Privacy Policy

1 Who We Are

12phsky ("we," "us," "our") operates the online gaming platform accessible at 12phsky.net, offering casino games, live dealer tables, slots, bingo, and related entertainment services to players in the Philippines. As the operator of this platform, 12phsky acts as the Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations.

We are committed to handling your personal data with the highest standards of transparency, integrity, and security. This Privacy Policy is designed to give you a clear and honest picture of our data practices — no legal jargon overload, just straightforward information about how we treat your data.

2 Personal Data We Collect

Depending on how you interact with the 12phsky platform, we may collect the following categories of personal data:

We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law.

3 How We Collect Your Data

12phsky collects personal data through the following means:

3.1 Direct Collection

You provide data directly to us when you:

• Register a new account on the 12phsky platform;
• Complete KYC identity verification;
• Make a deposit or request a withdrawal;
• Contact our customer support team via live chat or email;
• Opt in to receive promotional communications;
• Participate in surveys, promotions, or competitions.

3.2 Automatic Collection

When you access the 12phsky platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device identifiers, browser settings, and session activity. See Section 7 for full details on our cookie practices.

3.3 Third-Party Sources

In limited circumstances, we may receive data about you from third parties, including:

• Payment processors (e.g., GCash, Maya, banks) for transaction verification;
• Identity verification service providers for KYC compliance;
• Fraud prevention and anti-money laundering (AML) screening services.

4 Why We Use Your Personal Data

12phsky uses your personal data only for legitimate, specified purposes. The table below outlines our primary processing activities:

• Account Management: To create, maintain, and secure your 12phsky account, including password resets and account recovery;
• Identity Verification (KYC): To verify your identity and age (21+) as required by PAGCOR regulations and Philippine AML laws;
• Payment Processing: To process deposits, withdrawals, and refunds through your chosen payment method (GCash, Maya, bank transfer, or debit card);
• Game Delivery: To provide access to our full library of casino games, live dealer tables, slots, and bingo;
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits, session timers, and self-exclusion;
• Regulatory Compliance: To comply with PAGCOR licensing requirements, Philippine AML obligations, and the Data Privacy Act of 2012;
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, and unauthorized account access;
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support services;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only if you have opted in to receive such communications;
• Platform Improvement: To analyze usage patterns and improve the performance, security, and user experience of the 12phsky platform.

We will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 12phsky processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration (e.g., account management, payment processing, game delivery);
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements and AML obligations;
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time through your account settings.

6 Data Sharing & Disclosure

12phsky does not sell your personal data to third parties. We share your data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Payment processors (GCash, Maya, Philippine banks) for deposit and withdrawal processing;
• KYC and identity verification providers;
• Fraud detection and AML screening services;
• Game software providers (e.g., Jili, PG Soft, Evolution Gaming, Pragmatic Play) for game delivery;
• Cloud hosting and IT infrastructure providers;
• Customer support platform providers.

All service providers are contractually bound to process your data only as instructed by 12phsky and to maintain appropriate security measures.

6.2 Regulatory & Legal Disclosure

We may disclose your personal data to government authorities, regulators, or law enforcement agencies when required by Philippine law, court order, or PAGCOR regulatory directive. This includes disclosures required under the Anti-Money Laundering Act (AMLA) and its amendments.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure the receiving party is bound by privacy obligations no less protective than those in this Policy.

7 Cookies & Tracking Technologies

The 12phsky platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. The types of cookies we use are:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies and security tokens. You cannot opt out of essential cookies without losing access to the platform;
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options;
• Analytics Cookies: Help us understand how players use the platform — which games are most popular, where users encounter difficulties, and how to improve navigation. Analytics data is aggregated and anonymized where possible;
• Marketing Cookies: Used to deliver relevant promotional content within the 12phsky platform. We do not use third-party advertising networks that track you across external websites.

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies may affect certain platform features. For full details, refer to our cookie settings panel accessible from your account dashboard.

8 Data Retention

12phsky retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account plus five (5) years after account closure, as required by PAGCOR and AML regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act;
• KYC Documents: Retained for five (5) years after account closure or the last transaction, whichever is later;
• Customer Support Records: Retained for two (2) years from the date of the last interaction;
• Marketing Preferences: Retained until you withdraw consent or close your account.

When personal data is no longer required, 12phsky will securely delete or anonymize it in accordance with our data disposal procedures.

9 Data Security

12phsky implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 12phsky platform is encrypted in transit;
• Encrypted Data Storage: Sensitive data including passwords and financial information is stored using strong encryption at rest;
• Two-Factor Authentication (2FA): Available for all accounts to add an extra layer of login security;
• Access Controls: Personal data is accessible only to authorized 12phsky personnel who require it to perform their job functions;
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing;
• Incident Response: In the event of a data breach that poses a risk to your rights, 12phsky will notify the National Privacy Commission (NPC) and affected users within 72 hours of discovery, as required by the Data Privacy Act.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 12phsky:

To exercise any of these rights, contact our Data Protection Officer (DPO) using the details in Section 14. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

If you believe your data rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy

If we discover that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete all collected data, and return any deposits in accordance with applicable law. If you believe a minor has registered on our platform, please contact us immediately at the details provided in Section 14.

12 Cross-Border Data Transfers

Some of our service providers — including game software providers and cloud infrastructure partners — may be located outside the Philippines. When personal data is transferred internationally, 12phsky ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those required under Philippine law;
• Transfers only to jurisdictions that the National Privacy Commission recognizes as providing adequate data protection;
• Your explicit consent where required by applicable law.

We will never transfer your personal data to a third country without ensuring that your rights and protections travel with your data.

13 Updates to This Privacy Policy

12phsky may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify you by:

• Posting a prominent notice on the 12phsky platform;
• Sending an email notification to your registered email address;
• Updating the "Last Updated" date at the top of this page.

Your continued use of the 12phsky platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO):

You also have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.