dbx77 Privacy Policy

1 Introduction

dbx77 ("we," "us," "our") is committed to protecting the privacy and personal data of every player ("you," "your") who uses the dbx77 online gaming platform accessible at dbx77.cam (the "Platform"). We understand that entrusting us with your personal information is a significant act of confidence, and we take that responsibility seriously.

This Privacy Policy describes the types of personal information we collect from players in the Philippines, the purposes for which we use that information, how we protect it, the circumstances under which we may share it, and the rights you have over your data under Philippine law. This Policy applies to all personal data collected through the Platform, our customer support channels, marketing communications, and any other interaction between you and dbx77.

This Privacy Policy should be read alongside the dbx77 Terms and Conditions, which are incorporated by reference.

2 Data Controller

dbx77, the operator of the Platform at dbx77.cam, is the data controller responsible for the personal information of players collected through the Platform. dbx77 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and processes personal data in accordance with PAGCOR regulatory requirements and the Philippine Data Privacy Act of 2012.

Questions, requests, or complaints regarding the processing of your personal data may be directed to the dbx77 Data Protection Officer (DPO) via email at [email protected] with the subject line "Data Privacy Request." Contact details for our DPO are also provided in Section 17 of this Policy.

3 Personal Data We Collect

dbx77 collects only the personal data that is necessary to provide you with a secure, compliant, and high-quality gaming experience. The categories of personal data we collect include:

3.1 Registration and Identity Data

• Full legal name as it appears on your Philippine government-issued identification document;
• Date of birth (to verify you are aged 21 or above);
• Gender;
• Nationality;
• Permanent address and current residential address in the Philippines;
• Valid email address;
• Active Philippine mobile number.

3.2 Identity Verification (KYC) Data

• Government-issued Philippine ID number (SSS, PhilHealth, LTO, passport, PhilSys, Voter's ID, or PRC);
• Scanned copy or clear photograph of the front and back of your ID document;
• Selfie photograph for biometric comparison where required for enhanced verification;
• Proof of address documents where required.

3.3 Financial and Transaction Data

• GCash mobile number and registered name;
• PayMaya account details where used;
• Bank account name, number, and branch (BPI, BDO, Metrobank, UnionBank) where used for transfers;
• Deposit and withdrawal transaction records including amounts, dates, times, and payment references;
• Betting and gaming transaction history.

3.4 Technical and Device Data

• IP address at the time of each login and transaction;
• Device type, operating system, and browser type;
• Mobile network operator (where accessing via mobile);
• Session duration and page interaction data;
• Geolocation data (city/region level) to verify Philippine jurisdiction compliance.

3.5 Communications Data

• Records of your communications with dbx77 customer support, including live chat transcripts, email correspondence, and support ticket records;
• Survey and feedback responses where voluntarily provided;
• Responsible gaming self-assessment responses.

4 How We Collect Your Data

dbx77 collects personal data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, make deposits or withdrawal requests, contact customer support, or respond to promotional surveys;
• Automatically — through cookies, web analytics tools, and server logs when you access and interact with the Platform (see Section 8 on Cookies);
• From payment service providers — GCash, PayMaya, and bank systems transmit transaction confirmation data to dbx77 to facilitate deposit matching and withdrawal processing;
• From third-party KYC verification services — where dbx77 uses licensed identity verification providers to cross-check your submitted documents against authoritative databases, in compliance with PAGCOR KYC requirements;
• From PAGCOR and regulatory authorities — where legally required, including self-exclusion registry checks.

