phdrem Privacy Policy

Introduction

phdrem ("we," "us," or "our") is committed to protecting the privacy and personal data of all users who access or use the phdrem platform at https://phdrem.com. This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with your use of our online gaming services.

This policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). As a platform operating under PAGCOR regulations, we are also subject to additional data handling requirements imposed by our regulatory framework.

We encourage you to read this Privacy Policy carefully and in full. If you have questions about how phdrem handles your personal data, please contact our Data Protection Officer using the details provided in Section 14.

Data We Collect

phdrem collects personal data that is necessary to provide our gaming services, comply with legal and regulatory obligations, and improve the user experience. The categories of data we collect include:

2.1 Identity and Contact Information

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Government-issued ID number (e.g., PhilSys ID, passport, driver's license)
• Email address
• Mobile number
• Residential address (city, province, postal code)

2.2 Financial Information

• GCash or PayMaya account details (for deposits and withdrawals)
• Bank account information (BPI, BDO, Metrobank, or other supported banks)
• Transaction history, including deposits, withdrawals, and wagers
• Source of funds declarations where required by anti-money laundering regulations

2.3 Account and Gaming Activity

• Username and account credentials (passwords are stored in encrypted form)
• Betting history, game preferences, and session data
• Bonus and promotion usage records
• Responsible gaming settings (deposit limits, self-exclusion status)

2.4 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access logs and timestamps

How We Collect Your Data

phdrem collects your personal data through the following means:

• Registration: When you create a phdrem account, you provide identity, contact, and financial information directly.
• Account Verification: When you submit identity documents for KYC (Know Your Customer) verification.
• Transactions: When you make deposits, place bets, or request withdrawals on the platform.
• Platform Use: Automatically, as you navigate and interact with the phdrem website or app (via cookies, log files, and analytics tools).
• Customer Support: When you contact our support team via live chat or email, we collect the content of your communications.
• Third Parties: From payment processors (e.g., GCash, PayMaya), identity verification providers, and fraud prevention services, where necessary to operate the platform.

How We Use Your Data

phdrem uses your personal data for the following purposes:

phdrem does not use your personal data for automated decision-making that produces significant legal effects without human review, except where required by law or with your explicit consent.

Legal Basis for Processing

phdrem processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the gaming services you have registered for.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements and AML obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent: For certain processing activities (such as marketing communications), we rely on your explicit consent, which you may withdraw at any time.

Data Sharing and Disclosure

phdrem does not sell, rent, or trade your personal data to third parties. We may share your data only in the following circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, IT infrastructure providers, and customer support tools. These providers are contractually bound to handle your data securely and only for the purposes we specify.

6.2 Regulatory and Legal Authorities

We may disclose your data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other government bodies when required by law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. We will notify you of any such transfer.

6.4 With Your Consent

We may share your data with other third parties where you have given explicit consent for such sharing.

Data Retention

phdrem retains your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act.
• Identity Verification Documents: Retained for the duration of your account and for five (5) years after closure.
• Customer Support Records: Retained for three (3) years from the date of the interaction.
• Technical Logs: Retained for up to twelve (12) months, unless required for longer periods for security or legal purposes.

When your data is no longer required, phdrem will securely delete or anonymize it in accordance with our data disposal procedures.

Cookies & Tracking Technologies

phdrem uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our platform.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function correctly. These cannot be disabled without affecting core functionality (e.g., session management, login state).
• Analytics Cookies: Help us understand how users interact with the platform so we can improve performance and usability.
• Preference Cookies: Remember your settings and preferences (e.g., language, display options) to personalize your experience.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorized access.

8.2 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phdrem platform. Refer to your browser's help documentation for instructions on managing cookie preferences.

Data Security

phdrem implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Passwords are stored using strong one-way hashing algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Infrastructure Security: Our servers are hosted in secure data centers with physical access controls, firewalls, and intrusion detection systems.
• Regular Audits: We conduct regular security assessments and vulnerability testing to identify and address potential risks.
• Incident Response: We maintain a data breach response plan. In the event of a breach affecting your rights, we will notify you and the National Privacy Commission as required by law.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials.

Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phdrem:

• Right to Be Informed: You have the right to know what personal data we collect, how we use it, and with whom we share it.
• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: You may object to certain processing activities, including direct marketing.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used format.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 14. We will respond to all valid requests within thirty (30) days.

Children's Privacy

The phdrem platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to the appropriate authorities if required. If you believe a minor has registered on our platform, please contact us immediately at the details in Section 14.

Third-Party Links

The phdrem platform may contain references to third-party services (such as payment providers). These third parties operate under their own privacy policies, which are independent of phdrem's Privacy Policy. We are not responsible for the data practices of third-party services.

We encourage you to review the privacy policies of any third-party services you use in connection with your phdrem account, particularly your chosen payment provider (e.g., GCash, PayMaya, BPI, BDO, or Metrobank).

Changes to This Privacy Policy

phdrem reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on the phdrem platform informing users of the change.
• Where required by law, seek your consent before applying material changes to how we process your data.

Your continued use of the phdrem platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 on the phdrem platform
• Response Time: We aim to respond to all privacy-related inquiries within 30 days

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through their official channels.