pub 555
Privacy Policy

1.1 This Privacy Policy ("Policy") sets out how pub 555 ("we," "us," "our," "the Company") collects, processes, stores, shares, and protects the personal information ("Personal Data") of individuals who register for or use the pub 555 Platform at pub555.biz, including any associated mobile applications and digital services (collectively, "the Platform").

1.2 This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations ("IRR"). It is also informed by the data handling requirements imposed on PAGCOR-licensed online gaming operators by the Philippine Amusement and Gaming Corporation.

1.3 By registering an Account on the pub 555 Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your Personal Data as described herein. Consent is freely given, specific, and informed. You may withdraw consent at any time by contacting our Data Privacy Officer, subject to the retention obligations described in Section 10.

1.4 This Policy is supplemental to and should be read alongside the pub 555 Terms & Conditions. In the event of conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy prevails.

2.1 pub 555 is the personal information controller ("PIC") in respect of all Personal Data collected through the Platform, as defined under Section 3(h) of Republic Act No. 10173. In this capacity, pub 555 determines the purposes and means of processing your Personal Data and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.

2.2 pub 555 has appointed a Data Privacy Officer ("DPO") responsible for overseeing data protection compliance, handling data subject requests, and acting as the primary point of contact for the National Privacy Commission of the Philippines. The DPO's contact details are provided in Section 17 of this Policy.

2.3 Where pub 555 engages third-party service providers to process Personal Data on its behalf, such third parties act as personal information processors ("PIP") under written agreements that impose data protection obligations equivalent to those binding pub 555.

3.1 pub 555 collects the following categories of Personal Data:

3.2 pub 555 does not collect or process sensitive personal information as defined under Section 3(l) of RA 10173 (including racial or ethnic origin, political or religious beliefs, health data, or sexual orientation) unless expressly required by a specific PAGCOR regulatory obligation, in which case collection will be disclosed to you at the time of collection.

4.1 Directly from you — when you complete the pub 555 registration form, submit KYC documentation, conduct financial transactions through the Platform, contact our support team, or update your Account information.

4.2 Automatically — when you access or use the Platform, we automatically collect Technical Data through server logs, cookies, and similar technologies as described in Section 7.

4.3 From third parties — pub 555 may receive Personal Data from: (a) payment service providers (e.g., GCash, Maya, BPI, BDO) confirming transaction status; (b) identity verification and KYC service providers confirming document authenticity; (c) PAGCOR or other Philippine regulatory authorities as required by our licensing obligations; and (d) fraud prevention and anti-money laundering screening services.

5.1 pub 555 processes your Personal Data on the following legal bases, as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to open and manage your Account, process deposits and withdrawals, and provide access to Games is necessary for the performance of the contract between you and pub 555.
• Legal obligation: pub 555 is subject to obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine law that require the collection, retention, and in certain cases disclosure of specific categories of Personal Data.
• Legitimate interests: pub 555 processes Technical Data and Gaming Activity Data on the basis of its legitimate interests in platform security, fraud prevention, responsible gaming compliance, and product improvement — where such interests are not overridden by your fundamental rights.
• Consent: Where processing is not otherwise justified on the above bases, pub 555 will seek your explicit consent before processing, including for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 pub 555 uses your Personal Data for the following specific purposes:

Account Management

To create, verify, and maintain your pub 555 Account; to authenticate your identity at login; to process password resets; and to manage Account settings and preferences including responsible gaming limits you have set.

Identity and Age Verification (KYC)

To verify that you are at least 21 years of age and a resident of the Philippines, as required by PAGCOR. KYC documents are processed to confirm the authenticity of your identity documents and the accuracy of the information you have provided. This processing is a legal obligation under PAGCOR's licensing conditions and applicable Philippine anti-money laundering law.

Transaction Processing

To process deposits and withdrawals in Philippine Peso through your selected payment method (GCash, Maya, BPI, BDO, Metrobank, InstaPay, PESONet, or other supported channels); to record and reconcile transaction histories; and to comply with the financial record-keeping requirements of Philippine law.

Gaming and Platform Services

To deliver game services, calculate and settle wager outcomes, operate the pub 555 Loyalty Program, and personalise your game lobby based on your activity history on the Platform.

Regulatory Compliance and Anti-Money Laundering

To meet pub 555's obligations under PAGCOR regulations, the Anti-Money Laundering Act of the Philippines, and related implementing issuances. This includes monitoring transactions for suspicious activity, filing required reports with the Anti-Money Laundering Council (AMLC), and cooperating with investigations by competent Philippine authorities.

Responsible Gaming

To administer deposit limits, loss limits, session timers, and self-exclusion tools that you have activated; to identify player behaviour patterns that may indicate problem gambling; and to fulfil pub 555's responsible gaming obligations under PAGCOR's framework.

Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, bonus abuse, and other prohibited conduct; to monitor for suspicious login activity; and to enforce the pub 555 Terms & Conditions.

