skylot Privacy Policy

skylot is a Philippine-licensed online casino and sports betting platform operating at skylot.net. The platform is owned and operated by a legal entity holding a gaming authorisation issued by the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), skylot acts as the Personal Information Controller in respect of all personal data collected from players and platform visitors.

skylot has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with Philippine data privacy regulations and responding to data subject requests. Contact details for our DPO are provided in Section 15 of this policy.

Our registered support email for privacy matters is [email protected]. We aim to respond to all data privacy enquiries within ten (10) business days.

skylot collects personal information through various touchpoints on the platform. The categories of data we collect are as follows:

2.1 Registration & Identity Data

When you create a skylot account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is necessary to verify your identity, confirm your age eligibility (21+ as required under Philippine law), and create your account record.

2.2 Identity Verification (KYC) Documents

To comply with PAGCOR KYC requirements and Philippine anti-money laundering (AML) obligations under Republic Act No. 9160, we may collect copies of government-issued identification documents such as your Philippine Passport, SSS ID, UMID, or Driver's License, as well as proof of residential address and proof of payment method ownership.

2.3 Financial & Transaction Data

We collect records of deposits, withdrawals, bet placements, game activity, and transaction histories. Payment method details such as GCash wallet references, PayMaya account references, or bank account information are collected and stored in accordance with PCI-DSS standards.

2.4 Device & Technical Data

When you access the skylot platform, we automatically collect your IP address, browser type and version, operating system, device identifiers, and session timestamps. This data is used for fraud prevention, security monitoring, and platform optimisation.

2.5 Behavioural & Usage Data

We collect data on your gaming activity including games played, bet amounts, session durations, wagering patterns, and navigation behaviour on the platform. This data supports responsible gaming monitoring, personalised game recommendations, and platform improvement.

2.6 Communications Data

When you contact our customer support team via live chat, email, or any other channel, we retain records of those communications — including the content of messages and any attachments — for quality assurance, training, and dispute resolution purposes.

skylot uses your personal data for the following purposes:

skylot will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or as otherwise permitted by Philippine law.

Under the Data Privacy Act of 2012, skylot processes your personal data on the following lawful grounds:

• Contractual necessity: Processing required to perform the agreement between you and skylot — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws and regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications and personalised promotions, where you have provided clear, specific, and freely given consent. You may withdraw this consent at any time.

skylot does not sell your personal data. We may share your information with the following categories of third parties only to the extent necessary and with appropriate safeguards in place:

• PAGCOR and regulatory authorities: As required under our gaming license and applicable Philippine law, we are obligated to provide player records, transaction data, and compliance reports to PAGCOR and other relevant government bodies upon lawful request.
• Financial intelligence units and law enforcement: Where required by the Anti-Money Laundering Act or by court order, we may disclose financial and identity data to the Anti-Money Laundering Council (AMLC) or law enforcement agencies.
• Payment processing partners: To facilitate GCash, PayMaya, BPI, BDO, Metrobank, Instapay, and PESONet transactions, necessary transaction data is shared with payment service providers operating under their own data protection frameworks.
• KYC and identity verification providers: Third-party identity verification services may process copies of your identity documents to assist in our KYC obligations. These providers are contractually bound to handle your data securely and in compliance with the Data Privacy Act.
• Game content providers: Game software providers may receive anonymised session data to support game functionality and integrity. No personally identifiable information is shared with game providers for marketing purposes.
• IT infrastructure and cloud providers: Our hosting and cloud infrastructure partners process data on our behalf under data processing agreements that require compliance with equivalent data protection standards.

skylot's primary data infrastructure is located within the Philippines. In cases where operational requirements necessitate the transfer of personal data to service providers operating outside the Philippines — such as cloud infrastructure or cybersecurity monitoring services — skylot ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act and applicable NPC regulations on cross-border data transfers.

