phdreams Privacy Policy

phdreams ("phdreams," "we," "us," or "our") operates the online gaming and casino platform accessible at phdreams.net (the "Platform"). We are the data controller responsible for the personal information you provide when you register, play, or otherwise interact with our Platform.

This Privacy Policy explains what personal data phdreams collects from users in the Philippines and elsewhere, why we collect it, how we use and protect it, and what rights you have over your own information. It applies to all users of the phdreams Platform, including registered players, visitors, and anyone who contacts our support team.

If you have any questions about how phdreams handles your personal data, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this policy.

phdreams collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

phdreams collects personal data through the following means:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey, you provide data directly to us.
• Automated Technologies: When you access the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for more details on our cookie practices.
• Third-Party Sources: We may receive data about you from identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and publicly available sources, where permitted by law.
• Responsible Gaming Tools: If you use our self-exclusion, deposit limit, or cooling-off features, we record this data to enforce your preferences and comply with our responsible gaming obligations.

We only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Privacy Policy. We do not collect data speculatively or beyond what is required for our legitimate operational and regulatory needs.

phdreams uses your personal data for the following purposes:

• Account Registration & Management: To create and maintain your player account, verify your identity, and manage your profile settings.
• Service Delivery: To provide access to our games, process wagers, credit winnings, and deliver the core functionality of the phdreams Platform.
• Financial Transactions: To process deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and to process withdrawal requests in Philippine Peso (PHP).
• KYC & AML Compliance: To verify your identity and comply with anti-money laundering (AML) obligations under Philippine law, including the Anti-Money Laundering Act (AMLA) and its amendments.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce self-exclusion and deposit limits you have set, and send responsible gaming reminders where appropriate.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about new games — but only where you have given your explicit consent to receive such communications.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the design, performance, and content of the phdreams Platform.
• Legal & Regulatory Compliance: To comply with applicable Philippine laws, respond to lawful requests from government authorities, and fulfill our obligations to PAGCOR and other regulatory bodies.

Under the Philippine Data Privacy Act of 2012 (RA 10173), phdreams processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your player account, process transactions, and deliver gaming services as described in our Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including KYC and AML obligations under the AMLA, age verification requirements under gaming regulations, and data retention requirements under tax and financial laws.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phdreams does not sell, rent, or trade your personal data. We may share your information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML service providers who assist us in verifying your identity and screening against sanctions lists and politically exposed persons (PEP) databases.
• Technology Partners: Game software providers, cloud hosting providers, and cybersecurity vendors who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where we are legally required to disclose information.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful legal process.
• Professional Advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.

phdreams uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze how our services are used. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits you have set.
• Analytics Cookies: Help us understand how players use the Platform — which games are most popular, where users encounter difficulties, and how we can improve the overall experience. We use aggregated, anonymized data for this purpose.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content. You can opt out of marketing cookies at any time through your browser settings or our cookie preference center.

You can control cookie settings through your browser. Note that disabling certain cookies may affect the functionality of the phdreams Platform. For more information on managing cookies, refer to your browser's help documentation.

phdreams takes the security of your personal data seriously and implements a comprehensive set of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases is encrypted at rest using AES-256.
• Access Controls: Access to personal data is restricted to authorized phdreams personnel who require it to perform their job functions. All staff with access to personal data undergo data privacy training.
• Two-Factor Authentication: We strongly encourage all players to enable two-factor authentication (2FA) on their phdreams accounts to add an additional layer of security.
• Penetration Testing: Our Platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: In the event of a personal data breach, phdreams will notify affected individuals and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with RA 10173.
• Vendor Security: All third-party service providers who process personal data on our behalf are required to maintain security standards equivalent to or exceeding our own.

phdreams retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements under the AMLA.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction, as required by the Anti-Money Laundering Council (AMLC).
• Transaction Records: Retained for five (5) years from the date of each transaction for financial audit and regulatory compliance purposes.
• Support Communications: Retained for two (2) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which it is deleted or anonymized within thirty (30) days.
• Technical Logs: Retained for ninety (90) days for security monitoring and fraud detection purposes, after which they are automatically purged.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. Where anonymization is not technically feasible, data is securely destroyed in accordance with NPC-approved disposal methods.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phdreams:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

The phdreams Platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with Philippine gambling regulations. phdreams does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that your child has registered an account with phdreams, please contact our support team immediately via live chat or by emailing our Data Protection Officer. We will take prompt action to investigate and, where confirmed, delete the account and all associated data.

phdreams employs age verification measures during the registration process, including the collection of date of birth and government-issued identification, to prevent underage access to the Platform.

The phdreams Platform may contain links to third-party websites or services, such as payment provider portals (GCash, PayMaya) or game software provider interfaces. This Privacy Policy applies solely to the phdreams Platform and does not extend to any third-party websites or services.

phdreams is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the phdreams Platform before providing any personal information to those services.

phdreams reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the phdreams Platform informing you of the change
• Where required by law or where changes are significant, notify you directly via email or in-platform notification

Your continued use of the phdreams Platform following the posting of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must cease using the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how phdreams is protecting your personal information. The current version of this policy is always accessible at phdreams.net/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phdreams handles your personal data, please contact our Data Protection Officer (DPO) using the details below:

For general support inquiries unrelated to data privacy, you may also reach our customer service team via the live chat feature available on the phdreams Platform, available 24 hours a day, 7 days a week.

If you are not satisfied with our response to your data privacy request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through its official government channels.