phdream22 Privacy Policy

1. Overview and Scope

phdream22 ("phdream22," "we," "us," "our") operates the online gaming platform accessible at phdream22.app, including all associated mobile applications, subdomains, and related services (collectively, the "Platform"). This Privacy Policy describes how phdream22 collects, processes, stores, shares, and protects personal information provided by users ("you," "your," "Player") when you access or use the Platform.

This Privacy Policy is incorporated by reference into the phdream22 Terms & Conditions. By registering an account or using the Platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

phdream22 is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We take our obligations as a personal information controller seriously and have implemented appropriate technical and organizational measures to safeguard your data.

2. Personal Data We Collect

phdream22 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Identity and Contact Information

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including barangay, city, province, and postal code
• Email address and mobile phone number
• Nationality and country of residence

2.2 Identity Verification Documents

• Government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, Voter's ID)
• Proof of address documents (e.g., utility bills, bank statements dated within 90 days)
• Selfie or live photo for biometric verification purposes
• Tax Identification Number (TIN) where required by applicable regulations

2.3 Financial and Payment Information

• GCash or PayMaya mobile wallet account details
• Bank account information (BPI, BDO, Metrobank, and other Philippine banks) for withdrawal processing
• Transaction history, including deposits, withdrawals, wagers, and winnings
• Source of funds declarations where required for anti-money laundering compliance

2.4 Gaming and Platform Activity Data

• Game history, including games played, wager amounts, outcomes, and session durations
• Bonus and promotion usage history
• Responsible gaming settings, including deposit limits and self-exclusion records
• Customer support interactions and correspondence

2.5 Technical and Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookies and similar tracking technologies (see Section 6)

3. How We Collect Your Data

phdream22 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-Party Sources: Information received from payment processors (GCash, PayMaya, banks), identity verification service providers, fraud prevention services, and regulatory bodies as permitted by law.
• Publicly Available Sources: Information from public records or databases used to verify your identity or comply with anti-money laundering obligations.

4. How We Use Your Personal Data

phdream22 processes your personal data for the following purposes, each grounded in a lawful basis under the Data Privacy Act of 2012:

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, verification data	Contract
Age and identity verification (21+ compliance)	Date of birth, government ID, biometrics	Legal Obligation
Processing deposits and withdrawals	Financial and payment data	Contract
Anti-money laundering (AML) compliance	Transaction history, source of funds	Legal Obligation
Fraud detection and prevention	Technical data, transaction patterns	Legitimate Interest
Responsible gaming monitoring	Gaming activity, self-exclusion records	Legal Obligation
Customer support and dispute resolution	Identity, correspondence, game history	Contract
Platform improvement and analytics	Technical data, usage patterns	Legitimate Interest
Promotional communications (opt-in only)	Contact information, preferences	Consent
Regulatory reporting to PAGCOR and NPC	Identity, transaction, gaming data	Legal Obligation

5. Data Sharing and Disclosure

phdream22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, customer support platforms, and fraud prevention services. All service providers are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

5.2 Regulatory and Legal Authorities

phdream22 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government bodies when required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving phdream22, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

5.4 With Your Consent

We may share your personal data with third parties for purposes not described in this Policy where we have obtained your explicit prior consent. You may withdraw such consent at any time by contacting our Data Protection Officer.

6. Cookies and Tracking Technologies

phdream22 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyze usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations.
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform to help us improve performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and bot traffic on the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary and security cookies cannot be disabled as they are essential to the safe operation of phdream22.

7. Data Retention

phdream22 retains your personal data for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal and regulatory obligations, and resolve disputes. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of the transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• Gaming Activity Data: Retained for 3 years from the date of the activity, or longer if required for dispute resolution or regulatory compliance.
• Customer Support Records: Retained for 2 years from the date of the last interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to applicable legal retention requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

8. Data Security

phdream22 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Multi-factor authentication options for account access
• Regular security audits, vulnerability assessments, and penetration testing
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Real-time fraud monitoring and anomaly detection systems
• Secure data centers with physical access controls and environmental safeguards

While phdream22 takes all reasonable precautions to protect your data, no system is completely immune to security threats. In the event of a personal data breach that poses a real risk to your rights and freedoms, phdream22 will notify the National Privacy Commission and affected users within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phdream22. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 12.

• Right to Be Informed: You have the right to be informed about how your personal data is collected, processed, and used, as described in this Policy.
• Right to Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

phdream22 will respond to all data privacy rights requests within 15 business days of receipt. We may request proof of identity before processing your request to ensure the security of your personal data.

10. Minors and Age Policy

The phdream22 Platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use the Platform in any capacity.

If phdream22 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on phdream22, please contact our Data Protection Officer immediately.

phdream22 employs age verification procedures during the registration process and reserves the right to request additional proof of age at any time. Accounts that fail to verify the 21+ age requirement will be suspended pending verification or permanently closed.

11. Changes to This Privacy Policy

phdream22 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. We will notify registered users of material changes via email or a prominent notice on the Platform at least 7 days before the changes take effect.

The effective date of the current version of this Policy is noted at the top of this page. We encourage you to review this Policy periodically to stay informed about how phdream22 protects your personal data. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Policy.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our designated Data Protection Officer (DPO). Our DPO is responsible for overseeing phdream22's compliance with the Data Privacy Act of 2012 and all related NPC issuances.

You may reach our Data Protection Officer by email at: [email protected]

For general customer support inquiries, you may contact our support team at: [email protected]

Our support team is available 24 hours a day, 7 days a week, and can assist you in both English and Filipino. We aim to acknowledge all data privacy inquiries within 2 business days and resolve them within 15 business days.

For complaints that remain unresolved after contacting phdream22, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through their official channels.