Data Privacy · RA 10173 Compliant

12phsky Privacy Policy – How We Handle Your Personal Data in the Philippines

Your privacy matters to us. This Privacy Policy explains exactly what personal information 12phsky collects when you use our platform, why we collect it, how we protect it, and what rights you have over your own data under Philippine law.

Effective: January 2025 RA 10173 (DPA) Compliant Philippines Jurisdiction English (PH)
Data Minimisation

We only collect what we genuinely need to operate your account safely.

No Data Selling

Your personal information is never sold to advertisers or third-party marketers.

SSL Encrypted

All data in transit is protected by bank-grade TLS 1.3 encryption.

Your Rights

Access, correct, delete, and port your data any time under RA 10173.

What We Collect

12phsky collects the personal information you provide during registration (name, date of birth, mobile number, address), plus transactional data, device and session data, and identity verification documents required under PAGCOR and anti-money laundering regulations.

Why We Collect It

Your data is collected to operate your account, process deposits and withdrawals, verify your identity as required by PAGCOR, prevent fraud and money laundering, personalise your experience, and send you relevant communications you've opted into.

Who We Share It With

12phsky shares your data only with payment processors (GCash, Maya, banks), KYC/identity verification providers, PAGCOR and relevant Philippine government authorities, and our internal technical service providers — all under strict data processing agreements.

How Long We Keep It

Account and transaction data is retained for a minimum of five years after account closure as required by PAGCOR regulations and Philippine AML law. Marketing preferences are deleted within 30 days of opt-out. You may request data deletion for non-mandatory data at any time.

How We Protect It

12phsky uses TLS 1.3 encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls, regular security audits, and staff training on data handling. Your payment credentials are never stored on our servers.

Your Rights Under RA 10173

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the right to access your data, correct inaccuracies, object to processing, request deletion of non-mandatory data, and lodge a complaint with the National Privacy Commission (NPC).

12phsky

12phsky players across the Philippines trust us with both their gameplay and their personal data.

Plain-language summary: 12phsky collects personal data because we're legally required to as a PAGCOR-licensed platform, and because we need it to run your account safely. We don't sell your data. We protect it seriously. And under Philippine law, you have real rights over it. The full details are below — please read through, and contact us if anything isn't clear.

1. Introduction

This Privacy Policy describes how 12phsky ("we", "us", "our") collects, uses, stores, shares, and protects personal information when you use the 12phsky platform at 12phsky.click. It applies to all registered players, visitors to our website, and anyone who contacts our customer support team.

12phsky is committed to handling your personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the National Privacy Commission (NPC) regulations. We are also bound by PAGCOR's player data requirements as a licensed gaming operator.

By registering an account at 12phsky and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree, please do not register or continue using the platform.

2. Data Controller

12phsky is the data controller responsible for the personal information collected and processed through the platform. As data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring that processing is lawful, fair, and transparent.

We have appointed a Data Protection Officer (DPO) in compliance with RA 10173. You can contact our DPO directly at the email address listed in Section 15 of this Policy for any data privacy concerns, rights requests, or complaints.

3. Personal Data We Collect

3.1 Registration and Account Data

When you create a 12phsky account, we collect:

  • Full legal name (as it appears on your government-issued ID)
  • Date of birth (to verify you are 21 years of age or older)
  • Current residential address in the Philippines
  • Active Philippine mobile number
  • Email address
  • Username and encrypted password

3.2 Identity Verification (KYC) Data

As required by PAGCOR regulations and Philippine Anti-Money Laundering Act (AMLA) obligations, we collect:

  • Government-issued photo ID (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS card)
  • Proof of address (e.g., utility bill, bank statement, barangay certification)
  • Selfie or liveness verification image for identity matching
  • Proof of ownership of registered payment methods (e.g., screenshot of GCash account showing your name)

3.3 Financial Transaction Data

For every deposit and withdrawal processed through 12phsky, we record:

  • Transaction amount in PHP ₱
  • Payment method used (e.g., GCash account number, bank account last four digits)
  • Transaction timestamp and reference number
  • Transaction status (pending, completed, failed, reversed)

3.4 Gaming and Betting Activity Data

We record all gaming activity on 12phsky, including bets placed and amounts, game sessions (start time, duration, outcomes), account balance changes, and bonus redemptions. This data is retained as required by PAGCOR regulations and used for responsible gaming monitoring.