Customer Support

To respond to your queries, complaints, and support requests through live chat, email, Messenger, and Viber; to maintain records of support interactions for quality assurance purposes; and to investigate and resolve disputes.

Marketing and Promotions

Where you have opted in to marketing communications, to send you information about pub 555 promotions, loyalty program updates, new game releases, and platform announcements via email, SMS, or app notification. You may opt out at any time — see Section 14.

Platform Analytics and Improvement

To analyse aggregated, anonymised usage data to understand how players use the Platform, identify areas for improvement, and develop new features. Individually identifiable data is not used for this purpose without your separate consent.

7.1 The pub 555 Platform uses cookies and similar technologies (collectively "Cookies") to enhance your experience, maintain your session, and collect Technical Data. Cookies are small text files stored on your device by your browser.

7.2 pub 555 uses the following categories of Cookies:

• Strictly Necessary Cookies: Required for core Platform functionality including session authentication and security. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Store your preferences such as language settings, responsible gaming limits display, and game lobby layout. These improve your experience but are not required for basic access.
• Analytics Cookies: Collect anonymised information about how visitors interact with the Platform — pages visited, session duration, device type — to help pub 555 improve its services. No personally identifiable information is collected through analytics cookies without your consent.
• Performance Cookies: Monitor Platform response times, error rates, and load performance to ensure a reliable service.

7.3 You may manage Cookie preferences through your browser settings. Disabling non-essential Cookies will not prevent you from accessing the Platform but may affect certain convenience features.

8.1 pub 555 does not sell your Personal Data to third parties. We share Personal Data only in the following specific circumstances, and only to the extent necessary for the stated purpose:

• PAGCOR and Philippine Regulatory Authorities: pub 555 is required by its PAGCOR license to provide player data and transaction records upon regulatory request. Disclosures to PAGCOR are mandatory and cannot be refused or modified by pub 555 or by you.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports required under the Anti-Money Laundering Act are filed with AMLC as a legal obligation.
• Licensed Payment Processors: Financial transaction data is shared with your selected Philippine payment service provider (GCash, Maya, BPI, BDO, Metrobank, etc.) to the minimum extent necessary to process your deposit or withdrawal.
• KYC and Identity Verification Providers: Identity document data is shared with vetted third-party KYC service providers under confidentiality agreements for the purpose of document authentication and age verification.
• Game Providers: Gaming Activity Data relevant to your play session is shared with the licensed game provider operating the specific game you are playing, to the minimum extent necessary for game delivery and settlement.
• IT Service Providers: Cloud hosting, cybersecurity, and platform maintenance partners operate under agreements that restrict their use of your data to the specific services they provide to pub 555.
• Legal and Judicial Proceedings: Where required by a court order, warrant, or compulsory legal process issued by a competent Philippine authority, pub 555 will disclose Personal Data to the extent required by that legal instrument.

8.2 All third-party processors engaged by pub 555 are bound by written data processing agreements that require them to: process Personal Data only on pub 555's documented instructions; maintain appropriate technical and organisational security measures; not sub-process data without pub 555's prior authorisation; and assist pub 555 in meeting its data subject obligations.

9.1 pub 555 primarily stores and processes Personal Data within Philippine data centre infrastructure. Where a third-party service provider engaged by pub 555 processes Personal Data outside the Philippines — for example, where a game provider's servers are located in another country — pub 555 ensures that such transfers are subject to appropriate safeguards as required by Section 21 of the Data Privacy Act of 2012.

9.2 Appropriate safeguards for international transfers employed by pub 555 include: contractual clauses imposing equivalent data protection obligations on the recipient; transfer to countries assessed by the National Privacy Commission as providing adequate levels of data protection; or consent obtained from you where required.

9.3 If you would like information about the specific safeguards applicable to any international transfer of your Personal Data, you may contact the pub 555 Data Privacy Officer using the details in Section 17.

10.1 pub 555 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to the retention periods required or permitted by Philippine law and PAGCOR regulations.

10.2 The following indicative retention periods apply:

• Account data and KYC documents: Retained for the duration of your Account and for five (5) years following Account closure, as required by PAGCOR and the Anti-Money Laundering Act.
• Transaction records: Retained for five (5) years from the date of the transaction, consistent with Philippine financial record-keeping obligations.
• Gaming Activity Data: Retained for five (5) years, consistent with PAGCOR audit requirements.
• Support communications: Retained for three (3) years from the date of the interaction.
• Marketing preferences and communications: Retained for the period during which you hold an Account, plus two (2) years following Account closure.

10.3 Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised. Where anonymised data is retained for analytics purposes, it no longer constitutes Personal Data and is not subject to data protection obligations.

