dreajili Privacy Policy

This Privacy Policy ("Policy") describes how dreajili ("dreajili," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "Player," or "User") who access or use the dreajili website and gaming platform (collectively, the "Platform").

dreajili is committed to protecting the privacy and personal data of all its players, particularly those based in the Philippines. This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By registering an account on dreajili, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, dreajili is the Personal Information Controller (PIC) in respect of the personal data it collects and processes about you.

As the Personal Information Controller, dreajili determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

dreajili has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 16 of this Policy.

dreajili collects the following categories of personal data, depending on how you interact with the Platform:

dreajili does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for regulatory compliance, such as government-issued ID numbers for identity verification purposes.

dreajili collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Cookies, web beacons, pixel tags, and server logs that automatically record technical and usage data when you access the Platform.
• Third-party sources: Identity verification providers, payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services that share data with us to fulfil our legal and contractual obligations.
• Public sources: Publicly available information used to verify your identity or comply with anti-money laundering obligations.

dreajili processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given clear, informed consent, such as opting in to marketing communications.
• Contractual necessity: Processing required to fulfil our obligations under the dreajili Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing necessary to comply with Philippine law, including AMLA reporting, PAGCOR regulatory requirements, and NPC data breach notification obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your rights.

dreajili uses your personal data for the following purposes:

• Creating and managing your dreajili account, including identity and age verification.
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Delivering gaming services, including personalising your game recommendations and lobby experience.
• Detecting and preventing fraud, money laundering, and other prohibited activities on the Platform.
• Monitoring gameplay patterns to identify problem gambling behaviour and fulfil our responsible gaming obligations.
• Communicating with you about your account, transactions, security alerts, and Platform updates.
• Sending you dreajili promotional offers, bonuses, and event notifications — only where you have opted in or where permitted by law.
• Complying with legal and regulatory obligations, including reporting to PAGCOR and the Anti-Money Laundering Council (AMLC) as required.
• Improving the dreajili Platform through analytics, A/B testing, and user research.
• Resolving disputes and enforcing our Terms & Conditions.

dreajili will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

dreajili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, to process your financial transactions.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with Philippine law.
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics vendors who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the AMLC, the NPC, and other competent Philippine authorities, where required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants bound by confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of dreajili assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

dreajili uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game lobby layout.
• Analytics cookies: Collect aggregated, anonymised data about how players use the dreajili Platform to help us improve performance and user experience.
• Marketing cookies: Used to deliver relevant dreajili promotions and measure the effectiveness of our campaigns. Only activated with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the dreajili Platform. A full Cookie Policy is available within your account settings.

dreajili retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

• Account data: Retained for the duration of your dreajili account and for a minimum of five (5) years after account closure, in accordance with AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC and identity documents: Retained for the period required by PAGCOR and AMLA regulations, typically five (5) years from the end of the business relationship.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to legal retention requirements.

Upon expiry of the applicable retention period, dreajili will securely delete or anonymise your personal data in accordance with its data disposal procedures.

dreajili implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the dreajili Platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Multi-factor authentication for all dreajili staff accessing systems that hold personal data.
• Incident response procedures aligned with NPC breach notification requirements (72-hour notification for high-risk breaches).

While dreajili takes all reasonable steps to protect your data, no security system is completely impenetrable. You are responsible for maintaining the security of your own dreajili account credentials.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by dreajili:

• Right to be informed: The right to know what personal data dreajili collects about you and how it is processed.
• Right of access: The right to request a copy of the personal data dreajili holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission if you believe dreajili has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16. dreajili will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

The dreajili Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law governing casino-style gaming. dreajili does not knowingly collect personal data from individuals under the age of 21.

If dreajili discovers or is notified that it has inadvertently collected personal data from a person under 21, it will immediately close the relevant account, forfeit any associated balances in accordance with its Terms & Conditions, and securely delete the personal data collected.

If you are a parent or guardian and believe that your child has registered on dreajili, please contact our support team immediately at the email address provided in Section 16.

dreajili primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where dreajili uses cloud infrastructure or third-party service providers with operations in other jurisdictions.

Where such transfers occur, dreajili ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that impose data protection obligations equivalent to those under Philippine law, or transfers to countries recognised by the NPC as providing an adequate level of data protection.

By using the dreajili Platform, you consent to the transfer of your personal data to other countries where dreajili or its service providers operate, subject to the safeguards described above.

The dreajili Platform may contain references to third-party services such as payment providers. dreajili is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of dreajili.

This Policy applies solely to personal data collected and processed by dreajili through the dreajili Platform. It does not extend to any third-party platforms, even where those platforms are accessed via links or integrations within the dreajili environment.

dreajili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered players via email or in-platform notification prior to taking effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how dreajili protects your personal data.

Your continued use of the dreajili Platform after any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree to the amended Policy, you should stop using the Platform and may close your account in accordance with the dreajili Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by dreajili, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.

For responsible gaming concerns, please visit the dreajili Responsible Gaming page. For a full overview of your legal rights and obligations as a dreajili player, please review our Terms & Conditions.