Your data, your rights. 23phsky is committed to transparency. This policy tells you exactly what personal information we collect, why we collect it, and how you can exercise your rights under Philippine law.
1. Introduction
23phsky ("we," "us," or "our") operates the online gaming platform accessible at 23phsky.net (the "Platform"). We are the personal information controller responsible for the personal data you provide when you register, play, or otherwise interact with the Platform.
This Privacy Policy applies to all personal data collected through the Platform, our customer support channels, and any other interaction you have with 23phsky. It should be read together with our Terms & Conditions and Responsible Gaming Policy.
By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.
2. Personal Data We Collect
23phsky collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect include:
2.1 Registration & Identity Data
- Full legal name, date of birth, and gender
- Email address and mobile phone number
- Username and encrypted password
- Residential address (city, province, postal code)
2.2 Identity Verification (KYC) Data
- Government-issued identification documents (e.g., PhilSys ID, passport, driver's license, UMID, SSS/GSIS ID)
- Proof of address documents
- Selfie or facial image for liveness verification where required
2.3 Financial Data
- GCash or Maya account reference (masked)
- Bank account details for withdrawal processing (masked)
- Transaction history: deposits, withdrawals, wagers, and winnings
2.4 Technical & Usage Data
- IP address and approximate geolocation
- Device type, operating system, and browser information
- Session duration, pages visited, and game activity logs
- Cookie identifiers and similar tracking technologies
2.5 Communications Data
- Records of customer support interactions (chat transcripts, email correspondence)
- Responses to surveys, promotions, or feedback requests
23phsky does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming compliance (e.g., self-exclusion records).
3. How We Use Your Personal Data
23phsky processes your personal data for the following purposes:
- Account Management: To create, maintain, and secure your 23phsky account, including authentication and password recovery.
- Identity Verification: To comply with PAGCOR KYC requirements and verify that you meet the 21+ age eligibility requirement.
- Transaction Processing: To process deposits, withdrawals, and bonus credits accurately and securely in Philippine Peso (PHP).
- Regulatory Compliance: To fulfil obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including reporting to the Anti-Money Laundering Council (AMLC) where required.
- Responsible Gaming: To monitor gaming behaviour, enforce deposit limits, process self-exclusion requests, and identify players who may be at risk of problem gambling.
- Customer Support: To respond to your inquiries, resolve disputes, and improve our support services.
- Platform Improvement: To analyse usage patterns, diagnose technical issues, and enhance the overall 23phsky experience.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent and subject to your right to opt out at any time.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct.
4. Legal Basis for Processing
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 23phsky processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration (e.g., account management, transaction processing).
- Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AMLA reporting obligations, and tax requirements.
- Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Data Sharing & Disclosure
23phsky does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or court order.
- Payment Processors: GCash, Maya, and partner banks for the purpose of processing deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
- KYC & Identity Verification Providers: Third-party identity verification services engaged to assist with document verification and liveness checks, subject to data processing agreements.
- Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data on our behalf under strict contractual obligations.
- Game Software Providers: Licensed game studios whose software is integrated into the 23phsky Platform may receive anonymised or pseudonymised gameplay data for technical and audit purposes.
- Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
In the event of a merger, acquisition, or sale of all or part of 23phsky's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
6. Cookies & Tracking Technologies
23phsky uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:
- Strictly Necessary Cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
- Functional Cookies: Remember your preferences (e.g., language, display settings) to personalise your experience.
- Analytics Cookies: Collect anonymised data about how players use the Platform to help us improve performance and content.
- Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent.
You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. For more information, refer to the cookie consent banner displayed on your first visit to 23phsky.
7. Data Retention
23phsky retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
- KYC & Identity Documents: Retained for a minimum of five (5) years after the end of the business relationship, as required under the AMLA and its implementing rules.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
- Customer Support Records: Retained for three (3) years from the date of the last interaction.
- Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.
8. Data Security
23phsky implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
- Encryption of sensitive data at rest, including financial information and identity documents.
- Multi-factor authentication (MFA) options for account access.
- Regular security audits, penetration testing, and vulnerability assessments.
- Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
- Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.
In the event of a personal data breach that is likely to result in serious harm to your rights and freedoms, 23phsky will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by the Data Privacy Act of 2012.
9. Your Data Subject Rights
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 23phsky:
- Right to be Informed: The right to know what personal data we collect and how it is processed.
- Right to Access: The right to obtain a copy of your personal data held by 23phsky and information about how it is being processed.
- Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
- Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 13. We will respond to verified requests within fifteen (15) business days in accordance with NPC guidelines. We may require proof of identity before processing your request.
10. Children's Privacy
The 23phsky Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from persons under the age of 21.
If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and return any deposited funds subject to verification. If you believe a minor has registered on the Platform, please contact us immediately at the details provided in Section 13.
11. Cross-Border Data Transfers
Where 23phsky engages third-party service providers located outside the Philippines (for example, cloud infrastructure or game software providers), your personal data may be transferred to and processed in other jurisdictions. In such cases, 23phsky ensures that:
- The recipient country provides an adequate level of data protection, or
- Appropriate safeguards are in place, such as contractual clauses approved by the National Privacy Commission, to protect your personal data in accordance with the Data Privacy Act of 2012.
Cross-border transfers are conducted only where necessary and are limited to the minimum data required for the specific processing purpose.
12. Changes to This Privacy Policy
23phsky reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The revised Policy will be posted on this page with an updated effective date.
Where changes are material, we will notify you by email to your registered address or by a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how 23phsky protects your personal data.
13. Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO):
- Data Protection Officer: 23phsky Compliance Team
- Email: [email protected]
- General Support: [email protected]
- Response Time: Within 15 business days of receiving a verified request
You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.
Last reviewed and updated: January 1, 2026. This Policy supersedes all prior versions.
Your Privacy at a Glance
How 23phsky Protects You
Six core commitments that define how we handle your personal data on the 23phsky platform.
End-to-End Encryption
All data transmitted between your device and 23phsky is protected by TLS encryption. Your credentials and financial details are never sent in plain text.
DPA 2012 Compliant
23phsky fully complies with the Philippine Data Privacy Act of 2012 (RA 10173) and is registered with the National Privacy Commission.
No Data Selling
Your personal information is never sold to third-party advertisers or data brokers. We share data only where legally required or operationally necessary.
You're in Control
Access, correct, or request deletion of your data at any time. Withdraw marketing consent with a single request to our Data Protection Officer.
Clear Retention Limits
We keep your data only as long as required by PAGCOR and AMLA regulations — typically five years — then securely delete or anonymise it.
Breach Notification
In the unlikely event of a data breach, 23phsky will notify the NPC and affected players within the timeframes mandated by Philippine law.
Play with Confidence
Your Data Is Safe at 23phsky
Now that you know how we protect your privacy, explore everything 23phsky has to offer — live casino tables, slots, bingo, and fishing games, all in a secure environment built for Filipino players. Must be 21 or older to register.