pub770 Privacy Policy

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, pub770 is the personal information controller responsible for the collection and processing of personal data on the pub770 Platform (pub770.org).

pub770 operates as a PAGCOR-licensed online casino and sports betting platform serving Filipino players across the Philippines — from Metro Manila to Cebu, Davao, and the provinces. As a regulated operator, pub770 is subject to oversight by both the National Privacy Commission (NPC) and the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to the handling of player personal data.

pub770 has designated a Data Privacy Officer (DPO) in compliance with the requirements of the National Privacy Commission. The DPO is responsible for overseeing pub770's compliance with the Data Privacy Act and for handling all data subject rights requests from players.

pub770 collects personal information that is necessary, relevant, and proportionate to the purposes for which it is processed, in accordance with the general privacy principles under the Data Privacy Act. The categories of personal data we collect are described in the table below:

pub770 does not collect sensitive personal information beyond what is strictly required for KYC identity verification and regulatory compliance. Where sensitive personal information is collected (such as a government ID number), it is processed solely for legally mandated verification purposes and is stored with heightened security controls.

pub770 does not knowingly collect personal data from persons under twenty-one (21) years of age. Where pub770 discovers that personal data has been collected from an underage individual, such data will be deleted promptly in accordance with applicable law and regulatory requirements.

pub770 processes your personal data for the following specific purposes:

• Account Creation and Management: To register your pub770 account, verify your identity, maintain accurate account records, and enable your ongoing use of the Platform;
• KYC and Identity Verification: To fulfill mandatory identity verification obligations under PAGCOR licensing conditions and Anti-Money Laundering Act (AMLA) requirements;
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other accepted Philippine payment methods;
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct under the pub770 Terms and Conditions;
• Regulatory Compliance: To comply with PAGCOR reporting obligations, AMLA transaction reporting requirements, National Privacy Commission requirements, and other applicable Philippine regulatory frameworks;
• Responsible Gaming: To monitor gaming activity for patterns that may indicate problem gambling, to administer player-set deposit limits and self-exclusion orders, and to comply with PAGCOR's responsible gaming requirements;
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and deliver live chat support in English and Tagalog;
• Service Improvement: To analyze aggregated, anonymized usage data in order to improve Platform functionality, game selection, and the overall player experience;
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent or where permitted by applicable law. You may withdraw marketing consent at any time through your Account Settings.

pub770 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, other than automated fraud detection systems that may temporarily restrict an Account pending human review.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, pub770 relies on the following legal bases for the processing of personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and pub770 — i.e., the provision of the pub770 Platform and account services as set out in the Terms and Conditions;
• Legal Obligation: Processing is required to comply with legal obligations applicable to pub770 as a PAGCOR-licensed operator, including obligations under the Anti-Money Laundering Act (AMLA), the PAGCOR licensing framework, and the Data Privacy Act itself;
• Legitimate Interests: Processing is necessary for pub770's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms;
• Consent: Where pub770 relies on consent as the legal basis for processing — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

pub770 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following controlled circumstances:

• Payment Processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers receive the financial data necessary to process your transactions. These providers are bound by their own privacy obligations under Philippine financial regulations;
• Game Providers: Third-party game studios integrated into the pub770 Platform may receive anonymized session data necessary for game functionality. No personally identifiable information beyond a session token is typically shared with game providers;
• Regulatory Authorities: pub770 is obligated to report certain transactions and account information to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies as required by law. Such disclosures are made pursuant to legal obligation, not discretion;
• Law Enforcement: pub770 will disclose personal data to Philippine law enforcement authorities, courts, or government agencies where required by a valid legal process, court order, or statutory obligation;
• Technology Service Providers: Cloud infrastructure, cybersecurity, customer support platform, and analytics service providers who process data on behalf of pub770 as data processors under written agreements that include data protection obligations consistent with the Data Privacy Act;
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations, where access to personal data is strictly necessary for the provision of their services to pub770.

All third parties to whom pub770 discloses personal data are required to handle that data in accordance with applicable Philippine privacy law and in a manner consistent with this Privacy Policy.

pub770 uses cookies and similar tracking technologies on the Platform to support core functionality, improve performance, and enable security features. The categories of cookies used by pub770 are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in, security tokens for CSRF protection, and cookies that remember your responsible gaming preferences. These cannot be disabled;
• Functional Cookies: Remember your preferences such as preferred language, display settings, and notification configurations to provide a more personalized experience;
• Performance and Analytics Cookies: Collect anonymized, aggregated data about how players navigate and use the Platform, enabling pub770 to identify areas for improvement. Individual players are not identifiable from this data;
• Security Cookies: Support fraud detection and security monitoring, including device fingerprinting used to identify suspicious login patterns and multi-account activity.

