dream88 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how dream88 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", "User") who access or use the dream88 online gaming platform at dream88.one and all associated services.

This Policy applies to all personal data processing activities undertaken by dream88 in connection with the operation of the Platform, including player registration, account management, transaction processing, customer support, marketing communications, responsible gaming tools, and regulatory compliance functions.

By registering an account on dream88 or continuing to use the Platform after any update to this Policy, you acknowledge that you have read and understood the terms of this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Data Controller

For the purposes of the Data Privacy Act of the Philippines and this Policy, dream88 is the personal information controller ("PIC") responsible for the personal data of players registered on the Platform. dream88 determines the purposes and means of processing personal data collected through dream88.one.

dream88 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and with applicable Philippine data protection law. The DPO may be contacted through the support contact details set out in Section 13 of this Policy.

3 Personal Data We Collect

dream88 collects the following categories of personal data in the course of operating the Platform:

4 How We Collect Your Data

dream88 collects personal data through the following means:

• Direct provision by you — information you enter during account registration, payment setup, KYC document submission, support requests, or communication with dream88 staff.
• Automated collection via the Platform — technical data such as IP addresses, device identifiers, and session logs are collected automatically each time you access dream88.one. This data is collected through server logs and cookies as described in Section 7.
• Payment processors and banking partners — transaction confirmation data is received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment intermediaries when you execute deposits or withdrawals. dream88 receives only the data necessary to confirm and record the transaction; it does not receive or store full payment credentials such as card PINs or complete bank account passwords.
• Identity verification service providers — where dream88 uses third-party KYC verification services, those providers may return identity verification results and document validity confirmations to dream88.
• Regulatory disclosures — PAGCOR and law enforcement agencies may provide dream88 with information about a player in connection with investigations or compliance checks, which dream88 may store on the player's account record.

5 Purpose & Legal Basis for Processing

dream88 processes personal data only for specific, legitimate purposes. The table below sets out the primary processing purposes and the legal bases under the DPA that justify each:

Where dream88 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting dream88 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Disclosure to Third Parties

6.1 Service Providers. dream88 engages carefully selected third-party service providers to assist in operating the Platform. These providers are granted access to your personal data only to the extent necessary to perform their contracted services and are bound by data processing agreements requiring them to maintain confidentiality and comply with the DPA. Categories of service providers include:

• Payment processors and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank);
• Identity verification and KYC service providers;
• Cloud hosting and data storage infrastructure providers;
• Game software providers (access limited to anonymised session data);
• Customer support software providers;
• Fraud detection and cybersecurity service providers.

6.2 Regulatory Authorities. dream88 is legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies upon lawful request or as required by applicable law. Such disclosures are made without player consent or notice where required by law.

6.3 No Sale of Data. dream88 does not sell, rent, lease, or otherwise transfer your personal data to third-party marketers or data brokers for any commercial purpose. Any data sharing with partners is limited to what is necessary to provide the services described in this Policy.

6.4 Cross-Border Transfers. Certain service providers engaged by dream88 may be located outside the Philippines. Where personal data is transferred to third countries, dream88 ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to those required by the DPA — prior to any such transfer.

7 Cookies & Tracking Technologies

dream88 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and support security monitoring. The following categories of cookies are used:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication cookies that keep you logged in to your dream88 account. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies — remember your language preference, game filter settings, and other platform configuration choices to personalise your experience across sessions.
• Analytics Cookies — collect aggregated, anonymised data about how players use the Platform — which games are most visited, typical session durations, and navigation patterns. This data is used exclusively for internal product improvement and is not linked to individual player identities.
• Security Cookies — support fraud detection and unusual login activity monitoring by tracking device fingerprints and session behaviour patterns.

dream88 does not use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your dream88 account.

8 Data Retention

dream88 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Active account data (identity, contact, account) — retained for the duration of the active account relationship plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine financial record regulations.
• Transaction and financial records — retained for a minimum of five (5) years following the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR's technical standards.
• KYC documents — retained for five (5) years following account closure or as required by AMLC directives.
• Gaming activity logs — retained for three (3) years for responsible gaming and dispute resolution purposes.
• Customer support communications — retained for two (2) years following the resolution of each support case, unless longer retention is required for ongoing legal or regulatory proceedings.
• Marketing communication records (consent logs) — retained for the duration of the marketing relationship plus two (2) years following opt-out.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with dream88's data deletion procedures.

9 Data Security

dream88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and dream88 servers;
• Encryption at rest for sensitive personal information and financial data stored on dream88 infrastructure;
• Role-based access controls limiting access to personal data to dream88 personnel and service providers with a genuine operational need;
• Two-factor authentication (2FA) available to all players and enforced for dream88 administrative systems;
• Real-time intrusion detection and monitoring of server environments and platform activity;
• Regular penetration testing and security audits conducted by independent security firms;
• Data processing agreements with all third-party service providers requiring equivalent security standards.

Notwithstanding the above, no online system can guarantee absolute security. In the event of a personal data breach that poses a real risk to you, dream88 will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

10 Your Rights Under the Data Privacy Act

As a data subject under Republic Act 10173, you hold the following rights with respect to your personal data held by dream88. To exercise any of these rights, contact dream88 support through the channels described in Section 13.

11 Children & Minors

dream88 is strictly an adult platform. Under PAGCOR regulations and Philippine law, online gaming participation is prohibited for individuals under 21 years of age. dream88 does not knowingly collect, store, or process personal data from persons under 21.

If dream88 becomes aware that personal data has been collected from a person under 21 years of age without appropriate parental or guardian consent and lawful basis, dream88 will promptly delete that data, suspend the associated account, and — where required — notify PAGCOR in accordance with its licensing obligations.

Parents and guardians who have reason to believe that a minor under their care has registered on dream88 should contact dream88 support immediately at [email protected]. dream88 will prioritise investigation and account closure in such cases.

12 Changes to This Privacy Policy

dream88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in the Platform's operations, applicable law, PAGCOR regulatory requirements, or data processing practices. The effective date of any revised Policy will be displayed prominently at the top of this page.

Where changes to this Policy are material — for example, where they introduce new categories of data collection, new third-party disclosures, or changes to your rights — dream88 will notify registered players via the email address on file prior to the changes taking effect. For non-material clarifications and corrections, updates may take effect immediately upon publication.

Your continued use of the dream88 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

13 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or dream88's personal data processing practices, please contact dream88 through the following channels:

If your concern is not resolved to your satisfaction through dream88's internal channels, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through the NPC's official complaint mechanism, available via Philippine government channels.