17phsky Casino Privacy Policy

17phsky Casino ("17phsky," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the 17phsky platform, including the website at https://17phsky.app, all associated mobile applications, games, and services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how 17phsky collects, uses, stores, shares, and protects your personal data when you interact with the Platform. It also explains the rights available to you as a data subject under the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations.

This Policy applies to all users of the Platform, including registered players, visitors, and any other persons whose personal data is processed by 17phsky in connection with the Platform. This Policy should be read together with our Terms & Conditions, which are available at 17phsky Terms & Conditions.

17phsky collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include the following:

2.1 Identity and Contact Information

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including barangay, city or municipality, province, and postal code.
• Email address and mobile phone number.
• Government-issued identification documents (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID, PRC ID).

2.2 Financial Information

• Payment method details, including GCash mobile number, PayMaya account details, and bank account information for BPI, BDO, or Metrobank.
• Transaction history, including deposit amounts, withdrawal requests, and payment timestamps.
• Source of funds documentation, where required for anti-money laundering (AML) compliance.

2.3 Account and Gaming Activity

• Account username, password (stored in encrypted form), and account preferences.
• Gaming history, including games played, wagers placed, wins, losses, and session durations.
• Bonus and promotion usage history.
• Responsible gaming settings, including deposit limits, session limits, and self-exclusion records.

2.4 Technical and Device Data

• IP address and approximate geolocation data.
• Device type, operating system, browser type and version.
• Cookies and similar tracking technologies (see Section 7 for details).
• Log data, including access times, pages visited, and error reports.

2.5 Communications Data

• Records of communications between you and the 17phsky customer support team, including live chat transcripts and email correspondence.
• Survey responses and feedback submitted through the Platform.

17phsky collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: When you access and use the Platform, we automatically collect technical and device data through cookies, server logs, and similar technologies.
• From third parties: We may receive personal data from identity verification service providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and regulatory authorities where permitted by law.
• From publicly available sources: In limited circumstances, we may verify information you provide against publicly available records or databases maintained by Philippine government agencies.

17phsky uses the personal data we collect for the following purposes:

17phsky will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

Under the Data Privacy Act of 2012, 17phsky processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to when registering your account, including account management, payment processing, and game delivery.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), and tax reporting requirements.
• Legitimate interests: Processing is necessary for the legitimate interests of 17phsky, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

17phsky does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers and Processors

We engage trusted third-party service providers who process personal data on our behalf, including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, customer support platform providers, and fraud detection services. All such providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory and Law Enforcement Authorities

17phsky may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law, court order, or regulatory directive.

6.3 Game Content Providers

Licensed game studios and live dealer operators who supply games to the 17phsky Platform may receive limited technical data (such as session tokens and game round identifiers) necessary to deliver their games. These providers do not receive your full identity or financial data.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 17phsky's business, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

17phsky uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Functional cookies: Remember your preferences and settings, such as language preferences and responsible gaming limits, to provide a more personalized experience.
• Analytics cookies: Help us understand how players use the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized where possible.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no opt-out is available as they are required for the Platform to operate.

17phsky retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AML obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 17phsky's data disposal procedures.

17phsky implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive personal and financial data stored on our servers.
• Access controls ensuring that personal data is accessible only to authorized personnel who require it to perform their duties.
• Multi-factor authentication for internal systems that process personal data.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to detect, contain, and report personal data breaches in accordance with the Data Privacy Act of 2012 and NPC regulations.

While 17phsky takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying 17phsky immediately if you suspect any unauthorized access to your account.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 17phsky:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed, as set out in this Policy.
• Right of access: You have the right to request a copy of the personal data that 17phsky holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this Policy. We will respond to all verified requests within thirty (30) days of receipt, in accordance with the DPA and NPC regulations.

The 17phsky Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law governing casino-style gambling and online gaming. 17phsky does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings or balances associated with an underage account may be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on the 17phsky Platform or provided us with personal data, please contact our support team immediately so that we can take appropriate action.

The 17phsky Platform may contain links to third-party websites or services, such as payment provider portals or game studio websites. This Privacy Policy applies solely to the 17phsky Platform and does not cover the privacy practices of any third-party websites or services.

17phsky is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform before providing them with any personal data.

17phsky reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Policy periodically to stay informed about how 17phsky protects your personal data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you do not agree to the revised Privacy Policy, you must cease using the Platform and may request the closure of your account by contacting our customer support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 17phsky, please contact our Data Protection Officer (DPO) using the details below. Our DPO is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy.