Privacy Policy - Protecting Your Data with Integrity

At PHDREAM, safeguarding your privacy is paramount. This Privacy Policy outlines our unwavering commitment to protecting the personal information of our users within the Philippines, in strict adherence to the regulatory standards set forth by the Philippine Amusement and Gaming Corporation (PAGCOR). We understand the importance of trust in the online gaming environment and are dedicated to transparent practices regarding the collection, use, processing, and protection of your data.

This document details the types of information we gather, how it is utilized to enhance your experience and ensure a secure gaming platform, and the robust measures we employ to keep your data confidential and secure. Our practices are designed to comply with all applicable data protection laws in the Philippines, reflecting our dedication to integrity and responsible operation.

It is crucial for users to understand that our platform may contain links to external websites or services operated by third parties. The platform bears no liability or responsibility for any actions, transactions, or services performed on third-party websites or external links. Users should review the privacy policies of any third-party sites they visit.

Information We Collect

To provide you with a secure, personalized, and seamless online gaming experience, the platform collects various types of information. This collection is essential for account creation, transaction processing, security verification, and compliance with Philippine regulatory requirements, particularly those mandated by PAGCOR. We ensure that all data collected is relevant, necessary, and processed with the utmost care and confidentiality, strictly adhering to data minimization principles.

The information gathered falls into several categories, allowing us to identify users, manage financial transactions, and improve the overall service. This includes direct submissions from you, as well as data automatically generated through your interaction with our services.

Types of Data Collected

• Personal Identifiable Information (PII): This encompasses data that can directly identify you. During registration and account verification, we collect full legal names, dates of birth to confirm age (strict 21+ policy), gender, and government-issued identification details such as SSS, TIN, or passport numbers, as required for Know Your Customer (KYC) protocols under PAGCOR.
• Contact Information: To facilitate communication and provide support, we collect your email address, primary mobile phone number (essential for GCash/PayMaya transaction confirmations and security), and residential address. This information is vital for account recovery and important notifications.
• Financial and Transaction Records: For deposits and withdrawals, we collect details related to your payment methods. This includes GCash or PayMaya account numbers, bank account details for direct transfers, and transaction history. We do not store sensitive payment card details directly on our servers but process them through secure, PCI DSS compliant payment gateways. All financial transactions are meticulously logged for audit, fraud prevention, and regulatory reporting.
• Technical and Device Information: When you access our platform, we automatically collect data about your device and internet connection. This includes your IP address, browser type and version, operating system, device identifiers, and network information. This data helps us optimize your experience, troubleshoot technical issues, and detect suspicious activities.
• Usage Data: We monitor your interactions with our platform, such as pages visited, games played, time spent on certain features, and referral sources. This anonymous aggregate data helps us understand user preferences, improve game offerings, and optimize site navigation.
• Communication Data: Records of your communications with our customer support team via live chat, email, or phone are collected. This helps us address your queries efficiently, train our staff, and maintain service quality.

The collection of this data is fundamental to ensuring a secure and compliant gaming environment. Without this information, particularly PII and financial records, we would be unable to verify your identity, process secure transactions via trusted partners like GCash and PayMaya, or comply with the stringent anti-money laundering (AML) and responsible gaming regulations enforced by PAGCOR. Our commitment extends to processing this data lawfully, fairly, and transparently, ensuring your privacy is upheld at every stage.

How We Use Collected Information

The information collected by our platform is utilized for a multitude of purposes, all aimed at delivering a secure, efficient, and enjoyable online gaming experience while strictly adhering to regulatory obligations. Every use of your data is carefully considered to ensure it aligns with legitimate business interests and legal requirements, particularly those stipulated by PAGCOR. Our overarching goal is to use your data responsibly to manage your account, secure your transactions, and maintain the integrity of our gaming environment.

Purposes of Data Processing

• Account Management and Service Delivery: Your personal and contact information is primarily used to create and manage your user account, provide access to our gaming services, and deliver essential customer support. This includes processing your registration, enabling gameplay, and facilitating seamless navigation across the platform.
• KYC Verification and Regulatory Compliance: We rigorously employ your PII and identification documents for Know Your Customer (KYC) procedures. This is a mandatory requirement under PAGCOR regulations to prevent fraud, money laundering, and underage gambling. Accurate verification ensures that only eligible, legitimate players participate on the platform.
• Payout Processing and Financial Transactions: Financial information, including GCash/PayMaya details and bank accounts, is securely processed to facilitate deposits and withdrawals. We ensure that all transactions are handled with integrity and efficiency, providing a reliable financial ecosystem for our users. Transaction records are maintained for audit trails and dispute resolution.
• Fraud Prevention and Security: Technical data, usage patterns, and transaction histories are continuously monitored to detect and prevent fraudulent activities, unauthorized access, and other security breaches. This proactive approach protects both the platform and its users from potential harm, reinforcing the security architecture.
• Platform Improvement and Personalization: Aggregated and anonymized usage data helps us understand user behavior and preferences. This allows us to continually enhance our services, optimize game offerings, improve website functionality, and personalize your gaming experience, making it more intuitive and engaging.
• Communication and Notifications: We use your contact information to send important updates regarding your account, changes to our terms or policies, and information about promotions or new games that might interest you. You have control over receiving marketing communications.
• Legal and Regulatory Obligations: A significant portion of our data processing is dedicated to fulfilling our legal and regulatory duties as a PAGCOR-licensed operator. This includes reporting suspicious activities to relevant authorities, responding to legal requests, and maintaining records as required by Philippine law and gaming regulations.
• Responsible Gaming Initiatives: While not directly for profit, a portion of our data analysis helps us identify potential signs of problematic gambling behavior. This enables us to direct users to responsible gaming resources, such as the PAGCOR helpline or organizations like Gamblers Anonymous Philippines, as part of our commitment to player welfare.

Every piece of data is treated with the highest level of confidentiality and is only accessed by authorized personnel for specific, outlined purposes. The platform’s data processing activities are regularly reviewed to ensure ongoing compliance and to uphold our pledge to protect your privacy.

Data Protection & 256-bit SSL Encryption Architecture

The security of your personal and financial information is a top priority for our platform. We deploy a multi-layered security framework designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our robust security protocols are in line with industry best practices and adhere to the stringent data protection requirements stipulated by PAGCOR for online gaming operators in the Philippines. We are committed to maintaining the confidentiality and integrity of all user data throughout its lifecycle.

Our Security Measures

• Advanced 256-bit SSL Encryption: All data transmitted between your device and our servers is secured using state-of-the-art 256-bit Secure Socket Layer (SSL) encryption technology. This advanced cryptographic protocol scrambles your information, making it unreadable to unauthorized parties during transmission, effectively safeguarding sensitive details such as login credentials, personal data, and financial transaction details, including those involving GCash and PayMaya.
• Secure Server Infrastructure: Your data is stored on highly secure servers located in protected data centers. These facilities are equipped with physical security measures, including restricted access, surveillance, and environmental controls, to prevent any physical tampering or data loss.
• Firewall Protection: Our network infrastructure is fortified with enterprise-grade firewalls that monitor and control incoming and outgoing network traffic. These firewalls act as a critical barrier, preventing unauthorized access and protecting our systems from external threats and cyber-attacks.
• Access Control Mechanisms: Access to user data is strictly limited to authorized personnel who require it to perform their job functions. Robust access control policies, including multi-factor authentication (MFA) and regular privilege reviews, are enforced to ensure that only approved individuals can handle sensitive information.
• Regular Security Audits and Penetration Testing: We regularly conduct comprehensive security audits, vulnerability assessments, and penetration tests carried out by independent third-party experts. These proactive measures help us identify and address potential security weaknesses before they can be exploited, ensuring our defenses remain robust against evolving cyber threats.
• Data Backup and Disaster Recovery: To prevent data loss and ensure business continuity, we implement regular data backup procedures and maintain a comprehensive disaster recovery plan. This allows us to swiftly restore services and data in the event of unforeseen incidents.
• Employee Training and Awareness: All our employees undergo mandatory and continuous training on data protection best practices, privacy policies, and security protocols. This ensures that our team is well-equipped to handle your data responsibly and recognize potential security risks.

The platform constantly evaluates and updates its security measures to adapt to new technologies and emerging threats. Our dedication to employing 256-bit SSL encryption and other cutting-edge security architectures underscores our commitment to providing a safe and trustworthy environment for all our users in the Philippines, thereby protecting your online gaming experience with utmost vigilance.

Non-Disclosure & Strict Third-Party Data Sharing Policy

Our commitment to your privacy extends to a stringent policy against the unwarranted disclosure or sale of your personal information. The platform known as PHDREAM operates under a principle of minimal and controlled data sharing, ensuring that your data is only shared under specific, legally defined circumstances and with entities that uphold equally rigorous data protection standards. We recognize the sensitivity of your information, especially within the context of online gaming and financial transactions in the Philippines, and we pledge to never sell your personal data to third parties for marketing or any other commercial purposes.

Limited Data Sharing

Your personal information will only be shared with third parties in the following limited and necessary situations, always under strict confidentiality agreements and data processing terms:

• Service Providers: We may engage trusted third-party service providers to perform functions on our behalf, such as payment processing (e.g., GCash, PayMaya, banks), identity verification (for KYC/AML compliance as required by PAGCOR), IT infrastructure maintenance, customer support, and data analytics. These providers are contractually obligated to protect your data with the same level of care and security as we do and are only permitted to use your data for the specific services they are contracted to provide to our platform. They are strictly prohibited from using your data for their own independent purposes or from re-sharing it.
• Legal and Regulatory Requirements: We will disclose your information when mandated by law or a valid legal process, such as a court order, subpoena, or government request from Philippine authorities. This includes compliance with PAGCOR’s regulatory directives, anti-money laundering (AML) laws, and other statutory obligations. Such disclosures are made only to the extent legally required and with appropriate legal counsel.
• Fraud Prevention and Security: In cases where it is necessary to protect the platform, its users, or the public from fraud, security incidents, or illegal activities, we may share relevant information with law enforcement agencies, regulatory bodies, or other industry partners. This includes circumstances where there is a reasonable belief that such disclosure is required to prevent financial crimes or to investigate security breaches.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of the transaction. In such an event, we will notify you and ensure that the acquiring entity adheres to this Privacy Policy or provides an equally protective privacy framework.
• With Your Explicit Consent: We may share your information with third parties if you have provided us with your explicit and informed consent to do so for a specific purpose. You will always be informed about the nature of the data shared and the purpose for which it is being shared before your consent is sought.

Before engaging any third party that processes personal data, we conduct thorough due diligence to ensure they have adequate data protection measures in place. Our contracts with these entities explicitly outline their responsibilities regarding data privacy and security, ensuring they comply with Philippine data protection laws and our internal policies. We remain responsible for the protection of your data even when processed by third parties on our behalf.

User Rights & Data Access Controls

As a user of our platform in the Philippines, you are afforded significant rights concerning your personal data, reflecting our commitment to empowering you with control over your information. We recognize and uphold these rights, ensuring transparency and facilitating easy access for you to manage your privacy settings and data. Our processes are designed to respect the principles of data privacy and enable you to exercise these rights in accordance with Philippine data protection standards.

