207 pub Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 207 pub ("207 pub," "we," "us," "the Company") collects, uses, discloses, retains, and protects the personal information of users ("Players," "you") who access and use the 207 pub online gaming platform, including its casino games, sports betting services, bingo rooms, slots, and all associated features accessible via 207pub.co.

207 pub recognises that your personal data belongs to you. This Policy is designed to give you a clear and honest account of our data practices, written in plain language accessible to players across the Philippines — from Metro Manila to Cebu, Davao, and beyond.

By registering a 207 pub account or using our platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2 Data Controller

207 pub is the data controller for personal information collected through the 207pub.co platform. As data controller, 207 pub determines the purposes and means of processing your personal data and is accountable for ensuring that processing is lawful and consistent with this Policy.

207 pub has appointed a Data Protection Officer (DPO) responsible for overseeing data protection strategy and compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

To contact the 207 pub DPO, please use the contact details provided in Section 14 of this Policy.

3 Personal Data We Collect

207 pub collects personal data across several categories, depending on the nature of your interaction with the platform:

207 pub does not intentionally collect sensitive personal information (as defined under the Philippine Data Privacy Act) beyond that which is strictly required for KYC identity verification and responsible gaming age verification purposes.

4 How We Use Your Personal Data

207 pub uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 207 pub player account, including processing your login credentials and enabling access to all platform features.
• KYC & Identity Verification: To verify your identity and age (21+ requirement) as required by PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA). This is a legal obligation and cannot be waived.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and other supported payment methods. Financial transaction data is shared with payment processors strictly for this purpose.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, enforce deposit limits and self-exclusion orders you have set, and fulfil 207 pub's duty of care to all players.
• Fraud Prevention & Security: To detect, investigate, and prevent fraud, money laundering, account takeovers, and other prohibited activities. This includes automated screening of transactions and login patterns for anomalies.
• Customer Support: To respond to your support inquiries, resolve account issues, and maintain a record of your interactions with our support team for quality and training purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant platform updates — but only where you have provided consent to receive marketing communications. You may withdraw marketing consent at any time.
• Regulatory Compliance: To comply with applicable Philippine laws, PAGCOR reporting obligations, and any lawful requests from competent regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the 207 pub platform, optimise game performance, and enhance the overall player experience.

5 Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, 207 pub processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your 207 pub account, process bets, and pay out winnings.
• Legal Obligation: Processing is required to comply with applicable laws, including PAGCOR licensing conditions, AMLA obligations, and reporting requirements to regulatory authorities.
• Legitimate Interests: Processing is necessary for 207 pub's legitimate interests in fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your data protection rights.
• Consent: For marketing communications and optional personalisation features, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

207 pub does not sell your personal data. We share data only where necessary for the following purposes, and only with parties bound by appropriate data processing agreements or confidentiality obligations:

• Payment Processors: GCash (GXchange Inc.), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other payment network operators — for the purpose of processing deposits and withdrawals.
• KYC Verification Providers: Third-party identity verification services engaged by 207 pub to conduct document verification and biometric checks as part of the PAGCOR-mandated KYC process.
• PAGCOR: 207 pub is required by its licensing conditions to report certain player data, gaming activity records, and financial data to PAGCOR as the competent regulatory authority.
• Anti-Money Laundering Council (AMLC): Where required by the Anti-Money Laundering Act and its implementing regulations, 207 pub is obligated to report covered and suspicious transactions to the AMLC.
• Technology & Infrastructure Providers: Cloud hosting providers, cybersecurity firms, and software vendors engaged to operate, secure, and maintain the 207 pub platform. These parties act only on 207 pub's instructions.
• Law Enforcement & Regulatory Authorities: Where required by law or a valid legal order, 207 pub may disclose personal data to Philippine law enforcement agencies, courts, or other government bodies.

7 International Data Transfers

Some of 207 pub's technology providers and service partners may process personal data outside the Philippines. Where such international transfers occur, 207 pub ensures that appropriate safeguards are in place, including contractual obligations requiring the recipient to maintain a standard of data protection equivalent to that required under the Philippine Data Privacy Act.

207 pub does not transfer personal data to jurisdictions that do not provide adequate data protection without implementing appropriate contractual safeguards and, where required, obtaining prior clearance from the National Privacy Commission.

8 Data Retention

207 pub retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Key retention periods include:

• Account Data: Retained for the duration of your 207 pub account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and PAGCOR regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence the withdrawal of consent.
• Support Records: Customer support interaction records are retained for two (2) years from the date of the interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9 Cookies & Tracking Technologies

207 pub uses cookies and similar tracking technologies on the 207pub.co platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — including session cookies that maintain your login state, security cookies, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game lobby layout to provide a personalised experience.
• Performance & Analytics Cookies: Collect anonymised data on how players use the platform to help 207 pub identify performance issues and improve the user experience. No personally identifiable information is collected through these cookies.
• Security Cookies: Used to detect fraudulent activity, prevent account takeovers, and enforce platform security policies.

You may configure your browser settings to block or delete cookies; however, disabling strictly necessary cookies may impair the functionality of the 207 pub platform. 207 pub does not use third-party advertising cookies or cross-site tracking pixels.

10 Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 207 pub:

• Right to be Informed: The right to be told what personal data 207 pub holds about you and how it is used — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data 207 pub holds about you, including your gaming history, account data, and transaction records.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly from your 207 pub account settings; for KYC data, contact support.
• Right to Erasure: The right to request deletion of your personal data, subject to legal retention obligations (e.g., PAGCOR and AMLA record-keeping requirements). Requests for erasure that conflict with legal obligations may be partially fulfilled.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format for transmission to another controller.
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes. You may unsubscribe from marketing communications at any time via your account settings.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 207 pub has processed your personal data in breach of the Data Privacy Act.

To exercise any of the above rights, please contact the 207 pub Data Protection Officer using the contact details in Section 14. 207 pub will respond to all legitimate data rights requests within 30 calendar days.

11 Children's Privacy & Age Restriction

207 pub's services are strictly intended for adults aged 21 years and above, in compliance with PAGCOR's minimum age requirement for online gaming in the Philippines. 207 pub does not knowingly collect personal data from persons under 21 years of age.

If 207 pub becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all personal data will be securely deleted, and any balances will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe your child has registered a 207 pub account in breach of this age restriction, please contact our support team immediately at support@207pub.co.

12 Data Security

207 pub implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and 207 pub servers
• AES-256 encryption for sensitive data stored in 207 pub databases
• Multi-factor authentication options for player accounts (OTP via Philippine mobile number)
• Regular penetration testing and independent security audits
• Role-based access controls limiting 207 pub staff access to personal data on a need-to-know basis
• Automated anomaly detection systems monitoring for unusual login patterns and suspicious transactions
• Incident response procedures covering data breach containment, investigation, and notification

13 Changes to This Privacy Policy

207 pub may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the 207 pub platform at least 7 days before the changes take effect.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of 207 pub following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure.

14 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy, your personal data held by 207 pub, or to exercise your data protection rights, please contact:

You also have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you are not satisfied with 207 pub's response to your data rights request. Information about the NPC and how to file a complaint is available on the NPC's official website.