Dremjili Privacy Policy

1 Introduction

This Privacy Policy applies to all personal data collected by Dremjili through its website, mobile application, customer support channels, and any other services offered under the Dremjili brand. It applies to all registered players, prospective players, and visitors to the Dremjili platform, regardless of their location within the Philippines — whether you're based in Metro Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the archipelago.

Dremjili acts as the data controller for the personal data it collects directly from users. Where Dremjili engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by strict contractual obligations consistent with this Policy and applicable Philippine law.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2 Personal Data We Collect

Dremjili collects personal data through several channels, including account registration, identity verification, payment processing, platform usage, and customer support interactions. The categories of personal data we collect include:

Dremjili does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected — such as government-issued ID numbers — it is handled with heightened security measures and access controls.

We may also collect data about you from third-party sources, including payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), identity verification service providers, and fraud prevention agencies, where this is necessary to verify your identity or protect the integrity of the platform.

3 How We Use Your Personal Data

Dremjili uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and manage your Dremjili account, including verifying your identity and eligibility to use the platform.
• Service Delivery: To provide you with access to games, process deposits and withdrawals, apply bonuses, and deliver the full range of Dremjili platform features.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and gaming regulatory requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the platform and its users.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion at your request.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the Dremjili platform.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Legal Claims: To establish, exercise, or defend legal claims in connection with the Dremjili platform.

Dremjili will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise permitted by applicable law.

4 Legal Basis for Processing

Dremjili processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and its implementing rules:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your Dremjili account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and gaming regulatory obligations.
• Legitimate Interests: Processing is necessary for Dremjili's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential data uses, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

Dremjili does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and AML service providers who assist in verifying your identity and screening for financial crime risks.
• Technology Service Providers: Cloud hosting, data analytics, customer support software, and cybersecurity providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Game studios and software providers whose games are available on the Dremjili platform, to the extent necessary to deliver game services and resolve disputes.
• Regulatory Authorities: Philippine government agencies, including the National Privacy Commission, law enforcement authorities, and gaming regulators, where disclosure is required by law or court order.
• Professional Advisers: Lawyers, auditors, and other professional advisers where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

All third parties with whom Dremjili shares personal data are required to implement appropriate technical and organizational security measures and to process data only in accordance with Dremjili's instructions and applicable Philippine law.

6 Cookies & Tracking Technologies

Dremjili uses cookies and similar tracking technologies on its website and mobile application to enhance your experience, maintain session security, and analyze platform usage. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limits, so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Dremjili platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the Dremjili platform. Dremjili does not use third-party advertising cookies or cross-site tracking technologies.

7 Data Retention

Dremjili retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The general retention periods we apply are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with Dremjili's data disposal procedures. Where data is anonymized, it may be retained indefinitely for statistical and research purposes without further notice to you.

8 Data Security

Dremjili implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and Dremjili's servers
• Encryption at rest for all stored personal and financial data
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for administrative access to systems containing personal data
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Dremjili will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Philippine Data Privacy Act and its implementing rules.

While Dremjili takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your Dremjili account credentials and for notifying us immediately of any suspected unauthorized access.

9 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Dremjili:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data Dremjili holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Dremjili's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on Dremjili's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact Dremjili's Data Protection Officer through our customer support team. We will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you.

10 Children & Minors

The Dremjili platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. Dremjili does not knowingly collect personal data from individuals under the age of 21.

If Dremjili becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Dremjili platform, please contact our support team immediately so that we can investigate and take appropriate action.

Dremjili employs age verification procedures during registration and reserves the right to request documentary proof of age at any time. Accounts found to belong to individuals under the minimum age requirement will be suspended and any associated balances forfeited pending investigation.

11 International Data Transfers

Dremjili's primary operations and data storage are based in the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and technology partners — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, Dremjili ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other legally recognized transfer mechanisms.

Dremjili will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

12 Third-Party Services & Links

The Dremjili platform may reference or integrate with third-party services, including payment gateways such as GCash and PayMaya. These third-party services operate under their own privacy policies, which are independent of this Privacy Policy. Dremjili is not responsible for the privacy practices of third-party services.

When you interact with a third-party payment provider or service through the Dremjili platform, you are subject to that provider's terms and privacy policy in addition to Dremjili's. We encourage you to review the privacy policies of any third-party services you use in connection with your Dremjili account.

Dremjili does not embed third-party advertising networks, social media tracking pixels, or cross-site behavioral tracking technologies on its platform.

13 Updates to This Privacy Policy

Dremjili reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how Dremjili protects your personal data. Your continued use of the Dremjili platform following the posting of any updates constitutes your acceptance of the revised Privacy Policy.

If you have concerns about any changes to this Privacy Policy, you may contact our Data Protection Officer or request account closure as described in our Terms & Conditions.

14 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or Dremjili's data practices, please contact our Data Protection Officer through the customer support team. Our support agents are available 24 hours a day, 7 days a week via live chat on the platform.

You may also reach us by email. Our support email address is displayed in the footer of this page as plain text for reference. Please include "Privacy Request" in the subject line of your email so that your inquiry is directed to the appropriate team promptly.

If you are not satisfied with Dremjili's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Philippine Data Privacy Act of 2012.