Your Data Rights

You have the following fundamental rights regarding your personal data held by the platform:

• Right to Access: You have the right to request access to the personal data we hold about you. Upon a verified request, we will provide you with a copy of your data, along with information about how and why we process it, subject to reasonable administrative fees and legal limitations. This allows you to verify the accuracy and lawfulness of our processing.
• Right to Rectification (Correction): If you believe that any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request its correction or update. It is vital for us to maintain accurate records, especially for KYC and financial transactions (GCash/PayMaya), to ensure compliance and prevent service interruptions.
• Right to Erasure (Deletion/Blocking): Under certain circumstances, you have the right to request the deletion or blocking of your personal data. This right can be exercised if the data is no longer necessary for the purposes for which it was collected, if you withdraw consent, or if the data has been unlawfully processed. However, please note that this right is subject to legal and regulatory obligations, such as data retention periods mandated by PAGCOR for audit and AML purposes, which may prevent immediate or complete erasure.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under specific conditions. This may apply if you contest the accuracy of your data, if the processing is unlawful, or if we no longer need the data but you require it for legal claims.
• Right to Object to Processing: You have the right to object to the processing of your personal data when it is based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will cease processing your data for that purpose.
• Right to Data Portability: Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance from us. This applies to data processed by automated means based on your consent or for the performance of a contract.

Exercising Your Rights

To exercise any of these rights, please submit a formal request to our dedicated Data Protection Officer or customer support team through the contact channels provided on our website. To protect your privacy and security, we will require you to verify your identity before processing any request. We are committed to responding to all legitimate requests within a reasonable timeframe, typically within thirty (30) days, in compliance with applicable data protection laws in the Philippines. We will inform you if we need more time or if we are unable to fulfill your request due to legal or regulatory reasons, providing a clear explanation.

Please be aware that exercising certain rights, such as the right to erasure, may impact your ability to use our services fully, especially where data is essential for account functionality or regulatory compliance.

Protection of Minors

The platform maintains an unequivocally strict policy against underage gambling, fully adhering to the legal age requirements for online gaming in the Philippines as stipulated by PAGCOR. Our services are exclusively intended for individuals who are twenty-one (21) years of age or older. The protection of minors from the potential harms associated with gambling is a fundamental principle of our responsible gaming framework and a critical aspect of our operational integrity.

Age Verification Protocols

To enforce our strict age policy, we implement robust and multi-layered age verification protocols at various stages:

• Registration Verification: During the account registration process, all prospective users are required to declare their date of birth. This initial declaration is further substantiated by the submission of valid government-issued identification documents, such as a passport, driver's license, or national ID, which clearly display the user's date of birth. Our KYC (Know Your Customer) team meticulously reviews these documents to confirm that the individual meets the minimum age requirement of 21 years old.
• Automated Checks: We utilize advanced third-party verification tools that cross-reference submitted data with public records and databases to detect any discrepancies in age or identity information. These automated checks serve as an additional layer of defense against fraudulent age declarations.
• Ongoing Monitoring: Our systems are designed to continuously monitor accounts for any indicators of underage activity. If at any point during a player's engagement with the platform suspicion arises regarding their age, their account will be immediately suspended, and a further, more intensive verification process will be initiated.
• Consequences of Underage Gaming: Any account found to belong to a minor (under 21 years old) will be immediately closed, and all associated funds and winnings will be confiscated, in line with PAGCOR regulations and anti-fraud measures. We reserve the right to report such instances to relevant authorities.

We actively encourage parents and guardians to play an active role in monitoring their children's online activities. To assist in this endeavor, we recommend the use of internet filtering software and parental control tools that can prevent minors from accessing gambling websites. Furthermore, we advocate for awareness regarding responsible gaming and provide resources for those who may be affected by underage gambling or gambling addiction.

As part of our broader responsible gaming initiatives, we strongly support organizations like Gamblers Anonymous Philippines and the PAGCOR Responsible Gaming Helpline, which offer support and guidance to individuals and families impacted by gambling-related issues. Our platform is dedicated not only to preventing underage access but also to fostering a safe and responsible gaming environment for all eligible adults.

Cookies & Tracking Technologies

Our platform, like most modern websites, utilizes cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and support our operational functions. This section explains what cookies are, how we use them, and your choices regarding their management, all while maintaining transparency and adhering to privacy best practices.