Non-essential cookies may be managed through your browser settings. Note that disabling certain cookies may affect Platform functionality. pub770 does not use third-party advertising cookies or allow external advertisers to set cookies on the Platform.

pub770 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory requirements. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Anonymized or aggregated data derived from personal information may be retained indefinitely for statistical and operational analysis purposes.

pub770 implements a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• Encryption in Transit: All data transmitted between your device and the pub770 Platform is protected using industry-standard TLS/SSL encryption (256-bit). The padlock icon in your browser confirms this protection is active during your session;
• Encryption at Rest: Sensitive personal data stored in pub770's systems, including government ID data and payment details, is encrypted at rest using AES-256 encryption;
• Access Controls: Personal data is accessible only to pub770 personnel who have a documented legitimate need to access it. Role-based access controls and multi-factor authentication are enforced for all internal systems containing player data;
• Intrusion Detection and Monitoring: pub770's infrastructure is monitored continuously for unauthorized access attempts, anomalous behavior, and potential security incidents;
• Penetration Testing: Regular security assessments and penetration tests are conducted to identify and remediate vulnerabilities before they can be exploited;
• Staff Training: All pub770 personnel who handle personal data receive mandatory data privacy and security training in accordance with the NPC's requirements;
• Incident Response: pub770 maintains a documented personal data breach response procedure. In the event of a breach that is likely to harm data subjects, pub770 will notify the National Privacy Commission within seventy-two (72) hours and affected individuals as required by the Data Privacy Act.

While pub770 implements robust security measures, no system is completely immune from security risks. Players are also responsible for maintaining the security of their own account credentials, as described in the pub770 Terms and Conditions.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pub770. These rights are exercisable by submitting a written request to pub770's Data Privacy Officer:

pub770 will respond to data subject rights requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, with notice to you. pub770 will not charge a fee for routine data subject rights requests. Where requests are manifestly unfounded or excessive, pub770 reserves the right to charge a reasonable fee or decline to act on the request in accordance with the Data Privacy Act.

Note that certain data subject rights — particularly the right to erasure — may be limited by pub770's mandatory retention obligations under the Anti-Money Laundering Act, PAGCOR regulations, and other applicable Philippine law. Where pub770 is unable to fulfill a request due to a legal obligation, we will explain the relevant legal basis.

If pub770 becomes aware that personal data has been collected from a person under the age of twenty-one (21), the following actions will be taken immediately:

• The Account will be suspended and all associated funds handled in accordance with PAGCOR protocols;
• The personal data will be flagged for deletion or regulatory reporting as appropriate;
• The matter will be referred to PAGCOR and, where applicable, law enforcement, in accordance with pub770's regulatory obligations;
• pub770 will cooperate fully with any NPC or PAGCOR investigation related to underage access.

Parents and guardians who believe a minor may have registered on pub770 are encouraged to contact the Data Privacy Officer immediately via the contact details in Section 13.

pub770 primarily stores and processes player personal data within the Republic of the Philippines. In limited circumstances, personal data may be processed by technology service providers whose infrastructure is located outside the Philippines — for example, cloud computing providers with data centers in Asia-Pacific regions.

Where personal data is transferred outside the Philippines, pub770 ensures that such transfers comply with the Data Privacy Act's requirements for cross-border data flows, including:

• Verifying that the recipient country or organization provides an adequate level of data protection;
• Entering into data processing agreements with appropriate data transfer safeguards, including contractual clauses consistent with NPC guidance;
• Ensuring that game provider partners located outside the Philippines handle any player data in accordance with contractually imposed privacy standards.

pub770 does not transfer player financial data (GCash/Maya account details, bank account numbers) outside systems operating under Philippine financial regulation. Payment processing data remains within Philippine-regulated financial infrastructure.

pub770 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR/NPC regulatory requirements. Changes will be communicated to registered players through the following channels:

• An in-platform notice displayed upon your next login following a material amendment;
• An email notification to your registered address at least seven (7) days before material changes take effect, where practicable;
• Publication of the updated Policy on this page with a revised "Effective Date" at the top of the document.

Your continued use of the pub770 Platform following notification of an amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you may close your Account and request erasure of your data subject to the mandatory retention obligations described in Section 7.

Minor amendments — such as formatting corrections, clarifications of existing practices, or updates to contact details that do not materially affect your rights — may be made without prior notification, though they will always be reflected in an updated version of this page with a revised date.

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pub770, please contact the pub770 Data Privacy Officer through the following channels:

If you are not satisfied with pub770's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.