dreajili Privacy Policy

dreajili is the data controller responsible for the personal data collected through the Platform. As data controller, dreajili determines the purposes and means of processing personal data and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules and regulations ("DPA").

dreajili has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data privacy legislation. You may contact dreajili's DPO using the contact details provided in Section 14 of this Policy.

dreajili collects the following categories of personal data from or about you:

2.1 Identity Data. Your full legal name, date of birth, gender, and government-issued identification number (e.g., Philippine National ID, SSS, PhilHealth, TIN, or passport number) collected during account registration and identity verification.

2.2 Contact Data. Your Philippine mobile number, email address, and residential address in the Philippines. Your mobile number is your primary account identifier on the dreajili Platform.

2.3 Financial Data. Payment method details sufficient to process deposits and withdrawals, including GCash account numbers, PayMaya wallet identifiers, and bank account numbers for BPI, BDO, and Metrobank transfers. dreajili does not store full debit or credit card numbers.

2.4 Transaction Data. Records of all deposits, withdrawals, game wagers, and bonus transactions associated with your dreajili Account, including amounts, timestamps, game identifiers, and transaction reference numbers.

2.5 Technical Data. IP address, device type, operating system, browser type and version, screen resolution, mobile network carrier, and session timestamps collected automatically when you access the Platform.

2.6 Usage Data. Game history, session duration, bet patterns, feature preferences, and navigation behaviour on the Platform.

2.7 Communications Data. Records of all communications between you and dreajili's support team, including live chat transcripts, support ticket contents, and any documents or screenshots submitted to dreajili.

2.8 Responsible Gaming Data. Records of any deposit limits, session limits, self-exclusion requests, or responsible gaming assessments associated with your dreajili Account.

dreajili collects personal data through the following means:

• Direct collection — when you register a dreajili Account, complete identity verification, make a deposit or withdrawal, contact dreajili support, or respond to surveys or promotions.
• Automated collection — through cookies, web beacons, and server logs that record technical and usage data each time you access the Platform.
• Third-party sources — from payment service providers (e.g., GCash, PayMaya), identity verification services, fraud detection providers, and, where applicable, from PAGCOR-mandated reporting systems.

dreajili uses your personal data for the following purposes:

• To create, verify, and manage your dreajili Account, including processing your dreajili login.
• To process deposits, withdrawals, and bonus transactions, and to maintain accurate financial records for your Account.
• To verify your identity and age (21+) in compliance with PAGCOR requirements and the DPA.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct in accordance with Philippine anti-money laundering legislation (Republic Act 9160, as amended).
• To personalise your dreajili experience, including game recommendations and promotional offers tailored to your activity.
• To provide customer support and respond to your enquiries and complaints.
• To administer dreajili's responsible gaming programme, including monitoring for problem gambling indicators and enforcing self-exclusion requests.
• To improve the Platform through analysis of aggregated, anonymised usage data.
• To send you service-related communications, including account security alerts, transaction confirmations, and policy updates.
• To comply with legal obligations, regulatory requirements, and lawful requests from Philippine government authorities including PAGCOR and the AMLC.

dreajili processes your personal data on the following legal bases under the DPA:

• Contractual necessity — processing required to perform the contract between you and dreajili (i.e., providing the gaming platform services you have registered for).
• Legal obligation — processing required to comply with applicable Philippine law, including age verification, anti-money laundering obligations, and PAGCOR regulatory requirements.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where dreajili's interests do not override your fundamental rights.
• Consent — for optional processing activities such as marketing communications and the use of non-essential cookies, where dreajili has obtained your specific, informed consent.

dreajili does not sell your personal data. dreajili may share your personal data with the following categories of recipients only to the extent necessary for the specified purposes:

• Payment processors — GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your deposits and withdrawals.
• Identity verification providers — third-party KYC service providers engaged by dreajili to verify your identity and age in compliance with PAGCOR requirements.
• Game content providers — game software providers whose games are offered through dreajili may receive anonymised session data for technical performance purposes only.
• Fraud and security providers — specialist providers engaged to detect and prevent fraud, account takeover, and money laundering on the Platform.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities, where disclosure is required by law or a valid legal order.
• Professional advisers — lawyers, accountants, and auditors engaged by dreajili, subject to professional confidentiality obligations.

All third parties with whom dreajili shares personal data are contractually required to implement appropriate data protection safeguards and to process your data only for the specified purpose.

7.1 dreajili uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help dreajili recognise returning users, maintain dreajili login sessions, and understand how the Platform is used.

7.2 dreajili uses the following categories of cookies:

• Strictly necessary cookies — required for the Platform to function, including session management for your dreajili login. These cannot be disabled.
• Performance cookies — collect anonymised data about how users navigate the Platform to help dreajili identify and fix technical issues.
• Functional cookies — remember your preferences (e.g., language and display settings) to improve your dreajili experience.
• Analytics cookies — used by dreajili's internal analytics tools to measure Platform usage in aggregate, anonymised form.

7.3 You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the dreajili Platform, including the dreajili login process.

dreajili retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your dreajili Account and for any legally required retention period thereafter. Specific retention periods include:

• Account and identity data: retained for the duration of your dreajili Account plus a minimum of five (5) years after account closure, as required by PAGCOR and anti-money laundering regulations.
• Financial transaction data: retained for a minimum of five (5) years from the date of the transaction, as required by Philippine law.
• Communication records: retained for three (3) years from the date of the communication.
• Technical and usage data: retained in anonymised, aggregated form for platform analytics purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by dreajili:

dreajili will respond to all data rights requests within fifteen (15) business days of receipt. Where a request cannot be fulfilled (e.g., due to a mandatory legal retention requirement), dreajili will explain the reason in writing.

The dreajili Platform is strictly for adults aged 21 years and above, as required by PAGCOR for real-money gambling services in the Philippines. dreajili does not knowingly collect personal data from persons under 21 years of age. If dreajili discovers that personal data has been collected from a person under 21, that Account will be closed immediately and all personal data associated with the Account will be deleted, subject to any legal reporting obligations that may apply.

If you believe that a person under 21 has registered a dreajili Account, please notify dreajili's support team immediately.

dreajili implements technical and organisational security measures appropriate to the sensitivity of the personal data it holds, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and dreajili's servers.
• Encryption of sensitive data at rest, including identity documents and financial data.
• Access controls limiting dreajili staff access to personal data to those with a genuine operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for all dreajili staff accessing systems that hold personal data.

No data transmission over the internet can be guaranteed as completely secure. While dreajili takes all commercially reasonable measures to protect your personal data, you acknowledge that you transmit data to dreajili at your own risk. dreajili recommends that you enable two-factor authentication on your dreajili Account and use a strong, unique password for dreajili login.

dreajili may transfer personal data to third-party service providers located outside the Philippines where necessary to provide Platform services (for example, cloud infrastructure providers or international fraud detection services). Where such transfers occur, dreajili ensures that appropriate safeguards are in place, including contractual clauses that require the receiving party to apply data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012.

dreajili does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without implementing appropriate contractual or technical protections.

dreajili reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, dreajili's data processing practices, or Platform features. Material changes will be communicated to registered dreajili users via SMS notification to the registered mobile number or via a prominent notice on the Platform, at least seven (7) days before the changes take effect.

Your continued use of the dreajili Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. The current version of this Policy is always available at dreajili.app/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or dreajili's handling of your personal data, please contact dreajili's Data Protection Officer:

If you are not satisfied with dreajili's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaints process is available on the NPC's official website.

dreajili acknowledges all privacy enquiries within 48 hours of receipt and aims to resolve all complaints within fifteen (15) business days.