3.5 Technical and Device Data

When you access 12phsky, we automatically collect:

  • IP address and approximate geolocation (to verify you are accessing from the Philippines)
  • Device type, operating system, and browser version
  • Session duration and pages visited
  • Cookie and similar tracking data (see Section 9)

3.6 Communications Data

If you contact 12phsky support via live chat, email, or any other channel, we retain records of that communication. This includes your queries, our responses, and any attachments shared. These records are used to resolve disputes, improve our service, and for staff training purposes.

12phsky

Whether you're in Makati or the provinces, 12phsky protects your personal data wherever you play.

4. How We Collect Your Data

12phsky collects personal data through the following channels:

  • Directly from you — when you register, complete KYC, contact support, or respond to surveys and promotions.
  • Automatically — through cookies, session tracking, and server logs when you use the platform.
  • From payment providers — GCash, Maya, and other payment processors share transaction confirmation data with us when you make deposits or withdrawals.
  • From identity verification partners — KYC providers return identity match results and risk scores as part of the verification process.
  • From PAGCOR or government authorities — in cases where we are required by law to cross-check player information against regulatory lists (e.g., self-exclusion registers).

5. Purpose and Legal Basis for Processing

Under RA 10173, every collection and use of personal data must have a lawful basis. The table below summarises the key purposes for which 12phsky processes your personal data and the corresponding legal basis:

Purpose Legal Basis
Account registration and maintenance Performance of contract (your use of 12phsky)
Age and identity verification Legal obligation (PAGCOR regulations)
Processing deposits and withdrawals Performance of contract
Anti-money laundering compliance Legal obligation (AMLA, RA 9160)
Fraud detection and prevention Legitimate interests of 12phsky and its players
Responsible gaming monitoring Legal obligation (PAGCOR) + Legitimate interests
Customer support and dispute resolution Performance of contract + Legitimate interests
Marketing communications Your explicit consent (opt-in)
Platform security and technical operation Legitimate interests of 12phsky
Regulatory reporting to PAGCOR / NPC Legal obligation

6. Sharing Your Personal Data

12phsky does not sell your personal data. We do not share it with advertisers or unrelated third parties for their own marketing purposes. We share your data only in the following circumstances, and only to the extent necessary:

6.1 Payment Processors

When you make a deposit or withdrawal, we share the necessary transaction data with your chosen payment provider (GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, Visa/Mastercard networks). This sharing is necessary to complete your financial transaction and is governed by those providers' own data processing terms.

6.2 KYC and Identity Verification Partners

We use accredited third-party identity verification providers to process KYC documents. These providers receive your ID images and verification data under strict data processing agreements and are prohibited from using your data for any purpose other than completing the verification requested by 12phsky.

6.3 Regulatory Authorities

We are legally required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities upon lawful request. This includes Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) as required under RA 9160 (AMLA).

6.4 Technical Service Providers

We use cloud hosting providers, security service providers, and customer support software providers to operate the platform. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own purposes.

Important: Any third party that receives your personal data from 12phsky is contractually bound to protect it with standards at least as stringent as those described in this Privacy Policy. We conduct due diligence on all third-party data processors before engaging them.

