pub 577 Privacy Policy

1.1 Identity of the Personal Information Controller. This Privacy Policy is issued by pub 577, the online gaming platform operated at pub577.net ("pub 577", "we", "us", "our"). pub 577 acts as the Personal Information Controller (PIC) in respect of all personal data collected from players, visitors, and prospective account holders, as that term is defined under Republic Act No. 10173 of the Philippines (the Data Privacy Act of 2012, or "DPA").

1.2 Scope. This policy applies to all personal data collected by pub 577 through the following channels:

• Registration and account creation on pub577.net;
• Deposits, withdrawals, and financial transactions conducted via the pub 577 platform;
• Gameplay and interaction with any game, promotion, or feature on the pub 577 platform;
• Communications with pub 577 customer support via live chat or email;
• Technical data collected automatically when you visit or use pub577.net.

1.3 Regulatory Context. As a PAGCOR-authorized operator, pub 577 is subject to data handling requirements imposed by PAGCOR and by the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160 as amended. This policy reflects compliance obligations arising from all applicable Philippine laws and regulatory directives.

2.1 pub 577 collects the following categories of personal data. The specific data collected in each category depends on how you interact with the platform.

2.2 Sensitive Personal Information. Government-issued ID documents (used for KYC) constitute Sensitive Personal Information under RA 10173. pub 577 processes this category of data solely for the purpose of age verification and identity authentication as required by PAGCOR and Philippine AML law. Access to sensitive personal information is restricted to authorized compliance personnel.

2.3 Data You Are Not Required to Provide. You are not obligated to provide personal data to pub 577. However, certain data is required by law or by the technical operation of the platform. If you do not provide required data, pub 577 may be unable to create your account, process transactions, or permit you to use certain features.

3.1 pub 577 uses the personal data it collects for the following purposes. Each purpose is linked to one or more legal bases described in Section 4.

• Account creation and management: Creating, maintaining, and operating your pub 577 Account, including authentication, password management, and session security;
• Identity and age verification: Conducting KYC checks as required by PAGCOR to confirm your identity and that you are at least 21 years of age;
• Payment processing: Processing deposits and withdrawal requests via GCash, Maya, BPI, BDO, and other accepted Philippine payment methods;
• Regulatory compliance: Fulfilling PAGCOR reporting obligations, Anti-Money Laundering Council (AMLC) transaction monitoring and reporting requirements, and all other legal obligations under Philippine law;
• Customer support: Responding to your inquiries, resolving disputes, and administering complaints;
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behaviour, administering deposit limits, loss limits, and self-exclusion, and fulfilling PAGCOR player protection obligations;
• Platform security and fraud prevention: Detecting and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct as defined in the pub 577 Terms & Conditions;
• Service improvement: Analysing aggregated and anonymised technical data to improve platform performance, game selection, and user experience;
• Direct communications: Sending you account-related notifications, transaction confirmations, security alerts, and — where you have provided consent — promotional communications about pub 577 offers.

3.2 pub 577 does not use personal data for automated decision-making that produces legal or similarly significant effects on you, except where required by law (e.g., automatic flagging of transactions for AML review) or where you have given explicit consent.

4.1 Under RA 10173, pub 577 must establish a lawful basis for every category of personal data processing. The following legal bases apply:

• Contractual necessity: Processing required to perform our contractual obligations to you under the pub 577 Terms & Conditions — including account management, payment processing, and gaming services;
• Legal obligation: Processing required to comply with Philippine laws including RA 10173 itself, the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulatory requirements, and National Privacy Commission directives;
• Legitimate interests: Processing for pub 577's legitimate business interests where these do not override your rights — including fraud prevention, platform security, and aggregated analytics. pub 577 conducts a balancing test before relying on this basis;
• Consent: Processing for optional purposes — such as sending promotional communications — where we have obtained your explicit, freely given, and informed consent. You may withdraw consent at any time without affecting other processing activities.

5.1 pub 577 does not sell, rent, or trade your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.2 Regulatory Authorities. pub 577 is legally required to share certain data with the following Philippine regulatory and government bodies:

• PAGCOR: Reporting required under pub 577's operating licence, including player activity data, transaction records, and compliance documentation;
• Anti-Money Laundering Council (AMLC): Mandatory reporting of covered and suspicious transactions as required by RA 9160 as amended by RA 10365 and RA 11521;
• National Privacy Commission (NPC): Notification of personal data breaches and responses to regulatory investigations as required by RA 10173;
• Philippine courts and law enforcement agencies: Where required by court order, subpoena, or lawful request.

