phsk Privacy Policy

phsk operates as an online gaming platform serving Filipino players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City. As a platform handling real-money transactions in Philippine Peso (PHP / ₱), phsk is required by Philippine law and applicable gaming regulations to collect and process personal data as part of its Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations.

phsk acts as the Personal Information Controller (PIC) as defined under RA 10173, meaning we determine the purposes and means by which your personal data is processed. Where phsk engages third-party service providers to process data on our behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to uphold equivalent data protection standards.

This Policy covers all personal data you provide to phsk directly, data generated through your use of the phsk platform, and data received from third-party sources such as payment processors and identity verification services. If you have any questions about how phsk handles your data, please refer to Section 14 for contact details.

phsk collects several categories of personal data depending on the nature of your interaction with the platform. The following table summarises the main data categories phsk processes:

phsk collects personal data through the following means:

• Direct submission: Data you provide when registering your phsk account, completing KYC verification, making deposits or withdrawal requests, contacting phsk support, or responding to phsk surveys and promotions.
• Automated collection: Data collected automatically when you access the phsk platform, including IP address, device identifiers, browser information, cookies, and session activity logs. This data is collected via server logs, analytics tools, and platform monitoring systems.
• Payment processors: When you transact via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, 7-Eleven CLiQQ, or other supported payment channels, phsk receives transaction confirmation data from those providers. phsk does not store full payment credentials — only masked references sufficient for reconciliation and AML compliance.
• KYC verification partners: phsk works with licensed identity verification services to validate government-issued IDs, match selfies to ID photos, and perform liveness checks. These partners process your identity data on phsk's behalf under strict data processing agreements.
• Third-party data sources: phsk may receive supplementary data from fraud detection services, credit risk screening providers, and regulatory watchlists, used solely for compliance and security purposes.

phsk processes your personal data for the following purposes:

• Account creation and management: To register your phsk account, verify your identity, maintain your account profile, and provide you access to phsk services.
• KYC and age verification: To confirm you are at least 21 years of age and that your identity documents are valid, as required under Philippine gaming regulations and responsible gaming obligations.
• Transaction processing: To process deposits and withdrawals in Philippine Peso via your chosen payment channel, reconcile transactions, and maintain accurate financial records.
• Regulatory and AML compliance: To monitor transactions for suspicious activity, maintain records required by PAGCOR and Philippine AML regulations, and respond to lawful requests from regulatory or law enforcement authorities.
• Fraud prevention and security: To detect and prevent fraudulent account activity, bonus abuse, identity theft, and unauthorized access to phsk accounts.
• Platform delivery and improvement: To operate, maintain, and improve the phsk platform, personalise your gaming experience, and develop new features based on aggregated usage data.
• Customer support: To respond to your support queries, resolve disputes, and maintain records of support interactions for quality and compliance purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and phsk platform updates — but only if you have opted in to receive marketing communications. You may opt out at any time via your phsk account settings.
• Responsible gaming: To monitor gaming behaviour patterns that may indicate problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion, as described in the phsk Responsible Gaming page.

Under the Philippine Data Privacy Act of 2012, phsk processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the phsk Terms and Conditions you agreed to at registration — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with Philippine laws and regulations applicable to phsk, including AML obligations, PAGCOR reporting requirements, and data retention mandates under RA 10173 and related legislation.
• Legitimate interests: Processing carried out to protect phsk's legitimate business interests, including fraud prevention, platform security, and abuse detection, where those interests are not overridden by your rights and interests as a data subject.
• Consent: Processing carried out based on your freely given, specific, and informed consent — including the sending of marketing communications, the use of non-essential cookies, and the sharing of data for promotional purposes. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

phsk does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. phsk shares your data only in the following circumstances and only to the minimum extent necessary:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, 7-Eleven CLiQQ, Coins.ph, GrabPay, and other integrated payment partners receive transaction data necessary to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and is independently licensed in the Philippines.
• KYC and identity verification providers: Licensed third-party identity verification partners receive your ID documents and selfie photos solely for the purpose of verifying your identity on phsk's behalf. These providers are bound by data processing agreements prohibiting independent use of your data.
• Fraud detection and AML screening services: phsk uses third-party fraud prevention and AML screening tools that may process your identity and transaction data to detect and prevent financial crime. These services operate as Personal Information Processors under phsk's instruction.
• Regulatory and law enforcement authorities: phsk will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement agencies, or other competent authorities when required by law, court order, or lawful regulatory directive.
• Gaming software providers: Game providers whose titles are hosted on phsk may receive pseudonymised session data (player ID, bet amounts, game results) for game integrity, audit, and technical support purposes. They do not receive your full identity data.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of phsk's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

phsk uses cookies and similar tracking technologies on the phsk platform to deliver a functional, secure, and personalised gaming experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the phsk platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without preventing platform access.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations across sessions.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the phsk platform, which features are used most, and where users experience friction. This data is used in aggregate to improve platform performance. Analytics cookies are only set with your consent.
• Security and fraud detection cookies: Used to identify unusual access patterns, detect bots, and protect your phsk account from unauthorized access. These operate continuously as part of phsk's security infrastructure.