7. Data Retention

We retain your personal data for as long as your account is active and for a minimum period after account closure as required by law:

  • Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AMLA compliance obligations.
  • Transaction records: Retained for a minimum of five (5) years as required by AMLA and tax regulations.
  • Gaming activity logs: Retained for three (3) years after account closure for dispute resolution and regulatory audit purposes.
  • Customer support communications: Retained for two (2) years after the resolution of the query or dispute.
  • Marketing consent records: Retained until you withdraw consent, plus one (1) year for audit purposes.
  • Technical logs and session data: Retained for up to ninety (90) days for security and fraud detection purposes.

Once retention periods have passed and there is no other legal basis for continued storage, your data is securely deleted or anonymised so it can no longer be linked to you personally.

8. Security Measures

12phsky implements multiple layers of technical and organisational security measures to protect your personal data:

  • Encryption in transit: All data exchanged between your device and 12phsky servers is encrypted using TLS 1.3, the same standard used by Philippine banks and major financial institutions.
  • Encryption at rest: Sensitive personal data stored on our servers is encrypted using AES-256 encryption. Your passwords are stored using strong one-way hashing — we cannot see your password and will never ask you for it.
  • Payment data isolation: We do not store your full GCash number, full bank account number, or card numbers on our servers. Payment processing is handled directly by your chosen provider's secure infrastructure.
  • Access controls: Access to personal data within 12phsky is restricted on a strict need-to-know basis using role-based access controls. Staff who handle personal data are trained in data privacy obligations.
  • Security audits: We conduct regular internal and external security audits, penetration testing, and vulnerability assessments on our platform.
  • Two-factor authentication: We strongly recommend — and provide — 2FA for all player accounts to add an additional layer of protection against unauthorised account access.

Despite these measures, no internet-based system can be guaranteed to be completely secure. If you discover or suspect any security vulnerability related to 12phsky, please contact us immediately at support@12phsky.click.

12phsky

12phsky is designed to be enjoyed across the Philippines — with your privacy protected at every step.

9. Cookies and Tracking Technologies

12phsky uses cookies and similar technologies on our website. Here's what that means in plain terms:

9.1 Essential Cookies

These cookies are necessary for the platform to function. They keep you logged in, remember your session preferences, and enable core security features. You cannot opt out of essential cookies while using the platform — without them, the site will not work correctly.

9.2 Analytics Cookies

We use analytics cookies to understand how players use the platform — which pages are most visited, how long sessions last, and where players encounter difficulties. This data is used only in aggregate and anonymised form to improve the platform. You can opt out of analytics cookies through your browser settings.

9.3 Preference Cookies

These cookies remember your platform preferences, such as language settings and notification choices. Disabling them means you may need to re-enter preferences each visit.

9.4 Managing Cookies

You can control and delete cookies through your browser settings. Instructions for managing cookies in Chrome, Safari, Firefox, and other browsers are available on those browsers' support pages. Note that disabling cookies may affect your ability to use some features of the 12phsky platform.

10. Minors and Under-21 Protection

12phsky does not knowingly collect personal data from anyone under 21 years of age. Our platform is intended solely for adults 21 and older as defined by PAGCOR regulations. If we discover that a registered account belongs to a person under 21, we will immediately close the account, delete the personal data collected (except for records required to be retained under law for the purpose of demonstrating the underage access was identified and addressed), and return any deposited funds.

If you believe a minor has registered on the platform, please contact our support team immediately at support@12phsky.click. We take underage access extremely seriously and will act promptly on any such report.

Parents and guardians who are concerned about underage access to online gaming platforms in the Philippines should also make use of device-level parental controls and internet filtering tools available on Philippine network providers.

11. Your Rights Under RA 10173

As a Philippine citizen and data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 12phsky. To exercise any of these rights, contact our Data Protection Officer at the details in Section 15. We will respond to all rights requests within fifteen (15) business days.

You have the right to request a copy of the personal data that 12phsky holds about you, along with information about why we hold it, how long we intend to keep it, and who it has been shared with. Submit an access request to our DPO and we will provide a structured summary of your data within 15 business days.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For most account information, you can update your details directly through your 12phsky account settings. For KYC documents and identity data, contact our DPO with supporting documentation.

