phdream8 Privacy Policy

1.1 phdream8 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that Filipino players trust us not only with their gaming activity but also with sensitive personal and financial information. That trust is something we take seriously — and this Policy is our commitment to transparency about how that information is handled.

1.2 As a personal information controller under the Data Privacy Act of 2012, phdream8 is responsible for determining the purposes and means of processing your personal data. We process personal data only for legitimate, specified, and explicit purposes, and only to the extent necessary to fulfill those purposes.

1.3 This Policy applies to all registered players, prospective players who browse phdream8 without registering, and any individual whose personal data is processed by phdream8 in connection with the operation of the platform. It covers data collected online through the phdream8 website and through any communications you have with our support team.

1.4 This Policy should be read alongside the phdream8 Terms & Conditions, which govern your use of the platform and are incorporated herein by reference.

2.1 phdream8 collects the following categories of personal data from players:

Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Residential address (city, province, region in the Philippines);
• Mobile number registered in your name;
• Email address.

Account & Authentication Data

• Username and encrypted password;
• Security questions and answers (where applicable);
• One-time passwords (OTPs) and session tokens (not stored after use).

Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, driver's license, PhilSys National ID, SSS ID, UMID, voter's ID);
• Selfie or live photo for liveness verification, where required;
• Proof of address documents, where required.

Financial Data

• GCash or Maya account number (mobile number) used for transactions;
• Bank account details (account name, account number, bank name) for bank transfer transactions;
• Debit card details (card number, expiry — processed by our payment provider, not stored by phdream8);
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment methods.

Gaming Activity Data

• Game history, wager amounts, win/loss records, and session durations;
• Bonus claims, wagering progress, and promotional participation;
• Responsible gaming settings (deposit limits, loss limits, self-exclusion status).

Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Pages visited, time spent on pages, and navigation patterns;
• Cookie identifiers and session data (see Section 7).

Communications Data

• Records of your communications with phdream8 customer support, including chat transcripts and email correspondence;
• Feedback, complaints, and survey responses submitted to phdream8.

2.2 phdream8 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about your race, religion, political opinions, health (except where relevant to responsible gaming self-disclosures), or biometric data beyond what is required for KYC liveness checks.

3.1 phdream8 collects personal data through the following means:

• Direct collection: Information you provide when registering for a phdream8 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the phdream8 website, including through cookies, web beacons, and server logs (see Section 7);
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment transaction data from GCash, Maya, and banking partners.

3.2 Where phdream8 collects personal data from third-party sources, we ensure that those third parties have a lawful basis for sharing the data with us and that the data is used only for the purposes described in this Policy.

4.1 phdream8 uses your personal data for the following purposes:

• Account management: Creating and maintaining your phdream8 account, authenticating your identity at login, and managing your account settings and preferences;
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to games and platform features;
• Identity verification (KYC): Verifying that you meet the 21+ age requirement and confirming your identity in compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and other security threats;
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations, the Data Privacy Act of 2012, AML/CTF laws, and any other applicable legal requirements;
• Customer support: Responding to your inquiries, resolving complaints, and providing technical assistance;
• Responsible gaming: Monitoring gaming activity for signs of problem gambling, enforcing deposit and loss limits, and processing self-exclusion requests;
• Marketing and promotions: Sending you information about phdream8 promotions, bonuses, and new games — but only where you have consented to receive such communications. You may opt out at any time;
• Platform improvement: Analyzing usage patterns to improve the phdream8 website, game selection, and user experience;
• Legal proceedings: Establishing, exercising, or defending legal claims involving phdream8.

4.2 phdream8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for the new processing activity.

5.1 Under the Data Privacy Act of 2012, phdream8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and phdream8 — including account creation, game access, and payment processing;
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC/AML obligations, gaming regulations, and data retention requirements;
• Legitimate interests: Processing necessary for phdream8's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and interests;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 phdream8 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and debit card processors — to facilitate deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML screening services used to verify player identity and comply with regulatory requirements;
• Game providers: Licensed third-party game studios and live casino operators whose games are available on phdream8 — limited to data necessary for game delivery and fairness auditing;
• IT and platform service providers: Cloud hosting, cybersecurity, and technical infrastructure providers who process data on phdream8's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law or regulatory instruction;
• Legal and professional advisors: Lawyers, auditors, and compliance consultants engaged by phdream8, subject to professional confidentiality obligations.

6.2 All third parties with whom phdream8 shares personal data are required to process that data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable Philippine data protection law. phdream8 does not transfer personal data outside the Philippines except where necessary and subject to appropriate safeguards.

7.1 phdream8 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies help us recognize returning visitors, maintain session security, and understand how players use the phdream8 platform.

7.2 phdream8 uses the following types of cookies:

• Strictly necessary cookies: Essential for the operation of the phdream8 platform, including session authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set;
• Analytics cookies: Collect anonymized data about how players navigate the phdream8 website, which pages are most visited, and where users encounter difficulties — used solely to improve the platform;
• Marketing cookies: Used to deliver relevant promotional content about phdream8 offers. These are only activated where you have provided consent.

7.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the phdream8 platform. phdream8 does not use third-party advertising networks or share cookie data with external marketing platforms.

8.1 phdream8 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your phdream8 account and for a period of five (5) years after account closure, in compliance with AML record-keeping requirements under Philippine law;
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required by the Anti-Money Laundering Act;
• Transaction records: Retained for five (5) years from the date of each transaction;
• Customer support communications: Retained for three (3) years from the date of the last communication;
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of compliance.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phdream8's data disposal procedures. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

9.1 phdream8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and phdream8 servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Multi-factor authentication (MFA) for phdream8 administrative systems;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Intrusion detection and prevention systems monitoring for unauthorized access attempts;
• Secure data centers with physical access controls and environmental safeguards.

9.2 While phdream8 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phdream8 will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012.

9.3 You are responsible for maintaining the security of your phdream8 account credentials. phdream8 recommends using a strong, unique password and enabling any available two-factor authentication features on your account.

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phdream8:

• Right to be informed: The right to know whether phdream8 holds personal data about you and to receive clear information about how it is processed — which this Policy provides;
• Right of access: The right to request a copy of the personal data phdream8 holds about you, along with information about how it is used;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your phdream8 account settings;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phdream8 has processed your personal data in violation of the Data Privacy Act of 2012.

10.2 To exercise any of the above rights, please contact the phdream8 Data Privacy Officer at the contact details provided in Section 13. phdream8 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10.3 phdream8 may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties. We may ask you to provide a copy of a government-issued ID for this purpose.

11.1 phdream8 is an online gaming platform intended exclusively for adults aged 21 years and above, in accordance with Philippine gaming regulations. phdream8 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

11.2 If phdream8 discovers or is notified that personal data has been collected from an individual under 21, we will immediately terminate the associated account, delete the personal data, and — where applicable — report the matter to the relevant regulatory authority.

11.3 If you are a parent or guardian and believe that your child has registered with phdream8, please contact our support team immediately at the contact details in Section 13. We will investigate and take appropriate action promptly.

12.1 phdream8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, phdream8 will notify registered players via the email address or mobile number on file, and will update the "Last Updated" date at the top of this page.

12.2 We encourage you to review this Policy periodically to stay informed about how phdream8 protects your personal data. Your continued use of the phdream8 platform after the effective date of any update constitutes your acknowledgment of the revised Policy.

12.3 If you disagree with any changes to this Policy, you may request account closure by contacting phdream8 customer support. Upon closure, phdream8 will retain your data only for the minimum period required by applicable law.

13.1 phdream8 has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us:

13.2 If you are not satisfied with phdream8's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official channels.