pub222 Privacy Policy

pub222 ("we," "us," "our") is the operator of the online casino and sports betting platform accessible at pub222.org and its associated subdomains and mobile interfaces. In the context of Philippine data privacy law, pub222 is the Personal Information Controller in respect of the personal data collected from players, registered account holders, and visitors to the pub222 platform.

pub222 is committed to handling all personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission of the Philippines. We recognize that Filipino players trust us with sensitive personal and financial information, and we take that responsibility seriously.

This Privacy Policy applies to all personal information collected by pub222 through:

• The pub222 website at pub222.org and all pages and subdomains thereof;
• The account registration and management process;
• Deposit, withdrawal, and payment processing interactions;
• Customer support communications conducted via live chat, email, or any other channel;
• Participation in promotions, bonuses, tournaments, or any other pub222 programs;
• Any other interaction between a user and the pub222 platform or its staff.

This Policy does not cover data practices of third-party websites or services that may be referenced within the pub222 platform, including payment processors, game providers, or other external platforms. Those third parties operate under their own privacy policies, which pub222 does not control.

pub222 collects the following categories of personal data, depending on how you interact with the platform:

pub222 collects personal data through the following means:

4.1 Directly from You. When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings, you provide data to pub222 directly. The accuracy of data you provide is your responsibility, and you agree to provide truthful, current, and complete information.

4.2 Automatically During Platform Use. When you visit pub222.org or use the platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, the type of device and browser you are using, pages visited, time spent on each page, and session duration. This data is used to maintain platform security and to improve the user experience.

4.3 From Third-Party Payment Processors. When you make a deposit via GCash, Maya, BPI, BDO, Metrobank, or another supported payment method, the relevant payment processor shares limited transaction data with pub222 — typically a transaction reference number, amount, and confirmation status — sufficient to credit your account. pub222 does not receive or store full payment credentials such as card numbers or full bank account details.

4.4 From Game Providers. Third-party game providers that power games within the pub222 lobby may generate game session and transaction data that is shared with pub222 for the purposes of account crediting, dispute resolution, and compliance reporting.

4.5 From Identity Verification Services. Where pub222 uses a third-party KYC verification service to assist with identity document validation, that service may share verification outcome data (confirmed, unconfirmed, or flagged) with pub222. The identity documents themselves are processed per the privacy policy of that verification service and per the terms of pub222's data processing agreement with that service.

pub222 processes personal data only for specific, legitimate purposes and only where a lawful basis for processing exists under the Data Privacy Act of 2012. The following table summarizes pub222's processing activities and their corresponding legal bases:

pub222 uses the personal data we collect for the following purposes:

• Account Administration: Creating, maintaining, verifying, and securing your pub222 account, including login authentication via mobile number and OTP;
• Payment Processing: Processing your GCash, Maya, or bank transfer deposits and withdrawals, reconciling transactions, and maintaining financial records;
• Regulatory Compliance: Fulfilling identity verification, age verification, anti-money laundering (AML), and other regulatory obligations applicable to online gaming operations in the Philippines;
• Security and Fraud Prevention: Detecting, investigating, and preventing unauthorized access, fraud, collusion, or any other conduct prohibited under the pub222 Terms & Conditions;
• Customer Support: Responding to your inquiries, resolving disputes, and providing assistance via live chat and email;
• Responsible Gaming: Monitoring gaming activity for signs of problem gambling patterns, applying and enforcing deposit limits, self-exclusion periods, or cooling-off restrictions set by you or required by our policies;
• Service Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game recommendations, and the overall user experience;
• Marketing Communications: Sending you information about pub222 promotions, bonuses, and new features — but only where you have opted in to receive such communications, and only via channels you have consented to.

pub222 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis.

7.1 No Sale of Personal Data. pub222 does not sell, rent, license, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes.

7.2 Service Providers (Data Processors). pub222 may share your personal data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These providers include:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank, and other supported processors);
• Identity verification and KYC service providers;
• Game software providers (limited to session and transaction data necessary to operate games);
• Cloud hosting and infrastructure providers;
• Customer support platform providers;
• Fraud detection and cybersecurity service providers.

All such service providers are contractually required to process data only in accordance with pub222's instructions, to maintain appropriate security standards, and to comply with applicable data protection laws.

7.3 Legal and Regulatory Disclosure. pub222 may disclose personal data to government authorities, law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or any other regulatory body where such disclosure is required by law, court order, or regulatory directive. In such cases, pub222 will disclose only the minimum data necessary to comply with the legal requirement.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a substantial portion of pub222's business assets, personal data held by pub222 may be transferred to the acquiring entity as part of the transaction. In such an event, pub222 will take reasonable steps to ensure continuity of data protection standards and will notify affected users where required by law.

