skyph Privacy Policy

At skyph, we understand that your personal data is important to you, and we take our responsibility as a data controller seriously. This Policy applies to all personal information collected through the skyph website, mobile platform, customer support channels, and any other touchpoints where you interact with skyph.

By registering an account, making a deposit, or otherwise using the skyph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the skyph platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

skyph acts as the data controller for all personal information collected through the platform. As data controller, skyph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 and all other applicable Philippine laws and regulations.

skyph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact our DPO directly using the contact details provided in Section 14 of this Policy.

skyph collects the following categories of personal data from players and platform visitors:

skyph does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations.

skyph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the skyph platform, including IP addresses, device identifiers, browser information, and session activity logs via cookies and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers, fraud screening data from payment processors, and publicly available information used to verify your identity or comply with anti-money laundering obligations.
• Payment providers: Transaction data shared by GCash, PayMaya, BDO, BPI, Metrobank, and other payment partners when you make deposits or request withdrawals.

skyph uses your personal data for the following purposes:

• Account management: Creating and maintaining your skyph account, verifying your identity, and managing your player profile.
• Platform operation: Processing bets, managing your wallet balance, crediting winnings, and providing access to all games and features on the skyph platform.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method, and maintaining accurate financial records.
• Regulatory compliance: Fulfilling our obligations under the Data Privacy Act of 2012, Anti-Money Laundering Act (RA 9160), and applicable PAGCOR regulations, including mandatory reporting of suspicious transactions.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the platform.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and providing appropriate interventions, tools, and support.
• Customer support: Responding to your inquiries, resolving disputes, and providing assistance through our live chat and email support channels.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may opt out at any time.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve the skyph platform, optimize game performance, and enhance the overall player experience.

Under the Data Privacy Act of 2012, skyph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to when registering your account, including operating your account, processing payments, and providing gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC and AML obligations, PAGCOR regulatory requirements, and mandatory reporting duties.
• Legitimate interests: Processing necessary for skyph's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, particularly for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

skyph does not sell your personal data to any third party. We may share your personal data with the following categories of recipients only where necessary and in accordance with this Policy:

• Payment service providers: GCash, PayMaya, BDO, BPI, Metrobank, and other payment partners, solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services used to confirm your identity and age as part of our regulatory compliance obligations.
• Fraud prevention and security services: Specialist providers that assist skyph in detecting and preventing fraudulent activity, money laundering, and other illegal conduct.
• Game content providers: Third-party game studios and live casino operators whose games are available on the skyph platform. These providers may receive limited technical data necessary to deliver their games.
• Regulatory and law enforcement authorities: The National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or court order.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by skyph, subject to strict confidentiality obligations.

The skyph platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze platform usage. The following types of cookies are used:

• Essential cookies: Strictly necessary for the platform to function, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect anonymized data about how players use the skyph platform, helping us identify areas for improvement. This data is aggregated and does not identify individual users.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings or by contacting our support team.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the skyph platform.

skyph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with AML record-keeping requirements under RA 9160.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by a regulatory investigation or legal proceeding.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus an additional one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with skyph's data disposal procedures.

skyph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the skyph platform;
• AES-256 encryption for sensitive data stored in our databases;
• Multi-factor authentication requirements for account access and administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Role-based access controls ensuring that only authorized personnel can access personal data, on a strict need-to-know basis;
• 24/7 security monitoring and intrusion detection systems;
• Regular staff training on data protection and information security best practices.

While skyph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying skyph immediately if you suspect any unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by skyph:

• Right to be informed: The right to know what personal data skyph collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data skyph holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by skyph.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to skyph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. skyph will respond to all data rights requests within fifteen (15) business days of receipt. We may need to verify your identity before processing your request.

The skyph platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. skyph does not knowingly collect personal data from individuals under the age of 21.

If skyph discovers that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all funds will be returned to the verified payment source, and all personal data associated with the account will be deleted as soon as legally permissible.

If you believe that a minor has registered an account on the skyph platform, please contact our support team immediately so that we can take appropriate action.

skyph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, skyph will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy will always be available at https://skyph.app/privacy-policy. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the skyph platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact skyph's Data Protection Officer through any of the following channels:

• Live Chat: Available 24/7 through the skyph platform — the fastest way to reach us
• Email: [email protected]
• DPO Email: [email protected]
• Mailing Address: Data Protection Officer, skyph Operations, Makati City, Metro Manila, Philippines

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data rights have been violated. The NPC can be reached through their official government website.