dbx77 Privacy Policy

This Privacy Policy is issued by the operator of the dbx77 platform accessible at dbx77.club ("dbx77", "we", "us", or "our"). It describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the dbx77 website, games, sports betting services, account management tools, payment services, and all associated communications channels (collectively, the "Platform").

This Privacy Policy applies to all registered account holders, visitors who browse the Platform without registering, and any individual whose personal information is processed by dbx77 in the course of its operations. It should be read together with the dbx77 Terms & Conditions, which govern your use of the Platform generally.

dbx77 is committed to protecting personal data in accordance with:

• The Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations;
• The regulations of the National Privacy Commission (NPC) of the Philippines;
• Applicable PAGCOR (Philippine Amusement and Gaming Corporation) regulatory requirements concerning player data and responsible gaming recordkeeping;
• Philippine Anti-Money Laundering Act (AMLA) requirements for customer identification and recordkeeping.

dbx77 collects two categories of personal data: information you provide directly, and information collected automatically through your use of the Platform.

• Technical Data: IP address, device type (Android, iOS, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited on the Platform, session duration, login timestamps, games accessed, betting history, deposit and withdrawal transaction logs, and navigation paths through the Platform.
• Location Data: Country and region-level geolocation derived from your IP address, used for jurisdictional compliance and fraud prevention purposes. dbx77 does not collect precise GPS location data.
• Cookie and Tracking Data: Data collected through cookies, local storage, and similar technologies as described in Section 7.

dbx77 collects personal data through the following means:

• Direct submission: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, or contact dbx77 support, you directly provide personal data to us.
• Platform interaction: Our systems automatically log technical and usage data whenever you access the dbx77 Platform, play games, place bets, or conduct financial transactions.
• Third-party payment providers: When you make a deposit or withdrawal through GCash, Maya, BPI, BDO, Metrobank, GrabPay, or 7-Eleven CLiQQ, those providers may share transaction reference data with dbx77 for reconciliation and fraud prevention purposes.
• Identity verification services: During KYC processing, dbx77 may use third-party identity verification service providers to validate government-issued ID documents. These providers process your ID data solely for verification purposes under strict data processing agreements.
• Cookies and tracking technologies: As described in Section 7, dbx77 collects data through cookies and similar technologies during your browsing and gaming sessions.

dbx77 uses your personal data for the following defined purposes only:

• Creating, maintaining, and managing your dbx77 account;
• Verifying your identity and age (21+) as required by PAGCOR and the Data Privacy Act;
• Processing deposits, withdrawals, and in-platform transactions;
• Providing access to games, sports betting markets, and all Platform services;
• Communicating with you regarding your account, transactions, and service updates.

• Complying with PAGCOR licensing and reporting requirements;
• Fulfilling Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) obligations under Philippine law;
• Responding to lawful requests from Philippine government authorities, law enforcement, and regulatory bodies;
• Maintaining records required by the Data Privacy Act, AMLA, and applicable PAGCOR regulations.

• Implementing and monitoring deposit limits, wagering limits, loss limits, and self-exclusion settings activated by you;
• Identifying patterns of play that may indicate problem gambling behavior, in order to provide appropriate responsible gaming support;
• Enforcing the 21+ age restriction and blocking access for self-excluded players.

• Detecting and preventing fraudulent account activity, multiple account creation, money laundering, and unauthorized access;
• Verifying the ownership of payment methods used for deposits and withdrawals;
• Monitoring login activity for suspicious access patterns.

With your consent, dbx77 may send you promotional communications about bonuses, new games, sports betting offers, and dbx77 platform updates. You may withdraw your consent to marketing communications at any time by updating your communication preferences in Account Settings or by contacting [email protected].

Under the Data Privacy Act of 2012, dbx77 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and dbx77 — including account creation, payment processing, game access, and withdrawal services.
• Legal obligation: Processing required to comply with applicable Philippine law — including PAGCOR licensing requirements, AMLA recordkeeping, NPC reporting obligations, and age verification mandates.
• Legitimate interests: Processing carried out for dbx77's legitimate operational interests — including fraud detection, platform security, technical performance monitoring, and responsible gaming enforcement — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your specific, informed, freely given consent has been obtained. You may withdraw this consent at any time.

dbx77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances:

dbx77 shares personal data with carefully selected third-party service providers that assist in operating the Platform. These include:

• Payment processors: GCash (GXI), Maya / PayMaya, GrabPay, BPI, BDO, Metrobank, and 7-Eleven CLiQQ — for transaction processing and fraud prevention;
• KYC and identity verification providers: For processing and validating government-issued ID documents;
• Game software providers: Including Evolution Gaming, JILI, Pragmatic Play, and PG Soft — who may process limited technical data to deliver live games through the Platform;
• Cloud and hosting infrastructure providers: Who store Platform data under strict data processing agreements and cannot use that data for their own purposes.

