pub207 Privacy Policy

pub207 ("we", "us", "our") operates the online gaming platform accessible at pub207.vip, serving registered players across the Philippines including Metro Manila, Cebu, Davao, Quezon City, and beyond. We take the privacy and security of your personal data seriously.

This Privacy Policy sets out how pub207 collects, processes, stores, discloses, and protects personal information relating to individuals who visit or use the pub207 Platform. It applies to all players who register an account on pub207, visitors who browse the Platform without registering, and individuals who contact pub207 through any support channel.

This Policy is prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. By using pub207, you consent to the collection and use of your personal data as described in this Policy.

For the purposes of the Data Privacy Act of 2012 and this Policy, the Personal Information Controller responsible for your personal data is the operating entity of pub207, which operates the pub207.vip Platform and is responsible for all decisions regarding how your personal data is collected, used, and stored.

pub207 has designated a Data Protection Officer (DPO) who oversees compliance with applicable data privacy laws and handles data subject requests and complaints. You may contact the pub207 DPO at: [email protected] (reference "Data Privacy" in your subject line).

pub207 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

pub207 does not collect sensitive personal information — as defined under Section 3(l) of RA 10173 — such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly necessary for responsible gaming assessment purposes and only with your explicit consent.

pub207 collects personal data through the following means:

• Direct provision: Information you actively submit to pub207 — during account registration, identity verification, payment method addition, support contacts, or responsible gaming tool configuration.
• Automated technical collection: Data gathered automatically when you access and interact with the pub207 Platform, including through cookies, server logs, and session tracking technologies described in Section 11.
• Payment processors: Confirmation data and transaction references received from payment providers such as GCash (GXI), Maya (Paymaya Philippines), and Philippine banking institutions when you initiate deposits or withdrawals.
• Identity verification services: Where pub207 uses third-party KYC verification providers, those services may return verification status and risk signals to pub207 for account approval purposes.
• Third-party game providers: Game session data, including bet amounts and outcomes, is transmitted to pub207 by third-party game suppliers in real time for wallet management and dispute resolution purposes.
• Fraud and security services: Risk and fraud signals from security monitoring partners used to protect the Platform and its players.

pub207 processes your personal data for the following specific, legitimate purposes:

pub207 does not use personal data for purposes incompatible with those stated above. If a new processing purpose arises, pub207 will update this Policy and notify you accordingly.

Under the Data Privacy Act of 2012, pub207 processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and pub207 — including account creation, gameplay, payment processing, and support. Without this processing, pub207 cannot provide you with its services.
• Legal obligation: Processing required to comply with Philippine law — including PAGCOR regulatory reporting, Anti-Money Laundering Act (AMLA) obligations, age verification requirements, and NPC compliance obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregate analytics, where pub207's interest in a secure and well-functioning Platform does not override your fundamental rights.
• Consent: For optional processing such as promotional communications and non-essential cookies, pub207 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.1 General Principle. pub207 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared only in the following limited circumstances:

• Payment service providers: GCash (GXI, Inc.), Maya (Voyager Innovations, Inc.), BPI, BDO, UnionBank, and other financial institutions receive the minimum data necessary to process your requested transactions.
• Game providers: Certified game suppliers (such as JILI, PG Soft, Pragmatic Play, Evolution Gaming) receive session and bet data necessary to deliver game outcomes and process winnings to your pub207 Wallet.
• KYC and identity verification services: Identity document verification platforms receive document images and identity data solely for the purpose of verifying your identity as required by law.
• Fraud prevention and security services: Anti-fraud platforms receive technical and behavioural signals to identify and prevent fraudulent or prohibited activity on the Platform.
• Regulatory authorities: PAGCOR and other Philippine regulatory bodies, law enforcement agencies, or courts may receive personal data where pub207 is legally required or compelled to provide it.
• Professional advisers: Legal, accounting, audit, and insurance professionals may access personal data where strictly necessary in the course of services they provide to pub207, subject to confidentiality obligations.

7.2 Third-Party Obligations. All third parties with whom pub207 shares personal data are required to process such data lawfully, in accordance with applicable privacy laws, and for no purpose beyond that specified by pub207. Appropriate data processing agreements are maintained with all third-party processors.

pub207 primarily stores and processes personal data on servers located within or accessible from the Philippines. However, some third-party service providers — including game providers, fraud prevention platforms, and cloud infrastructure providers — may process data in server locations outside the Philippines.

Where personal data is transferred outside the Philippines, pub207 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards include:

• Contractual data transfer agreements incorporating NPC-recognised standard clauses.
• Transfer only to jurisdictions or entities that provide an adequate level of data protection as assessed by pub207 or recognised by the NPC.
• Technical and organisational measures to protect data during transfer and in the recipient jurisdiction.

