21phdream
Privacy Policy

This Privacy Policy ("Policy") describes how 21phdream ("we," "us," "our," or "the Platform") collects, uses, stores, discloses, and protects the personal information of players and visitors ("you" or "your") who access or use the 21phdream website, mobile platform, games, and related services (collectively, the "Services").

21phdream is committed to protecting your privacy in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). By registering an account or using our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you do not agree with any part of this Policy, please discontinue use of the 21phdream platform immediately.

21phdream collects personal data that is necessary to provide our Services, comply with legal and regulatory obligations, and maintain the security and integrity of our platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

When you create a 21phdream account, we collect your full legal name, date of birth, gender, nationality, residential address, email address, and mobile number. This information is required to verify your identity, confirm your eligibility to use the platform (including the 21+ age requirement), and comply with Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents

As part of our KYC process, we may collect copies of government-issued identification documents such as your Philippine passport, SSS ID, UMID, PhilHealth ID, driver's license, or Postal ID. We may also collect proof of address documents and proof of payment method ownership where required.

2.3 Financial & Transaction Data

We collect information related to your deposits, withdrawals, and gaming transactions, including payment method details (e-wallet account numbers for GCash and PayMaya, bank account details for BDO, BPI, and Metrobank), transaction amounts in Philippine Peso (PHP), transaction timestamps, and transaction reference numbers. We do not store full card numbers or CVV codes.

2.4 Gaming Activity Data

We collect records of your gaming activity on 21phdream, including games played, wagers placed, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical & Device Data

When you access 21phdream, we automatically collect certain technical data, including your IP address, device type and model, operating system, browser type and version, screen resolution, and time zone. This data helps us optimize platform performance, detect fraud, and ensure platform security.

2.6 Communications Data

We retain records of communications between you and 21phdream, including live chat transcripts, email correspondence, and support ticket histories. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

2.7 Summary of Data Categories

21phdream uses your personal data only for legitimate, specified purposes. The following describes the primary ways in which we process your information:

• Account Management: To create, maintain, and manage your 21phdream player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide access to our gaming services, process deposits and withdrawals in Philippine Peso, credit winnings, apply bonuses, and deliver the full range of 21phdream platform features.
• KYC & Regulatory Compliance: To verify your identity and age (21+ requirement), conduct anti-money laundering (AML) checks, comply with PAGCOR licensing requirements, and fulfill our obligations under Philippine law.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the platform.
• Responsible Gaming: To monitor gaming patterns, identify players who may be at risk of problem gambling, enforce self-exclusion requests, and administer responsible gaming tools such as deposit limits and session time limits.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 support channels.
• Platform Improvement: To analyze usage patterns, conduct research, test new features, and improve the performance, security, and user experience of the 21phdream platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities including PAGCOR and the NPC, and enforce our Terms & Conditions.

Under the Philippine Data Privacy Act of 2012, 21phdream processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 21phdream — specifically, to provide the gaming services you have registered to use, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC and AML obligations under Philippine law, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for 21phdream's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — particularly the sending of marketing communications and the use of non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

21phdream does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Service Providers & Technology Partners

We engage trusted third-party service providers to assist in delivering our Services, including payment processors (GCash, PayMaya, BDO, BPI, Metrobank), game software providers, cloud hosting providers, identity verification services, and customer support platform providers. These parties are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

5.2 Regulatory & Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 21phdream's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.

5.4 Professional Advisors

We may share your data with our legal counsel, auditors, and other professional advisors where necessary for the conduct of our business, subject to strict confidentiality obligations.

21phdream uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on our platform, maintain session continuity, and gather analytics data. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the operation of the 21phdream platform. They enable core functions such as user authentication, session management, and security features. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized information about how players use 21phdream — such as which pages are visited most frequently and how long sessions last. This data helps us improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming tool configurations — to provide a more personalized experience.
• Marketing Cookies: With your consent, we may use cookies to deliver relevant promotional content and track the effectiveness of our marketing campaigns. These cookies are only activated where you have provided explicit consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 21phdream platform. For detailed information on managing cookies in your specific browser, please refer to your browser's help documentation.

21phdream retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with 21phdream, plus a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and Philippine AML regulations.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable law or ongoing regulatory proceedings.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act and BIR record-keeping requirements.
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory reporting purposes.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures. Where data is anonymized rather than deleted, the resulting anonymized data may be retained indefinitely for statistical and analytical purposes.

21phdream implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and the 21phdream platform is protected using 256-bit SSL/TLS encryption. Sensitive data stored in our systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within 21phdream is strictly limited to authorized personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for player accounts and enforce it for all internal administrative access to systems containing personal data.
• Penetration Testing & Audits: Our platform undergoes regular security assessments, penetration testing, and third-party audits to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act.
• Secure Payment Processing: Financial transactions on 21phdream are processed through PCI-DSS compliant payment gateways. We do not store full payment card numbers or CVV codes on our servers.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 21phdream:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, stored, and shared. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data that 21phdream holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account information directly through your 21phdream account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests, subject to applicable legal exceptions.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe that 21phdream has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 13. We will respond to all verified data rights requests within thirty (30) days of receipt, or within such other timeframe as may be prescribed by applicable law.

The 21phdream platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

During the registration process, all players are required to confirm that they are at least 21 years of age. 21phdream conducts identity verification checks to enforce this requirement. Any account found to belong to a person under 21 years of age will be immediately suspended, all winnings will be forfeited, and deposits will be returned in accordance with applicable regulations.

If you are a parent or guardian and believe that a minor has registered an account on 21phdream or provided us with personal data without your consent, please contact us immediately at the details in Section 13. We will take prompt action to investigate and, where confirmed, delete the relevant data and close the account.

21phdream primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud hosting providers, game software vendors, and analytics platforms — may process data in other countries.

Where personal data is transferred outside the Philippines, 21phdream ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable in the Philippines, or reliance on the receiving country's adequacy determination by the NPC.

By using the 21phdream platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the delivery of our Services, subject to the safeguards described above.

21phdream reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify you by posting the updated Policy on this page with a revised "Last Updated" date, and — where the changes are significant — by sending a notification to your registered email address or displaying a prominent notice on the 21phdream platform.

We encourage you to review this Privacy Policy periodically to stay informed about how 21phdream protects your personal data. Your continued use of the platform following the posting of an updated Policy constitutes your acceptance of the revised terms.

If you disagree with any changes to this Policy, you should discontinue use of the 21phdream platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 21phdream, please contact our Data Protection Officer (DPO) or our general support team using the details below.

Our DPO is responsible for overseeing 21phdream's compliance with the Data Privacy Act of 2012 and for handling all data rights requests and privacy-related inquiries.

We aim to acknowledge all privacy-related inquiries within two (2) business days and to provide a substantive response within thirty (30) days of receipt, or within such other timeframe as may be required by applicable law.

If you are not satisfied with our response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.