Your privacy matters to us. This Privacy Policy describes the personal information we collect, why we collect it, how it is used, and the rights you have under Philippine data privacy law.
A plain-English summary of how 24phdream protects your personal data and respects your privacy rights as a Filipino player.
All personal data collected by 24phdream is stored on encrypted servers. We apply access controls and regularly audit our data security infrastructure to prevent unauthorized access.
24phdream does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data sharing is limited to service delivery and legal obligations.
This Privacy Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
You have the right to access, correct, object to, and request deletion of your personal data. 24phdream processes all data subject requests within the timeframes prescribed by law.
Where processing relies on your consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing already carried out prior to withdrawal.
Players may opt out of promotional communications at any time by updating notification preferences in account settings or by contacting 24phdream support directly.
Jump to any section of the 24phdream Privacy Policy.
1.1 Scope. This Privacy Policy applies to personal data collected, used, stored, and processed by 24phdream in connection with your registration, use of the Platform, and any communications between you and 24phdream, including support interactions conducted via live chat, email, or any other channel.
1.2 Data Controller. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 24phdream is the personal information controller (PIC) in respect of your personal data. Our designated Data Protection Officer (DPO) can be reached using the contact information in Section 12 of this Policy.
1.3 Third-Party Platforms. This Policy does not extend to third-party services, websites, payment processors, or game providers whose own privacy policies govern their respective data practices. We encourage you to review the privacy policies of any third-party service you use in connection with your 24phdream account, including GCash, Maya, and BPI Online.
2.1 Categories of Personal Data. 24phdream collects and processes the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, selfie/photo for KYC | Registration; KYC verification |
| Contact Data | Philippine mobile number, email address, city of residence | Registration; account updates |
| Financial Data | GCash/Maya account number linked to deposit, BPI/BDO account details for withdrawals, transaction history | Deposit; withdrawal; KYC |
| Gaming Data | Bet history, game session logs, win/loss records, bonus activity, balance movements | All gaming activity |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Every Platform visit |
| Communications Data | Live chat transcripts, support email contents, survey responses | Support interactions |
| Preference Data | Notification preferences, favorite games, language settings, responsible gaming settings | Account settings updates |
2.2 Sensitive Personal Information. The KYC identity verification process requires 24phdream to process government-issued identification documents that may contain sensitive personal information as defined under the Data Privacy Act. This processing is necessary to comply with Philippine anti-money laundering regulations and PAGCOR operational requirements and is subject to heightened security controls.
3.1 Direct Collection. The majority of personal data 24phdream holds about you is provided directly by you during the following interactions:
3.2 Automated Collection. Certain technical data is collected automatically when you access the Platform, through the use of cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser information, session duration, and pages visited. See Section 6 of this Policy for full details on cookies and tracking.
3.3 Third-Party Sources. In limited circumstances, 24phdream may receive personal data from third parties where this is necessary for identity verification or fraud prevention, such as information from payment processors confirming the ownership of a GCash or Maya account, or publicly available information used in the context of anti-money laundering screening.
4.1 Contractual Necessity. The majority of personal data processing by 24phdream is necessary for the performance of the contract between you and 24phdream (i.e., the Terms & Conditions). This includes:
4.2 Legal Obligation. Certain processing is required to comply with applicable Philippine law, including:
4.3 Legitimate Interests. 24phdream processes certain data on the basis of its legitimate interests, which in each case are balanced against your privacy rights. This includes fraud detection and prevention, platform security monitoring, and internal analytics to improve game performance and user experience.
4.4 Consent. Where we send marketing communications or promotional notifications — including offers tied to PBA seasons, sabong events, or special holiday promotions — we do so on the basis of your consent, which you may withdraw at any time through your account notification settings.
5.1 Service Providers. 24phdream shares personal data with trusted third-party service providers who assist in operating the Platform. These include payment processors (GCash, Maya, BPI, BDO), KYC identity verification providers, game software suppliers, cloud hosting and data storage providers, and customer support technology platforms. All such providers are contractually bound to process your data only as instructed and to maintain appropriate security measures.
5.2 Regulatory and Law Enforcement Authorities. 24phdream will disclose personal data to government agencies, regulatory bodies (including PAGCOR), and law enforcement authorities where required to do so by Philippine law, court order, or applicable regulation. This includes mandatory reporting obligations under the AMLA and PAGCOR licensing conditions.
5.3 Prohibition on Sale of Data. 24phdream does not sell, rent, or trade your personal information to any third party for their own commercial or marketing purposes. This prohibition applies regardless of any commercial consideration or inducement offered.
