dbx77 Privacy Policy

1 About This Privacy Policy

This Privacy Policy is published by dbx77 ("we", "us", "our") and applies to all personal data collected from individuals ("you", "the data subject") who visit, register on, or interact with the dbx77 platform accessible at dbx77.org (the "Platform").

dbx77 is committed to protecting the privacy and security of your personal data. This document describes our data collection practices, the purposes for which your data is used, your rights as a data subject under Philippine law, and the measures we take to keep your information safe.

This Privacy Policy should be read alongside the dbx77 Terms and Conditions. Terms not defined in this Policy carry the meanings assigned to them in the Terms and Conditions. By creating an account, depositing funds, or otherwise using the dbx77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for the personal data you provide through the dbx77 Platform is:

dbx77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations. You may contact the DPO directly via the email address above for any data privacy enquiry or concern.

3 Personal Data We Collect

dbx77 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table describes the categories of personal data we process:

dbx77 does not collect sensitive personal information as defined under the Data Privacy Act (such as health data, political affiliation, religious beliefs, or biometric data) unless specifically required by applicable law or with your express consent.

4 How We Collect Your Data

dbx77 collects personal data through the following channels and mechanisms:

4.1 Direct Submission

Data you provide directly when you register an account, complete KYC verification, submit a deposit or withdrawal request, contact customer support, respond to a survey, or participate in a promotion.

4.2 Automated Collection

Data collected automatically when you access the Platform, including technical data such as your IP address, device identifiers, and usage behaviour, through server logs, cookies, and similar tracking technologies. See Section 6 for details on our use of cookies.

4.3 Third-Party Sources

dbx77 may receive data from trusted third parties in limited circumstances, including:

• Payment processors — transaction confirmation and reference data from GCash, Maya, BPI, BDO, Metrobank, and other accepted payment providers;
• KYC verification providers — identity confirmation results from third-party verification services used to validate government-issued identification documents;
• Anti-fraud services — risk signals and device reputation data from fraud prevention partners used to protect your account and the integrity of the Platform.

In each case, dbx77 ensures that third-party data sources operate in compliance with applicable data privacy laws and that data sharing agreements are in place.

5 Purposes of Processing & Legal Bases

dbx77 processes your personal data for the following purposes, each grounded in a legitimate legal basis under the Philippine Data Privacy Act of 2012:

6 Cookies & Tracking Technologies

6.1 What Cookies Are

Cookies are small text files placed on your device by a website. dbx77 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your login session, and understand how the Platform is used.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in during a gaming session. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as display settings, language, and recently played games to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform — which pages are most visited, how long sessions last, and where navigation drop-offs occur. This data is used solely to improve the Platform and is not linked to individual accounts.
• Security Cookies: Used to detect suspicious activity and protect your account against fraud and session hijacking.

6.3 Managing Cookies

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the dbx77 Platform, including your ability to maintain a login session or access personalised features. Strictly necessary cookies cannot be declined without preventing Platform access.

7 Data Sharing & Disclosure

dbx77 does not sell, rent, or commercially share your personal data with third parties for their independent marketing or commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

7.1 Service Providers

dbx77 engages trusted third-party service providers to support Platform operations. These include payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC verification providers, customer support platform operators, fraud detection services, and cloud infrastructure providers. Each service provider is engaged under a data processing agreement that restricts their use of your data to the specific services they are contracted to provide.

7.2 Game Providers

Game providers whose titles are integrated into the dbx77 Platform receive limited technical data (such as a pseudonymised player session identifier and wager amounts) necessary to operate the games. Game providers do not receive your full identity, contact, or financial details.

7.3 Regulatory Authorities

dbx77 is required by law to share certain data with regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and relevant law enforcement agencies, where required by a valid legal directive, court order, or applicable Philippine statute. In all cases, dbx77 discloses only the minimum data required to satisfy the legal obligation.

7.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or a substantial portion of dbx77's business assets, personal data held by dbx77 may be transferred to the acquiring entity, subject to the acquiring entity assuming the same data protection obligations described in this Privacy Policy. Registered players will be notified of any such transfer via their registered contact information with reasonable advance notice.

