pub333 Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") describes how pub333 ("pub333," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals who visit the pub333 website at https://pub333.vip and use any pub333 service (collectively, the "Platform"), including online casino games, sports betting, bingo, and related services directed at Filipino players.

This Policy applies to all registered Players, prospective Players who browse the Platform without registering, and any other individual whose personal data pub333 processes in connection with the delivery of its services. By accessing the pub333 Platform or creating a pub333 account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, this Policy is also informed by PAGCOR's data handling requirements for licensed online gaming operators.

2 Who We Are — The Data Controller

For the purposes of the Data Privacy Act of 2012, pub333 is the personal information controller in respect of the personal data it processes about users of the pub333 Platform. pub333 determines the purposes for which, and the manner in which, personal data is processed.

pub333 operates the online casino and sports betting platform accessible at https://pub333.vip and is responsible for the personal data collected and maintained by that platform. pub333's Data Protection Officer (DPO) can be contacted at the address set out in Section 15 of this Policy.

3 Categories of Personal Data We Collect

pub333 collects only the personal data that is necessary and proportionate to the purposes described in Section 5 of this Policy. The categories of personal data pub333 processes are as follows:

pub333 does not collect sensitive personal information (as defined under the Data Privacy Act) as a standard part of account registration or gameplay, except where required for responsible gaming interventions (for example, where a player discloses a health condition relevant to a self-exclusion or cooling-off request). Such sensitive information is processed under heightened confidentiality protections.

4 How We Collect Personal Data

pub333 collects personal data through the following channels and mechanisms:

5 Purpose of Processing and Legal Basis

pub333 processes personal data only for specified, legitimate purposes. The table below sets out each processing purpose, the categories of data used, and the legal basis under the Data Privacy Act of 2012:

pub333 will not process your personal data for any purpose that is incompatible with those listed above without providing prior notice and, where required, obtaining your consent.

6 Sharing of Personal Data

pub333 does not sell, rent, trade, or otherwise disclose your personal data to third parties for their own commercial or marketing purposes. Data sharing by pub333 is strictly limited to the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash (GXI Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, UnionBank, and other Philippine payment providers, for the processing of deposits and withdrawals. These providers receive only the financial data necessary to execute transactions.
• KYC and Identity Verification Providers: Third-party services engaged by pub333 to conduct automated or assisted identity verification, to the extent required for PAGCOR-compliant KYC processes.
• Game Software Providers: Providers such as Pragmatic Play, PG Soft, Jili, and Evolution, who supply the game engines delivered through the pub333 Platform. These providers may receive technical and gaming data necessary to deliver their games and to support game integrity monitoring.
• Fraud and Security Service Providers: Third-party tools engaged to detect and prevent fraud, account takeovers, and other security threats. These providers process technical and account data under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any other Philippine governmental or regulatory body with legitimate authority to request or receive data from pub333 in connection with its regulatory obligations.
• Legal and Professional Advisers: Legal counsel, auditors, and other professional service providers engaged by pub333 for legitimate business purposes, subject to professional obligations of confidentiality.

All third-party recipients who process personal data on pub333's behalf are required by contract to implement appropriate technical and organisational security measures and to process data only for the purposes and in the manner directed by pub333.

7 International Data Transfers

Some of pub333's service providers and game software partners are based outside the Philippines. Where personal data is transferred to a recipient in a country that has not been designated by the NPC as providing an adequate level of data protection, pub333 implements appropriate safeguards, including contractual clauses that require the recipient to protect personal data to a standard equivalent to that required under Philippine law.

pub333 will not transfer personal data outside the Philippines unless one of the following conditions is met: (a) the transfer is necessary for the performance of a contract to which the data subject is a party; (b) the transfer is necessary for the establishment, exercise, or defence of legal claims; (c) the data subject has given express consent; or (d) pub333 has implemented appropriate contractual safeguards as described above.

8 Data Retention

pub333 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

When personal data is no longer required and the applicable retention period has expired, pub333 will securely delete or anonymise the data in a manner that prevents reconstruction or identification.

