207pub Privacy Policy

1 Introduction

207pub is committed to being transparent about how your personal information is handled. We know that trust is everything — especially for Filipino players who are sharing financial and identity information with an online gaming platform. Our approach to data privacy isn't simply about checking compliance boxes; it's about treating every player's personal data with the same care and respect we'd want our own data handled with.

This Policy applies to all personal data processed by 207pub in connection with your use of the Platform, regardless of whether you access the Platform from Manila, Cebu, Davao, Cagayan de Oro, or anywhere else in the Philippines. It covers data collected directly from you, data generated automatically through your use of the Platform, and data received from third-party payment providers such as GCash and Maya in connection with transactions you initiate.

This Policy should be read alongside the Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and 207pub.

2 Data Controller

207pub acts as the Data Controller in respect of personal data processed through the Platform. As Data Controller, 207pub determines the purposes for which and the manner in which your personal data is processed. In circumstances where 207pub engages third-party service providers to process data on its behalf, those providers act as Data Processors under written agreements that bind them to process data only as instructed by 207pub and in accordance with applicable Philippine data protection law.

207pub has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. The DPO is responsible for overseeing 207pub's compliance with this Policy and with Philippine data protection law. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

207pub collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration and Identity Data

When you create a 207pub account, we collect your full legal name, date of birth, Philippine mobile number, email address (where provided), and username. This data is required to create and manage your account, enforce our 21+ age restriction, and comply with PAGCOR Know Your Customer (KYC) obligations.

3.2 Identity Verification (KYC) Documents

To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act (AMLA) of the Philippines, we may collect copies of government-issued Philippine identification documents such as the PhilSys National ID, Passport, UMID, SSS ID, Driver's License, or Voter's ID. These documents are processed solely for identity and age verification purposes and are stored with enhanced security controls.

3.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, wagers, and account balance movements made through your 207pub account, along with the payment method identifiers associated with each transaction (such as your GCash-registered mobile number or the last four digits of a bank account). We do not store full bank account numbers or payment card numbers on our servers.

3.4 Usage and Technical Data

We automatically collect data about how you use the Platform, including your device type, operating system, browser type and version, IP address, approximate geographic location derived from IP, session timestamps, pages visited, games played, and in-session behavioral data. This data is used to operate the Platform, detect fraud, and improve the user experience.

3.5 Communications Data

If you contact 207pub's support team via live chat, email, or in-platform messaging, we retain records of those communications to resolve your query, maintain service quality records, and comply with regulatory requirements to log player interactions.

3.6 Cookies and Similar Technologies

207pub uses cookies, web beacons, and similar tracking technologies to operate the Platform. See Section 7 for a full description of our cookie practices and your control options.

4 How We Use Your Personal Data

207pub uses your personal data for the following purposes:

207pub will not use your personal data for any purpose that is incompatible with those listed above without providing you with prior notice and, where required by the Data Privacy Act, obtaining your consent.

5 Legal Basis for Processing

207pub processes personal data on one or more of the following legal bases recognized under the Data Privacy Act of 2012:

• Contract Performance — Processing is necessary to perform the agreement between you and 207pub, including operating your account and processing your transactions.
• Legal Obligation — Processing is required to comply with 207pub's legal obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws and regulations.
• Legitimate Interest — Processing is necessary for 207pub's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your data protection rights.
• Consent — For processing activities that are not covered by the above bases — primarily direct marketing communications — 207pub relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

6.1 Payment Service Providers

To process your deposits and withdrawals, 207pub shares necessary transaction and identity data with Philippine payment service providers including GCash, Maya (PayMaya), BPI, BDO, Metrobank, InstaPay, PesoNet, and 7-Eleven CLiQQ operator networks. These providers receive only the data necessary to execute your specific transaction and are contractually prohibited from using it for any other purpose.

6.2 Regulatory and Law Enforcement Authorities

207pub is required by Philippine law to share certain personal and transactional data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities upon lawful request. 207pub will comply with all valid legal orders and regulatory directives requiring disclosure of player data.

6.3 Technology and Service Providers

207pub engages carefully selected third-party technology providers to deliver aspects of the Platform — including cloud infrastructure, game software providers, identity verification services, and customer support tools. These providers act as Data Processors under written Data Processing Agreements that require them to process personal data only on 207pub's documented instructions, maintain appropriate security measures, and not sub-process data without prior authorization.

7 Cookies & Tracking Technologies

7.1 What We Use

207pub uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies — Required for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies — Remember your preferences such as language settings, game lobby sort order, and responsible gaming configuration. Disabling these may reduce platform personalization.
• Analytics Cookies — Collect anonymized data about how players use the Platform to help us improve performance, identify navigation issues, and prioritize development work. We use server-side analytics tools that do not share raw data with advertising platforms.
• Security Cookies — Used by our fraud detection and login security systems to identify unusual access patterns and protect your account from unauthorized access.

