phdrram Privacy Policy

1. Introduction

phdrram is committed to protecting the privacy and personal data of all players who use our online casino and sports betting platform. We understand that trust is the foundation of any good relationship – and that's especially true when it comes to how we handle your personal information.

This Privacy Policy applies to all personal data collected through the phdrram website, mobile platform, customer support channels, and any other phdrram service. It explains what data we collect, why we collect it, how we use it, who we share it with, and how long we keep it.

phdrram operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. We take our obligations under this law seriously and have appointed a Data Protection Officer (DPO) to oversee our data privacy practices.

This Privacy Policy should be read alongside phdrram's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

phdrram collects the following categories of personal data from players:

phdrram does not collect sensitive personal information (as defined under the Data Privacy Act) such as health records, political opinions, or religious beliefs, except where strictly required by law or regulation.

3. How We Collect Your Data

phdrram collects personal data through the following means:

• Direct Registration: When you create a phdrram account, you provide identity, contact, and account data directly.
• KYC Verification: When you submit identity documents to verify your phdrram account, we collect identity and KYC verification data.
• Transactions: When you make deposits or withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, or Visa/Mastercard, we collect financial data related to those transactions.
• Platform Use: As you use the phdrram platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies.
• Customer Support: When you contact phdrram via live chat or email, we collect and retain communications data from those interactions.
• Third-Party Sources: In limited circumstances, phdrram may receive data about you from third-party identity verification providers, fraud prevention services, or payment processors, solely for the purpose of verifying your identity or preventing fraud.

4. How We Use Your Personal Data

phdrram uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phdrram player account, including processing your registration and verifying your identity.
• Service Delivery: To provide you with access to phdrram games, promotions, bonuses, and all other platform features.
• Payment Processing: To process deposits and withdrawals through your chosen payment method (GCash, PayMaya, bank transfer, or card).
• KYC & Compliance: To verify your identity and age (21+), comply with anti-money laundering (AML) obligations, and meet other regulatory requirements applicable to online gaming operators in the Philippines.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the phdrram platform.
• Responsible Gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates – but only where you have given your consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform Improvement: To analyze usage patterns and improve the phdrram platform's features, performance, and user experience.
• Legal Obligations: To comply with applicable Philippine laws, regulations, court orders, and requests from competent authorities.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phdrram processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and phdrram (i.e., to provide the gaming services you have registered for).
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and gaming regulatory requirements.
• Legitimate Interests: Processing is necessary for phdrram's legitimate interests, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, phdrram relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Disclosure

phdrram does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard, and other payment service providers, to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers who assist phdrram in verifying player identities and ages.
• Game Providers: Software providers whose games are available on the phdrram platform may receive limited technical data necessary to deliver their games to you.
• Fraud Prevention Services: Third-party fraud detection and prevention services that help phdrram identify and prevent fraudulent activity.
• Regulatory Authorities: Philippine government agencies, including the National Privacy Commission, gaming regulators, and law enforcement authorities, where disclosure is required by law or court order.
• Professional Advisors: Legal counsel, auditors, and other professional advisors who are bound by confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of phdrram's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom phdrram shares personal data are required to handle that data in accordance with applicable data protection laws and phdrram's data processing requirements.

7. Cookies & Tracking Technologies

phdrram uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and deliver relevant content. The following types of cookies are used:

• Essential Cookies: Strictly necessary for the phdrram platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Analytics Cookies: Used to collect anonymized data about how players use the phdrram platform, helping us identify areas for improvement. These are only set with your consent.
• Preference Cookies: Used to remember your platform preferences, such as language settings and display options.
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your explicit consent.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the phdrram platform. For detailed information on the specific cookies used by phdrram, please refer to the cookie notice available in your phdrram account settings.

8. Data Retention

phdrram retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your phdrram account and for a minimum of 5 years after account closure, in accordance with AML and gaming regulatory requirements.
• Financial & Transaction Data: Retained for a minimum of 5 years from the date of the transaction, as required by Philippine AML regulations.
• KYC Verification Documents: Retained for a minimum of 5 years after account closure or the last transaction, whichever is later.
• Communications Data: Support chat logs and email correspondence are retained for up to 3 years from the date of the interaction.
• Technical & Usage Data: Retained for up to 24 months from collection, after which it is anonymized or deleted.
• Marketing Consent Records: Retained for as long as you remain subscribed to phdrram marketing communications, plus 1 year after opt-out to demonstrate compliance.

When personal data is no longer required, phdrram securely deletes or anonymizes it in accordance with our data disposal procedures.

9. Data Security

phdrram implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the phdrram platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal and financial data stored in phdrram's systems is encrypted at rest.
• Access Controls: Access to personal data is restricted to phdrram personnel and authorized third parties who have a legitimate need to access it, and is governed by strict role-based access controls.
• Regular Security Audits: phdrram conducts regular security assessments and penetration testing to identify and address potential vulnerabilities.
• Two-Factor Authentication: phdrram supports two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Staff Training: All phdrram personnel who handle personal data receive regular data privacy and security training.

While phdrram takes all reasonable steps to protect your data, no system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, phdrram will notify you and the National Privacy Commission as required by the Data Privacy Act of 2012.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phdrram:

• Right to Be Informed: You have the right to be informed about how phdrram collects and uses your personal data – which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data phdrram holds about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data phdrram holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phdrram's legal retention obligations.
• Right to Object: You have the right to object to phdrram's processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phdrram has violated your data privacy rights.

11. Children's Privacy

The phdrram platform is strictly intended for adults aged 21 years and older, in accordance with Philippine regulations applicable to casino-style online gambling. phdrram does not knowingly collect personal data from individuals under the age of 21.

If phdrram discovers that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, void any transactions, and delete the personal data in question. If you believe a minor has registered on the phdrram platform, please contact our support team immediately.

12. International Data Transfers

phdrram primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines – for example, cloud infrastructure providers or international game software providers.

Where such transfers occur, phdrram ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to maintain data protection standards equivalent to those required under Philippine law. phdrram will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without implementing appropriate safeguards.

13. Updates to This Privacy Policy

phdrram may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this Policy, we will update the effective date at the top of this page and, where appropriate, notify you via email or an in-platform notification.

Your continued use of the phdrram platform after any update to this Privacy Policy constitutes your acknowledgment of the updated Policy. We encourage you to review this page periodically to stay informed about how phdrram protects your personal data.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phdrram's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government website.