5.4 Business Transfers. In the event of a merger, acquisition, sale of assets, or restructuring of 24phdream's business operations, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained. Affected Players will be notified of any such transfer and of any material changes to the processing of their data that may result.
6.1 What Are Cookies. Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to recognize your device across visits, maintain your login session, and collect usage information to improve platform performance.
6.2 Types of Cookies Used. 24phdream uses the following categories of cookies:
6.3 Managing Cookies. You can configure your browser to block or delete cookies. Note that disabling strictly necessary cookies may affect Platform functionality, including your ability to remain logged in during a gaming session. Browser-level cookie controls vary by browser and device.
7.1 Active Accounts. Personal data associated with an active 24phdream account is retained for the duration of the account's existence and for a minimum period of five (5) years following permanent account closure. This retention period reflects 24phdream's obligations under Philippine anti-money laundering regulations, which require transaction and identity records to be maintained for a minimum of five years.
7.2 Inactive Accounts. Where a 24phdream account has been inactive (no login, deposit, or gameplay activity) for a continuous period of twenty-four (24) months, 24phdream will send a notification to the registered email address advising that the account will be classified as dormant. Dormant accounts remain subject to the same data retention obligations as active accounts for the purposes of regulatory compliance.
7.3 Support Communications. Records of customer support interactions — including live chat transcripts and support emails — are retained for a period of two (2) years following the date of the interaction, unless a longer retention period is required for an ongoing dispute or regulatory matter.
7.4 Marketing Data. Personal data processed solely on the basis of your marketing consent will be deleted or anonymized promptly upon your withdrawal of that consent, provided that no other lawful basis requires its continued processing.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 24phdream:
8.1 How to Exercise Your Rights. To exercise any of the rights listed above, submit a written request to 24phdream's Data Protection Officer using the contact details in Section 12. Requests will be acknowledged within seventy-two (72) hours and resolved within the timeframes required by the Data Privacy Act — generally thirty (30) calendar days, extendable by a further fifteen (15) days for complex requests.
8.2 Identity Verification for Rights Requests. 24phdream may require you to verify your identity before processing a data subject rights request, to ensure that personal data is not disclosed to or modified at the request of an unauthorized party. Verification typically requires confirmation of your registered mobile number or submission of a government-issued Philippine ID.
9.1 Technical Safeguards. 24phdream implements industry-standard technical security measures to protect your personal data, including:
9.2 Organizational Safeguards. Access to personal data within 24phdream is limited to staff who require it to perform their job functions. All personnel with access to personal data are subject to confidentiality obligations and receive regular data privacy and security training.
9.3 Data Breach Response. In the event of a personal data breach that poses a real risk of serious harm to affected individuals, 24phdream will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with the requirements of the Data Privacy Act.
10.1 Age Restriction. The 24phdream Platform is strictly for individuals aged twenty-one (21) years and above. 24phdream does not knowingly collect, use, or process personal data from any individual under the age of 21. Age verification is enforced during registration and through the KYC process.
10.2 Discovery of Underage Processing. If 24phdream discovers that it has inadvertently collected personal data from an individual under 21 years of age, it will promptly suspend the associated account, void any gaming activity conducted through that account, return deposited funds to the source payment account, and securely delete the personal data in accordance with applicable law.
10.3 Parental Responsibility. Parents and legal guardians are responsible for ensuring that minors under their supervision do not access the 24phdream Platform. 24phdream strongly recommends using device-level parental controls and account security measures — including biometric login and automatic session timeouts — to prevent unauthorized access by minors.
11.1 Right to Update. 24phdream reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or regulatory requirements. The date at the top of this Policy will always reflect the date of the most recent revision.
11.2 Notification of Changes. Material changes to this Privacy Policy will be communicated to registered Players via the email address on file and through a notice posted on the Platform, at least seven (7) days before the revised Policy takes effect. Non-material changes — such as clarifications of existing text or corrections of typographical errors — may be made without advance notice.
11.3 Continued Use. Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and contact 24phdream to request account closure.
12.1 Data Protection Officer. 24phdream has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. For all data privacy matters — including data subject rights requests, questions about this Policy, and notifications of potential data privacy concerns — please contact the 24phdream DPO as follows:
12.2 Complaints to the National Privacy Commission. If you believe that 24phdream has violated your rights under the Data Privacy Act and your complaint has not been resolved to your satisfaction after raising it directly with 24phdream's DPO, you have the right to file a formal complaint with the National Privacy Commission of the Philippines (NPC). Information about NPC complaint procedures is available on the NPC's official website.
12.3 Governing Law. This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission.
We built 24phdream with Filipino players in mind — including your right to privacy. Questions about your data? Our support team responds around the clock.