5.3 Service Providers (Personal Information Processors). pub 577 engages the following categories of third-party service providers who process personal data on our behalf, subject to data processing agreements that require them to maintain confidentiality and comply with RA 10173:

• Payment processors and e-wallet operators (GCash, Maya, GrabPay, bank partners) — for transaction processing;
• Identity verification and KYC service providers — for document verification;
• Game software providers — limited technical session data for game delivery and RNG integrity;
• Cloud infrastructure and hosting providers — for secure data storage;
• Customer support software providers — for live chat management.

5.4 All service providers engaged by pub 577 are contractually bound to use your personal data only for the specific purpose for which it was shared and in accordance with pub 577's instructions. pub 577 remains responsible as the Personal Information Controller for the lawfulness of such processing.

6.1 pub 577 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised. Retention periods are determined by the purpose of processing and by applicable legal retention requirements.

6.2 Where you exercise your right to erasure (Section 8.3) and no legal obligation prevents deletion, pub 577 will delete or anonymise your personal data within 30 calendar days of receiving your verified request.

7.1 pub 577 implements technical and organisational security measures appropriate to the risk level of the personal data it processes. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the pub 577 platform is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Personal data stored on pub 577 servers, including KYC documents and financial records, is encrypted at rest using AES-256 or equivalent;
• Password hashing: Account passwords are stored only as salted cryptographic hashes — plaintext passwords are never retained;
• Access controls: Access to personal data is restricted on a need-to-know basis. Administrative access requires multi-factor authentication and is subject to audit logging;
• Intrusion detection and monitoring: pub 577's infrastructure is monitored continuously for suspicious access patterns, unauthorised login attempts, and anomalous data access;
• Employee training: All pub 577 personnel with access to personal data receive training on RA 10173 obligations and pub 577's data handling procedures.

7.2 Data Breach Response. In the event of a personal data breach that is likely to result in serious harm to affected individuals, pub 577 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03. Affected data subjects will also be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

8.1 Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pub 577. To exercise any of these rights, contact the pub 577 Data Protection Officer using the details in Section 13. pub 577 will respond to verified requests within 15 business days.

9.1 pub 577 uses cookies and similar technologies on pub577.net. Cookies are small text files stored on your device by your browser when you visit the platform. They enable the technical operation of the site and support the purposes described below.

9.2 pub 577 does not use advertising cookies or third-party tracking pixels for targeted advertising or for sharing browsing data with ad networks.

9.3 You may control optional cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the pub 577 platform, as session authentication requires cookie support.

10.1 pub 577 does not knowingly collect personal data from any person under the age of 21. The pub 577 platform is strictly an adult gaming service and access is limited to persons aged 21 and above as required by PAGCOR.

10.2 If pub 577 becomes aware that personal data has been collected from a person under the age of 21, the relevant Account will be closed immediately, all data will be deleted to the extent permitted by law, and — where deposits were made — funds will be returned to the originating payment method.

10.3 If you believe a minor has gained access to or created an Account on pub 577, please contact [email protected] immediately.

11.1 Some of pub 577's third-party service providers — including game software providers and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred to countries outside the Philippines, pub 577 ensures that appropriate safeguards are in place as required by Section 21 of RA 10173.

11.2 Safeguards used for cross-border transfers include:

• Standard contractual clauses reviewed for compliance with NPC guidance;
• Data processing agreements requiring the recipient to maintain equivalent data protection standards;
• Transfers only to jurisdictions or recipients that have been assessed as providing an adequate level of protection for the specific personal data being transferred.

11.3 No personal data is transferred cross-border for the purpose of enabling third parties to make independent use of that data. All cross-border transfers are for the sole purpose of providing services to pub 577 and, through pub 577, to you.

12.1 pub 577 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The effective date at the top of this document will be updated each time a revision is made.

12.2 Where changes are material — meaning they significantly affect your rights or how your personal data is processed — pub 577 will notify Account Holders via a notice on the platform or by message to your registered mobile number at least 7 days before the changes take effect.

12.3 Continued use of pub 577 after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with material changes, you may request account closure and deletion of your data subject to applicable legal retention obligations.

13.1 Data Protection Officer. In compliance with Section 21(c) of RA 10173, pub 577 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act. The DPO is the first point of contact for all data subject rights requests and privacy-related concerns.

13.2 How to Contact the DPO. You may contact the pub 577 Data Protection Officer through the following channels:

• Email: [email protected] — please include "DATA PRIVACY REQUEST" in the subject line for faster routing to the DPO;
• Live Chat: Available 24/7 on the pub 577 platform — request to speak with the Data Protection team;

13.3 pub 577 will acknowledge receipt of your privacy request within 3 business days and will provide a substantive response within 15 business days of receipt of a verified request. Complex requests may take longer — pub 577 will inform you if additional time is required.

13.4 National Privacy Commission. If you are not satisfied with pub 577's response to your privacy concern, you have the right to file a complaint directly with the National Privacy Commission of the Philippines. Information on the NPC's complaint procedure is available from the NPC directly.