11.1 pub 555 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, alteration, disclosure, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the pub 555 servers is protected using TLS 1.3 with 256-bit AES encryption — the same standard used by major Philippine banks.
• Encryption at rest: Sensitive Personal Data stored on pub 555 servers, including KYC documents and financial records, is encrypted at rest.
• Access controls: Personal Data is accessible only to pub 555 personnel and authorised processors who have a legitimate need for access. Role-based access controls and the principle of least privilege are applied.
• Password security: Account passwords are stored using a one-way cryptographic hash — they are never stored in plain text and cannot be retrieved by pub 555 staff.
• Two-factor authentication: pub 555 supports two-factor authentication for all Player Accounts, adding an additional layer of protection beyond the password.
• Security monitoring: The Platform is continuously monitored for suspicious activity, intrusion attempts, and anomalous access patterns.
• Regular security assessments: pub 555 conducts periodic security assessments and penetration testing of the Platform and its underlying infrastructure.

11.2 Data Breach Response. In the event of a personal data breach affecting your data, pub 555 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, where required by the Data Privacy Act. Affected data subjects will be notified without undue delay where the breach is likely to result in risk to their rights and freedoms.

12.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your Personal Data held by pub 555:

• Right to be Informed: The right to be informed that your Personal Data is being collected and processed, the purposes of processing, the identity of pub 555 as the data controller, and the recipients of your data. This Policy fulfils that obligation.
• Right of Access: The right to obtain a copy of the Personal Data pub 555 holds about you and information about how it is being processed. Requests will be responded to within thirty (30) days.
• Right to Rectification: The right to have inaccurate or incomplete Personal Data corrected. You may update most Account information directly through your Account settings; corrections to KYC-related data require contact with our Data Privacy Officer.
• Right to Erasure: The right to request the deletion of Personal Data that is no longer necessary for the purposes for which it was collected, where processing was based solely on consent that you have withdrawn, or where processing is unlawful. This right is subject to pub 555's regulatory retention obligations under PAGCOR and AML law.
• Right to Data Portability: The right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: The right to object to the processing of your Personal Data on grounds of legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that pub 555 has processed your Personal Data in violation of the Data Privacy Act.

12.2 To exercise any of the above rights, contact the pub 555 Data Privacy Officer using the details in Section 17. You will be required to verify your identity before your request is processed. pub 555 will respond within the timeframes prescribed by RA 10173 and its IRR.

13.1 The pub 555 Platform is not directed at, and is not intended for use by, any person under the age of twenty-one (21). pub 555 does not knowingly collect Personal Data from persons under 21. As part of the KYC verification process, pub 555 verifies the age of all Account holders before allowing withdrawals. Any Account found to belong to an underage person will be closed immediately in accordance with PAGCOR requirements, and any data collected will be deleted except where retention is required by applicable law for audit purposes.

13.2 If you have reason to believe that a person under 21 has provided Personal Data to pub 555 through the registration process, please notify our Data Privacy Officer immediately using the contact details in Section 17.

14.1 pub 555 may send you promotional communications about bonuses, loyalty program updates, new game launches, and platform events if you have opted in to receive such communications during registration or through your Account settings. Marketing communications are sent by email, SMS to your registered Philippine mobile number, or through app push notifications, depending on your channel preferences.

14.2 You may withdraw consent for marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; (b) updating your communication preferences in your Account settings; or (c) contacting pub 555 support via live chat. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal, and does not prevent pub 555 from sending service communications (such as transaction confirmations, KYC requests, and security notifications) which are not marketing communications and are sent on the basis of contractual necessity.

15.1 The pub 555 Platform may contain links or references to third-party websites, platforms, or applications. These third-party destinations are not operated by pub 555 and are governed by their own privacy policies. pub 555 has no control over, and accepts no responsibility for, the content, privacy practices, or terms of any third-party platform. We encourage you to review the privacy policy of any third-party platform you visit before providing Personal Data to it.

16.1 pub 555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, our data processing activities, or our business operations. The date at the top of this page reflects the date of the most recent revision.

16.2 Where a proposed change materially affects your rights as a data subject, pub 555 will notify you by email to your registered address and/or by a prominent notice on the Platform at least seven (7) calendar days before the change takes effect. Continued use of the Platform following notification constitutes acceptance of the revised Policy.

16.3 Minor amendments — such as typographical corrections, clarifications that do not alter substantive rights, or updates mandated by immediate changes in applicable law — may take effect upon posting without advance notice.

17.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by pub 555, you may contact our Data Privacy Officer through the following channels:

• Email: [email protected] — please include "Privacy Policy" or "DPO Request" in the subject line and your registered username in the message body.
• Live Chat: Available 24 hours a day, 7 days a week through the Platform. For data subject requests, our support team will escalate to the DPO within one (1) business day.
• Messenger / Viber: Available through the official pub 555 channels, staffed 24/7 by our Filipino-speaking support team.

17.2 pub 555 will acknowledge all data subject requests within three (3) business days and will respond substantively within the timeframes prescribed by Republic Act No. 10173 and its Implementing Rules and Regulations. Where a request is complex or involves a large volume of data, pub 555 will notify you of any extension to the standard response period and the reason for it.

17.3 If you are not satisfied with pub 555's response to a privacy concern or data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about how to do this is available on the National Privacy Commission's official website.