Before transferring personal data internationally, skylot verifies that the recipient jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards (such as Standard Contractual Clauses adapted for the Philippine context) are in place. You may request further information about specific transfer mechanisms by contacting our Data Protection Officer.

skylot retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following retention guidelines apply:

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Where anonymisation is not feasible due to the nature of the data format, secure destruction protocols are applied.

skylot uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively. The cookies we use fall into the following categories:

• Essential cookies: Required for platform functionality, including maintaining your logged-in session, remembering your language preferences, and ensuring secure authentication. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the skylot platform. This data helps us identify usability improvements and optimise the player experience. No personally identifiable information is included in analytics reports.
• Fraud prevention cookies: Used to detect and prevent fraudulent behaviour, including the identification of suspicious login patterns, device fingerprinting for multi-account detection, and bot traffic filtering.
• Preference cookies: Used to remember your platform settings and preferences between sessions, such as your preferred game categories or display settings.

skylot does not use third-party advertising cookies or retargeting pixels. You can manage cookie preferences through your browser settings. Note that disabling essential cookies may impact the functionality of your skylot account.

skylot takes the security of your personal data seriously and has implemented a layered set of technical and organisational safeguards appropriate to the sensitivity of the data we process:

• Encryption in transit: All communications between your browser or app and skylot servers are protected using TLS 1.3 encryption. Our domains enforce HTTPS with HSTS headers to prevent downgrade attacks.
• Encryption at rest: Sensitive data — including identity documents, payment references, and authentication credentials — is stored using AES-256 encryption on secured, access-controlled servers.
• Access controls: Access to personal data within skylot's internal systems is restricted on a strict need-to-know basis using role-based access controls (RBAC). All internal access is logged and auditable.
• Password security: Player passwords are hashed using bcrypt with an appropriate cost factor. skylot never stores passwords in plain text.
• Intrusion detection: Our infrastructure is monitored 24/7 by automated intrusion detection and prevention systems (IDS/IPS). Anomalous activity triggers immediate security alerts for investigation.
• Regular security audits: skylot conducts periodic penetration testing and vulnerability assessments conducted by qualified independent security professionals.

As a data subject under Republic Act No. 10173, you have the following rights in relation to the personal data that skylot holds about you. These rights may be subject to certain limitations where processing is required by law or for legitimate regulatory purposes.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request". We will respond within ten (10) business days. Identity verification may be required before processing your request to protect against unauthorised disclosure.

The skylot platform is strictly intended for adults aged 21 years and older, in compliance with Philippine gambling regulations. skylot does not knowingly collect personal information from individuals under the age of 21. All account registrations are subject to date-of-birth verification, and KYC procedures are designed to identify and prevent underage access.

If skylot discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated balances will be forfeited, and the personal data will be securely deleted from our systems, except where retention is required for regulatory investigation purposes.

Parents and guardians who believe a minor has registered on the skylot platform should contact our support team immediately at [email protected]. We will prioritise such reports and take immediate remedial action.

The skylot platform may contain links to third-party websites or services — for example, links to PAGCOR's official website or NPC resources. These external sites are not operated by skylot, and we have no control over their content or privacy practices. This Privacy Policy applies solely to data collected and processed by skylot through the skylot.net platform. We encourage you to review the privacy policies of any third-party sites you visit through links from our platform.

skylot may send you promotional communications — including bonus offers, tournament announcements, and platform updates — via email and SMS, but only where you have given explicit opt-in consent during registration or subsequently through your account preferences.

You may withdraw consent for marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email;
• Updating your notification preferences in your skylot account dashboard; or
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Withdrawing marketing consent will not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and mandatory regulatory communications — which are sent as a core part of your account service.

skylot reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect your rights or the way we process your data — we will notify registered players via email or through an in-platform notification at least seven (7) days before the changes take effect. For non-material changes, the updated policy will be published on this page without separate notice.

Your continued use of the skylot platform after any revision to this policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Privacy Policy, you may request account closure by contacting our support team.

For all privacy-related enquiries, data subject requests, or concerns regarding this Privacy Policy, please contact skylot's Data Protection Officer directly. Our DPO is available to assist you with any questions about how your personal data is collected, used, and protected.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for enforcing the Data Privacy Act of 2012 and protecting the data privacy rights of Filipino citizens.