56phsky Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and used by 56phsky ("we", "us", "our") in connection with your use of the 56phsky website located at 56phsky.net, its associated mobile interfaces, gaming services, support channels, and promotional activities (collectively, the "Platform").

56phsky operates in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations. We are committed to processing your personal data fairly, lawfully, and transparently, and to upholding your rights as a data subject under Philippine law.

This Policy is incorporated by reference into the 56phsky Terms & Conditions. By registering a 56phsky account or by continuing to use the Platform after this Policy is published, you acknowledge that you have read, understood, and agree to the data practices described herein. If you disagree with any part of this Policy, please discontinue your use of the Platform and contact our support team to request account closure.

This Policy may be updated periodically. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following any posted update constitutes your acceptance of the revised Policy.

56phsky collects different categories of personal data depending on your relationship with us and how you interact with the Platform. The table below summarizes the main categories of data we collect and their purpose:

56phsky collects personal data through the following means:

• Registration: When you create a 56phsky account, you provide identity and contact data directly through the registration form.
• KYC Verification: When you upload government-issued identification documents to complete the Know Your Customer verification process.
• Deposits and Withdrawals: When you initiate financial transactions on the Platform, payment-related data is collected via our integrated payment providers.
• Customer Support: When you contact our support team via live chat or email, the content of those communications is recorded for service and quality purposes.
• Promotions and Surveys: When you participate in optional promotions, competitions, or feedback surveys.

• Cookies and Tracking Technologies: Technical and usage data is collected automatically when you visit or interact with the Platform. See Section 7 for full details on cookies.
• Log Files: Our servers automatically record IP addresses, browser types, referring URLs, and page access timestamps for security and performance monitoring.
• Game Activity Logs: Game engine systems record bet histories, game outcomes, and session data for platform integrity, dispute resolution, and responsible gaming compliance.

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and card networks may share transaction confirmation data with us to verify deposit and withdrawal status.
• Identity Verification Partners: We may use licensed third-party KYC service providers to cross-check identity documents against public databases where this is legally permitted.
• Fraud Prevention Services: We may receive risk-scoring or flagging data from fraud-detection partners to protect the Platform and its players from financial crime.

56phsky uses your personal data for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed here without first notifying you and, where required, obtaining your fresh consent.

• Account Administration: Creating, maintaining, and managing your 56phsky player account, including processing login credentials, account settings, and preference updates.
• Identity and Age Verification: Confirming that you meet the 21-year minimum age requirement under Philippine gambling regulations and verifying your identity as part of our KYC obligations.
• Payment Processing: Processing deposits, withdrawals, and refunds via GCash, PayMaya, bank transfers, and card networks. Financial data is shared with payment processors only to the extent necessary to execute your requested transaction.
• Regulatory Compliance: Fulfilling our obligations under the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and any applicable directives from the Philippine Amusement and Gaming Corporation (PAGCOR) and other competent authorities.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorized access to player accounts.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing self-exclusion requests, and delivering responsible gaming notifications and tools.
• Customer Support: Responding to inquiries, resolving complaints, processing disputes, and delivering technical assistance.
• Platform Improvement: Analyzing usage patterns, game performance data, and player feedback to improve our game catalog, interface design, and overall platform quality.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. See Section 12 for opt-out instructions.

Under the Data Privacy Act of 2012, 56phsky processes your personal data on the following legal grounds:

• Contractual Necessity: The majority of data processing activities are necessary to perform the contract between you and 56phsky — specifically, to operate your player account, process transactions, and deliver gaming services you have requested.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and regulatory reporting — are required by Philippine law and cannot be waived by either party.
• Legitimate Interests: 56phsky processes technical and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, and improving service quality, provided that such interests are not overridden by your rights and freedoms.
• Consent: Where 56phsky relies on your consent as the legal basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

56phsky may share your personal data with the following categories of recipients:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard receive the financial data necessary to process your transactions. These processors are bound by their own privacy policies and applicable payment industry security standards.
• KYC and Identity Verification Providers: Licensed third-party providers engaged to verify government-issued identification documents and confirm identity data as part of our regulatory compliance program.
• Game Software Providers: Licensed game developers and content providers may receive anonymized or pseudonymized gameplay data for the purpose of game integrity verification, dispute resolution, and technical support. These providers do not receive personally identifiable data beyond what is strictly necessary.
• Fraud Prevention and AML Services: Specialized risk and compliance service providers engaged to detect money laundering, bonus fraud, and account security threats. Data shared with these providers is subject to strict contractual data processing agreements.
• Regulatory and Law Enforcement Authorities: 56phsky will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities where required by applicable law, court order, or regulatory directive.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by 56phsky may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third-party data processors engaged by 56phsky are required to enter into data processing agreements that obligate them to process personal data only for specified purposes, maintain appropriate security standards, and not transfer data to any sub-processor without 56phsky's prior written authorization.

56phsky uses cookies and similar tracking technologies on its Platform to ensure proper functionality, enhance security, and improve the user experience. By continuing to use the Platform after being presented with our cookie notice, you consent to our use of cookies in accordance with this Policy.

