sky123 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how sky123 ("sky123," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "your," or "Player") who access or use the sky123 online casino platform available at sky123.net and any associated mobile-optimised interfaces (collectively, the "Platform").

sky123 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Republic of the Philippines, and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

By registering an account, logging in, or otherwise using the sky123 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, sky123 acts as the Personal Information Controller in respect of the personal data you provide when using the Platform. This means sky123 determines the purposes and means of processing your personal information.

sky123 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection laws and this Policy. If you have any questions or concerns about how sky123 handles your personal data, you may contact our DPO through the contact details provided in Section 14 of this Policy.

Where sky123 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure providers — those parties act as Personal Information Processors and are contractually bound to process your data only in accordance with sky123's instructions and applicable Philippine data protection law.

3 Personal Data We Collect

sky123 collects the following categories of personal data from players and prospective players:

3.1 Identity and Contact Information

• Full legal name (as it appears on a government-issued ID)
• Date of birth (for age verification — players must be 21 years or older)
• Residential address, including barangay, city or municipality, province, and postal code
• Email address and mobile phone number
• Government-issued identification number (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS number)

3.2 Financial Information

• GCash mobile number or PayMaya account details used for deposits and withdrawals
• Bank account details (BPI, BDO, Metrobank, UnionBank, or other Philippine banks) where bank transfer is used
• Transaction history, including deposit amounts, withdrawal requests, and bet records
• Source of funds declarations where required for anti-money laundering compliance

3.3 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Login timestamps and access logs
• Cookie identifiers and similar tracking technologies (see Section 8)

3.4 Communications Data

• Records of your communications with sky123 customer support, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records
• Marketing preferences and opt-in/opt-out records

4 How We Collect Your Data

sky123 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 8 for details on our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment confirmation data from GCash, PayMaya, and banking partners.
• Publicly Available Sources: In limited circumstances, sky123 may verify information against publicly available records, such as government databases, for the purpose of identity verification or fraud prevention.

5 How We Use Your Personal Data

sky123 uses the personal data we collect for the following purposes:

sky123 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, sky123 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and sky123 — specifically, to provide you with access to the Platform, process your transactions, and manage your account.
• Legal Obligation: Processing is required for sky123 to comply with applicable Philippine laws, including anti-money laundering regulations, gaming regulations, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for sky123's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics, provided those interests are not overridden by your rights and interests.
• Consent: For marketing communications and non-essential cookies, sky123 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing and Disclosure

sky123 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC and Identity Verification Providers: Third-party services that assist sky123 in verifying the identity and age of players as required by Philippine gaming regulations.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers necessary to process your deposits and withdrawals.
• Cloud Infrastructure and IT Service Providers: Providers of hosting, data storage, and technical infrastructure services who process data on sky123's behalf under strict data processing agreements.
• Fraud Prevention and Compliance Services: Third-party providers that assist sky123 in detecting and preventing fraud, money laundering, and other illegal activities.
• Regulatory and Law Enforcement Authorities: The Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, and other government bodies where disclosure is required by law, court order, or regulatory direction.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by sky123 in connection with the operation of its business, subject to professional confidentiality obligations.

8 Cookies and Tracking Technologies

sky123 uses cookies and similar tracking technologies to enhance your experience on the Platform, remember your preferences, and analyse how the Platform is used. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming limits. Disabling these cookies may affect your experience on the Platform.
• Analytics Cookies: Used to collect anonymised data about how players use the Platform, including which pages are visited most frequently and how long sessions last. This data helps sky123 improve the Platform.
• Marketing Cookies: Used to deliver relevant promotional content to players who have opted in to receive marketing communications from sky123. These cookies are only set with your consent.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the sky123 Platform. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

9 Data Retention

sky123 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory authority or court order.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any legal retention obligations.

Upon expiry of the applicable retention period, sky123 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10 Data Security

sky123 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the sky123 Platform is encrypted using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored on sky123's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to sky123 personnel and authorised service providers who have a legitimate need to access it. All access is logged and audited.
• Two-Factor Authentication: sky123 offers two-factor authentication (2FA) for player accounts and requires it for all internal administrative access to systems containing personal data.
• Regular Security Audits: sky123 conducts regular penetration testing and security audits of its Platform and infrastructure to identify and remediate vulnerabilities.
• Incident Response: sky123 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, sky123 will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.

11 Your Data Protection Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by sky123:

To exercise any of the above rights, please contact sky123's Data Protection Officer using the contact details in Section 14. sky123 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

Please note that certain rights are subject to limitations under the Data Privacy Act of 2012. For example, sky123 may be unable to delete data that it is legally required to retain, or data that is necessary for the establishment, exercise, or defence of legal claims.

12 Children's Privacy and Age Restriction

The sky123 Platform is strictly intended for adults aged 21 years and above, in accordance with the minimum legal age for casino-style gambling in the Philippines. sky123 does not knowingly collect personal data from individuals under the age of 21.

If sky123 discovers or has reason to believe that an account has been registered by or on behalf of a person under 21 years of age, sky123 will:

1. Immediately suspend and close the account.
2. Void all gameplay and transactions conducted through the account.
3. Securely delete all personal data associated with the account, except where retention is required by law.
4. Report the matter to the appropriate Philippine regulatory authorities where required.

If you are a parent or guardian and believe that your child has registered an account on sky123, please contact our customer support team immediately using the details in Section 14.

13 Changes to This Privacy Policy

sky123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will:

• Post the updated Policy on the sky123 Platform with a revised effective date.
• Where practicable, notify registered players by email or through an in-platform notification.
• Where required by the Data Privacy Act of 2012, obtain fresh consent for any new processing activities that require it.

Your continued use of the sky123 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how sky123 protects your personal data.

The current version of this Privacy Policy is effective as of January 1, 2026. Previous versions of this Policy are available upon request by contacting our Data Protection Officer.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or sky123's handling of your personal data, please contact our Data Protection Officer through the following channel:

• Email: [email protected]
• Live Chat: Available on the sky123 Platform after logging in to your account, 24 hours a day, 7 days a week.

sky123 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within fifteen (15) business days.

If you are not satisfied with sky123's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available on the NPC's official website.