phdteam Privacy Policy

1. Introduction

phdteam takes the privacy and security of your personal data seriously. As a platform serving Filipino players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City — we understand the importance of trust, and we recognise that protecting your personal information is fundamental to maintaining that trust.

This Policy applies to all personal data collected by phdteam in connection with your use of the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general browsing of the phdteam website and mobile application.

This Policy should be read alongside the phdteam Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall framework governing your relationship with phdteam.

2. Personal Data We Collect

phdteam collects the following categories of personal data from players and prospective players:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification purposes — phdteam strictly enforces the 21+ requirement)
• Residential address, including city, province, and postal code
• Email address and mobile phone number
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license)

2.2 Financial Data

• Bank account details (BPI, BDO, Metrobank, and other Philippine banks)
• E-wallet account information (GCash, PayMaya)
• Deposit and withdrawal transaction history
• Payment card details where applicable (processed securely through our payment partners)

2.3 Gaming & Activity Data

• Betting history, game session records, and wagering patterns
• Account balance, bonus usage, and promotional activity
• Login timestamps, session duration, and platform activity logs
• Responsible gaming settings, including any deposit limits or self-exclusion requests you have applied

2.4 Technical & Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 7)
• Referring URLs and navigation paths within the Platform

2.5 Communications Data

• Records of your communications with phdteam customer support
• Feedback, complaints, and survey responses you submit to phdteam
• Email and in-platform message correspondence

3. How We Collect Your Data

phdteam collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Data collected automatically when you access the Platform, including technical and device data gathered through cookies, log files, and similar technologies.
• Third-party sources: Data received from identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and regulatory authorities where permitted by law.
• Publicly available sources: In limited circumstances, phdteam may supplement your data with information from publicly available sources for the purposes of identity verification or fraud prevention.

4. How We Use Your Personal Data

phdteam uses the personal data we collect for the following purposes:

phdteam will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5. Legal Basis for Processing

phdteam processes your personal data on the following legal bases under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our obligations under the phdteam Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, tax obligations, and regulatory reporting requirements.
• Legitimate interests: Processing carried out for phdteam's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

phdteam does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

phdteam engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, customer support platforms, and analytics services. These providers are contractually bound to process your data only on phdteam's instructions and in accordance with applicable data protection law.

6.2 Game and Technology Partners

Where you access games provided by phdteam's technology partners — including EVO Live and Astar Live — certain data necessary for game operation (such as your player ID and session data) may be shared with those partners. These partners are required to maintain appropriate data protection standards.

6.3 Regulatory and Law Enforcement Authorities

phdteam may disclose your personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities where required or permitted by applicable Philippine law.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phdteam's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

7. Cookies & Tracking Technologies

phdteam uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and gather analytics data. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings or through the cookie consent tool available on the Platform. Please note that disabling certain cookies may affect the functionality of the phdteam Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate securely.

8. Data Retention

phdteam retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable Philippine financial regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for a period of three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.
• Technical and device data: Retained for a period of up to twelve (12) months from collection, unless required for longer for security or fraud investigation purposes.

Upon expiry of the applicable retention period, phdteam will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

9. Data Security

phdteam implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the phdteam Platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure
• Multi-factor authentication requirements for administrative access to systems containing personal data
• Incident response procedures for the detection, investigation, and notification of personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phdteam will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

10. Your Data Protection Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in relation to your personal data held by phdteam:

To exercise any of the above rights, please contact the phdteam Data Protection Officer using the contact details provided in Section 14 of this Policy. phdteam will respond to all verified requests within thirty (30) days of receipt. We may need to verify your identity before processing your request.

If you are not satisfied with phdteam's response to your data protection request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children's Privacy

The phdteam Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phdteam does not knowingly collect personal data from individuals under the age of 21.

During the registration process, all applicants are required to confirm that they are at least 21 years of age and to provide valid government-issued identification for age verification purposes. Where phdteam discovers that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all funds will be handled in accordance with applicable regulations, and the personal data will be deleted as soon as practicable.

If you believe that phdteam may have inadvertently collected personal data from a minor, please contact our support team immediately at the details provided in Section 14.

12. International Data Transfers

phdteam's primary operations and data storage infrastructure are based in the Philippines. In certain circumstances, your personal data may be transferred to, stored in, or processed by service providers or technology partners located outside the Philippines — for example, in connection with cloud hosting services or game platform providers.

Where such international transfers occur, phdteam ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require the recipient to maintain data protection standards equivalent to those required under Philippine law. phdteam will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

13. Updates to This Privacy Policy

phdteam reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, phdteam will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is indicated at the top of this page. We encourage you to review this Policy periodically to stay informed of how phdteam is protecting your personal data. Your continued use of the Platform following the effective date of any amendments constitutes your acceptance of the revised Policy.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or phdteam's data processing practices, please contact our Data Protection Officer or customer support team:

For concerns about how phdteam handles your personal data that have not been resolved to your satisfaction, you may also contact the National Privacy Commission of the Philippines:

For responsible gaming concerns, self-exclusion requests, or questions about our responsible gaming tools, please visit our dedicated Responsible Gaming page. For the full terms governing your use of the phdteam Platform, please refer to our Terms & Conditions.