• Essential Cookies: Strictly necessary for the Platform to function. These cookies manage your login session, maintain your game state, and protect against cross-site request forgery. They cannot be disabled without rendering the Platform unusable.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized account access attempts. These cookies are essential to the integrity of the Platform and cannot be opted out of.
• Functional Cookies: Remember your preferences such as language, currency display, and notification settings to provide a more personalized experience across sessions.
• Analytics Cookies: Collect anonymized usage data — such as which pages are visited most frequently and how players navigate the game lobby — to help us improve Platform performance and content. You may opt out of analytics cookies via your account privacy settings.
• Marketing Cookies: Used to deliver relevant promotional content to players who have opted in to marketing communications. Marketing cookies may be disabled at any time via your account settings or browser controls without affecting core Platform functionality.

56phsky implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 56phsky Platform is encrypted using industry-standard TLS encryption to prevent interception in transit.
• Data Encryption at Rest: Sensitive personal data — including identity documents, financial records, and authentication credentials — is encrypted using strong encryption standards when stored in 56phsky's data systems.
• Access Controls: Access to personal data within 56phsky's internal systems is governed by role-based access control (RBAC). Only authorized personnel with a documented business need may access personal data, and all access events are logged and audited.
• Two-Factor Authentication: 56phsky offers two-factor authentication (2FA) for player accounts and enforces 2FA for all internal staff accessing production systems containing personal data.
• Security Monitoring: 56phsky employs continuous security monitoring, intrusion detection systems, and regular vulnerability assessments to identify and remediate threats before they can cause harm.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights, 56phsky will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

While 56phsky takes all reasonable steps to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying 56phsky immediately if you suspect any unauthorized access to your account.

56phsky retains your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or for as long as required by applicable Philippine law and regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with 56phsky, plus a minimum of five (5) years following account closure, as required by AML and gaming regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines.
• KYC and Identity Documents: Retained for five (5) years following account closure or the completion of the business relationship, as required by AMLC guidelines.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, to support dispute resolution and regulatory inquiries.
• Game Activity Logs: Retained for three (3) years to support responsible gaming monitoring, dispute resolution, and game integrity audits.
• Marketing Preference Data: Retained until you withdraw consent or close your account, whichever is earlier. Opt-out records are maintained indefinitely to honor suppression requests.

When personal data reaches the end of its retention period, it is securely deleted or irreversibly anonymized so that it can no longer be attributed to any individual. 56phsky conducts periodic data audits to ensure that retention schedules are followed consistently across all data systems.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 56phsky. 56phsky is committed to facilitating the exercise of these rights in a timely and transparent manner.

To exercise any of the above rights, please contact our Data Privacy Officer via email at [email protected] with the subject line "Data Subject Request." We will verify your identity before processing any request and will respond within thirty (30) calendar days. In complex cases, we may extend this period by up to an additional thirty (30) days, with prior notice to you.

If you believe that 56phsky has not adequately addressed your data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data privacy matters in this jurisdiction.

The 56phsky Platform is strictly intended for adults aged 21 years and above. We take our age-restriction obligations seriously and enforce age verification at multiple points in the registration and KYC process.

If 56phsky discovers or has reason to believe that personal data has been collected from a person below the legal gambling age, we will immediately:

• Suspend the associated account pending investigation;
• Permanently close the account upon confirmation that the account holder is underage;
• Delete all personal data associated with the account from our active systems, subject to any mandatory reporting obligations; and
• Return any deposits made to the payment method used, after standard processing and verification procedures.

Parents or guardians who have reason to believe that a minor may have registered a 56phsky account should contact our support team immediately at [email protected].

56phsky sends promotional emails, SMS messages, and in-platform notifications about bonuses, new game launches, special events, and other Platform updates. We will only send you marketing communications where you have explicitly opted in to receive them during registration or at a later point via your account settings.

You may withdraw your marketing consent and opt out of all marketing communications at any time through any of the following methods:

• Updating your communication preferences directly in your 56phsky account settings under the "Notifications" tab;
• Clicking the "Unsubscribe" link included in any 56phsky marketing email; or
• Contacting 56phsky customer support via live chat or email and requesting removal from all marketing lists.

Opt-out requests are processed within five (5) business days. Please note that opting out of marketing communications will not affect your receipt of transactional and account-related messages — such as deposit confirmations, withdrawal notifications, security alerts, and KYC status updates — which are sent on the basis of contractual necessity rather than consent.

The 56phsky Platform may contain references to third-party payment providers, game software suppliers, and identity verification services. While 56phsky carefully selects its service partners and requires them to maintain appropriate data protection standards, we are not responsible for the privacy practices of third-party entities operating their own independent platforms or websites.

Any personal data you provide directly to a third-party service — for example, when completing a GCash or PayMaya transaction on their own interface — is governed by that third party's own privacy policy and terms of service. 56phsky encourages you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.

56phsky does not control, endorse, or assume responsibility for the content, privacy policies, or data practices of any third-party platforms. Our Policy applies solely to data collected and processed by 56phsky through the 56phsky.net Platform and its directly operated services.

56phsky reserves the right to update, modify, or replace any part of this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, regulatory requirements, or Platform operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notice on the 56phsky Platform for a reasonable period following the change; and
• Where required by law or where the change materially affects your rights, notify you directly via your registered email address with sufficient advance notice.

Your continued use of the Platform after any posted changes take effect constitutes your acceptance of the revised Policy. If you do not agree with any material change to this Policy, you should discontinue your use of the Platform and contact us to close your account before the effective date of the change.

We encourage you to review this Privacy Policy periodically to stay informed about how 56phsky is protecting and managing your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 56phsky, please reach out to our designated Data Privacy Officer (DPO):

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the competent supervisory authority for the enforcement of the Data Privacy Act of 2012 in the Philippines.