phdream7 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how phdream7 ("phdream7," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "your," or "Player") who access or use the phdream7 platform at phdream7.vip and all associated services (collectively, the "Platform").

phdream7 is committed to protecting the privacy and personal data of all Filipino players in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By registering an account, accessing the Platform, or otherwise providing your personal information to phdream7, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the phdream7 Platform.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, phdream7 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Platform.

As the Personal Information Controller, phdream7 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

3 Data We Collect

phdream7 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify you are at least 21 years of age);
• Philippine mobile number and email address;
• Residential address (province, city, barangay);
• Government-issued ID details (e.g., SSS, PhilHealth, UMID, driver's license, passport number) submitted during KYC verification.

3.2 Financial Data

• GCash or PayMaya / Maya account details linked to your phdream7 account;
• Bank account details (bank name, account number) for withdrawal purposes;
• Debit card details where applicable;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references.

3.3 Account & Gaming Data

• Username and encrypted password;
• Account registration date and login history;
• Game play history, wager amounts, win/loss records, and session durations;
• Bonus and promotion usage history;
• Responsible gaming settings and self-exclusion status.

3.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited, features used, and time spent on the Platform;
• Referring URLs and search terms used to find the Platform;
• Cookie identifiers and session tokens.

3.5 Communications Data

• Records of communications between you and phdream7 customer support, including live chat transcripts, email correspondence, and support ticket history;
• Survey responses and feedback submitted voluntarily.

4 How We Collect Data

phdream7 collects your personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs;
• Third-Party Verification Services: Identity and age verification data obtained from third-party KYC and anti-fraud service providers engaged by phdream7;
• Payment Processors: Transaction confirmation data received from GCash, PayMaya / Maya, and partner banks when you make deposits or withdrawals;
• Regulatory Authorities: Information received from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

5 How We Use Your Data

phdream7 uses your personal data for the following purposes:

phdream7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

6 Legal Basis for Processing

phdream7 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phdream7 (i.e., to operate your account, process transactions, and provide gaming services);
• Legal Obligation: Processing is required to comply with applicable Philippine law, including the Data Privacy Act, Anti-Money Laundering Act (AMLA), and PAGCOR regulatory requirements;
• Legitimate Interests: Processing is necessary for phdream7's legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided such interests are not overridden by your rights;
• Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting us at [email protected].

7 Data Sharing & Disclosure

phdream7 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya / Maya, and partner Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals;
• KYC & Identity Verification Providers: Third-party service providers engaged to verify your identity and age in compliance with Philippine law;
• Anti-Fraud & Security Providers: Service providers that assist phdream7 in detecting and preventing fraudulent activity, money laundering, and other illegal conduct;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or regulatory obligation;
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by phdream7 in connection with legal proceedings or compliance matters;
• Technology Service Providers: Cloud hosting, platform infrastructure, and analytics providers operating under strict data processing agreements with phdream7.

All third parties with whom phdream7 shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only in accordance with phdream7's instructions and applicable Philippine data protection law.

8 Cookies & Tracking Technologies

phdream7 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the Platform.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits you have set.
• Analytics Cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used to deliver relevant promotions and offers based on your activity on the Platform. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no opt-out is available as they are required for the Platform to operate securely.

9 Data Retention

phdream7 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements;
• Financial & Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act;
• KYC & Identity Verification Data: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Technical & Usage Data: Retained for up to thirteen (13) months for analytics purposes, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, phdream7 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10 Data Security

phdream7 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the phdream7 Platform is encrypted using industry-standard SSL/TLS protocols;
• Encryption at Rest: Sensitive personal data, including financial account details and government ID information, is encrypted when stored;
• Access Controls: Access to personal data is restricted to authorized phdream7 personnel on a strict need-to-know basis, enforced through role-based access controls;
• Two-Factor Authentication: Available for player accounts to provide an additional layer of security;
• Regular Security Audits: phdream7 conducts periodic security assessments and penetration testing of its platform infrastructure;
• Incident Response: phdream7 maintains a data breach response procedure and will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act in the event of a notifiable breach.

While phdream7 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

11 Your Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phdream7:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Policy fulfills;
• Right of Access: The right to request a copy of the personal data phdream7 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact phdream7 at [email protected]. We will respond to all verified requests within fifteen (15) business days in accordance with NPC guidelines. We may need to verify your identity before processing your request.

12 Children's Privacy

The phdream7 Platform is strictly intended for individuals who are 21 years of age or older. phdream7 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has provided personal data to phdream7, please contact us immediately at [email protected] so that we can take appropriate action.

13 Third-Party Links

The phdream7 Platform may contain links to third-party websites or services for informational purposes. phdream7 has no control over the content, privacy practices, or data handling of any third-party website and is not responsible for their privacy policies. We encourage you to review the privacy policy of any third-party site you visit.

The inclusion of any link on the phdream7 Platform does not constitute an endorsement of the linked site or its content by phdream7.

14 Policy Updates

phdream7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, phdream7 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Policy will be updated whenever changes are made. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or phdream7's data handling practices, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through its official government channels.