5 Legal Basis for Processing

dbx77 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

6 How We Use Your Personal Data

dbx77 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your dbx77 account, processing your registration, and enabling access to Platform features;
• Identity verification: Verifying that you are who you say you are and that you meet the 21+ age requirement under Philippine law and PAGCOR regulations;
• Payment processing: Processing your GCash, PayMaya, and bank transfer deposits and withdrawals in Philippine Peso;
• Regulatory compliance: Meeting our obligations to PAGCOR, including transaction reporting, self-exclusion registry checks, and responsible gaming interventions;
• Anti-money laundering: Monitoring transactions for suspicious activity as required under the Philippine Anti-Money Laundering Act (AMLA) and reporting to the Anti-Money Laundering Council (AMLC) where required by law;
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support operations;
• Responsible gaming: Monitoring your gaming activity to identify potential problem gambling indicators and providing appropriate intervention tools or referrals;
• Security and fraud prevention: Detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, and other prohibited conduct;
• Platform improvement: Analyzing aggregated, anonymized usage data to improve game selection, user experience, and Platform performance;
• Marketing communications: Sending you promotional offers, bonus notifications, and gaming updates where you have consented to receive marketing from dbx77 or where we have a legitimate interest based on your existing player relationship.

7 Data Sharing and Disclosure

dbx77 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

7.1 Service Providers and Data Processors

dbx77 engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include: identity verification (KYC) providers, payment gateway operators (GCash, PayMaya, bank system integrators), cloud hosting and IT security providers, customer support software operators, and analytics platform providers. All processors are contractually bound to process data only on dbx77's documented instructions and to implement appropriate technical and organizational security measures.

7.2 Game Content Providers

Game providers (such as Evolution Gaming, Pragmatic Play, JILI, PG Soft, and others) receive limited transaction data necessary to enable real-money gameplay and to certify game outcomes. No more personal data than is strictly necessary for game operation is shared with any game provider.

7.3 Regulatory Authorities

dbx77 discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and are documented in accordance with dbx77's regulatory compliance procedures.

7.4 Law Enforcement

dbx77 may disclose personal data to Philippine law enforcement agencies where required by a valid legal order, warrant, or where dbx77 reasonably believes disclosure is necessary to prevent or report suspected criminal activity including fraud, money laundering, or identity theft.

7.5 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, personal data held by dbx77 may be transferred to the acquiring entity, subject to that entity assuming all obligations under this Privacy Policy and applicable Philippine law. Players will be notified of any such transfer in accordance with DPA 2012 requirements.

8 Cookies and Tracking Technologies

The dbx77 Platform uses cookies and similar tracking technologies to provide and improve the gaming experience, maintain session security, and analyze platform usage. The types of cookies used by dbx77 include:

You may manage your cookie preferences through the dbx77 cookie consent banner displayed on your first visit to the Platform. Withdrawing consent for analytics or marketing cookies will not affect your ability to access and use the Platform's core gaming features. Note that disabling strictly necessary cookies will prevent proper Platform function.

Most mobile browsers and desktop browsers allow you to control cookies through browser settings. For instructions specific to your browser, refer to your browser's help documentation.

9 Data Retention

dbx77 retains personal data for as long as is necessary for the purposes described in this Policy, or as required by PAGCOR regulations and Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction methods. Where anonymization is applied, the resulting anonymized data may be retained for statistical and analytical purposes without retention limits.

10 Data Security

dbx77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the dbx77 Platform is encrypted using TLS 1.2 or higher;
• Encryption at rest: Stored personal data, including KYC documents and payment information, is encrypted using AES-256 encryption;
• Access controls: Personal data access is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular privacy training;
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication. Players are strongly encouraged to enable 2FA on their dbx77 accounts;
• Regular security audits: dbx77 engages independent third-party cybersecurity firms to conduct regular penetration testing, vulnerability assessments, and security audits of systems that process personal data;
• Incident response: dbx77 maintains a documented data breach response plan. In the event of a breach likely to affect your rights, we will notify you and the National Privacy Commission within the timeframes required by Philippine law.

11 International Data Transfers

The dbx77 Platform primarily stores and processes personal data within data centers serving the Southeast Asian region. Certain service providers engaged by dbx77 — particularly game content providers, cloud infrastructure operators, and cybersecurity tools — may process some personal data outside of the Philippines.

