207 pub Privacy Policy

207 pub ("207 pub," "we," "us," "our") operates the online casino and sports betting platform accessible at 207pub.one under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). In the course of providing our services to players in the Philippines, 207 pub collects and processes personal information about you.

This Privacy Policy ("Policy") sets out in clear terms: what personal data 207 pub collects from you; the lawful basis and purposes for which we process it; who we may share it with and under what circumstances; how long we retain it; the technical and organizational measures we use to protect it; and the rights you are entitled to exercise over your own personal information under Philippine law.

This Policy applies to all registered players, website visitors, and individuals who interact with 207 pub's platform, support channels, or promotional communications. It should be read alongside 207 pub's Terms & Conditions and Responsible Gaming Policy.

207 pub is the personal information controller ("PIC") responsible for the personal data collected through the 207 pub platform, as defined under Section 3(h) of the Data Privacy Act of 2012 (Republic Act No. 10173). As the personal information controller, 207 pub determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully and in accordance with this Policy.

207 pub has designated a Data Protection Officer (DPO) who oversees compliance with data privacy obligations and serves as the primary point of contact for data subject rights requests and privacy-related inquiries. Contact details for the DPO are provided in Section 14 of this Policy.

207 pub collects personal data that falls into three broad categories: information you provide directly, information required for regulatory compliance, and information automatically generated by your use of the platform. The table below summarizes the main data types, their source, and their classification.

3.1 Sensitive Personal Information

Government-issued identity documents submitted during KYC verification constitute sensitive personal information under the Data Privacy Act. 207 pub processes this data solely for the purpose of mandatory age and identity verification as required by PAGCOR's licensing conditions. This data is stored in encrypted form and access is restricted to authorized compliance personnel only.

3.2 Data You Are Not Required to Provide

Some data categories are voluntary — for example, providing optional demographic information or opting into personalized marketing. Declining to provide voluntary data will not affect your access to core gameplay, deposits, or withdrawals, though it may limit 207 pub's ability to tailor promotions to your preferences.

207 pub processes your personal data for the following purposes:

• Account creation and management: Creating and maintaining your 207 pub player account, including processing your registration details, verifying your identity, and managing your login credentials.
• KYC and age verification: Verifying that you are 21 years of age or older and that your identity matches the registration information provided, as mandated by PAGCOR and Philippine law.
• Gameplay and platform services: Processing bets, recording game outcomes, calculating and crediting winnings, maintaining game history, and providing live dealer, slot, sports betting, bingo, and other game services.
• Payment processing: Processing deposits from and withdrawals to your GCash, Maya, BPI, BDO, or other linked Philippine payment account; maintaining transaction records; and facilitating refunds where applicable.
• Regulatory compliance: Fulfilling 207 pub's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine regulations, including the filing of covered and suspicious transaction reports with the AMLC where required.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behavior; implementing player-requested deposit limits, session limits, and self-exclusions; and fulfilling PAGCOR's responsible gaming framework requirements.
• Customer support: Responding to account inquiries, resolving disputes, processing complaints, and improving support quality through training and quality assurance.
• Security and fraud prevention: Detecting and preventing fraudulent account activity, unauthorized access, money laundering, bonus abuse, and other prohibited conduct.
• Platform improvement: Analyzing aggregated and anonymized usage data to improve game performance, user experience, and platform features. No individual player is identifiable in this analysis.
• Marketing communications (with consent): Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. You may withdraw consent at any time.

207 pub processes your personal data on the following lawful bases, as recognized under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules:

• Fulfillment of a contract: Processing necessary to perform 207 pub's obligations under the Terms and Conditions you accepted at registration — including account management, gameplay, and payment processing.
• Legal obligation: Processing required by applicable Philippine law, including PAGCOR licensing conditions, AMLC reporting requirements, and KYC obligations under RA 9160.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and aggregated platform analytics, where such interests are not overridden by your rights as a data subject.
• Consent: Processing based on your explicit consent — specifically, the sending of marketing communications via email or SMS. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

207 pub does not sell your personal data. We may share your data with the following categories of recipients, strictly for the purposes described:

6.1 Regulatory and Government Authorities

207 pub is required to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where legally mandated. This includes covered transaction reports (CTRs) for transactions meeting applicable thresholds, suspicious transaction reports (STRs) where applicable, and responses to lawful regulatory inquiries or court orders.

