Privacy Policy – dream88 | How We Protect Your Data

Section 1

Introduction

This Privacy Policy ("Policy") describes how dream88 ("the Company," "we," "us," or "our") collects, processes, uses, stores, discloses, and protects personal information in connection with the operation of the dream88 online gaming platform accessible at dream88.asia (the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC"). It also reflects dream88's obligations under its PAGCOR operating license with respect to player data management and anti-money laundering reporting.

By registering an Account on dream88, using any feature of the Platform, or otherwise providing personal information to us, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. This Policy forms part of dream88's Terms and Conditions, which you accepted upon registration.

If you do not agree with any part of this Policy, you should not create or continue to maintain an Account on the dream88 Platform.

Section 2

Who We Are — Data Controller

dream88 is the data controller responsible for personal information collected through the Platform. As a PAGCOR-licensed online gaming operator, dream88 operates under Philippine law and is accountable to the National Privacy Commission for compliance with the Data Privacy Act of 2012.

dream88 has designated a Data Protection Officer ("DPO") who oversees the Company's data privacy compliance program, handles data subject rights requests, and serves as the primary point of contact for the NPC on privacy matters. The DPO's contact details are provided in Section 15 of this Policy.

Data Protection Officer: Requests relating to your personal data rights under the DPA 2012 — including access, correction, deletion, and portability — should be directed to dream88's Data Protection Officer via the contact details in Section 15. We will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days.

Section 3

Personal Data We Collect

dream88 collects the minimum personal data necessary to provide a safe, compliant, and functional gaming service. The categories of data we collect are as follows:

3.1 Identity & Registration Data

Full legal name;
Date of birth and age verification confirmation;
Gender;
Nationality;
Government-issued identification number (e.g., Philippine National ID, Passport number, Driver's License number).

3.2 Contact Data

Email address;
Philippine mobile number;
Residential address (province, city/municipality, barangay).

3.3 Financial & Payment Data

GCash account number (where used for transactions);
PayMaya account details (where used for transactions);
Philippine bank account details — BPI, BDO, Metrobank, or other linked banks (account holder name and account number only);
Cryptocurrency wallet addresses (where used for transactions);
Transaction history — deposit amounts, dates, methods, and withdrawal records.

3.4 Gaming & Activity Data

Game play history — games accessed, wagers placed, outcomes, session durations;
Sports betting selections and results;
Bonus and promotion usage;
Responsible gaming tool settings (deposit limits, self-exclusion periods).

3.5 Technical & Device Data

IP address;
Device type, operating system, and browser;
Mobile network carrier (for Philippine mobile users);
Login timestamps and session logs;
Cookies and similar tracking data (see Section 8).

3.6 Communications Data

Records of live chat conversations with dream88 Support;
Email correspondence with dream88;
Feedback and survey responses;
Dispute and complaint records.

Sensitive Personal Information: Under the DPA 2012, certain categories of data are classified as Sensitive Personal Information (SPI) and require heightened protection. dream88 may collect government ID numbers as part of KYC verification. These are treated as SPI, stored with additional access controls, and processed solely for identity verification, AML compliance, and regulatory reporting purposes.

Section 4

How We Collect Your Data

dream88 collects personal data through the following channels:

Collection Method	Examples
Direct submission	Information you provide when registering an Account, completing KYC verification, submitting a deposit or withdrawal, or contacting Support.
Automated Platform activity	Technical and device data collected automatically when you access and use the Platform, including login records, IP addresses, and session logs.
Cookies and tracking	Session cookies, functional cookies, and analytics cookies placed on your device when you visit dream88.asia. See Section 8 for full details.
Payment providers	Transaction confirmation data shared by GCash, PayMaya, BPI, BDO, Metrobank, or cryptocurrency networks when you initiate a deposit or withdrawal.
Identity verification services	Data returned by third-party KYC and identity verification providers used to validate government-issued ID documents and confirm player identity.
Fraud and AML screening	Results from screening services used to check player details against watchlists, politically exposed persons (PEP) databases, and sanctions lists as required by Philippine AML law.

Section 5

How We Use Your Personal Data

dream88 uses your personal data for the following purposes:

Account management: Creating, maintaining, verifying, and securing your dream88 Account;
Service delivery: Providing access to all games, sports betting, live casino, bingo, and sabong services on the Platform;
Payment processing: Executing deposits and withdrawals via GCash, PayMaya, bank transfer, and cryptocurrency channels;
Identity verification (KYC): Verifying your identity to meet PAGCOR licensing requirements and prevent underage gambling;
AML compliance: Monitoring transactions for suspicious activity and fulfilling mandatory Anti-Money Laundering Act reporting obligations to the Anti-Money Laundering Council (AMLC) of the Philippines;
Fraud prevention and platform security: Detecting and investigating unauthorized access, cheating, multiple accounts, and other prohibited conduct;
Responsible gaming: Monitoring gaming activity patterns to identify potential problem gambling indicators; administering deposit limits, loss limits, and self-exclusion tools;
Customer support: Responding to queries, resolving disputes, and managing complaints;
Promotions and marketing: Sending you relevant promotional offers, bonuses, and platform updates where you have provided consent or where dream88 has a legitimate interest in keeping you informed of material service changes;
Legal compliance: Fulfilling obligations under Philippine law, PAGCOR's regulatory requirements, and any order of a competent Philippine court or government authority;
Platform improvement: Analyzing aggregated, anonymized usage data to improve Platform performance, game selection, and user experience.

