phdrean Privacy Policy

1. Introduction

phdrean ("phdrean," "we," "us," or "our") operates the online gaming platform accessible at phdrean.org (the "Platform"). We are committed to protecting the privacy and personal data of all users who access or register on the Platform. This Privacy Policy ("Policy") describes how phdrean collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform.

This Policy applies to all personal data collected through the Platform, including data provided during account registration, during the course of gameplay, through customer support interactions, and through your use of payment services on the Platform. It applies to all registered users, prospective users, and visitors to the Platform.

By accessing the Platform or creating a phdrean account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read together with phdrean's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

phdrean collects the following categories of personal data from users of the Platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license)
• Username and encrypted password

2.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (including barangay, city/municipality, province, and postal code)

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash mobile number, PayMaya account reference, bank account name and last four digits for BPI, BDO, and Metrobank)
• Account balance history
• Bonus and promotional credit records

2.4 Gaming & Behavioral Data

• Game history, bet amounts, and outcomes
• Session duration and frequency of play
• Responsible gaming tool usage (e.g., deposit limits, self-exclusion requests)
• Bonus and promotion participation records

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Unique device identifiers
• Log data including access times, pages viewed, and error reports

2.6 Communications Data

• Records of your communications with phdrean customer support, including live chat transcripts and email correspondence
• Survey responses and feedback submitted through the Platform

3. How We Collect Your Data

phdrean collects your personal data through the following means:

• Directly from you: When you register for a phdrean account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: When you access and use the Platform, we automatically collect technical and behavioral data through cookies, web beacons, and similar tracking technologies. See Section 7 for more details.
• From third parties: phdrean may receive data about you from identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and PAGCOR or other regulatory authorities where required by law.

4. How We Use Your Personal Data

phdrean uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and login data
Age and identity verification (KYC)	Identity data, government ID documents
Processing deposits and withdrawals	Financial and transaction data
Providing and improving gaming services	Gaming, behavioral, and technical data
Fraud prevention and security monitoring	Technical, financial, and identity data
Responsible gaming monitoring and support	Gaming and behavioral data
Customer support and dispute resolution	Communications and transaction data
Regulatory compliance and AML obligations	Identity, financial, and transaction data
Marketing and promotional communications (with consent)	Contact and behavioral data
Platform analytics and performance improvement	Technical and behavioral data (aggregated)

phdrean will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5. Legal Basis for Processing

phdrean processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your phdrean account, process your transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Legitimate interests: Processing is necessary for phdrean's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending you marketing communications or using non-essential cookies, phdrean relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

phdrean does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers

phdrean engages trusted third-party service providers to assist in operating the Platform. These include identity verification and KYC providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, cloud hosting providers, and customer support platform operators. All service providers are contractually bound to process your data only on phdrean's instructions and in accordance with applicable data protection law.

6.2 Game Content Providers

Certain games on the phdrean Platform are provided by licensed third-party game studios. These providers may receive limited technical and gameplay data necessary to deliver their games. They are not permitted to use this data for any purpose other than providing the game service.

6.3 Regulatory Authorities

phdrean is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request or as required by our operating license conditions.

6.4 Law Enforcement

phdrean may disclose your personal data to law enforcement agencies, courts, or other government bodies where required by a valid legal order, warrant, or subpoena issued under Philippine law.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of phdrean's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

7. Cookies & Tracking Technologies

phdrean uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They help us recognize you, remember your preferences, keep your session secure, and understand how you use the Platform.

phdrean uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional cookies: These remember your preferences (such as language settings and display options) to provide a more personalized experience.
• Analytics cookies: These help us understand how users interact with the Platform — which pages are visited most, where users encounter errors, and how navigation flows work. This data is aggregated and anonymized where possible.
• Marketing cookies: With your consent, these cookies track your activity on the Platform to help us deliver relevant promotional content. You may opt out of marketing cookies at any time through your account settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

8. Data Security

phdrean implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and phdrean's servers is encrypted using TLS 1.2 or higher.
• Password hashing: User passwords are never stored in plain text. phdrean uses industry-standard cryptographic hashing algorithms to store password credentials securely.
• Access controls: Access to personal data within phdrean's systems is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Intrusion detection and monitoring: phdrean's systems are continuously monitored for suspicious activity, unauthorized access attempts, and potential security incidents.
• Regular security assessments: phdrean conducts periodic security audits and vulnerability assessments to identify and remediate potential weaknesses in its systems.
• Data minimization: phdrean collects only the personal data that is necessary for the purposes described in this Policy and does not retain data beyond the periods specified in Section 9.

While phdrean takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your phdrean login credentials and for notifying us immediately if you suspect unauthorized access to your account.

9. Data Retention

phdrean retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an ongoing dispute or legal matter.
• Technical and log data: Retained for up to twelve (12) months, after which it is deleted or anonymized.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, phdrean will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phdrean:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed. This Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data phdrean holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data phdrean holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phdrean's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data where phdrean relies on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phdrean has violated your data privacy rights.

To exercise any of the above rights, please contact phdrean's Data Protection Officer using the contact details provided in Section 14. phdrean will respond to all verified data subject requests within thirty (30) days of receipt, as required by Philippine law. We may request proof of identity before processing your request.

11. Children's Privacy

The phdrean Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulatory requirements. phdrean does not knowingly collect personal data from individuals under the age of 21.

If phdrean becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the phdrean Platform, please contact our support team immediately at [email protected] so that we can take appropriate action.

phdrean employs age verification procedures during the registration process and reserves the right to request documentary proof of age at any time. Providing false information about your age during registration constitutes a material breach of phdrean's Terms & Conditions.

12. Cross-Border Data Transfers

phdrean primarily processes and stores your personal data within the Philippines. In certain circumstances, your personal data may be transferred to, or accessed by, service providers or technology partners located outside the Philippines — for example, cloud infrastructure providers or game content suppliers operating internationally.

Where such cross-border transfers occur, phdrean ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.
• Entering into data processing agreements with international service providers that incorporate standard contractual clauses approved by the NPC.
• Conducting due diligence on all international service providers to verify their data protection practices prior to engagement.

By using the phdrean Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

13. Changes to This Privacy Policy

phdrean reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, phdrean will notify registered users via email and/or a prominent notice on the Platform prior to the changes taking effect.

The updated Policy will be published on this page with a revised "Last updated" date. Your continued use of the phdrean Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how phdrean protects your personal data.

If you have any concerns about changes to this Policy, please contact our Data Protection Officer using the details in Section 14 before continuing to use the Platform.

14. Contact & Data Protection Officer

phdrean has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or phdrean's data processing practices, please contact our DPO:

• Data Protection Officer: phdrean Privacy Office
• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 30 days of receipt of your request, as required by Philippine law

If you are not satisfied with phdrean's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.

phdrean is committed to working constructively with the NPC and with our users to resolve any data privacy concerns promptly and transparently.