phdteam Privacy Policy

01 Introduction

phdteam ("phdteam", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the phdteam platform. We understand that Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Privacy Policy ("Policy") describes in detail how phdteam collects, uses, stores, shares, and protects your personal data. It also explains the rights available to you as a data subject under Philippine law and how you can exercise those rights.

By registering an account on phdteam, accessing the platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the phdteam platform.

This Policy should be read together with the phdteam Terms & Conditions, which govern your use of the platform and are incorporated herein by reference.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phdteam is the personal information controller responsible for the personal data collected through the phdteam platform.

phdteam operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with all applicable data protection obligations imposed by Philippine law, including registration requirements with the National Privacy Commission (NPC) where applicable.

Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO using the details provided in Section 14 of this Policy.

03 Data We Collect

phdteam collects the following categories of personal data from users of the platform:

3.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID);
• Date of birth and age verification information;
• Nationality and country of residence;
• Email address and mobile phone number;
• Residential address (barangay, city/municipality, province, ZIP code).

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., PhilSys National ID, UMID, driver's license, passport);
• Selfie or facial image submitted for identity verification purposes;
• Proof of address documents where required.

3.3 Financial Data

• GCash or PayMaya (Maya) account details linked to your phdteam account;
• Bank account details (account name, account number, bank name) for withdrawal processing;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references;
• Bonus and promotional activity records.

3.4 Gaming Activity Data

• Game session records, including games played, bet amounts, win/loss outcomes, and session duration;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Bonus wagering progress and promotional participation records.

3.5 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Login timestamps and session activity logs;
• Pages visited, features used, and interaction patterns on the platform;
• Cookie identifiers and similar tracking data (see Section 9).

3.6 Communications Data

• Records of live chat conversations with phdteam support agents;
• Email correspondence with phdteam;
• Feedback, survey responses, and complaint records.

04 How We Collect Data

phdteam collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access and interact with the phdteam platform, including through cookies and similar technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from anti-fraud partners; payment confirmation data from GCash, PayMaya, and banking partners;
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with compliance obligations.

05 Purpose & Legal Basis for Processing

phdteam processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

06 Sharing Your Data

phdteam does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Regulatory Authorities

phdteam is required by law to share certain personal and financial data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies upon lawful request or as mandated by applicable regulations. This includes suspicious transaction reports and player activity data required for AML compliance.

6.2 KYC and Identity Verification Providers

phdteam engages accredited third-party KYC service providers to assist with identity verification. These providers process your identity documents and biometric data solely for verification purposes and are bound by strict data processing agreements and confidentiality obligations.

6.3 Payment Service Providers

To process deposits and withdrawals, phdteam shares necessary financial and identity data with payment service providers including GCash, PayMaya (Maya), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank). These providers process your data only as required to complete the relevant transaction.

6.4 Technology and Platform Service Providers

phdteam works with technology partners who provide hosting, cloud infrastructure, fraud detection, customer support software, and analytics services. These partners act as personal information processors under the Data Privacy Act and are contractually bound to process your data only on phdteam's instructions and in accordance with applicable law.

6.5 Game Content Providers

Certain game content on the phdteam platform is provided by licensed third-party game studios. Limited technical data (such as session tokens and game round identifiers) may be shared with these providers to facilitate gameplay. These providers do not receive your full identity or financial data.

07 Data Retention

phdteam retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, phdteam will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained for statistical and analytical purposes without limitation.

08 Security Measures

phdteam implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the phdteam platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial records and identity documents, is encrypted using AES-256 encryption;
• Access controls: Access to personal data is restricted to authorized phdteam personnel and service providers on a strict need-to-know basis. All access is logged and subject to regular audit;
• Two-factor authentication: phdteam supports and encourages the use of two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorized access;
• Penetration testing: phdteam conducts regular security assessments and penetration testing of its platform infrastructure;
• Incident response: phdteam maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, phdteam will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by the Data Privacy Act;
• Staff training: All phdteam personnel with access to personal data receive regular data privacy and security training.

09 Cookies & Tracking Technologies

phdteam uses cookies and similar tracking technologies on the phdteam platform to enhance your user experience, maintain session security, and gather analytics data. The following types of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the operation of the phdteam platform. They enable core functions such as user authentication, session management, and security features. These cookies cannot be disabled without affecting platform functionality.

9.2 Functional Cookies

Functional cookies allow phdteam to remember your preferences and settings, such as your preferred language, display settings, and responsible gaming tool configurations. These cookies improve your experience but are not strictly required for platform operation.

9.3 Analytics Cookies

phdteam uses analytics cookies to collect aggregated, anonymized data about how users interact with the platform. This data helps us understand which features are most used, identify areas for improvement, and optimize platform performance. Analytics data is not used to identify individual users.

9.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phdteam platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by phdteam:

To exercise any of the above rights, please contact phdteam's Data Protection Officer using the details in Section 14. phdteam will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act. We may request proof of identity before processing your request.

Please note that certain rights are subject to limitations where phdteam is required to retain or process your data to comply with legal obligations, including PAGCOR regulations and the Anti-Money Laundering Act.

11 Minors

phdteam does not knowingly collect personal data from individuals under the age of 21. All registration applicants are required to confirm their age during the registration process and to submit government-issued identification for KYC verification. Where phdteam discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be terminated.

If you are a parent or guardian and believe that a minor has registered on the phdteam platform, please contact us immediately using the details in Section 14 so that we can take appropriate action.

12 Cross-Border Data Transfers

In certain circumstances, phdteam may transfer your personal data to service providers or technology partners located outside the Philippines — for example, cloud infrastructure providers or game content studios operating in other jurisdictions.

Where such transfers occur, phdteam ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers. These safeguards may include contractual data processing agreements that impose data protection obligations equivalent to those applicable in the Philippines.

phdteam will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

13 Policy Amendments

phdteam reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, phdteam will notify registered users via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how phdteam protects your personal data. Your continued use of the phdteam platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phdteam, please contact our Data Protection Officer:

phdteam will acknowledge all privacy-related inquiries within five (5) business days and will endeavor to resolve them within thirty (30) days.

Filing a Complaint with the NPC

If you believe that phdteam has violated your data privacy rights and you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012. Information on how to file a complaint is available through the NPC's official channels.