Privacy Policy

1. Introduction

phdteam ("we," "our," "us," "the Platform") operates the online gaming platform accessible at phdteam.vip. In the course of providing our services to Filipino players nationwide — from Metro Manila and Cebu to Davao and beyond — we necessarily collect and process certain personal information about our users.

This Privacy Policy ("Policy") is intended to give you a clear, honest, and complete account of exactly what personal data phdteam collects, why we collect it, how we use and protect it, who we share it with, and for how long we keep it. We also explain the rights you have over your personal data under Philippine law, and how to exercise those rights.

This Policy applies to all personal data collected through: the phdteam website at phdteam.vip; the phdteam account registration and login process; the phdteam Wallet and all payment transactions; in-game activity on any game available through the Platform; customer support interactions; and any marketing communications you receive from phdteam, if you have opted in to receive them.

By registering a phdteam account or continuing to use the Platform, you confirm that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create an account or use phdteam's services.

2. Data Controller

The Data Controller responsible for the personal data of phdteam players is the operating entity behind the phdteam brand. The Data Controller determines the purposes and means of processing personal data collected through phdteam.vip and all associated services.

The Data Controller has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing phdteam's data protection strategy, ensuring compliance with RA 10173, and serving as the point of contact for all data subject rights requests and privacy-related enquiries.

Contact details for the DPO are provided in Section 14 of this Policy. All privacy-related enquiries, data subject rights requests, and breach notifications should be directed to the DPO using those contact details.

3. Personal Data We Collect

phdteam collects the following categories of personal data from its users. The specific data collected will depend on how you interact with the Platform and which services you use:

4. How We Collect Personal Data

phdteam collects personal data through the following channels and methods:

• Direct Submission: Information you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or submitting feedback.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including IP address, device identifiers, session data, and interaction logs. This data is collected via server logs, cookies, and similar technologies as described in Section 7.
• Payment Providers: When you make a deposit or withdrawal using GCash, Maya, BPI, BDO, Metrobank, or other supported Philippine payment methods, limited transaction reference data is shared between phdteam and the payment provider to confirm and reconcile the transaction. phdteam does not receive your full payment credentials from these providers.
• KYC Service Providers: In cases where automated identity verification tools are used to assist in KYC processing, data from submitted government ID documents may be processed by the KYC provider under a data processing agreement with phdteam.
• Publicly Available Sources: In limited circumstances related to fraud prevention or regulatory compliance, phdteam may consult publicly available information sources such as sanction lists or national ID registries to verify the accuracy of submitted information.

5. Purpose of Processing & Legal Basis

phdteam processes your personal data only for specific, defined purposes. Each purpose is supported by a lawful basis under the Data Privacy Act of 2012:

6. Data Sharing & Third-Party Disclosure

phdteam does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and defined circumstances:

• Payment Processors: GCash, Maya (PayMaya), BPI, BDO, Metrobank, and other Philippine payment infrastructure providers receive transaction reference data necessary to process your deposits and withdrawals. These providers are independent data controllers for their own services and process payment data under their own privacy policies.
• KYC Verification Providers: Identity document processing services that assist in verifying the authenticity of submitted KYC documents. These providers act as data processors under data processing agreements with phdteam and may not use your data for any purpose beyond the verification service they provide to us.
• Regulatory Authorities: phdteam is required to disclose personal data to Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities where required by law, court order, or regulatory obligation.
• Platform Technology Providers: Hosting, cloud infrastructure, and platform software providers who process personal data on our behalf under strict data processing agreements. These providers have no independent right to use your data.
• Fraud Prevention Services: Third-party fraud detection and risk management services may process technical data (such as IP addresses and device fingerprints) to assist phdteam in identifying and preventing fraudulent activity.

All third parties to whom personal data is disclosed are required to handle it in accordance with applicable Philippine privacy law and the terms of their data processing or sharing agreements with phdteam. phdteam does not authorize any data processor to sub-process personal data without phdteam's prior written approval.

7. Cookies & Tracking Technologies

phdteam uses cookies and similar tracking technologies on phdteam.vip to enable certain platform functions and collect technical usage data. The following categories of cookies are used:

• Strictly Necessary Cookies: Session cookies required for you to log in and maintain an authenticated session on the Platform. These cannot be disabled without preventing you from accessing your account. They do not persist beyond your browser session.
• Functional Cookies: Persistent cookies that remember your preferences — such as your preferred language settings or chosen game lobby view — to provide a more personalized platform experience across return visits.
• Analytics Cookies: Cookies used to collect aggregated, anonymized data about how users navigate the Platform — which pages are visited most, where sessions start and end, and how players discover different features. This data is used solely to improve the Platform and is not associated with your personal account.
• Security Cookies: Cookies used to support fraud detection and account security monitoring, including identification of new device logins and detection of unusual session patterns.

phdteam does not use third-party advertising or behavioral tracking cookies. No cookie data from phdteam is shared with advertising networks for the purpose of targeting you with advertising on other websites.