6.2 Payment Service Providers

To process deposits and withdrawals, 207 pub shares the minimum necessary financial information with payment service providers including GCash (GXI), Maya Philippines, and Philippine commercial banks (BPI, BDO, Metrobank, and others). These providers are themselves subject to Bangko Sentral ng Pilipinas (BSP) regulation and their own data privacy obligations.

6.3 Technology and Platform Service Providers

207 pub works with carefully selected third-party service providers for functions including game content delivery, customer support technology, cloud infrastructure, fraud detection, and KYC verification. These providers act as personal information processors under contractual arrangements that obligate them to process your data only on 207 pub's instructions and in accordance with applicable data privacy standards.

6.4 Group Companies

207 pub may share personal data with affiliated entities within its corporate group for internal operational purposes — including compliance, finance, and technical functions — subject to the same data protection obligations set out in this Policy.

207 pub uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit 207pub.one. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functionality — including maintaining your login session, retaining your game state between pages, and processing secure transactions. These cookies cannot be disabled without breaking platform functionality.
• Performance and analytics cookies: Used to collect anonymized data about how Players use the 207 pub platform — which games are played most, how navigation flows, and where technical errors occur. This data is used to improve the platform and is never used to identify you individually.
• Functional cookies: Store your platform preferences, such as language settings, notification preferences, and layout options, so you don't need to reconfigure them each session.
• Security cookies: Used in fraud detection and session security functions, including recognizing trusted devices for 2FA purposes and flagging anomalous login patterns.

You can manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to log in and use the 207 pub platform.

207 pub implements technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 207 pub's servers.
• Encryption at rest for sensitive data including government ID documents, financial records, and password hashes.
• Password hashing with salting — 207 pub never stores passwords in plain text. Credentials are processed using one-way cryptographic functions.
• Role-based access controls — employees and service providers only access personal data to the extent necessary for their specific function.
• Two-Factor Authentication available to all players, providing an additional layer of account security beyond password protection.
• Intrusion detection and monitoring systems that flag anomalous access patterns and trigger security responses automatically.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in harm to affected players, 207 pub will notify the National Privacy Commission of the Philippines within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with RA 10173.

207 pub retains personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be associated with any individual player.

Under the Data Privacy Act of 2012 (RA 10173), Filipino players have enforceable rights over their personal data. 207 pub respects and supports the exercise of these rights. The following rights apply to all registered 207 pub players:

To exercise any of these rights, submit a written request to the 207 pub Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." 207 pub will acknowledge your request within 72 hours and respond in full within fifteen (15) business days. No administrative fee is charged for standard requests.

The 207 pub platform is strictly prohibited for individuals under 21 years of age, consistent with PAGCOR's minimum gambling age requirements for the Philippines. 207 pub does not knowingly collect or process personal data from individuals under 21 years of age.

If 207 pub becomes aware that a registered account belongs to a player who was under 21 at the time of registration, the account will be immediately suspended, the data will be processed solely for the purposes of regulatory reporting and account closure, and all associated funds will be handled in accordance with PAGCOR's requirements for underage accounts.

207 pub's primary infrastructure is operated in the Philippines. Where third-party service providers or technology partners process personal data outside the Philippines — for example, cloud infrastructure or game content providers headquartered in other jurisdictions — 207 pub ensures that such transfers are governed by contractual data protection clauses that provide a standard of protection consistent with RA 10173.

207 pub does not transfer your personal data to jurisdictions where the level of data protection is demonstrably lower than that afforded under Philippine law without appropriate safeguards in place. If you have questions about specific international data transfers, please contact our Data Protection Officer.

207 pub may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. Material changes — those that meaningfully affect how your personal data is processed — will be communicated to registered players via email to the address on file and/or through a prominent notice on the 207 pub platform prior to the changes taking effect.

The "Effective Date" at the top of this Policy indicates the date from which the current version applies. Continued use of the 207 pub platform after the effective date of a revised Policy constitutes your acknowledgment of the updated terms. If you disagree with any material change, you may exercise your right to account closure in accordance with the Terms and Conditions.

For all privacy-related inquiries, data subject rights requests, or concerns about how 207 pub handles your personal data, please contact the 207 pub Data Protection Officer using the details below. Include "Privacy Inquiry" or "Data Subject Rights Request" in your subject line so your message reaches the correct team promptly.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. The NPC can be contacted through its official published channels.