Privacy Policy

Section 1

Introduction

This Privacy Policy ("Policy") describes how pgdream ("pgdream", "we", "us", or "our"), the operator of the online gaming and sports betting platform at pgdream.net (the "Platform"), collects, uses, stores, discloses, and protects personal information about you ("User", "Player", or "you") when you access or use our Platform.

pgdream takes your privacy seriously. We are committed to handling your personal data with transparency, integrity, and in full compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), and its implementing rules and regulations as administered by the National Privacy Commission of the Philippines ("NPC").

This Policy should be read together with pgdream's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

Section 2

Scope & Application

This Policy applies to all personal data collected by pgdream through any channel or medium, including but not limited to:

• Registration and account creation on the pgdream Platform.
• Use of any games, sports betting markets, or other features on the Platform.
• Deposit and withdrawal transactions processed through the Platform.
• Communications with pgdream's customer support team via live chat or email.
• Participation in promotions, surveys, or bonus programs.
• Visits to and browsing of the pgdream website, including data collected through cookies and similar technologies.

This Policy applies to all Philippine-based users and, where applicable, to any person whose personal data is processed by pgdream in connection with the Platform, regardless of their location. pgdream operates the Platform primarily for users located in the Republic of the Philippines.

Section 3

Data We Collect

pgdream collects various categories of personal data depending on how you interact with the Platform. The following table summarises the main categories of data we collect and the typical source of that data:

Section 4

How We Collect Data

4.1 Data You Provide Directly

The majority of personal data pgdream holds about you is data you provide directly when you register an account, complete identity verification, make a deposit or withdrawal, participate in a promotion, or contact our support team. You are responsible for ensuring that all information you provide is accurate, current, and complete.

4.2 Data Collected Automatically

When you visit and use the pgdream Platform, certain technical data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device information, browser type, pages visited, session duration, and in-game activity. See Section 10 for detailed information on cookies and tracking.

4.3 Data from Third Parties

pgdream may receive personal data about you from third-party sources, including payment processing partners (such as GCash, PayMaya, and bank partners), identity verification service providers, fraud prevention agencies, and regulatory bodies such as PAGCOR. We use such data only for the purposes described in this Policy.

Section 5

How We Use Your Data

pgdream uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your pgdream account, including identity verification and password management.
• Service Delivery: To provide access to games, sports betting markets, and all other Platform features you use.
• Payment Processing: To process deposits, withdrawals, and related financial transactions through your chosen payment method.
• Regulatory Compliance: To meet our obligations under Philippine law, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) compliance, and the Data Privacy Act of 2012.
• Fraud Prevention & Security: To detect, prevent, and investigate fraud, money laundering, cheating, and other prohibited activity on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide ongoing support through our 24/7 live chat and email channels.
• Responsible Gaming: To monitor gaming behaviour, apply responsible gaming tools you have set, and intervene proactively where problem gambling patterns are detected.
• Marketing & Promotions: To send you relevant promotional offers, bonus updates, and Platform news — but only where you have provided your consent to receive marketing communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse usage patterns, fix technical issues, and develop new features that improve your experience on pgdream.
• Legal Claims: To establish, exercise, or defend legal claims in the event of a dispute.

pgdream will not use your personal data for any purpose that is incompatible with the purposes described above without first obtaining your separate, explicit consent.

Section 6

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, pgdream processes your personal data on the following legal bases:

• Consent: Where you have given your freely given, specific, informed, and unambiguous consent to the processing of your personal data — for example, for marketing communications or optional account features.
• Contractual Necessity: Where processing is necessary to perform our contract with you under the pgdream Terms & Conditions — for example, to process your deposits and deliver access to games.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to pgdream — for example, KYC and AML obligations under Philippine law.
• Legitimate Interests: Where processing is necessary for pgdream's legitimate business interests, provided those interests are not overridden by your privacy rights — for example, fraud detection, Platform security, and service improvement analytics.

Section 7

Sharing Your Data

pgdream does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners receive the financial data necessary to process your transactions.
• Identity Verification Providers: Third-party KYC service providers receive identity documents and biometric data solely to verify your identity as required by our compliance obligations.
• Fraud & AML Screening: Fraud prevention and AML compliance platforms may receive data necessary to screen for prohibited activity and satisfy our legal obligations under the Philippine AMLA.
• Game Providers: Third-party game software providers may receive pseudonymised session and gaming data to deliver their games and resolve technical disputes.
• Regulatory Authorities: PAGCOR and other competent Philippine regulatory or law enforcement authorities may receive data where required by law, court order, or lawful regulatory request.
• Professional Advisers: Lawyers, accountants, and auditors may access your data on a confidential basis where necessary for pgdream's legitimate business operations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pgdream's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties who receive your personal data from pgdream are contractually required to handle it securely, use it only for specified purposes, and comply with applicable data protection laws.

