207pub Privacy Policy –
How We Handle Your Personal Data

1 Introduction

This Privacy Policy ("Policy") is issued by 207pub ("207pub", "we", "us", "our"), the operator of the online gaming platform at https://207pub.bet, licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). This Policy applies to all users ("Player", "you", "your") who access, register on, or use the 207pub platform, including all games, payment services, and support channels offered therein.

207pub is committed to protecting the privacy and security of the personal data of all Filipino players on our platform. We process personal data in full compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering a 207pub account or using any 207pub service, you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of 207pub.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the Data Controller responsible for your personal data is:

207pub has designated a Data Protection Officer (DPO) as required under the DPA. The DPO is responsible for overseeing compliance with this Policy and for handling all data subject requests and privacy complaints. Contact details for the DPO are set out in Section 15 of this Policy.

3 Personal Data We Collect

207pub collects the following categories of personal data from Players:

3.1 Registration and Identity Data

When you create a 207pub account, we collect: your full legal name, date of birth, nationality, home address (including city, province, and postal code), mobile number (Philippine format), email address, and the username you select. This information is required to establish your identity, create your account, and comply with PAGCOR's player registration requirements.

3.2 Identity Verification (KYC) Data

To satisfy PAGCOR and Anti-Money Laundering Act (Republic Act 9160, as amended) obligations, 207pub collects copies of government-issued identity documents (such as PhilSys ID, UMID, driver's license, or Philippine passport), proof of address documents, and where required, source of funds documentation. KYC documents are processed securely and are not shared beyond the purposes described in this Policy.

3.3 Financial and Transaction Data

207pub records all deposit and withdrawal transactions processed through your account, including the payment method used (GCash, PayMaya, BPI, BDO, Metrobank, or USDT), transaction amounts, timestamps, and transaction reference numbers. We do not store full bank account numbers or GCash PIN codes — these are handled directly by your payment provider.

3.4 Gaming Activity Data

We collect records of your gaming sessions on 207pub including: games played, wager amounts, game outcomes, session duration, bonus activity, and loyalty programme interactions. This data is used for account management, bonus administration, responsible gaming monitoring, regulatory reporting, and fraud detection purposes.

3.5 Device and Technical Data

When you access 207pub, our systems automatically collect: your IP address, device type and model, operating system, browser type and version, mobile carrier (e.g., Globe, Smart, DITO), session timestamps, and referral URL. This data is used for security monitoring, geolocation compliance, fraud prevention, and platform performance optimisation.

3.6 Communications Data

When you contact 207pub's support team via live chat or email, we retain records of that correspondence. This includes chat transcripts, email content, timestamps, and the support team member who handled your query. These records are maintained for quality assurance, dispute resolution, and compliance documentation purposes.

4 How 207pub Uses Your Personal Data

207pub uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and administering your 207pub account; processing your 207pub login sessions; and providing access to all platform services.
• Identity Verification and KYC: Verifying your identity and age (21+) as required by PAGCOR and under the DPA's lawful processing requirements for licensed gaming operators.
• Payment Processing: Processing deposits and withdrawals through GCash, BDO, BPI, PayMaya, Metrobank, and other approved Philippine payment channels.
• Regulatory Compliance: Meeting 207pub's obligations under PAGCOR licensing conditions, Republic Act 9160 (AMLA), and other applicable Philippine regulations, including mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC).
• Fraud and Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct as defined in 207pub's Terms and Conditions.
• Responsible Gaming: Monitoring gaming behaviour patterns to identify potential problem gambling indicators and to administer deposit limits, session limits, cooling-off periods, and self-exclusion tools in accordance with PAGCOR's responsible gaming framework.
• Customer Support: Responding to your queries, complaints, and requests through 207pub's 24/7 live chat and email support channels.
• Promotions and Communications: Sending you notifications about 207pub bonuses, promotions, and platform updates where you have opted to receive such communications. You may unsubscribe from promotional communications at any time through your account settings.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve 207pub's games, interface, and overall service quality for Filipino players.
• Legal Proceedings: Establishing, exercising, or defending legal claims involving 207pub in Philippine courts or regulatory proceedings.

5 Legal Bases for Processing

Under the Data Privacy Act of 2012, 207pub processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between you and 207pub — including account management, payment processing, and game service delivery — is carried out pursuant to Section 12(b) of the DPA.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the AMLA, the DPA itself, and other applicable Philippine laws is carried out pursuant to Section 12(c) of the DPA.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms, is carried out pursuant to Section 12(f) of the DPA.
• Consent: Processing for optional promotional communications and non-essential cookies is based on your freely given, specific, and informed consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

207pub does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following circumstances:

6.1 Payment Processors

To process your deposits and withdrawals, 207pub shares the minimum necessary transaction data with licensed Philippine payment service providers including GCash (Globe Fintech Innovations, Inc.), PayMaya, BPI, BDO, and Metrobank. These providers are contractually obligated to use your data solely for payment processing purposes and are independently subject to Bangko Sentral ng Pilipinas (BSP) regulatory oversight.

6.2 Game Providers

To deliver live casino, slot, bingo, and arcade games, 207pub shares your account identifier and gaming session data with certified third-party game providers including Pragmatic Play, Evolution Gaming, PG Soft, and Jili Games. These providers process session data under data processing agreements that restrict their use of your data to game delivery and technical support purposes only.

6.3 Regulatory Authorities

207pub is legally required to share certain player data with PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement authorities. Such disclosures are made strictly in accordance with the applicable legal requirements and are limited to the data requested under each specific regulatory demand.

6.4 Professional Advisers

207pub may share your data with its legal, accounting, or compliance advisers where necessary for the conduct of 207pub's business, subject to professional confidentiality obligations binding those advisers under Philippine professional codes of conduct.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 207pub's assets, your personal data may be transferred to the acquiring entity, subject to the same data protection standards set out in this Policy. You will be notified of any such transfer in advance where practicable.

7 International Data Transfers

Some of 207pub's third-party game providers and technology partners maintain servers or processing facilities outside the Philippines. Where personal data is transferred internationally, 207pub ensures that such transfers are covered by appropriate safeguards, including contractual clauses that impose DPA-equivalent data protection standards on the recipient.

207pub will not transfer personal data to countries or organisations that do not provide an adequate level of data protection as assessed under the NPC's published adequacy guidelines. If you have questions about specific international transfers affecting your data, you may contact 207pub's Data Protection Officer using the details in Section 15.

8 Data Retention

207pub retains your personal data for the following periods:

• Active Account Data: Retained for the duration of your 207pub account and for five (5) years following account closure, as required by the AMLA and PAGCOR licensing conditions.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in accordance with Republic Act 9160 (AMLA) and BSP regulations.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure, as required under AMLA and PAGCOR compliance obligations.
• Support Communications: Live chat and email support records are retained for three (3) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Gaming Activity Logs: Retained for five (5) years from the date of the session, for regulatory audit, dispute resolution, and responsible gaming monitoring purposes.

After the applicable retention period expires, 207pub securely deletes or anonymises your personal data such that it can no longer be attributed to an identifiable individual. Anonymised aggregate data may be retained indefinitely for platform analytics and product development purposes.

9 Data Security Measures

207pub implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes:

• Encryption in Transit: All connections to 207pub are secured using TLS 1.3 (256-bit encryption), ensuring that your data — including your 207pub login credentials, payment details, and personal information — cannot be intercepted during transmission.
• Encryption at Rest: All personal data stored in 207pub's databases is encrypted using AES-256 encryption. Passwords are hashed using industry-standard adaptive hashing algorithms and are never stored in plaintext.
• Access Controls: Access to personal data within 207pub is strictly limited to authorised personnel who require it to perform their roles. All access events are logged and subject to periodic audit review.
• Two-Factor Authentication: All 207pub internal systems are accessed by staff using two-factor authentication. Players are encouraged to enable 2FA on their own 207pub accounts via the account security settings.
• Intrusion Detection: 207pub operates 24/7 security monitoring with automated intrusion detection and anomaly alerting systems.
• Penetration Testing: 207pub's platform undergoes periodic third-party security penetration testing to identify and remediate vulnerabilities before they can be exploited.