Understanding Our Use of Cookies

A cookie is a small text file that is stored on your computer or mobile device when you visit a website. It allows the website to remember your actions and preferences (such as login, language, font size, and other display preferences) over a period, so you don't have to keep re-entering them whenever you come back to the site or browse from one page to another. Cookies are fundamental to the functionality and user experience of many online services.

We use various types of cookies for several purposes:

• Strictly Necessary Cookies: These cookies are essential for the operation of our website. They enable core functionalities such as security, network management, and accessibility. Without these cookies, services like logging in, accessing secure areas of your account, or making transactions (including GCash/PayMaya deposits) cannot be provided. These cannot be switched off in our systems.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, for instance, which pages visitors go to most often, and if they get error messages from web pages. These cookies do not collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. They are used only to improve how the website works. We use this data to understand site traffic, user engagement, and to make informed decisions about content and feature development, ensuring a better experience for our Philippine user base.
• Functionality Cookies: These cookies allow our website to remember choices you make (like your username, language, or the region you are in) and provide enhanced, more personal features. For example, by remembering your preferences, we can tailor content to you. They may also be used to provide services you have asked for, such as watching a video or commenting on a blog. The information these cookies collect may be anonymized, and they cannot track your browsing activity on other websites.
• Advertising and Targeting Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and help measure the effectiveness of the advertising campaigns. They are usually placed by advertising networks with the website operator's permission.

Your Choices Regarding Cookies

You have the right to decide whether to accept or reject cookies. You can exercise your cookie preferences by adjusting the settings on your web browser. Most browsers allow you to refuse all cookies or to accept only certain types of cookies. However, please note that if you choose to decline strictly necessary cookies, it may affect the functionality and accessibility of our services, potentially preventing you from fully utilizing all features of the platform.

For more detailed information on how to control or delete cookies, we recommend visiting your browser's help pages or websites like AllAboutCookies.org. Our commitment is to use cookies responsibly, enhancing your experience without compromising your privacy.

Data Retention Schedule & Policy Updates

Our platform is committed to retaining your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. This commitment aligns with data minimization principles and the regulatory expectations set by PAGCOR for licensed online gaming operators in the Philippines. We have established a comprehensive data retention schedule to ensure that your information is not held for longer than required.

How Long We Keep Your Data

The specific period for which we retain different categories of personal data varies depending on several factors:

• Legal and Regulatory Obligations: We are legally mandated to retain certain types of data for specific periods. For instance, financial transaction records (including those involving GCash and PayMaya), account activity logs, and KYC verification documents must be kept for a minimum period as stipulated by anti-money laundering (AML) laws and PAGCOR regulations. These periods typically range from five (5) to ten (10) years after the cessation of the customer relationship, to facilitate audits, investigations, and ensure compliance.
• Contractual Requirements: Data necessary for the performance of our contractual obligations with you, such as maintaining your account balance or processing outstanding withdrawals, will be retained until those obligations are met.
• Business Operations: We retain data that is essential for our legitimate business operations, such as for fraud prevention, internal reporting, and service improvement, for a period that is consistent with those purposes. Anonymous or aggregated data, which cannot identify you, may be retained indefinitely for analytical purposes.
• Dispute Resolution: If there are ongoing disputes, legal claims, or investigations, we will retain relevant data until such matters are resolved.
• Consent: Where we process data based on your consent, we will retain it until you withdraw your consent, or until the purpose for which the data was collected has been fulfilled.

Once the retention period expires, your personal data will either be securely deleted or anonymized so that it can no longer be associated with you. Our data disposal methods are robust and designed to prevent unauthorized access or reconstruction of the data.

Revisions to This Policy

The digital landscape and regulatory environment are constantly evolving. As such, we may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal or regulatory requirements (especially PAGCOR directives), or technological advancements. We reserve the right to modify this policy at any time, and such modifications will be effective immediately upon their posting on this website.

We will notify you of any significant changes to this Privacy Policy through appropriate communication channels, such as email or prominent notices on our platform, before the changes become effective. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the platform after any modifications signifies your acceptance of the updated policy.