Privacy Policy – 24phdream

01 Data Controller

The data controller responsible for your personal information is 24phdream ("the Company," "we," "us," "our"), the operator of the online gaming platform accessible at 24phdream.win. 24phdream is a PAGCOR-regulated online gaming operator operating under Philippine law.

For all privacy-related matters, inquiries, and requests, the 24phdream Data Protection Officer (DPO) can be reached via the contact details set out in Section 13 of this Policy.

This Privacy Policy applies to all personal data processed in connection with your use of the 24phdream platform, including during registration, account management, gaming activity, payment transactions, and customer support interactions.

02 Information We Collect

24phdream collects personal data through several channels. The categories of data collected and the context in which they are gathered are set out below.

24phdream does not collect sensitive personal information (as defined under the Data Privacy Act of 2012) except where strictly required by PAGCOR regulations or applicable Anti-Money Laundering (AML) law, such as government-issued ID data collected during KYC verification.

03 How We Use Your Data

24phdream processes personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we use your data are:

• Account Creation and Management: To register your account, verify your identity, and maintain your account profile on the 24phdream platform;
• KYC and Regulatory Compliance: To verify your age (21+ requirement), identity, and source of funds as required by PAGCOR and Philippine AML regulations (Republic Act No. 9160, as amended);
• Payment Processing: To process your deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, 7-Eleven Cliqq, USDT TRC20, and Coins.ph;
• Gaming Services: To operate the games, record game outcomes, calculate winnings, and apply bonus terms;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other security incidents;
• Responsible Gaming: To monitor gaming patterns, enforce self-exclusion and deposit limits, and provide interventions where problem gambling indicators are detected;
• Customer Support: To respond to your inquiries, resolve disputes, and manage complaints;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted by law. You may opt out of marketing communications at any time.

04 Legal Basis for Processing

24phdream processes your personal data on the following legal grounds as recognized under the Republic Act No. 10173 (Data Privacy Act of 2012):

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to at registration, including account management, payment processing, and game operation;
• Legal Obligation: Processing required to comply with PAGCOR regulatory requirements, AML obligations under RA 9160, and other applicable Philippine laws;
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, and platform integrity — provided such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

05 Data Sharing & Disclosure

24phdream does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances and only to the extent necessary:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, 7-Eleven Cliqq, and other payment service providers receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations;
• Game Providers: MG Live, MT Live, and other game studios receive the technical session data necessary to deliver their games. Game providers do not receive your identity or financial data;
• KYC Verification Services: Identity verification service providers process your government-issued ID and biometric data solely for the purpose of age and identity verification;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies may receive your data where legally required or upon lawful request;
• Fraud Prevention Services: Third-party fraud detection and cybersecurity providers may process technical data (IP address, device fingerprint, session data) to identify and prevent fraudulent activity.

All third-party service providers engaged by 24phdream are bound by contractual data processing agreements requiring them to implement appropriate technical and organizational security measures and to process personal data only on 24phdream's instructions.

06 Cookies & Tracking Technologies

The 24phdream platform uses cookies and similar tracking technologies to ensure proper platform functionality, maintain your session while logged in, and analyze how the platform is used. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function — including session cookies that keep you logged in during your visit. These cannot be disabled without breaking the platform;
• Functional Cookies: Remember your preferences such as language settings and game lobby filters;
• Analytics Cookies: Collect anonymized data about how players navigate and use the platform, used to improve the user experience. These require your consent;
• Security Cookies: Assist in detecting fraudulent activity and protecting account security.

You can manage non-essential cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features on the 24phdream platform.

07 Data Retention

24phdream retains personal data for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable law. Specific retention periods include:

• Account and Identity Data: Retained for the duration of your account plus five (5) years following account closure, as required by PAGCOR and AML regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date, in compliance with Philippine AML record-keeping requirements;
• Gaming Activity Logs: Retained for three (3) years following the date of the recorded activity;
• Customer Support Records: Retained for two (2) years from the date the support interaction was closed;
• Marketing Consent Records: Retained until consent is withdrawn plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

08 Data Security

24phdream implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the 24phdream platform;
• AES-256 encryption for sensitive data at rest, including stored financial and identity data;
• Role-based access controls ensuring that employee access to personal data is limited to what is necessary for their function;
• Regular security audits and penetration testing of the platform infrastructure;
• Two-factor authentication available and recommended for all player accounts;
• Secure data centers with physical access controls and redundant systems.

09 Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by 24phdream:

• Right to Be Informed: The right to know how your personal data is being collected and processed — which this Policy fulfills;
• Right of Access: The right to obtain a copy of the personal data we hold about you;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR regulation and AML law;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller;
• Right to Object: The right to object to processing for direct marketing purposes or processing based on legitimate interests;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, submit a request to the 24phdream Data Protection Officer via the contact details in Section 13. We will respond within thirty (30) days of receiving a verifiable request, as required by the Data Privacy Act.

10 Children's Privacy

Age verification is a mandatory step in the 24phdream registration and KYC process. If you are the parent or guardian of a minor and believe they have registered for or accessed the 24phdream platform, please contact our support team immediately via live chat.

11 International Data Transfers

Where 24phdream engages third-party service providers based outside the Philippines (such as international game studios or cloud infrastructure providers), personal data may be transferred to servers or facilities located in other jurisdictions. All such transfers are conducted in accordance with the requirements of the Data Privacy Act of 2012 and are subject to appropriate safeguards, including:

• Data processing agreements requiring the recipient to implement data protection standards equivalent to those required by Philippine law;
• Transfer only to jurisdictions that the National Privacy Commission recognizes as providing adequate levels of data protection, or under appropriate contractual clauses.

12 Policy Amendments

24phdream reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent platform notice with a minimum of fourteen (14) days' advance notice before taking effect, except where immediate amendment is required by law or regulatory directive.

The date of the most recent update is displayed prominently at the top of this page. Your continued use of the 24phdream platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13 Contact & Complaints

For privacy-related inquiries, data subject rights requests, or formal complaints, please contact the 24phdream Data Protection Officer:

If you are not satisfied with 24phdream's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.