You may request deletion of personal data that 12phsky holds about you where there is no longer a legal or legitimate reason to retain it. Note that data we are legally required to retain under PAGCOR regulations or AMLA (typically for five years) cannot be deleted until those mandatory retention periods expire. All other data — including marketing data and optional profile information — will be deleted within 30 days of a valid erasure request.

You have the right to object to processing of your personal data where 12phsky relies on "legitimate interests" as the legal basis. If you object, we will stop processing for that specific purpose unless we can demonstrate compelling grounds that override your interests. You can also object to processing for direct marketing purposes at any time — see Section 12 on Marketing.

Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, machine-readable format and to have it transferred to another controller where technically feasible. Contact our DPO to make a portability request and we will provide your data in CSV or JSON format within 15 business days.

If you believe 12phsky has not handled your personal data in accordance with RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact our DPO first so we can attempt to resolve your concern directly, but your right to approach the NPC directly is unconditional and absolute.

12. Marketing Communications

12phsky sends marketing communications — including promotional offers, bonus announcements, and platform updates — only to players who have explicitly opted in to receive them. We do not send unsolicited marketing SMS or email.

You can update your marketing preferences at any time through your account settings under "Notifications". Opting out of marketing communications does not affect service-related communications (e.g., transaction confirmations, account security alerts, or regulatory notices) which are sent as part of our contractual and legal obligations.

If you opt out of marketing, your preference will be updated within 48 hours and you will not receive further promotional messages after that point.

13. Cross-Border Data Transfers

In some cases, the technical service providers used by 12phsky may process data on servers located outside the Philippines. Where this occurs, we ensure that adequate safeguards are in place as required by RA 10173, including contractual obligations on the receiving party to protect the data to the same standard as required under Philippine law.

We do not knowingly transfer your personal data to countries that do not offer an adequate level of data protection without ensuring that appropriate safeguards are in place. If you have questions about specific cross-border transfers, contact our DPO.

14. Changes to This Privacy Policy

12phsky may update this Privacy Policy from time to time to reflect changes in our data practices, changes in Philippine law or NPC regulations, or changes to the services we offer. Material changes will be communicated to registered players via email or in-platform notification with a minimum of 14 days' advance notice before taking effect.

The "Effective Date" at the top of this Policy always reflects the date of the most recent version. We encourage you to review this Policy periodically. Continued use of 12phsky after the effective date of any updated Policy constitutes your acceptance of the changes.

15. Contact Us and Data Protection Officer

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a complaint about how 12phsky handles your personal data, please contact our Data Protection Officer:

  • Email: support@12phsky.click (mark your message "Attn: DPO / Privacy Request")
  • Response Time: We aim to respond to all DPO requests within 15 business days as required by RA 10173
  • Language: Filipino and Philippine English
  • Availability: Monday to Friday, 9:00 AM – 6:00 PM PH time (for DPO matters); general customer support is available 24/7 via live chat

For general account, payment, or gameplay queries, our 24/7 live support team is available through the chat widget in your logged-in account dashboard.

Our commitment: Privacy at 12phsky isn't a legal checkbox — it's a genuine commitment to treating Filipino players with respect. Your data helps us operate the platform safely and legally, and we take seriously the trust you place in us every time you share it. If anything in this Policy is unclear or you have concerns, please reach out. We're here to help.

Play Responsibly at 12phsky

Online gaming should always be enjoyable. If it stops feeling fun, 12phsky's responsible gaming tools — deposit limits, session reminders, cool-off periods, and self-exclusion — are available at any time in your account settings. 21+ only. PAGCOR licensed.

Access Responsible Gaming Tools

Your Data is Safe. Now Come Play!

12phsky is PAGCOR licensed, RA 10173 compliant, and built to protect Filipino players. Thousands of kabayan already trust us — tara na, join them today.