dreamjl Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how dreamjl ("dreamjl," "we," "us," "our") collects, uses, stores, and discloses personal information about individuals ("you," "Player," "User") who access or use the dreamjl platform at dreamjl.app.

1.2 dreamjl is committed to protecting the privacy and security of your personal data. This Policy is designed to comply with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission ("NPC").

1.3 By registering an account on dreamjl or using the platform in any way, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the dreamjl platform.

1.4 This Policy should be read together with the dreamjl Terms & Conditions, which govern your use of the platform.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, dreamjl is the personal information controller responsible for your personal data collected through the dreamjl platform.

2.2 dreamjl operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing activities are conducted in compliance with both PAGCOR's requirements and the DPA.

2.3 If you have any questions about how dreamjl processes your personal data, or wish to exercise any of your rights under the DPA, please contact our Data Protection Officer at [email protected].

3. Personal Data We Collect

3.1 dreamjl collects the following categories of personal data:

3.1 Identity and Contact Data

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Government-issued identification number (e.g., PhilSys ID, passport, driver's licence);
• Residential address;
• Email address;
• Mobile phone number.

3.2 Financial Data

• GCash or PayMaya/Maya account details (mobile number associated with the e-wallet);
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank);
• Debit card details (card number, expiry date — stored in tokenised form only);
• Transaction history, including deposits, withdrawals, and gaming activity.

3.3 Technical and Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session data, including login times and session duration;
• Pages visited and features used on the platform;
• Game history and betting patterns.

3.4 Communications Data

• Records of communications with dreamjl customer support, including live chat transcripts and email correspondence;
• Feedback and survey responses submitted to dreamjl.

3.5 Responsible Gaming Data

• Self-exclusion requests and status;
• Deposit, loss, and session limits set by the Player;
• Responsible gaming assessments where applicable.

4. How We Collect Your Data

4.1 dreamjl collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the platform, through cookies, log files, and similar technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from GCash, PayMaya, and banking partners as part of transaction processing.

5. How We Use Your Data

5.1 dreamjl uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your dreamjl account, including verifying your identity and age (21+);
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya/Maya, bank transfer, and debit card;
• Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct on the platform;
• Customer support: To respond to your enquiries, complaints, and support requests;
• Platform improvement: To analyse usage patterns and improve the features, performance, and user experience of the dreamjl platform;
• Responsible gaming: To monitor gaming behaviour, enforce self-exclusion requests, and administer deposit and loss limits;
• Marketing communications: To send you promotional offers and updates about dreamjl, where you have consented to receive such communications. You may opt out at any time.

6. Legal Basis for Processing

6.1 dreamjl processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account and provide gaming services;
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

7.1 dreamjl does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• PAGCOR and regulatory authorities: As required by our gaming licence and applicable Philippine law;
• Anti-Money Laundering Council (AMLC): Where required by the Anti-Money Laundering Act and its implementing rules;
• Payment service providers: GCash, PayMaya/Maya, and banking partners, solely for the purpose of processing your transactions;
• KYC and identity verification providers: Third-party services used to verify your identity and age as required by PAGCOR;
• Fraud prevention partners: Services used to detect and prevent fraudulent activity on the platform;
• IT and infrastructure providers: Cloud hosting and technical service providers who process data on our behalf under strict data processing agreements;
• Law enforcement and courts: Where required by a valid court order, subpoena, or other legal process under Philippine law.

7.2 All third parties with whom dreamjl shares personal data are required to process that data in accordance with the DPA and dreamjl's data protection standards.

8. Cookies and Tracking Technologies

8.1 dreamjl uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These cannot be disabled without affecting core functionality, including maintaining your login session;
• Analytics cookies: Used to understand how Players use the platform, which pages are most visited, and where errors occur. This data is aggregated and anonymised;
• Preference cookies: Used to remember your settings and preferences, such as language and display options;
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

8.2 You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of the dreamjl platform.

9. Data Retention

9.1 dreamjl retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation.

9.2 Specifically:

• Account and identity data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and the AMLA;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance purposes.

9.3 When personal data is no longer required for the purposes for which it was collected and the applicable retention period has expired, dreamjl will securely delete or anonymise the data.

10. Data Security

10.1 dreamjl implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest, including payment details and identity documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the platform;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting and responding to data breaches.

10.2 In the event of a personal data breach that is likely to result in harm to affected individuals, dreamjl will notify the National Privacy Commission and affected Players in accordance with the requirements of the Data Privacy Act of 2012.

11. Your Rights as a Data Subject

11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by dreamjl:

• Right to be informed: The right to know what personal data dreamjl collects and how it is used — which this Policy fulfils;
• Right of access: The right to request a copy of the personal data dreamjl holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR regulations and the AMLA;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data rights have been violated.

11.2 To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all valid requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Children's Privacy

12.1 The dreamjl platform is strictly intended for persons aged 21 years and older. dreamjl does not knowingly collect personal data from persons under the age of 21.

12.2 If dreamjl becomes aware that personal data has been collected from a person under 21 years of age, the associated account will be immediately closed, all data will be deleted (subject to any legal retention obligations), and any funds held in the account will be handled in accordance with PAGCOR's requirements for underage gambling incidents.

12.3 If you believe that a person under 21 has registered an account on dreamjl, please contact us immediately at [email protected].

13. Third-Party Links

13.1 The dreamjl platform may contain links to third-party websites or services. This Policy applies only to the dreamjl platform. dreamjl is not responsible for the privacy practices of any third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

14.1 dreamjl reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify you via the platform or by email to your registered address at least fourteen (14) days before the changes take effect.

14.2 The date of the most recent revision is displayed at the top of this page. Your continued use of the dreamjl platform following notification of any changes constitutes your acceptance of the revised Policy.

14.3 If you do not agree to the revised Policy, you must cease using the platform and may close your account in accordance with the Terms & Conditions.

15. Contact and Complaints

15.1 For any questions, concerns, or requests relating to this Privacy Policy or dreamjl's data processing practices, please contact our Data Protection Officer:

15.2 If you are not satisfied with dreamjl's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available on the NPC's official website.

15.3 For responsible gaming concerns, including self-exclusion requests, please visit our Responsible Gaming page.