7.2 Your Cookie Choices

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling functional cookies will mean your preferences are not saved between sessions. Instructions for managing cookies vary by browser — refer to your browser's help documentation for device-specific guidance.

8 Data Security

207pub implements technical and organizational security measures appropriate to the sensitivity of the personal data it processes. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and 207pub servers;
• AES-256 encryption for sensitive personal data stored in 207pub databases;
• Multi-factor authentication requirements for all staff with access to production systems containing personal data;
• Role-based access controls restricting data access to personnel with a documented operational need;
• Regular penetration testing and vulnerability assessments of the Platform and supporting infrastructure;
• Automated anomaly detection systems that flag unusual login activity or data access patterns for immediate review;
• Documented incident response procedures for personal data breaches, including mandatory notification to the National Privacy Commission within 72 hours of becoming aware of a breach where required by the Data Privacy Act.

While 207pub applies industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials. If you suspect unauthorized access to your 207pub account, contact support immediately via the official channel available within your account dashboard.

9 Data Retention

207pub retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable Philippine law. The following retention principles apply:

• Active Account Data — Retained for the duration of your active account relationship with 207pub.
• Closed Account Data — Following account closure, core account data (registration information, KYC documents, and transaction records) is retained for a minimum of five (5) years to satisfy PAGCOR licensing obligations and AMLA reporting requirements.
• Communications Records — Support chat logs and email communications are retained for two (2) years following the date of the interaction, unless a longer period is required to resolve a dispute or regulatory investigation.
• Usage and Technical Data — Session logs and behavioral data are retained in identifiable form for twelve (12) months, after which they may be retained in anonymized form for analytics purposes without a fixed retention limit.
• Marketing Consent Records — Records of your marketing consent or opt-out are retained for as long as we require evidence of the consent decision, which is typically the duration of the account relationship plus two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 207pub's data destruction procedures.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 207pub. These rights are not absolute — some are subject to exceptions under the DPA — but 207pub will process all valid requests with genuine care and without unnecessary delay.

10.1 Exercising Your Rights

To exercise any of the above rights, contact the 207pub Data Protection Officer via the support channel within your account dashboard or by email at the address published in Section 14. Requests should clearly identify the right being exercised and the specific data or processing activity to which it relates. We will acknowledge all valid data subject requests within five (5) business days and provide a substantive response within thirty (30) business days, extendable to sixty (60) days in complex cases with prior notice to you.

10.2 Right to Complain

If you believe that 207pub has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. 207pub encourages you to contact us directly first so that we have an opportunity to resolve your concern before escalation, but this does not affect your right to approach the NPC at any time.

11 Children's Privacy

207pub's KYC process is specifically designed to prevent registration by underage individuals. Age is verified against government-issued Philippine identification documents before any withdrawal is permitted. We take the protection of minors from gambling harms extremely seriously and actively cooperate with PAGCOR and other Philippine authorities on underage access prevention.

12 International Data Transfers

207pub's primary data processing infrastructure is located within the Philippines. Where it is necessary to transfer personal data outside the Philippines — for example, to cloud infrastructure providers or game software suppliers whose servers are located in other jurisdictions — 207pub ensures that such transfers are carried out in accordance with Section 21 of the Data Privacy Act and applicable NPC guidelines on cross-border data transfers.

Transfers to countries that do not provide an adequate level of data protection are safeguarded through appropriate contractual mechanisms, including standard contractual clauses approved by the National Privacy Commission, or through other safeguards recognized under Philippine data protection law. You may request information about the safeguards applied to any specific international transfer by contacting the DPO at the address in Section 14.

13 Amendments to This Policy

207pub reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidelines, or our data processing practices. Where amendments are material — meaning they significantly affect your rights or the way we process your personal data — 207pub will provide not less than fourteen (14) days' advance notice via email to your registered address and/or via an in-platform notification prior to the amended Policy taking effect.

Non-material amendments (such as typographical corrections, clarifications that do not change substantive meaning, or updates to contact details) may be made without prior notice, but the effective date will always be updated to reflect the most recent revision. The current version of this Policy is always accessible at 207pub.cam/privacy-policy. We recommend checking this page periodically, especially if you are a regular player on the Platform.

14 Contact & Data Protection Officer

For questions, concerns, or formal requests relating to this Privacy Policy or the way 207pub processes your personal data, please contact the 207pub Data Protection Officer through the official support channel within your account dashboard or via the email address published in the footer of this site.

When contacting the DPO regarding a data subject rights request, please include:

• Your full registered name and 207pub account username;
• A clear description of the right you are exercising or the concern you wish to raise;
• Any relevant dates, transaction references, or other context that will help us locate and assess the relevant data;
• A copy of a valid Philippine government ID to verify your identity (required for access, correction, and erasure requests).

All communications with the 207pub DPO are treated as confidential. Responses are provided in writing to your registered email address. 207pub will never ask you to provide your account password via any communication channel — if you receive a request for your password purporting to be from 207pub, treat it as a phishing attempt and report it to support immediately.