Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal information collected, processed, and stored by phdram in connection with your use of our online gaming platform, including our website, mobile applications, customer support services, and all related services (collectively, "Services"). By creating an account or accessing phdram Services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

phdram operates as a data controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and is registered with the National Privacy Commission. We are committed to transparent data practices and maintaining the highest standards of data protection for all Filipino players. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of phdram Services.

If you do not agree with any provision of this Privacy Policy, you must not use phdram Services. For questions or concerns about our privacy practices, please contact our Data Protection Officer using the contact information provided in Section 13 of this Policy.

2. Information We Collect

phdram collects various categories of personal information necessary to provide gaming services, ensure account security, comply with legal obligations, and improve user experience. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for a phdram account, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (for verification purposes)
• Contact Information: Email address, mobile phone number, residential address in the Philippines, and postal code
• Account Credentials: Username, password (stored in encrypted format), and security questions for account recovery
• Financial Information: Payment method details including GCash number, Maya account information, bank account numbers, and transaction history
• Communication Records: Contents of your communications with customer support via live chat, email, or other support channels
• Voluntary Information: Optional profile information, gaming preferences, and marketing communication preferences

2.2 Information Collected Automatically

When you access phdram Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information
• Connection Data: IP address, geographic location (country, region, city), internet service provider, and connection type
• Usage Information: Pages visited, features accessed, games played, bet amounts, win/loss records, session duration, click patterns, and navigation paths
• Performance Data: Error logs, crash reports, loading times, and technical diagnostics

2.3 Information from Third Parties

We may receive limited information from third-party sources including payment processors (transaction confirmation and fraud prevention data), identity verification services (age verification and identity authentication), and regulatory authorities (compliance checks and regulatory reporting). We do not receive or use information from social media platforms as phdram does not integrate with social networking services.

3. How We Use Your Information

phdram processes your personal information for specific, legitimate purposes in accordance with Philippine data protection law. We use collected information for the following purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your phdram account
• Verifying your identity and age (21+ requirement) in compliance with PAGCOR regulations
• Processing deposits, withdrawals, and gaming transactions
• Providing access to casino games, sports betting, and other gaming services
• Managing your gaming balance, transaction history, and betting records
• Administering bonuses, promotions, and loyalty programs
• Providing customer support and responding to your inquiries

3.2 Legal Compliance and Regulatory Obligations

• Complying with PAGCOR licensing requirements and gaming regulations
• Meeting anti-money laundering (AML) and know-your-customer (KYC) obligations under the Anti-Money Laundering Act (RA 9160, as amended)
• Preventing fraud, money laundering, and other illegal activities
• Responding to lawful requests from government authorities, courts, and law enforcement
• Maintaining records required by gaming regulations and tax authorities
• Implementing responsible gaming measures and identifying problem gambling patterns

3.3 Security and Fraud Prevention

• Detecting and preventing unauthorized account access
• Identifying suspicious transactions and fraudulent activities
• Monitoring for collusion, bonus abuse, and other terms violations
• Protecting against cyber attacks, hacking attempts, and security threats
• Conducting security audits and vulnerability assessments

3.4 Service Improvement and Analytics

• Analyzing usage patterns to improve platform performance and user experience
• Conducting research and development for new features and services
• Troubleshooting technical issues and optimizing platform stability
• Generating aggregated, anonymized statistics about gaming trends (no personally identifiable data)

3.5 Communication and Marketing

• Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts)
• Providing important service announcements and policy updates
• Sending promotional offers and marketing communications (only with your explicit consent)
• Conducting customer satisfaction surveys (optional participation)

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, phdram must have a lawful basis for processing your personal information. We process your data based on the following legal grounds:

Legal Basis	Processing Purpose
Contractual Necessity	Processing required to provide gaming services under our Terms and Conditions, including account management, transaction processing, and service delivery.
Legal Obligation	Processing mandated by PAGCOR regulations, anti-money laundering laws, tax requirements, and other Philippine legal obligations.
Consent	Processing based on your explicit consent, such as marketing communications, optional features, and non-essential cookies.
Legitimate Interest	Processing necessary for fraud prevention, security measures, service improvement, and business analytics, balanced against your privacy rights.

Where we process data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal of consent may limit your ability to use certain features or services.

5. Data Sharing and Disclosure

phdram does not sell, rent, or trade your personal information to third parties. However, we may share your information with limited categories of recipients under specific circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist with business operations. These providers have access to personal information only as necessary to perform their functions and are contractually obligated to maintain confidentiality and security:

• Payment Processors: GCash, Maya, and banking partners process financial transactions on our behalf
• Identity Verification Services: Third-party KYC providers verify age and identity for regulatory compliance
• Game Providers: Software developers like Evolution Gaming and Pragmatic Play receive limited data necessary to operate their games
• Cloud Hosting Services: Infrastructure providers host our servers and databases in secure Philippine data centers
• Customer Support Tools: Live chat and support platforms process communication records
• Analytics Services: Analytics providers help us understand platform usage through aggregated, anonymized data

5.2 Regulatory and Legal Disclosures

We may disclose personal information when required by law or to protect our legal rights:

• To PAGCOR and other gaming regulators for licensing compliance and regulatory reporting
• To the Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• To law enforcement, courts, or government agencies in response to lawful requests or legal process
• To tax authorities as required by Philippine tax laws
• To external auditors conducting compliance audits

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email and prominent website notice before your information becomes subject to a different privacy policy.

