under 21 years of age, in compliance with PAGCOR regulations governing online gaming in the Philippines. skyph does not knowingly collect personal data from persons under 21.

During registration, all applicants must confirm their date of birth and agree to the 21+ age restriction. skyph enforces mandatory KYC verification, which includes documentary proof of age, before withdrawal privileges are granted to any account.

If skyph becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately closed, any wagered or deposited funds will be reviewed in accordance with applicable regulations, and the personal data will be deleted in accordance with the retention exceptions required by law.

In the course of operating the Platform, personal data may be transferred to and processed in countries or territories outside the Philippines — for example, by cloud infrastructure providers, game content servers, or identity verification partners operating internationally.

Where such cross-border transfers occur, skyph ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements that bind recipients to data protection standards consistent with the Data Privacy Act of 2012;
• Transfers only to jurisdictions that provide an adequate level of data protection, as assessed by skyph and in accordance with NPC guidance;
• Where required by NPC regulations, registration of cross-border data sharing arrangements.

By using the skyph Platform, you acknowledge and consent to the transfer of your personal data to service providers outside the Philippines where necessary for the provision of the Platform, subject to the safeguards described above.

skyph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or NPC guidance. The revised Policy will be published on this page with an updated effective date.

For material changes that significantly affect how we collect or use your personal data, skyph will endeavour to provide advance notice through the Platform, by SMS to your registered Philippine mobile number, or by email to your registered address.

Your continued use of the skyph Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request account closure through the support team.

skyph recommends reviewing this Policy periodically to stay informed of how your personal data is handled. The effective date at the top of this document indicates when the current version took effect.

For all privacy-related queries, data subject rights requests, or complaints relating to this Privacy Policy, please contact skyph through the following channels:

• Live Chat: Available 24/7 directly through your skyph account. This is the fastest channel for urgent privacy concerns, including suspected data breaches or unauthorized account access.
• Email: [email protected] — for formal privacy requests, data subject rights submissions, and written complaints. Responses are typically provided within 24 hours during standard business days and within 30 calendar days for formal data subject rights requests.

If you are not satisfied with skyph's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.