Phdream Privacy Policy – Personal Data Protection for Malaysian Members

1Introduction and Scope of This Privacy Policy

This Privacy Policy is published by phdream and applies to all users who access or use our platform at phdream-khelo.com, including all online entertainment services we provide — slots, Live Casino, baccarat, Poker, virtual sports, and more.

phdream committed to protecting every member's privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and applicable international standards. We handle every piece of information you provide with the utmost responsibility and care.

This document sets out in detail: the types of data we collect, the reasons it is collected, how it is stored and protected, with whom it may be shared under very limited circumstances, and what rights you hold over your personal data. Please take the time to read this document in full, as it contains information that is important to you.

2Types of Personal Data We Collect

phdream only collects data that is strictly necessary to operate our services safely and efficiently. The data we collect can be grouped into the following categories:

We not collect sensitive information such as biometric data, health records, or religious information unless you voluntarily provide it in a very specific context.

3How We Collect Your Data

phdream collects your personal data through several different channels:

• Account registration — when you complete the registration form with your name, phone number, email, and date of birth.
• KYC (Know Your Customer) Process — when you submit identification documents for identity verification.
• Financial transactions — when you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, ShopeePay, Boost, or FPX (Maybank2u, CIMB Clicks), or when you submit a withdrawal request.
• Platform usage — automatically through our systems when you play games, access the site, or interact with platform features.
• Support communications — when you contact our customer support team via live chat or email.
• Cookies and tracking technologies — industry-standard technology used to enhance user experience and platform security.

4Purpose of Data Use and Processing

phdream use your personal data only for legitimate, specified purposes. The primary purposes are as follows:

• Account management — creating, verifying, and maintaining your account on phdream.
• Financial transaction processing — processing deposits and withdrawals securely and accurately.
• Fraud prevention and anti-money laundering — monitoring suspicious activity to protect both you and our platform.
• Legal compliance — fulfilling PDPA 2010 requirements, financial reporting obligations, and directives from relevant authorities.
• Customer support — resolving enquiries, complaints, and technical issues you have reported.
• Platform improvements — analysing usage patterns in aggregate (not individually) to improve our products and services.
• Account-related communications — sending important notifications about your account, security, or changes to our terms.
• Responsible gaming — detecting gameplay patterns that may indicate a need for responsible gaming intervention.

5Sharing Data with Third Parties

phdream does not sell, rent, or distribute your personal data for commercial purposes to any third party. However, under very limited circumstances and with appropriate safeguards, data may be shared with:

• Payment service providers — such as Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost, and banks offering FPX services, solely for the purpose of processing your financial transactions.
• Licensed game providers — such as Pragmatic Play, NetEnt, Microgaming, and PG Soft, solely for the operational purposes of the games you play.
• Relevant authorities — such as the police, courts, or regulatory bodies, where required by Malaysian law or a valid court order.
• Companies within the same group — only where necessary for operational purposes and subject to equally stringent data protection agreements.

All third parties who receive your data are required to comply with data protection standards equivalent to or stricter than those of phdream.

6Data Retention and Security Measures

phdream implements multiple layers of technical and organisational safeguards to protect the security of your personal data:

• 256-bit SSL Encryption — all data transmitted between your browser and phdream's servers is fully encrypted using the same SSL technology employed by Malaysia's leading banking institutions.
• Encrypted database — all data stored in our databases is encrypted using AES-256 algorithms.
• Strict access controls — only phdream staff who require access to carry out their authorised duties may view personal data, and all access is logged.
• Regular security audits — our systems undergo regular penetration testing and security audits conducted by independent parties.
• Two-factor authentication — available to all member accounts as an additional layer of protection.

Retention Period: Your personal data is retained for the duration of your active account and for a minimum of seven (7) years following account closure, in accordance with Malaysian financial and legal compliance requirements. Data that is no longer needed will be securely deleted or anonymised.

7Your Rights Regarding Personal Data

As a member phdream and as a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

• Right to Access — you may request a copy of the personal data we hold about you. We will provide this within 21 business days.
• Right to Rectification — you may request that we correct any personal data that is inaccurate, incomplete, or out of date.
• Right to Object — you may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw it at any time without affecting the validity of any processing carried out prior to withdrawal.
• Right to Data Portability — you may request your data in a structured, machine-readable format for transfer to another platform.

To exercise any of these rights, please contact the phdream support team via live chat or email at support@phdream-khelo.com. We will verify your identity before processing any data-related request.

8Cookies and Tracking Technologies

phdream uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are:

• Essential Cookies — required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies — collects aggregated (non-personal) data on how users interact with the platform to help us improve its design and functionality.
• Functional Cookies — saving your preferences such as game settings, display theme, and language preference so you don't have to reconfigure them each time.
• Security Cookies — helps us detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie preferences through your web browser. Please note, however, that disabling certain cookies may affect the functionality of the phdream platform.

9Children's Data Protection

phdream is an adult entertainment platform that only permits users aged 18 years and above. We do not knowingly collect personal data from minors.

If we become aware or are notified that personal data from an individual under the age of 18 has been inadvertently collected, we will immediately take the following steps:

• Immediately closing and blocking the account in question.
• Permanently delete all personal data associated with that individual from our systems.
• Returning any remaining funds in the account (upon appropriate verification).

Parents or guardians who believe their child may have registered on phdream are encouraged to contact us immediately at support@phdream-khelo.com.

10Links to Third-Party Sites

Platform phdream may contain links or references to third-party websites or services — such as game provider support pages or payment portals. Our Privacy Policy not covering the privacy practices of those third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit. phdream is not responsible for the content, privacy practices, or security of any website outside our direct control.

11Amendments to This Privacy Policy

phdream reserves the right to update or amend this Privacy Policy from time to time to reflect changes in legislation, industry practices, or the way we handle data.

When significant amendments are made, we will notify you via:

• An in-platform notification when you log in to your account after the amendments take effect.
• Email to your registered address (for material amendments that affect your privacy rights).
• A prominent notice at the top of this page displaying the new update date.

Your continued use of the phdream platform after any amendments take effect will be considered acceptance of the revised policy. We encourage you to review this page periodically.

12Contact Us About Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how phdream handles your personal data, please contact us via:

• Live Chat: Available 24/7 directly through the phdream platform — the fastest way to get a response.
• Privacy Email: support@phdream-khelo.com — include the subject line "Data Privacy Enquiry" for faster handling.