5.4 What We Never Share

phdram will never share your personal information with marketing companies, data brokers, social media platforms for advertising purposes, or unauthorized third parties. We do not participate in cross-platform tracking or targeted advertising networks.

6. Data Security Measures

phdram implements comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security

• Encryption: All data transmissions use 256-bit SSL/TLS encryption. Sensitive data is encrypted at rest using AES-256 encryption.
• Secure Authentication: Multi-factor authentication options, strong password requirements, and session management protect account access.
• Firewall Protection: Enterprise-grade firewalls and intrusion detection systems monitor and block unauthorized access attempts.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments quarterly.
• Secure Development: Our development team follows secure coding practices and conducts code reviews for security vulnerabilities.

6.2 Organizational Security

• Access Controls: Personal information is accessible only to authorized personnel on a need-to-know basis.
• Employee Training: All staff receive data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements.
• Incident Response Plan: We maintain a comprehensive data breach response protocol.

6.3 Physical Security

Our servers are housed in secure Philippine data centers with 24/7 surveillance, biometric access controls, environmental monitoring, and redundant power and cooling systems. Data backups are encrypted and stored in geographically separate secure locations.

7. Data Retention and Deletion

phdram retains personal information only for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal obligations. Retention periods vary based on data category and legal requirements:

7.1 Retention Periods

Data Category	Retention Period
Account Information (Active Accounts)	Duration of account plus 5 years after closure
Transaction Records	7 years from transaction date (tax and AML requirements)
Identity Verification Documents	5 years after account closure (PAGCOR requirement)
Communication Records	3 years from last communication
Marketing Consent Records	Duration of consent plus 2 years after withdrawal
Technical Logs	90 days (unless required for investigation)

7.2 Data Deletion

Upon expiration of the applicable retention period, phdram securely deletes or anonymizes personal information using industry-standard data destruction methods. Deleted data cannot be recovered. Some information may be retained in aggregated, anonymized form for statistical purposes without any association to individual users.

7.3 Account Closure

If you close your phdram account, we will retain certain information as required by PAGCOR regulations and Philippine law (typically 5-7 years for financial and identity records). Marketing data and optional information will be deleted within 30 days of account closure. You may request expedited deletion of non-regulated data by contacting our Data Protection Officer.

8. Your Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information. phdram is committed to honoring these rights and providing accessible mechanisms for exercising them:

8.1 Right to Access

You have the right to obtain confirmation that we are processing your personal information and to access that information. You may request a copy of your personal data in a commonly used electronic format through your account settings or by contacting support.

8.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most account information directly through your phdram account settings. For changes to verified identity information, please contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when it is no longer necessary for the purposes collected, you withdraw consent, or you object to processing. This right is subject to legal limitations where we must retain data for regulatory compliance, legal obligations, or legitimate business purposes (e.g., PAGCOR-mandated record retention).

8.4 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests by demonstrating compelling grounds related to your particular situation.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible. Contact support to request data export.

8.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal may be done through account settings for marketing communications or by contacting support for other consents.

8.7 How to Exercise Your Rights

To exercise any of these rights, log in to your phdram account and access Privacy Settings, contact our customer support team via live chat or email, or write to our Data Protection Officer at the address provided in Section 13. We will respond to all requests within 15 calendar days as required by Philippine law. Identity verification may be required to protect your information.

9. Cookies and Tracking Technologies

phdram uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and maintain security. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including session management, security, and load balancing. These cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: Remember your preferences, language selection, and interface customizations to enhance user experience.
• Analytics Cookies: Help us understand how users interact with phdram by collecting aggregated usage statistics. These cookies do not identify you personally.
• Security Cookies: Detect fraudulent activity, protect against attacks, and maintain account security.

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to refuse all cookies or accept only certain cookies. However, disabling essential cookies will prevent you from using certain features of phdram. We do not use third-party advertising cookies or cross-site tracking technologies.

10. International Data Transfers

phdram primarily stores and processes personal information within the Philippines. However, some service providers may process data in other jurisdictions with adequate data protection standards. Any international data transfers comply with Philippine Data Privacy Act requirements, including appropriate safeguards such as standard contractual clauses and adequacy determinations. We do not transfer data to countries with inadequate data protection without your explicit consent and additional protective measures.

11. Children's Privacy

phdram services are strictly intended for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. Our age verification processes are designed to prevent underage access. If we become aware that we have inadvertently collected information from a person under 21, we will immediately delete that information and close the account. Parents or guardians who believe their child has provided information to phdram should contact us immediately.

12. Changes to This Policy

phdram reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or services. Material changes will be communicated via email to registered users and prominently displayed on our website for at least 30 days before taking effect. The "Last Updated" date at the top of this Policy indicates the most recent revision. Continued use of phdram Services after the effective date of changes constitutes acceptance of the revised Policy. If you do not agree with changes, you must cease using our Services and close your account before the effective date.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact phdram through the following channels:

When contacting us about privacy matters, please include your full name, registered email address, account username (if applicable), and a detailed description of your inquiry or request. We may require identity verification before processing certain requests to protect your personal information.