Marketing Opt-Out: If you wish to stop receiving promotional communications from dream88, you may opt out at any time by updating your communication preferences in Account Settings or by contacting Support. Opting out of marketing does not affect transactional communications (e.g., deposit confirmations, withdrawal processing notices, security alerts).

Section 6

Legal Basis for Processing

Under the Data Privacy Act of 2012, dream88 processes personal data on the following legal bases:

Contractual necessity: Processing required to perform dream88's obligations under the Terms and Conditions you accepted — including Account management, payment processing, and service delivery;
Legal obligation: Processing required to comply with Philippine laws and PAGCOR regulations, including KYC verification, AML monitoring, and regulatory reporting under the Anti-Money Laundering Act of 2001 as amended;
Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and improving the Platform, where these interests do not override your fundamental rights;
Consent: Processing for marketing communications and optional analytics tracking, where your explicit consent has been obtained. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Section 7

Data Sharing & Disclosure

dream88 does not sell, rent, or trade your personal data to third parties. We share data only in the following defined circumstances:

7.1 Service Providers

dream88 engages trusted third-party service providers who process personal data on our behalf under strict contractual obligations and data processing agreements consistent with DPA 2012 requirements. These include:

Payment processing providers (GCash, PayMaya, BPI, BDO, Metrobank, cryptocurrency networks);
Identity verification and KYC providers;
AML screening and sanctions monitoring services;
Cloud infrastructure and data hosting providers;
Customer support platform providers;
Game software providers (for technical integration, not player data sharing).

7.2 Regulatory & Legal Disclosures

dream88 is required by Philippine law to share certain personal data with:

PAGCOR: As dream88's licensing authority, PAGCOR may require disclosure of player data in connection with regulatory audits, investigations, or compliance verification;
Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports as required under the Anti-Money Laundering Act;
Bureau of Internal Revenue (BIR): Tax-related disclosures as required by Philippine tax law;
Courts and law enforcement: Where required by a lawful order of a Philippine court or a valid request from a Philippine government authority with jurisdiction.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of dream88's business, your personal data may be transferred to the successor entity as part of that transaction. dream88 will notify affected players of any such transfer that materially affects how their data is processed.

No Third-Party Marketing Sharing: dream88 will never share your personal data with any third party for the purpose of allowing that third party to market their own products or services to you. This prohibition applies regardless of any commercial arrangement between dream88 and that third party.

Section 8

Cookies & Tracking Technologies

dream88 uses cookies and similar technologies on the Platform. A cookie is a small text file stored on your device by your browser. dream88 uses the following categories of cookies:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, enable Platform security features, and support basic functionality. The Platform cannot function without these.	No — required for Platform operation
Functional	Remember your preferences (language, display settings, last-accessed games) to improve your experience across sessions.	Yes — via browser settings
Analytics	Collect anonymized and aggregated data about how players use the Platform — page views, feature engagement, error rates — to improve Platform performance.	Yes — via browser settings or opt-out
Marketing / Retargeting	dream88 does not use third-party advertising or cross-site tracking cookies. Any promotional content shown within the Platform is based solely on your on-Platform activity, not external tracking.	N/A — not used

You can control cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Information on managing cookies is available through your browser's help documentation.

Section 9

Data Retention

dream88 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following retention periods apply:

Data Category	Retention Period	Basis
Account & identity records	5 years from account closure	PAGCOR licensing requirements; AML obligations
Transaction records (deposits, withdrawals)	5 years from transaction date	Anti-Money Laundering Act of 2001 (as amended)
KYC documents	5 years from account closure	PAGCOR and AMLC requirements
Gaming activity records	2 years from account closure	Responsible gaming monitoring; dispute resolution
Support communications	2 years from last interaction	Dispute resolution; quality assurance
Marketing consent records	Duration of consent + 1 year after withdrawal	DPA 2012 consent management obligations
Technical / server logs	90 days	Security monitoring; fraud detection

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines on data disposal.

Section 10

Data Security

dream88 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

SSL 256-bit encryption for all data transmitted between your device and dream88's servers;
Encryption at rest for sensitive personal information stored in dream88's databases;
Access controls restricting personal data access to authorized personnel with a demonstrated need;
Two-factor authentication for dream88 staff accessing systems containing personal data;
Regular security audits and vulnerability assessments of the Platform and supporting infrastructure;
Intrusion detection systems monitoring for unauthorized access attempts;
Data breach response procedures aligned with NPC notification requirements under Section 20 of the DPA 2012.

Data Breach Notification: In the event of a personal data breach that poses a real risk of serious harm to affected players, dream88 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay. Notifications will include a description of the breach, the data involved, steps taken to contain the breach, and recommended protective actions for affected individuals.

