d10d Privacy Policy

1. Who We Are

This Privacy Policy applies to d10d ("d10d," "we," "us," or "our"), the operator of the online gaming platform accessible at https://d10d.bio and its related mobile applications (the "Platform"). d10d is a Philippines-based online gaming operator licensed and regulated by PAGCOR (Philippine Amusement and Gaming Corporation).

For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012, or "DPA") and its Implementing Rules and Regulations, d10d acts as a Personal Information Controller (PIC) in respect of the personal data of registered players and website visitors processed through our Platform.

2. Personal Data We Collect

d10d collects personal data necessary for the safe, legal, and effective operation of our online gaming platform. The categories of personal data we collect are described below.

2.1 Registration Data

When you create a d10d account, we collect the following information that you provide directly:

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Philippine mobile number;
• Email address;
• Chosen username and hashed password;
• Province or city of residence (Metro Manila, Cebu, Davao, etc.).

2.2 Identity Verification (KYC) Data

To comply with PAGCOR Know Your Customer (KYC) requirements and the Philippine Anti-Money Laundering Act (RA 9160 as amended), d10d may collect:

• Copies of valid Philippine government-issued identification documents (PhilSys ID, passport, driver's licence, UMID, SSS ID, or equivalent);
• Proof of address (utility bill, bank statement, or other official document issued within the past three months);
• Selfie or facial verification image (for identity confirmation purposes);
• Source of funds documentation where required by AMLC guidelines.

2.3 Financial and Transaction Data

d10d collects financial data necessary to process deposits and withdrawals, including:

• GCash account number or registered mobile number;
• PayMaya account details;
• Bank account numbers and bank name (BPI, BDO, Metrobank, or other Philippine banks);
• Transaction history (deposit amounts, withdrawal requests, wagering history);
• Bonus and promotional activity records.

2.4 Technical and Usage Data

When you use the d10d Platform, we automatically collect technical information, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Session timestamps, duration, and activity logs;
• Game play records and wagering data;
• Referral source and marketing attribution data.

Data Category	Examples	Collection Method
Registration Data	Name, DOB, mobile, email	Provided by you at signup
KYC / Identity	Government ID, selfie	Uploaded by you on request
Financial Data	GCash number, bank account	Provided by you at cashier
Technical / Usage	IP address, device type, session logs	Automatically via Platform
Communications	Support chat transcripts, emails	Generated during support contact

3. How We Use Your Personal Data

d10d uses collected personal data for the following specific purposes:

• Account Creation and Management: To register your d10d account, verify your identity (21+ age verification), and maintain your account in compliance with PAGCOR regulations;
• Service Delivery: To process deposits via GCash and PayMaya, facilitate game play, award bonuses, and process withdrawal requests to your nominated payment method;
• Regulatory Compliance: To comply with PAGCOR licensing obligations, AMLC anti-money laundering reporting requirements, and applicable Philippine law;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and bonus abuse;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels;
• Responsible Gaming: To identify potential problem gambling behaviour and enforce player-requested limits or exclusions in accordance with our Responsible Gaming Policy;
• Marketing Communications: Where you have provided consent, to send you information about promotions, bonuses, and d10d platform updates via SMS, email, or in-platform notifications;
• Platform Improvement: To analyse aggregate, anonymized usage patterns and improve the d10d Platform's performance, game selection, and user experience.

4. Legal Basis for Processing

d10d processes your personal data on the following legal grounds as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform our contractual obligations to you under the d10d Terms and Conditions (e.g., account management, payment processing, game delivery);
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws and regulations;
• Legitimate Interests: Processing for d10d's legitimate business interests such as fraud prevention, security, and platform improvement, where these interests do not override your privacy rights;
• Consent: Processing for marketing communications where you have provided explicit consent. You may withdraw marketing consent at any time by contacting d10d support.