While 207pub takes all reasonable steps to protect your data, no internet-based system is completely immune to all security risks. You are advised to use a strong, unique password for your 207pub login and to enable two-factor authentication on your account for maximum protection.

10 Cookies and Tracking Technologies

207pub uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: These are essential for the 207pub platform to function and cannot be disabled. They include session management cookies, CSRF protection tokens, and authentication state cookies required to keep you logged in to your 207pub account during a session.
• Performance and Analytics Cookies: With your consent, 207pub uses anonymised analytics data to understand how Filipino players use the platform — which game lobbies receive the most visits, where players encounter difficulties, and how page load times vary by region (Manila, Cebu, Davao, etc.). This data is used exclusively to improve the 207pub user experience and is never linked to your individual identity.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting, last-visited lobby, or display preferences — to provide a more personalised experience on return visits to 207pub.

207pub does not use third-party advertising or retargeting cookies. You can manage or delete cookies at any time through your browser's settings. Disabling strictly necessary cookies will prevent the 207pub platform from functioning correctly.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 207pub. All requests should be submitted to 207pub's Data Protection Officer using the contact details in Section 15, and will be responded to within 15 business days:

• Right of Access (Section 16, DPA): You have the right to obtain confirmation of whether 207pub processes personal data about you, and to request a copy of that data in a commonly used format.
• Right to Rectification (Section 16, DPA): You have the right to request correction of inaccurate or incomplete personal data held by 207pub. Account details such as address and mobile number can be updated via your account settings or by contacting support.
• Right to Erasure or Blocking (Section 16, DPA): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to 207pub's legal retention obligations under the AMLA and PAGCOR requirements.
• Right to Data Portability (Section 18, DPA): Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Section 16, DPA): You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 207pub's ability to demonstrate compelling legitimate grounds that override your interests.
• Right to Lodge a Complaint: If you believe 207pub has violated your rights under the DPA, you have the right to file a complaint with the National Privacy Commission of the Philippines (www.privacy.gov.ph).

12 Children's Privacy and Age Restriction

207pub does not knowingly collect personal data from individuals under 21 years of age. If 207pub becomes aware that a minor has registered an account or provided personal data through our platform, we will immediately close the account, delete all associated personal data, and reverse any financial transactions, in accordance with PAGCOR's responsible gaming framework.

If you believe a minor has accessed or registered on 207pub, please notify us immediately via the live chat or email support channel. We take all such reports seriously and will investigate and act on them without delay.

13 Third-Party Links and Services

The 207pub platform may contain references to or integrations with third-party services, including certified game providers (Pragmatic Play, Evolution Gaming, PG Soft, Jili Games, and others) and payment processors (GCash, BDO, BPI, PayMaya, Metrobank). While 207pub selects its third-party partners carefully and requires them to operate to appropriate data protection standards, 207pub is not responsible for the privacy practices of these third parties.

Each game provider and payment processor operates under its own privacy policy. 207pub recommends that you review the privacy documentation of any third-party service you interact with, including your GCash or BDO banking app, which operate under their own privacy frameworks subject to BSP oversight.

14 Amendments to This Privacy Policy

207pub reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, or 207pub's data processing practices. Where changes are material, 207pub will provide notice to registered Players via the platform notification system and/or email to the registered account address, at least seven (7) calendar days before the changes take effect.

The current version and effective date of this Policy is displayed at the top of this page. We recommend that you review this Policy periodically. Continued use of 207pub following an amendment constitutes your acceptance of the revised Policy.

15 Contact and Data Protection Officer

For all privacy-related enquiries, data subject rights requests, or complaints regarding 207pub's processing of your personal data, please contact our Data Protection Officer:

207pub will acknowledge all data subject requests within five (5) business days and will endeavour to resolve them within fifteen (15) business days. Complex requests may require additional time, in which case you will be notified of the extended timeline and the reason therefor.

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions. Your continued use of 207pub constitutes acceptance of this version of the Policy.