8.1 Retention Periods. pub222 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and in any event for no longer than required or permitted by applicable law. General retention guidelines are as follows:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, as required for AML compliance under Philippine law;
• Identity verification documents (KYC) are retained for the duration of the account relationship and for five (5) years following account closure;
• Customer support communications are retained for two (2) years from the date of the last communication in a support thread;
• Technical and analytics data (including IP logs) is retained for a maximum of twelve (12) months in identifiable form, after which it is anonymized or deleted;
• Marketing consent records are retained for the duration of the consent and for a period thereafter sufficient to demonstrate compliance.

8.2 Deletion Requests. Where you request deletion of your personal data and there is no overriding legal obligation to retain it, pub222 will action the deletion within thirty (30) calendar days of receiving the request. Some categories of data cannot be deleted due to regulatory retention obligations, and pub222 will inform you of any such limitations when processing your request.

pub222 implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and pub222 servers is encrypted using industry-standard SSL/TLS protocols;
• Password Hashing: Account passwords are stored in hashed form using cryptographic hashing algorithms; pub222 does not store or have access to plain-text passwords;
• Access Controls: Access to systems containing personal data is restricted to pub222 personnel who require such access to perform their role, and is governed by role-based access control policies;
• Two-Factor Authentication: Account logins support SMS OTP-based two-factor authentication to reduce the risk of unauthorized account access;
• Login Monitoring: pub222 monitors account access patterns and flags anomalous login activity for security review;
• Data Minimization: pub222's systems are designed to collect and retain only the minimum personal data necessary for each processing purpose;
• Vendor Security Standards: Third-party service providers with access to pub222 user data are contractually required to maintain security standards consistent with pub222's own requirements.

While pub222 applies these security measures in good faith, no digital system can guarantee absolute security. In the event of a personal data breach that is likely to result in risk to affected individuals, pub222 will notify the National Privacy Commission and affected data subjects as required by law within the applicable timeframes.

10.1 What Are Cookies. Cookies are small data files placed on your device by websites you visit. pub222 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyze usage patterns.

10.2 Types of Cookies Used.

• Essential Cookies: Required for core platform functionality — including maintaining your logged-in session, remembering your language and display preferences, and enabling security features like CSRF protection. These cookies cannot be disabled without impairing platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymized information about how visitors interact with the pub222 platform, including which pages are visited most frequently and how users navigate between sections. This data is used solely to improve the platform and is not used to identify individual users;
• Functional Cookies: Used to remember your account preferences, such as responsible gaming settings and display configurations, so they are applied consistently across sessions.

10.3 Managing Cookies. You may manage or disable non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain platform features. Clearing browser cookies will log you out of your pub222 session and may reset certain preferences.

10.4 No Third-Party Advertising Cookies. pub222 does not use third-party advertising or behavioral tracking cookies that profile you for the purpose of serving advertisements on external websites or platforms.

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in relation to your personal data held by pub222. To exercise any of these rights, contact our Data Protection Officer via the contact details in Section 15.

pub222 will respond to data rights requests within thirty (30) calendar days of receipt, or within any other timeframe required by applicable law. We may request proof of identity before processing a data rights request to ensure we do not disclose or modify data in response to fraudulent requests.

The pub222 platform is strictly restricted to individuals aged 21 years and above. pub222 does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement is enforced through mobile number verification at registration and identity document verification at withdrawal.

pub222 also encourages parents and guardians to use device-level parental controls and filtering software to prevent minors from accessing online gaming platforms. pub222 supports the use of such tools as part of a broader responsible gaming ecosystem.

The pub222 platform integrates with a number of third-party services to deliver its full range of features. These include game providers, payment processors, identity verification services, and infrastructure providers. While pub222 requires all such third parties to handle user data in compliance with applicable privacy laws under data processing agreements, pub222 is not responsible for the privacy practices of third parties operating under their own platforms or privacy policies.

The pub222 website does not contain links to external third-party websites, and pub222 does not endorse or accept responsibility for the content or privacy practices of any external sites. Any navigation away from pub222.org to a third-party service (such as a payment app) is governed by that service's own privacy policy.

14.1 Right to Update. pub222 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be published on this page at pub222.org/privacy-policy with a revised Effective Date.

14.2 Notification. Where a material change is made to this Policy, pub222 will make reasonable efforts to notify registered account holders via SMS to their registered Philippine mobile number, in-platform notification upon login, or email where available. Non-material clarifications or formatting changes may be made without notification.

14.3 Continued Use as Acceptance. Your continued use of the pub222 platform after a revised Privacy Policy is posted constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request account closure in accordance with the pub222 Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pub222, please contact us using the following channels:

• Live Chat: Available 24/7 from your pub222 account dashboard — the fastest way to reach a support agent for urgent matters;
• Email: [email protected] — for data rights requests, please include "Data Rights Request" in the subject line and your registered mobile number for identity verification;

pub222 will acknowledge receipt of your inquiry within three (3) business days and will provide a substantive response within thirty (30) calendar days, or within the timeframe required by applicable law where shorter.

If you are not satisfied with pub222's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (privacy.gov.ph). pub222 will cooperate fully with any NPC investigation or inquiry.