While dream88 implements comprehensive security measures, no online platform can guarantee absolute security against all threats. You are also responsible for maintaining the security of your Account credentials — use a strong, unique password and enable two-factor authentication.

Section 11

Your Rights Under the Data Privacy Act of 2012

As a data subject under the Philippine Data Privacy Act of 2012, you have the following enforceable rights over your personal data held by dream88:

1

Right to Be Informed

The right to know what personal data dream88 collects, how it is processed, the purposes of processing, and with whom it is shared. This Policy fulfills dream88's primary obligation under this right.

2

Right of Access

The right to request a copy of the personal data dream88 holds about you, along with information about how it is being processed. Requests will be fulfilled within 15 business days.

3

Right to Rectification

The right to have inaccurate or outdated personal data corrected. You can update most Account information directly through your profile settings, or request corrections via Support.

4

Right to Erasure

The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected and no legal obligation requires its retention. Note: mandatory AML and KYC retention periods apply.

5

Right to Object

The right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Objecting to legitimate interest processing may affect certain Platform features.

6

Right to Data Portability

The right to receive a structured, commonly used copy of your personal data in a machine-readable format for transfer to another controller, where technically feasible and processing is based on consent or contract.

7

Right to Lodge a Complaint

The right to lodge a complaint with the National Privacy Commission if you believe dream88 has violated your data privacy rights. NPC contact details are available at the official NPC website.

8

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

How to Exercise Your Rights: Submit a data rights request to dream88's Data Protection Officer via live chat or email ([email protected] — plain text, not a clickable link). Please include your Account username, the specific right you wish to exercise, and sufficient information for us to verify your identity before processing your request. dream88 will not charge a fee for processing rights requests.

Section 12

Children & Minors

The dream88 Platform is strictly restricted to persons aged twenty-one (21) years and above. dream88 does not knowingly collect personal data from individuals under the age of 21 and does not permit such individuals to register Accounts or access gaming services.

If dream88 discovers that personal data has been collected from an individual under 21 years of age, that Account will be immediately suspended, the personal data will be deleted without undue delay (subject to any mandatory reporting obligations), and any associated balance will be held pending investigation in accordance with PAGCOR requirements.

Parents and guardians who believe a minor has registered on dream88 using a false date of birth are encouraged to contact Support immediately with relevant details so the Account can be identified and closed promptly.

Parental Controls: dream88 strongly recommends that parents and guardians use parental control software to restrict access to gaming websites on devices that may be used by minors. dream88 cannot be held liable for unauthorized Account creation by minors who have deliberately provided false age information; however, we are committed to identifying and closing such Accounts as quickly as possible once they are detected.

Section 13

International Data Transfers

dream88 operates primarily within the Philippines and processes most data through Philippine-based or regionally hosted infrastructure. In some cases, the engagement of third-party service providers (such as game software providers, cloud infrastructure partners, or identity verification services) may involve the transfer of personal data outside the Philippines.

Where such transfers occur, dream88 ensures that appropriate safeguards are in place consistent with Section 21 of the DPA 2012 and NPC guidelines on cross-border data transfers. These safeguards include:

Contractual data processing agreements imposing data protection obligations on the receiving party;
Transfer to recipients in countries with substantially similar or higher levels of data protection;
Standard contractual clauses approved by the NPC or equivalent regional authority where applicable.

You may request details of the specific safeguards applied to international transfers of your personal data by contacting dream88's Data Protection Officer.

Section 14

Changes to This Privacy Policy

dream88 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform services, or applicable law. When material changes are made, we will:

Publish the revised Policy on the Platform with an updated effective date and version number;
Notify registered players via email to their registered address at least seven (7) days prior to the effective date of material changes;
Where required by the NPC, seek fresh consent for any material change in processing purpose or legal basis.

Your continued use of the dream88 Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept a material change, you should cease using the Platform and may request Account closure.

Version History: This Privacy Policy is Version 2.4, effective 1 January 2026. Previous versions are available upon request from dream88's Data Protection Officer.

Section 15

Contact Information & Data Protection Officer

For all privacy-related inquiries, data rights requests, or concerns about how dream88 processes your personal data, please contact:

Data Protection Officer: Available via dream88 Support channels
Support Email: [email protected]
Live Chat: Available 24/7 through dream88.asia
Subject Line for DPO Requests: "Data Privacy Request – [Your Account Username]"

If you believe your data privacy rights under the DPA 2012 have been violated and dream88's internal process has not resolved your concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. The NPC's contact information is available on the official NPC website (privacy.gov.ph).

dream88 cooperates fully with the NPC on all privacy compliance matters and is committed to resolving any concerns about our data practices as promptly and transparently as possible.

Response Timeline: dream88 acknowledges all data privacy requests within five (5) business days. Substantive responses — including access requests, correction responses, and deletion confirmations — are provided within fifteen (15) business days from the date of receipt of a complete and verifiable request. Complex requests involving large volumes of data or legal analysis may require additional time, in which case we will notify you of the expected timeline.

dream88 Privacy Policy

SSL-Encrypted Data Transmission

Secure Data Storage

No Selling of Your Data

NPC & DPA 2012 Compliant

Your Rights, Respected

Transparent Cookie Use