5. Data Sharing and Disclosure

d10d may share your personal data with the following categories of recipients:

• Payment Service Providers: GCash (Globe Fintech Innovations), PayMaya (Voyager Innovations), and Philippine banks (BPI, BDO, Metrobank) for the processing of deposits and withdrawals;
• Game Content Providers: Licensed game providers (such as JILI, Pragmatic Play, and PG Soft) receive anonymized session tokens necessary for game delivery — they do not receive your personal identifiable information;
• PAGCOR: As our licensing regulator, PAGCOR may request access to player records in the course of regulatory audits or investigations;
• Anti-Money Laundering Council (AMLC): d10d is required by RA 9160 to report covered and suspicious transactions to AMLC;
• Law Enforcement: d10d will disclose personal data to Philippine law enforcement agencies or courts where required by valid legal order;
• Technology Service Providers: Trusted third-party cloud infrastructure, cybersecurity, and fraud detection providers who process data on d10d's behalf under strict data processing agreements and confidentiality obligations.

6. Cookies and Tracking Technologies

d10d uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies d10d uses include:

• Strictly Necessary Cookies: Essential for the Platform to function, including login session management and security tokens. These cannot be disabled;
• Performance Cookies: Used to collect anonymized analytics about how players use the Platform, helping d10d improve game loading performance and navigation — particularly optimized for Philippine mobile network conditions;
• Functional Cookies: Store your Platform preferences such as language settings and last visited game category;
• Marketing Cookies: Used to measure the effectiveness of d10d's promotional campaigns. These are only set with your consent.

7. Data Retention

d10d retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Account Data: Retained for the duration of your active d10d account plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLC record-keeping obligations;
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the conclusion of any regulatory inquiry;
• Financial Transaction Records: Retained for a minimum of five (5) years as required under Philippine anti-money laundering regulations;
• Marketing Communication Records: Retained until you withdraw consent and for a reasonable period thereafter to maintain suppression lists;
• Technical Logs: Typically retained for twelve (12) months for security and fraud investigation purposes.

Following the expiry of applicable retention periods, d10d will securely delete or anonymize personal data in accordance with its data destruction policy.

8. Data Security

d10d implements technical and organizational security measures appropriate to the risks presented by the processing of personal data, including:

• 256-bit SSL/TLS encryption across all Platform communications, including login, deposit, and withdrawal transactions;
• Encrypted storage of all sensitive personal data and financial records;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular penetration testing and security vulnerability assessments by independent cybersecurity specialists;
• Multi-factor authentication requirements for d10d staff accessing systems containing personal data;
• 24/7 security monitoring with automated anomaly detection and incident response protocols.

In the event of a personal data breach that is likely to result in harm to affected individuals, d10d will notify the National Privacy Commission (NPC) and affected data subjects in accordance with Section 20 of the Data Privacy Act and NPC Circular No. 16-03.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, d10d players have the following rights in respect of their personal data:

• Right to be Informed: The right to know what personal data d10d collects, for what purpose, and how it is processed — as set out in this Policy;
• Right of Access: The right to request a copy of the personal data d10d holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your d10d account;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to d10d's legal obligations to retain certain records under PAGCOR and AMLC requirements;
• Right to Object: The right to object to the processing of your personal data for marketing purposes — withdrawable at any time without affecting other processing;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe d10d has violated your data privacy rights.

10. Children's Privacy

The d10d Platform is strictly for users aged twenty-one (21) years and above, as required by PAGCOR regulations governing online gaming in the Philippines. d10d does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If d10d becomes aware that personal data has been collected from a person under 21 years of age, such data will be deleted immediately and the associated account suspended. If you believe a minor has registered an account with d10d, please contact our support team immediately.

11. International Data Transfers

d10d's primary operations and data storage are based in the Philippines. Where data is transferred to or processed by service providers outside the Philippines (for example, cloud infrastructure providers or game content licensors), d10d ensures that appropriate safeguards are in place, including:

• Data processing agreements requiring recipient organizations to comply with standards equivalent to the Philippine Data Privacy Act;
• Transfers only to countries or organizations that the National Privacy Commission has recognised as providing adequate data protection;
• Technical safeguards including encryption ensuring data protection during transmission.

12. Changes to This Privacy Policy

d10d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy will be revised with each update.

Where changes are material, d10d will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect. Continued use of the d10d Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

13. Contact Us & Data Protection Officer

d10d has appointed a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act. For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

• Data Protection Officer, d10d
• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the d10d Platform — average response under 5 minutes
• Response Time: DPO inquiries are addressed within 15 business days