You may configure your browser to reject or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your phdteam account. Disabling functional cookies will result in loss of personalization features but will not affect core gaming functionality.

8. Data Retention

phdteam retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

At the end of the applicable retention period, personal data is either securely deleted from phdteam's systems or irreversibly anonymized such that it can no longer be associated with any individual. Anonymized and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

9. Security Measures

phdteam implements a multi-layered information security program to protect personal data from unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and phdteam's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all account access, payment transactions, and API communications.
• Encryption at Rest: Sensitive data stored in phdteam's databases — including KYC document images and financial records — is encrypted at rest using AES-256 encryption.
• Password Security: User passwords are processed using salted cryptographic hashing algorithms before storage. phdteam does not store passwords in plain text and staff do not have the ability to retrieve your password.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data privacy training.
• Intrusion Detection: phdteam operates active monitoring systems to detect and respond to unauthorized access attempts, anomalous login patterns, and potential security incidents in real time.
• Incident Response: In the event of a personal data breach, phdteam maintains a formal incident response procedure. Where a breach is likely to affect your rights and freedoms, phdteam will notify you and, where required by law, the National Privacy Commission within the timeframes prescribed by RA 10173.

While phdteam maintains robust security measures, no internet-connected system can be guaranteed completely secure. Players are also responsible for maintaining the security of their own account credentials, as outlined in the phdteam Terms & Conditions.

10. Minors & Age Policy

phdteam's services are strictly limited to individuals who are twenty-one (21) years of age or older, in compliance with PAGCOR's regulations governing online gaming operations in the Philippines. phdteam does not knowingly collect personal data from any individual under the age of 21.

Date of birth is a mandatory field at account registration, and age is verified against government-issued identification documents during the KYC process. Any account found to belong to an individual under the age of 21 will be immediately suspended, and any associated personal data will be handled in accordance with applicable law.

If you are a parent or guardian and believe that your child has created a phdteam account, please contact the Data Protection Officer immediately using the contact details in Section 14. phdteam will investigate and, if confirmed, delete any personal data collected from the underage individual and close the associated account.

11. Your Data Subject Rights Under the PDPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phdteam:

To exercise any of the above rights, submit a written request to phdteam's Data Protection Officer using the contact details provided in Section 14. Please include your registered mobile number and a clear description of the right you wish to exercise. phdteam will respond within fifteen (15) business days of receiving a verifiable request.

Note that some rights are subject to limitations. For example, the right to erasure does not apply to data phdteam is legally required to retain under AMLA, PAGCOR, or other applicable Philippine regulatory obligations. Where we are unable to fulfill a request fully, we will explain the reason in writing.

12. Cross-Border Data Transfers

In limited circumstances, personal data processed by phdteam may be transferred to or accessible from jurisdictions outside the Philippines — for example, where a hosting provider or software vendor operates data centers in another country.

Where such transfers occur, phdteam ensures that appropriate safeguards are in place to protect your personal data at a level equivalent to the protections afforded under Philippine law. These safeguards may include standard contractual clauses, data processing agreements that require compliance with Philippine privacy standards, or transfers to countries recognized as providing adequate data protection.

phdteam does not transfer personal data to countries or organizations for purposes of commercial exploitation, and all cross-border transfers are strictly limited to operational necessity.

13. Changes to This Privacy Policy

phdteam reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable Philippine law, or improvements to our platform. Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — phdteam will provide notice via a prominent notification on the Platform and, where we hold your contact details, via SMS or email at least seven (7) days before the amended Policy takes effect.

Minor and non-material updates (such as clarifications of existing practices, corrections of typographical errors, or reformatting) may be made without prior notice. The effective date displayed at the top of this Policy will be updated to reflect the date of any revision.

Your continued use of phdteam after the effective date of any updated Policy constitutes your acknowledgment of the changes. We recommend reviewing this Policy periodically. The current version is always available at phdteam.vip/privacy-policy.

14. Contact & Data Protection Officer

For all privacy-related enquiries, data subject rights requests, or concerns about how phdteam handles your personal data, please contact our Data Protection Officer:

phdteam takes all privacy concerns seriously. We encourage players to raise any data privacy questions with us directly in the first instance, as many concerns can be resolved quickly through direct communication with our DPO.