At phksy, your personal data belongs to you. This Privacy Policy explains exactly what information we collect when you use our platform, why we collect it, who we share it with, and the rights you have under Philippine law — specifically the Data Privacy Act of 2012 (Republic Act No. 10173) — to control your own data.
Under the Philippine Data Privacy Act, you hold meaningful rights over your personal information at phksy. Here's a quick overview.
This Privacy Policy is issued by phksy, the operator of the online gaming platform accessible at phksy.best. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), phksy acts as the personal information controller with respect to the data of its registered players and website visitors.
phksy holds a valid gaming licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). Our operations are subject to PAGCOR oversight, which includes obligations relating to the collection, use, and protection of player data. This Privacy Policy fulfils our obligation to be transparent about those data practices.
Data Protection Officer: phksy has appointed a Data Protection Officer (DPO) as required by the National Privacy Commission. If you have any concerns about how phksy handles your personal data, you may contact the DPO directly at privacy@phksy.best. All privacy-related requests are handled by the DPO's office within the timeframes prescribed by RA 10173.
This Privacy Policy applies to all personal data collected through the phksy website, mobile platform, customer support interactions, and any other channel through which you interact with phksy. It applies to both registered players and visitors who have not yet created an account.
phksy collects only the data that is necessary to provide its services, comply with PAGCOR regulations, and keep the platform safe for all players. The categories of data phksy collects are described in the table below.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID details | At registration & KYC verification |
| Contact Data | Mobile number, email address | At registration |
| Financial Data | GCash number, bank account details, transaction history | When you deposit or request a withdrawal |
| Account Data | Username, password hash, account balance, game history | Throughout account lifecycle |
| Technical Data | IP address, device type, browser, session logs | Each visit to phksy platform |
| Usage Data | Pages visited, games played, bets placed, time on site | Each active session |
| Communication Data | Support chat transcripts, email correspondence | When you contact phksy support |
phksy does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming support request — in which case such information is handled with heightened confidentiality.
phksy does not collect or store full credit or debit card numbers. Payment card transactions are processed through PCI DSS-compliant payment processors. phksy receives only a tokenised reference and the last four digits of the card used.
phksy uses personal data for the specific, legitimate purposes listed below. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected:
Automated decision-making: phksy uses automated systems for fraud detection and account risk scoring. Where an automated decision significantly affects your account (for example, a withdrawal hold triggered by a risk flag), you have the right to request human review. Contact support@phksy.best to escalate any such decision.
Under RA 10173 and applicable PAGCOR regulations, phksy relies on the following legal grounds to process your personal data:
phksy does not sell your personal data to third parties. Your data is shared only where necessary for the operation of a licensed gaming platform, and always under strict data processing agreements that require third parties to protect your information to the same standard that phksy does.
The categories of third parties with whom phksy may share your data are:
phksy does not transfer your personal data outside the Philippines unless required by law or unless the receiving country provides an adequate level of data protection as recognised by the National Privacy Commission. Where transfers do occur, phksy implements appropriate safeguards including data processing agreements.
phksy retains personal data only for as long as it is needed for the purpose for which it was collected, or as long as required by applicable law and PAGCOR regulations. The general retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | PAGCOR & AMLA compliance |
| Financial Transaction Records | 5 years from transaction date | AMLA & tax record requirements |
| Game History | 2 years from date of play | PAGCOR audit requirements |
| Support Communications | 3 years from last interaction | Dispute resolution records |
| Technical & Log Data | 12 months from collection | Security monitoring |
| Marketing Consent Records | Until consent is withdrawn | Evidence of lawful processing |
After the applicable retention period, phksy securely destroys or anonymises your personal data so that it can no longer be linked back to you. Data required for ongoing legal proceedings may be retained beyond the standard retention period until those proceedings are concluded.
phksy uses cookies and similar technologies on its website and mobile platform to ensure the platform works correctly, to keep your session secure, and to understand how players use the site so we can improve it. The categories of cookies phksy uses are described below.
You can manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect how phksy works on your device. phksy does not use cross-site tracking cookies that follow you to other websites after you leave the platform.
phksy implements a multi-layered security framework to protect your personal and financial data from unauthorised access, loss, or disclosure. The key measures phksy has in place include:
No online platform can guarantee absolute security against all threats. You play an important role in protecting your account by keeping your password confidential, not sharing your login details with anyone, and enabling 2FA. If you notice any suspicious activity on your account, contact phksy support immediately at support@phksy.best.
As a data subject under RA 10173, you have the following rights with respect to your personal data held by phksy:
To exercise any of these rights, submit a written request to privacy@phksy.best using the email address associated with your phksy account, or via the support centre. phksy will respond to all valid requests within 15 business days. We may need to verify your identity before processing your request to protect against unauthorised access to your data.
NPC complaints: If you are unsatisfied with how phksy has responded to a data rights request, you may lodge a formal complaint with the National Privacy Commission of the Philippines. The NPC's contact details and complaint form are available on the NPC's official government website.
phksy is strictly an 18+ platform. phksy does not knowingly collect personal data from individuals under the age of 18. All players are required to declare their age during registration and to provide government-issued identification confirming they are 18 or older during the KYC verification process.
If phksy discovers that it has inadvertently collected personal data from a minor — whether through a false age declaration during registration or any other means — the following steps will be taken immediately:
If you believe a minor has created an account on phksy, please report it immediately to support@phksy.best. phksy will investigate and act on all such reports as a priority.
phksy reviews this Privacy Policy at least annually and whenever there are material changes to our data practices, applicable law, or PAGCOR requirements. When significant updates are made, phksy will:
We encourage you to revisit this page periodically to stay informed about how phksy protects your data. The "Last updated" date at the top of this page indicates when the most recent version was published.
If you have any questions, concerns, or requests relating to this Privacy Policy or to how phksy handles your personal data, please reach out through any of the following channels:
All privacy-related inquiries are handled by the phksy DPO's office. Routine questions are answered within 2 business days. Formal data rights requests are handled within 15 business days as required by RA 10173.
For non-privacy questions about your account, deposits, withdrawals, or games, please use the standard support channel at support@phksy.best or reach us via live chat. The support team is available 24/7 and typically responds to live chat queries in under three minutes.
A privacy policy is only meaningful when it reflects what actually happens on the platform. Here's what phksy does in practice.
Every peso that moves through phksy — every deposit via GCash, every withdrawal to BDO — is processed over encrypted connections. phksy never transmits financial data over unencrypted channels, and payment card numbers are never stored on phksy servers.
phksy has never sold player data to advertisers, data brokers, or any third party for marketing to other companies' products. The personal information you share with phksy stays within the phksy ecosystem and its tightly controlled service partners.
phksy's appointed DPO oversees all data privacy matters, ensures compliance with RA 10173, and is your direct point of contact for privacy concerns. The DPO is reachable at privacy@phksy.best and is required to respond within 15 business days.
phksy only collects data it genuinely needs to operate and comply with PAGCOR rules. We don't ask for data just because it might be useful someday. If we don't need it to serve you or meet a legal obligation, we don't collect it.
Every phksy marketing email and SMS includes a one-tap unsubscribe link. You can also adjust all communication preferences directly in your account settings at any time without needing to contact support.
In the unlikely event of a data breach, phksy commits to notifying affected players and the National Privacy Commission within 72 hours of discovery — as required by RA 10173. You'll always be told what happened and what steps phksy has taken.