Privacy Policy

1. About This Policy and the Data Controller

This Privacy Policy is issued by dreamji ("dreamji," "we," "us," "the Company"), the operator of the online gaming platform accessible at dreamji.club. dreamji is the Personal Information Controller (PIC) as defined under Republic Act No. 10173 (the "Data Privacy Act of 2012" or "DPA") with respect to the personal data of registered users and visitors to the dreamji platform.

dreamji operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). This Privacy Policy governs the collection, use, storage, and protection of personal data processed in connection with the dreamji platform, whether accessed from Metro Manila, Cebu, Davao, or any other location in the Philippines.

By registering for a dreamji account or using the dreamji platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the dreamji platform.

2. Personal Data We Collect

dreamji collects the following categories of personal data in connection with the operation of the platform:

Identity and Contact Information:

• Full legal name as appearing on a valid Philippine government-issued ID;
• Date of birth (for age verification — you must be 21 years or older to hold a dreamji account);
• Registered email address;
• Philippine mobile number (Globe, Smart, DITO, or other Philippine carrier);
• Residential address.

Identity Verification Documents (KYC):

• Copy of a valid government-issued photo ID (e.g., Philippine Passport, SSS ID, PhilSys National ID, UMID, driver's license, PRC ID, or voter's ID);
• Selfie or liveness verification image as required during the KYC process.

Financial and Transaction Data:

• GCash account number, PayMaya account number, or bank account details (BPI, BDO, Metrobank) used for deposits and withdrawals;
• Transaction history including deposits, withdrawals, wagers, wins, and bonus activity;
• Wallet balance history.

Technical and Usage Data:

• IP address, device type, browser type and version, operating system;
• Login timestamps, session duration, and pages visited within the dreamji platform;
• Game activity logs including games played, bet amounts, and game outcomes.

Communications Data:

• Records of communications with dreamji support via live chat, email, or in-platform messaging.

3. How We Collect Your Data

dreamji collects personal data through the following means:

• Directly from you — when you register for a dreamji account, complete KYC verification, make a deposit or withdrawal, contact dreamji support, or update your account profile;
• Automatically — through the dreamji platform's technical infrastructure, including server logs, session tracking, and cookies (see Section 8);
• From third-party verification services — dreamji may use third-party identity verification providers to assist with KYC compliance, as permitted under PAGCOR regulatory requirements;
• From payment providers — GCash, PayMaya, and Philippine banking partners may provide transaction confirmation data in connection with deposits and withdrawals.

4. Purposes and Legal Bases for Processing

dreamji processes your personal data for the following purposes, relying on the legal bases identified under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of the contract between you and dreamji;
• KYC and age verification — required by PAGCOR licensing conditions and by law (compliance with a legal obligation);
• Processing deposits, withdrawals, and gaming transactions — necessary for the performance of the contract;
• Fraud prevention, anti-money laundering (AML), and platform security — compliance with legal obligations under the Anti-Money Laundering Act of 2001 (AMLA) and PAGCOR regulations, as well as dreamji's legitimate interests in platform security;
• Customer support — necessary for the performance of the contract and dreamji's legitimate interests;
• Responsible gaming compliance — compliance with PAGCOR responsible gaming requirements;
• Marketing communications — with your consent, dreamji may send promotional communications about offers, bonuses, and new games. You may withdraw consent at any time via your Account Settings;
• Regulatory reporting — compliance with legal obligations to PAGCOR and other Philippine regulatory bodies.

5. Sharing and Disclosure of Personal Data

dreamji does not sell your personal data to third parties. dreamji may share your personal data with the following categories of recipients, strictly as necessary to provide the dreamji service or comply with legal obligations:

• Payment service providers — GCash, PayMaya, BPI, BDO, and Metrobank, for the processing of deposits and withdrawals;
• KYC and identity verification providers — third-party providers engaged to assist with PAGCOR-mandated identity and age verification;
• Game software providers — game studios and live dealer operators whose software is integrated into the dreamji platform, to the extent necessary for game operation and fairness auditing;
• PAGCOR and Philippine regulatory authorities — as required by dreamji's PAGCOR license, applicable law, or upon lawful request from a competent authority;
• Law enforcement — when required by a court order, subpoena, or other lawful process issued by Philippine authorities;
• Professional advisers — legal counsel, auditors, and compliance consultants, under binding confidentiality obligations.