Where personal data is transferred outside the Philippines, dbx77 ensures that such transfers are subject to appropriate safeguards, including data processing agreements incorporating standard contractual clauses consistent with NPC guidelines. dbx77 does not transfer personal data to jurisdictions that lack adequate data protection standards without implementing additional contractual protections.

12 Children's Privacy and the 21+ Rule

The dbx77 Platform is strictly restricted to individuals who are at least 21 years of age under Philippine law and PAGCOR regulations. dbx77 does not knowingly collect personal data from any person under the age of 21. The age verification conducted during the KYC process is specifically designed to enforce this restriction.

If dbx77 discovers that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data to the extent not required to be retained under PAGCOR regulations, and where required, notify PAGCOR of the underage access incident.

If you believe a person under 21 has registered a dbx77 account, please contact our support team immediately at [email protected].

13 Exercising Your Data Rights

To exercise any of your data rights described in this Policy and under the Philippine Data Privacy Act, please submit a written request to the dbx77 Data Protection Officer at [email protected] with the subject line "Data Privacy Request." Your request should include:

• Your full registered name and dbx77 account username;
• The specific right you are exercising (access, correction, erasure, restriction, portability, or objection);
• The specific data or processing activity your request relates to;
• A copy of your government-issued Philippine ID to verify your identity as the account holder.

dbx77 will acknowledge receipt of your request within 2 business days and will respond substantively within 15 business days of receipt. In complex cases, we may extend this period by a further 15 business days, in which case we will notify you of the extension and the reasons for it. Responses to data rights requests are provided free of charge, except where requests are manifestly unfounded or excessive.

Where dbx77 is unable to fulfill a data erasure or access restriction request — for example, because the data must be retained to comply with PAGCOR regulations or AMLA obligations — we will explain the applicable legal basis for retention clearly and in writing.

14 Marketing Communications

dbx77 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, tournaments, VIP rewards, and other Platform features. We do this either with your explicit consent (opt-in) or on the basis of legitimate interest where you have an active dbx77 account and have not opted out.

You may opt out of marketing communications at any time through any of the following methods:

• Clicking the unsubscribe link in any dbx77 promotional email;
• Updating your notification preferences in your dbx77 account settings;
• Contacting dbx77 support and requesting removal from all marketing lists.

Opting out of marketing communications does not affect your ability to use the Platform or receive service-related communications (such as account verification messages, withdrawal confirmation, or responsible gaming alerts), which are sent as part of the contractual relationship and do not require separate consent.

15 Third-Party Links and Services

The dbx77 Platform may contain links to third-party websites or integrate third-party services (such as live game studio feeds). dbx77 is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform.

Game content providers integrated into the dbx77 Platform operate their game delivery infrastructure under their own privacy and data security standards. dbx77 ensures that data sharing with game providers is limited to what is strictly necessary for game operation through contractual data processing agreements, but dbx77 is not responsible for the internal data handling practices of third-party game providers beyond those contractual controls.

16 Changes to This Privacy Policy

dbx77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine law, or new PAGCOR regulatory requirements. Material changes — particularly those that expand the types of data we collect or the purposes for which we use it — will be communicated to registered players via email to their registered address and by a prominent notice on the Platform at least 14 days before the changes take effect.

Minor or clarificatory changes that do not materially affect your rights may be made without prior individual notice. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. The current operative version of this Policy is always available at dbx77.cam/privacy-policy.

Your continued use of the dbx77 Platform after any revised Privacy Policy takes effect constitutes your acknowledgment of the updated Policy.

17 Contact and Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the dbx77 Data Protection Officer:

• Email: [email protected] — Subject: "Data Privacy Request" (plain text address — not a clickable link)
• Live Chat: Available 24/7 within your dbx77 account dashboard
• Response Time: Acknowledgment within 2 business days; substantive response within 15 business days

If you are not satisfied with how dbx77 has handled your personal data or responded to your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC's contact information is published on the official NPC website, accessible through the Philippine government's official online portals.