9 Security Measures

pub333 implements technical and organisational measures proportionate to the risks associated with the processing of personal data on an online gambling platform. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between the Player's device and pub333 servers is encrypted in transit using current-generation SSL/TLS protocols.
• Encrypted Password Storage: Player passwords are stored using industry-standard hashing algorithms. pub333 staff cannot view passwords in plain text.
• Two-Factor Authentication (2FA): Available for all pub333 accounts, providing an additional layer of protection through SMS OTP verification to the registered Philippine mobile number.
• Access Controls: Access to personal data within pub333's systems is restricted to personnel with a legitimate need to access it for their assigned duties. Access is managed through role-based controls and logged for audit purposes.
• Security Monitoring: pub333's systems are subject to continuous monitoring for suspicious activity, including login anomalies, unusual transaction patterns, and access from unrecognised devices or locations.
• Data Breach Response: pub333 maintains an incident response procedure for personal data breaches. In the event of a breach that is likely to result in risk to the rights of affected data subjects, pub333 will notify the NPC and, where appropriate, the affected players within the timeframe prescribed by the Data Privacy Act.

10 Cookies and Tracking Technologies

The pub333 Platform uses cookies and similar technologies (such as web beacons and local storage) to operate the platform, maintain user sessions, and improve the experience for Filipino players. The categories of cookies used by pub333 are described below:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the Platform's functionality and prevent you from accessing your pub333 account. Disabling functional or analytics cookies will not prevent access but may reduce the quality of your experience.

11 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and regulations of the National Privacy Commission, you have the following rights with respect to the personal data pub333 holds about you:

• Right to Be Informed: The right to be informed that your personal data is being collected and processed, and the purposes, scope, and method of such processing. This Privacy Policy is pub333's primary mechanism for fulfilling this obligation.
• Right to Access: The right to request a copy of the personal data pub333 holds about you, information about how it is being processed, and the identities of third parties to whom it has been disclosed.
• Right to Correction: The right to request correction of inaccurate, incomplete, false, or outdated personal data held by pub333.
• Right to Erasure or Blocking: The right to request that pub333 delete or block your personal data, where processing is no longer necessary for the original purpose, where consent has been withdrawn, or where the data has been unlawfully processed — subject to pub333's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, and in certain cases, to object to processing based on pub333's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another personal information controller where technically feasible.
• Right to Damages: The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, false, or unlawfully obtained personal data, in accordance with the Data Privacy Act.
• Right to File a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe pub333 has violated any of your rights under the Data Privacy Act.

To exercise any of these rights, submit your request in writing to pub333's Data Protection Officer at [email protected]. pub333 will acknowledge your request within 10 business days and will respond substantively within 30 calendar days, or within such shorter period as required by NPC regulations.

12 Children and Minors

The pub333 Platform is strictly restricted to individuals who are twenty-one (21) years of age or older. pub333 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process prior to the processing of any withdrawal.

If pub333 discovers that it has inadvertently collected personal data from an individual under the age of 21, pub333 will immediately close the associated account, void any pending transactions, and securely delete the personal data in question, subject to any legal retention obligations arising from the circumstances of the account's registration and use.

If you are a parent or guardian and have reason to believe that a minor in your care has registered a pub333 account, please contact pub333 support immediately at [email protected].

13 Marketing Communications

pub333 may send you promotional communications about bonuses, new games, sports betting markets, and other pub333 services where you have provided explicit consent to receive such communications. Consent to receive marketing is obtained at the point of account registration and can be withdrawn at any time.

To opt out of pub333 marketing communications at any time, you may: (a) use the unsubscribe link or mechanism included in any marketing message you receive from pub333; (b) update your communication preferences from within your pub333 account settings; or (c) contact pub333 support at [email protected] to request removal from all marketing lists.

Withdrawal of marketing consent will not affect the processing of transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, security alerts, and OTP messages — which are sent on the basis of contract performance and cannot be disabled while your account is active.

14 Updates to This Policy

pub333 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, pub333's business practices, or the services pub333 provides. Material changes to this Policy will be communicated to active Players via the contact details registered to their account before the updated Policy takes effect.

The version number and effective date at the top of this Policy indicate the current version. Previous versions of the Policy are available on request from the pub333 Data Protection Officer. Your continued use of the pub333 Platform after the effective date of any update constitutes acceptance of the revised Policy.

pub333 encourages Players to review this Policy periodically to stay informed about how pub333 processes and protects their personal data.

15 Contact and Data Protection Officer

Questions, requests, or concerns regarding this Privacy Policy or pub333's personal data processing practices should be directed to pub333's Data Protection Officer (DPO):

This Privacy Policy was last reviewed and updated on 1 January 2026 and constitutes pub333's current data protection notice for all users of the pub333 Platform in the Philippines.