You may manage non-essential cookie preferences through your browser settings or via the phsk cookie consent manager displayed on your first visit to the platform. Disabling non-essential cookies will not affect your ability to play on phsk or process transactions.

phsk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply as a general guide:

After the applicable retention period expires, phsk will securely delete or anonymise your personal data in a manner that prevents re-identification. Where full deletion is not technically feasible (e.g., data stored in encrypted backup archives), phsk will isolate and protect that data from further active processing until deletion is possible.

phsk implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS/SSL encryption: All data transmitted between your device and phsk servers is encrypted using industry-standard Transport Layer Security (TLS). The padlock icon in your browser confirms this encryption is active during your phsk session.
• Encryption at rest: Sensitive Personal Information, including KYC documents and government ID data, is encrypted at rest using AES-256 encryption on phsk's secure storage infrastructure.
• Access controls: Personal data is accessible only to phsk personnel and authorised processors with a verified operational need. Role-based access controls and audit logs ensure that access to sensitive data is tracked and reviewable.
• Two-factor authentication (2FA): phsk offers SMS OTP-based 2FA to all players and requires 2FA for high-value withdrawal requests. phsk staff accessing internal systems containing player data are required to use 2FA.
• Security monitoring: phsk operates continuous automated monitoring for anomalous access patterns, potential data breaches, and suspicious platform activity. Incident response procedures are in place to address security events promptly.
• Data breach notification: In the event of a personal data breach that poses a risk to your rights and freedoms, phsk will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected players without undue delay, as required under RA 10173.

While phsk takes all reasonable and practicable steps to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phsk account credentials and for notifying phsk support immediately if you suspect unauthorised access to your account.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phsk. To exercise any of these rights, contact phsk's Data Protection Officer using the details in Section 14.

• Right to be informed: You have the right to be informed of how phsk collects and processes your personal data — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data phsk holds about you, along with information about how it is being used. phsk will respond to verified access requests within 30 days.
• Right to rectification: If any personal data phsk holds about you is inaccurate or incomplete, you have the right to request correction. You may update certain profile data directly through your phsk account settings.
• Right to erasure: You may request that phsk delete your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent (and no other legal basis applies), or where phsk has processed data unlawfully. Note that erasure requests may be limited where data must be retained to comply with legal obligations (see Section 8).
• Right to object: You have the right to object to phsk processing your personal data for direct marketing purposes at any time. You may also object to processing based on phsk's legitimate interests on grounds relating to your particular situation.
• Right to data portability: You may request that phsk provide your personal data in a structured, commonly used, and machine-readable format, to the extent technically feasible.
• Right to lodge a complaint: If you believe phsk has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

phsk's services are strictly for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. phsk does not knowingly collect personal data from persons under 21 years of age.

As part of the registration and KYC process, phsk verifies the age of all players using government-issued identification documents. If phsk discovers that a player has provided false age information and is in fact under 21 years of age, phsk will immediately:

• Suspend and permanently close the player's account.
• Void all bets and gaming activity conducted on the account.
• Return the player's net deposits (after deducting any bonus amounts) via the original payment method.
• Delete or securely destroy all personal data collected in connection with the underage account, subject to any mandatory retention requirements under applicable law.

phsk urges parents and guardians in the Philippines to be aware of online gambling platforms and to use appropriate parental controls on devices accessible to minors. If you believe a minor has registered a phsk account, please contact phsk support immediately.

phsk's primary data processing infrastructure is located within or closely aligned to the Asia-Pacific region. However, certain service providers engaged by phsk — including KYC verification platforms, fraud detection services, and cloud infrastructure providers — may process data in jurisdictions outside the Philippines.

Where phsk transfers personal data outside the Philippines, it does so only:

• Where the receiving country provides an adequate level of protection for personal data as determined by the National Privacy Commission, or
• Where phsk has put in place appropriate safeguards — such as standard contractual data processing clauses — that ensure your data receives equivalent protection to that guaranteed under RA 10173, or
• Where the transfer is necessary for the performance of a contract between you and phsk (e.g., processing a payment via an international payment gateway).

phsk will not transfer your personal data to jurisdictions that are known to provide inadequate data protection, and will not transfer data to third parties in other countries for independent commercial use.

phsk reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, phsk's data processing practices, or the services phsk offers. The "Last Updated" date at the top of this Policy will be revised whenever material changes are made.

When phsk makes material changes to this Policy — changes that affect how your data is used in a way that could impact your rights — phsk will notify you by:

• Sending a notification to your registered phsk email address or Philippine mobile number, or
• Displaying a prominent notice on the phsk platform upon your next login.

Your continued use of the phsk platform after the effective date of any Policy update constitutes your acknowledgment of the revised Policy. If you do not agree with the updated Policy, please stop using phsk and contact support to request account closure and data erasure (subject to mandatory retention obligations under Section 8).

phsk has designated a Data Protection Officer (DPO) in accordance with the requirements of RA 10173. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a data privacy concern, please contact the phsk DPO through the following channels:

• Email (plain text — not a link): support at phsk.pro — please include "DATA PRIVACY REQUEST" in your subject line.
• Live Chat: Available on the phsk platform 24 hours a day, 7 days a week. For data privacy matters, request to be connected to the compliance team.
• Response time: phsk commits to acknowledging all data privacy requests within 48 hours and providing a substantive response within 30 calendar days.

If you are not satisfied with phsk's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC's official contact information is publicly available on their website.

This Privacy Policy was last updated on January 1, 2026 and is effective immediately for all phsk account holders and platform visitors. phsk reserves all rights not expressly granted herein.