You may request information about specific international transfers and the safeguards in place by contacting pub207's Data Protection Officer.

pub207 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

pub207 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and pub207 servers is protected using TLS 1.2 or higher (256-bit SSL). Certificate validity is monitored continuously.
• Encryption at rest: Personal data and financial records stored on pub207 infrastructure are encrypted using AES-256 encryption.
• Access controls: Access to personal data within pub207 is restricted on a strict need-to-know basis. Role-based access controls and multi-factor authentication are required for all staff with data access.
• Two-factor authentication (2FA): 2FA is available to all registered players as an additional layer of account protection. pub207 strongly recommends enabling 2FA.
• Regular security assessments: pub207 conducts periodic security audits and penetration testing to identify and remediate vulnerabilities.
• Data breach response: pub207 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, pub207 will notify the NPC and affected players within the timeframes required by applicable law.
• Staff training: All pub207 personnel with access to personal data receive data privacy and security training appropriate to their role.

While pub207 takes reasonable and appropriate security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying pub207 immediately if you suspect unauthorised access.

pub207 uses cookies and similar browser-based technologies to operate the Platform and provide you with a functional experience. The following categories of cookies are used:

pub207 does not use third-party advertising cookies, cross-site tracking technologies, retargeting pixels, or social media tracking scripts on the Platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into and using pub207.

pub207 is strictly an adults-only platform. Under Philippine gambling regulations and PAGCOR guidelines, pub207 enforces a minimum age of 21 years for all registered players. pub207 does not knowingly collect, use, or retain personal data from any person under the age of 21.

Age verification is conducted as part of the KYC process prior to withdrawal. Any account found to be registered by a person under 21 years of age will be immediately suspended, associated funds will be forfeited, and the matter may be referred to PAGCOR and relevant law enforcement authorities.

If pub207 becomes aware that personal data has been collected from a minor, the data will be deleted promptly and the account closed. If you have reason to believe a minor has registered on pub207, please contact our support team at [email protected] immediately.

Under the Data Privacy Act of 2012, you have the following rights in relation to personal data pub207 holds about you:

• Right to be Informed: You have the right to be informed of how pub207 processes your personal data, as set out in this Policy.
• Right of Access: You may request a copy of the personal data pub207 holds about you, together with information about the purposes of processing, the categories of data held, and the recipients with whom it has been shared.
• Right to Rectification: You may request correction of personal data that is inaccurate or incomplete. You may update most account information directly through your pub207 account settings.
• Right to Erasure: You may request deletion of personal data that is no longer necessary for its original purpose or where you have withdrawn consent and there is no other lawful basis for processing. Note that pub207 may be legally required to retain certain data (such as financial records under AMLA) notwithstanding an erasure request.
• Right to Data Portability: You may request that pub207 provide you with your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other processing carried out on legitimate interest grounds, though pub207 may override such objections where there are compelling legitimate grounds or legal obligations.
• Right to Damages: If you suffer actual loss or harm as a result of a pub207 data privacy violation, you may be entitled to claim compensation.

How to submit a data rights request: Send a written request to [email protected] with the subject line "Data Privacy Request" including your registered username or email address and a clear description of your request. pub207 will respond within fifteen (15) calendar days of receiving a complete request. In complex cases, the response period may be extended by a further fifteen (15) days with notification to you.

Identity verification may be required before processing certain data rights requests to ensure your data is not disclosed to an unauthorised party.

If you have a concern about how pub207 processes your personal data, we encourage you to contact our Data Protection Officer in the first instance so we can attempt to resolve the matter directly:

• Email: [email protected] — subject line "Data Privacy Complaint"
• pub207 will acknowledge your complaint within three (3) business days and provide a substantive response within fifteen (15) calendar days.

If you are not satisfied with pub207's response, or if you believe pub207 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on the NPC complaint process is available on the NPC's official website.

pub207 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, the updated Policy will be published on this page with a revised Effective Date.

pub207 will use reasonable efforts to notify registered players of material changes via email to the registered address or through an in-platform notification at the time of next login. For minor or non-material changes, publication of the updated Policy on this page without individual notification is sufficient.

Your continued use of pub207 following publication of an updated Privacy Policy constitutes acceptance of the changes. If you do not accept the updated Policy, you should cease use of the Platform and may close your account as described in the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or pub207's data processing practices, please contact us:

• Data Protection Officer: [email protected] — reference "Data Privacy" in your email subject line for routing to the DPO team.
• Live Chat: Available 24/7 on pub207.vip for general privacy queries. Our support team can escalate to the DPO where required.
• Response time: Data privacy requests are acknowledged within three (3) business days and resolved within fifteen (15) calendar days, unless extended as described in Section 13.