Section 8

Data Retention

pgdream retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by Philippine law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with pgdream plus five (5) years after account closure, in accordance with PAGCOR licensing requirements and AML obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Philippine AMLA and tax record-keeping requirements.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last interaction, to allow for dispute resolution and quality assurance.
• Technical & Log Data: Retained for up to twelve (12) months, after which it is anonymised or deleted.
• Marketing Preferences: Retained until you withdraw your marketing consent, after which opt-out records are kept for three (3) years as evidence of your withdrawal.

When personal data is no longer required, pgdream will securely delete or anonymise it in a manner that prevents reconstruction or identification.

Section 9

Data Security

pgdream implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and pgdream servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal and financial data is encrypted at rest using AES-256 encryption on pgdream's secure servers.
• Access Controls: Access to personal data within pgdream is restricted on a strict need-to-know basis. Staff members are granted access only to data necessary for their specific role.
• Regular Security Audits: pgdream's systems are subject to regular internal and third-party security assessments, penetration testing, and vulnerability scanning.
• Staff Training: All pgdream personnel who handle personal data receive mandatory data privacy and security training.
• Incident Response: pgdream maintains a documented personal data breach response procedure. In the event of a breach affecting your data, we will notify the NPC and affected users in accordance with the timelines specified under the DPA.

Section 10

Cookies & Tracking

10.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. pgdream uses cookies and similar technologies (such as web beacons and local storage objects) to make the Platform function correctly, improve performance, and provide a personalised experience.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to operate. These enable core functions such as session management, login authentication, and security. They cannot be disabled without breaking the Platform.
• Performance & Analytics Cookies: Help us understand how users interact with the Platform by collecting anonymised usage statistics. We use this data to identify and fix problems and to improve the overall user experience.
• Functionality Cookies: Remember your preferences such as language settings, game preferences, and responsible gaming limit configurations to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of pgdream marketing campaigns. These are only activated where you have provided your prior consent.

10.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse, delete, or be notified about cookies. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the pgdream Platform, including logging in and accessing your account. For detailed guidance on managing cookies, refer to your browser's help documentation.

Section 11

Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pgdream:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, stored, and shared — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data pgdream holds about you, along with information on how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Object: The right to object to processing of your personal data where that processing is based on legitimate interests or is used for direct marketing purposes.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact pgdream's Data Protection Officer at [email protected] or through our 24/7 live chat. We will respond to all verified requests within fifteen (15) calendar days in accordance with the DPA. We may require proof of identity before processing your request.

Section 12

Children's Privacy

The pgdream Platform is strictly intended for adults aged 21 years and above in accordance with PAGCOR regulations and Philippine gambling laws. pgdream does not knowingly collect, use, or store personal data from any person under 21 years of age.

If pgdream becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the pgdream Platform, please contact us immediately at [email protected].

Section 13

Cross-Border Transfers

pgdream primarily stores and processes personal data within the Republic of the Philippines. However, some of our third-party service providers — including game software providers, cloud infrastructure partners, and fraud prevention services — may be located in or operate from other countries, which may result in your personal data being transferred outside the Philippines.

Where such cross-border transfers occur, pgdream ensures that adequate safeguards are in place to protect your data. These safeguards may include contractual clauses requiring the recipient to apply data protection standards equivalent to those required by Philippine law, or reliance on the recipient country's recognised adequacy determination. pgdream will not transfer your personal data to a country that does not provide an adequate level of protection without first implementing appropriate safeguards and, where required, obtaining your consent.

Section 14

Policy Amendments

pgdream reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where the changes significantly affect your rights, notify registered users via email or an in-Platform notification.

We encourage you to review this Policy periodically to stay informed about how pgdream protects your personal data. Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

Section 15

Contact & DPO

pgdream has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and with the Philippine Data Privacy Act. If you have any questions, concerns, or requests regarding your personal data or this Policy, you may contact pgdream's DPO through the following channels:

• 24/7 Live Chat: Available directly on the pgdream Platform — the fastest way to reach us for urgent data privacy matters.
• Email: [email protected] — for formal written data privacy requests, including access, rectification, erasure, and complaint submissions.

pgdream aims to acknowledge all data privacy requests within three (3) business days and to fully resolve them within fifteen (15) calendar days, as required under the DPA. If you are unsatisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.