All service providers are contractually bound to process personal data only for the specified purposes, to maintain appropriate security measures, and to comply with applicable Philippine data protection law.

dbx77 will disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), Philippine law enforcement agencies, and other government authorities when required to do so by law, valid legal process, or regulatory demand. dbx77 will inform you of such disclosures where permitted by applicable law.

The dbx77 Platform uses cookies and similar technologies (including local storage and session storage) to support Platform functionality and improve user experience. The categories of cookies used are as follows:

You may manage or withdraw your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the dbx77 Platform.

dbx77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the dbx77 Platform;
• At-rest encryption for all personal data stored in dbx77's databases;
• Password hashing using a one-way cryptographic algorithm — dbx77 does not store plain-text passwords and cannot recover your password;
• Two-factor authentication (OTP) available for account logins from new or unrecognised devices;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Intrusion detection systems and real-time monitoring of suspicious access patterns.

dbx77 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of applicable retention periods, personal data is securely deleted using methods that render the data unrecoverable, or anonymised such that it can no longer be linked to an identifiable individual.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by dbx77:

• Right to be Informed: The right to be told how your personal data is collected, used, and shared — as fulfilled by this Privacy Policy.
• Right to Access: The right to request a copy of the personal data held by dbx77 about you, including the purposes of processing and any third parties with whom it has been shared.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly through your Account Settings. For identity or KYC data, contact [email protected].
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where processing is no longer necessary, where you withdraw consent, or where processing is unlawful — subject to dbx77's obligations under applicable law to retain certain records.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on dbx77's legitimate interests.
• Right to Data Portability: The right to receive a copy of personal data you have provided to dbx77 in a structured, commonly used, and machine-readable format.
• Right to Damages: The right to claim compensation for damages sustained as a result of a violation of your data privacy rights under the Data Privacy Act.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Privacy Request", your registered email address, and a description of your request. dbx77 will acknowledge your request within 5 business days and fulfil it within 30 days, subject to identity verification and any applicable legal limitations.

The dbx77 Platform is strictly intended for adults aged 21 years and above in accordance with Philippine gaming laws and PAGCOR regulatory requirements. dbx77 does not knowingly collect personal data from any person under the age of 21.

If dbx77 becomes aware that personal data has been collected from a person under 21 years of age, the associated account will be immediately suspended, all data will be reviewed, and data belonging to the minor will be deleted to the extent required by applicable law, subject to any mandatory recordkeeping obligations under AMLA and PAGCOR regulations.

If you are a parent or guardian and believe a person under 21 in your care has registered an account on dbx77, please contact [email protected] immediately with the relevant account details. dbx77 will investigate and take appropriate action promptly.

The dbx77 Platform may contain links to third-party websites or integrate third-party content such as live game streams provided by licensed game software providers. This Privacy Policy applies solely to data processed by dbx77 directly. It does not cover the privacy practices of third-party websites or service providers whose own privacy policies govern how they handle data collected through their platforms.

When you interact with third-party payment processors (GCash, Maya, BPI, BDO, Metrobank, GrabPay, 7-Eleven CLiQQ) or game providers (Evolution Gaming, JILI, Pragmatic Play, PG Soft), those interactions are governed by each provider's own privacy policy. dbx77 is not responsible for the data practices of these third parties, though we contractually require all data processors to maintain appropriate security and to process personal data only for the purposes specified in their agreements with dbx77.

dbx77 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR regulatory requirements, or dbx77's data processing practices. Where material changes are made, dbx77 will notify registered account holders by email to the address associated with their account and/or by a prominent notice on the Platform, as far in advance of the effective date as is reasonably practicable.

Your continued use of the dbx77 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated Policy. The most current version of this Privacy Policy will always be accessible at dbx77.club/privacy-policy. The effective date displayed at the top of this page indicates the version currently in force.

For non-material amendments — such as clarification of existing provisions, correction of typographical errors, or administrative updates — dbx77 may update the Policy without providing advance notice, but will update the "Last Updated" date at the top of this page accordingly.

If you have any questions, concerns, or requests relating to this Privacy Policy or dbx77's data processing practices, you may contact our Data Protection Officer through the following channels:

• Email (Data Privacy): [email protected] — please include "Data Privacy" in your subject line for priority routing.
• Live Chat: Available 24/7 through the in-Platform live chat widget. For data privacy matters, we recommend using email to ensure a complete written record of your request.

When submitting a data privacy request, please include: your full name, your registered dbx77 email address, a clear description of your request or concern, and any relevant account reference information. dbx77 will acknowledge all data privacy requests within 5 business days.

If you are not satisfied with dbx77's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.