All third-party recipients of personal data are contractually required to process such data only for the specified purpose and in accordance with applicable Philippine data protection law.

6. International Data Transfers

Some of dreamji's third-party service providers — including game software studios and technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to recipients in other jurisdictions, dreamji ensures that appropriate safeguards are in place as required by the Data Privacy Act of 2012 and the National Privacy Commission's implementing rules. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions with adequate data protection standards recognized by the National Privacy Commission (NPC).

7. Data Retention

dreamji retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data — retained for a minimum of five (5) years after account closure, in compliance with PAGCOR AML record-keeping requirements;
• Transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Support communications — retained for two (2) years from the date of the communication;
• Technical and usage logs — retained for up to twelve (12) months from the date of collection, unless a longer period is required for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with dreamji's data disposal procedures.

8. Cookies and Tracking Technologies

dreamji uses cookies and similar technologies on the dreamji.club platform to:

• Maintain your authenticated session and remember your preferences;
• Analyze platform usage patterns and improve the dreamji user experience;
• Support responsible gaming monitoring tools such as session timers;
• Prevent fraud and maintain platform security.

dreamji uses strictly necessary cookies (which cannot be disabled as they are essential to platform operation) and functional/analytics cookies (which can be managed via your browser settings). dreamji does not use third-party advertising or behavioral tracking cookies.

You may control cookie settings through your browser preferences. Disabling strictly necessary cookies may impair your ability to use the dreamji platform.

9. Security of Your Personal Data

dreamji implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and the dreamji platform;
• One-way cryptographic hashing of account passwords — dreamji does not store readable passwords;
• Access controls restricting employee access to personal data on a need-to-know basis;
• Regular security assessments of the dreamji platform and its infrastructure;
• Incident response procedures for personal data breaches, including NPC notification obligations under the Data Privacy Act.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dreamji will notify you and the National Privacy Commission (NPC) in accordance with the timelines prescribed by the DPA and its Implementing Rules and Regulations.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data processed by dreamji:

• Right to be informed — to know how your data is collected, used, and stored;
• Right of access — to obtain a copy of your personal data held by dreamji;
• Right to rectification — to correct inaccurate or incomplete personal data;
• Right to erasure or blocking — to request deletion of your personal data where dreamji has no legitimate reason to retain it, subject to applicable legal retention requirements;
• Right to object — to object to processing based on legitimate interests, including direct marketing;
• Right to data portability — to receive a copy of your personal data in a structured, commonly used format;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact dreamji's Data Privacy Officer using the contact details in Section 13. dreamji will respond to your request within fifteen (15) business days of receipt, as required by NPC regulations.

11. Minors and Age Verification

dreamji does not knowingly collect personal data from individuals under 21 years of age. The dreamji platform is strictly intended for adults who are at least 21 years old 21+, in compliance with PAGCOR's minimum age requirements for online casino-style gaming in the Philippines.

All new accounts are subject to mandatory KYC age verification before real-money gaming is permitted. If dreamji discovers that an account is held by a person under 21 years of age, the account will be suspended immediately, any real-money winnings will be voided, and deposits will be returned in accordance with PAGCOR guidelines. The personal data of the minor will be deleted as soon as the account closure process is complete, subject to any mandatory legal retention periods.

12. Changes to This Privacy Policy

dreamji reserves the right to update or amend this Privacy Policy at any time to reflect changes in dreamji's data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, dreamji will notify registered users via the email address on file and/or via a prominent notice on the dreamji platform, at least seven (7) calendar days before the changes take effect.

Your continued use of the dreamji platform after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the platform and request account closure before the effective date.

13. Contact and Data Privacy Officer

For questions, requests, or complaints relating to this Privacy Policy or dreamji's handling of your personal data, please contact dreamji's Data Privacy Officer:

• Email: [email protected]
• Subject line: "Data Privacy Request – [Your Full Name]"
• Live Chat: Available 24/7 via the dreamji platform
• Response time: Within 15 business days of receipt

If you are not satisfied with dreamji's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at www.privacy.gov.ph (reference only — not a clickable link).