8 Data Retention

dbx77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your account relationship with dbx77, plus five (5) years following account closure, to meet anti-money laundering record-keeping obligations under Philippine law.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act and BSP (Bangko Sentral ng Pilipinas) record-keeping requirements.
• KYC documentation: Retained for five (5) years following account closure or the last date of a covered transaction, whichever is later.
• Gaming activity data: Retained for three (3) years from the date of the session or transaction, used for dispute resolution, fraud detection, and responsible gaming monitoring.
• Customer support communications: Retained for two (2) years from the date of the final communication in a support thread.
• Marketing consent records: Retained for the duration of the consent and for three (3) years thereafter as proof of consent under data privacy regulations.

After the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

dbx77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Encryption: All data transmitted between your device and dbx77 servers is protected by 256-bit SSL/TLS encryption, preventing interception in transit.
• Password Security: Account passwords are stored as irreversible cryptographic hashes and are never stored or transmitted in plain text.
• Access Controls: Access to personal data within dbx77's systems is restricted to authorised personnel on a strict need-to-know basis, with access logs maintained and reviewed regularly.
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their accounts. Two-factor authentication is also applied to internal system access for dbx77 staff.
• Vulnerability Management: dbx77 conducts regular security assessments and monitors for known vulnerabilities in Platform software and third-party dependencies.
• Incident Response: dbx77 maintains a data breach response plan consistent with National Privacy Commission notification requirements. In the event of a personal data breach that is likely to result in risk to the rights and freedoms of data subjects, we will notify affected individuals and the NPC within the timeframes prescribed by the Data Privacy Act.

While dbx77 takes all reasonable steps to protect your data, no online system can guarantee absolute security. You contribute to your own account security by choosing a strong password, enabling 2FA, and not sharing your credentials with others.

10 Cross-Border Data Transfers

Some of the third-party service providers used by dbx77 — including cloud infrastructure providers, certain game studios, and fraud detection services — may process personal data in jurisdictions outside the Philippines. When personal data is transferred outside the Philippines, dbx77 ensures that appropriate safeguards are in place, consistent with Section 21 of the Data Privacy Act of 2012 and relevant NPC guidelines.

These safeguards include contractual data processing agreements that require recipient parties to apply data protection standards substantially equivalent to those applicable under Philippine law. dbx77 does not transfer personal data to jurisdictions with materially inadequate data protection regimes without implementing these contractual safeguards.

11 Your Data Privacy Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by dbx77:

11.1 Right to be Informed

You have the right to be informed about how your personal data is being collected, used, stored, and shared. This Privacy Policy fulfils that obligation. If you have questions not addressed here, you may contact our Data Protection Officer.

11.2 Right of Access

You have the right to request a copy of the personal data dbx77 holds about you, and to receive information about how that data is being processed. Access requests are processed within fifteen (15) business days of receipt.

11.3 Right to Rectification

You have the right to request the correction of inaccurate or incomplete personal data held about you. Basic account details can be updated through your account settings. For KYC-related data corrections, contact our support team with supporting documentation.

11.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to our legal retention obligations described in Section 8 — data we are required by law to retain cannot be erased on request prior to the end of the mandatory retention period.

11.5 Right to Data Portability

You have the right to receive a copy of the personal data you provided to dbx77 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible. Portability requests apply to data you have actively provided and are processed within thirty (30) business days.

11.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including direct marketing. Where you object to marketing communications, your preferences will be updated immediately and no further marketing will be sent to you.

11.7 Right to Restrict Processing

You have the right to request that dbx77 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being verified, or while an objection to processing based on legitimate interests is assessed.

11.8 Exercising Your Rights

To exercise any of the rights described above, contact dbx77's Data Protection Officer at [email protected] with a clear description of your request and sufficient identifying information to allow us to locate and verify your account. We do not charge a fee for standard data subject requests. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee.

12 Children's Privacy

The dbx77 Platform is strictly intended for individuals who are at least twenty-one (21) years of age, consistent with PAGCOR regulations governing online gaming in the Philippines. dbx77 does not knowingly collect personal data from individuals under 21 years of age.

If dbx77 discovers that personal data has been collected from an individual under 21 years of age, we will promptly close the associated account, delete the personal data, and handle any associated balance in accordance with applicable PAGCOR guidelines. Parents or guardians who believe that a minor has registered on the dbx77 Platform should contact our support team immediately.

13 Responsible Gaming & Personal Data

As part of our responsible gaming obligations under PAGCOR guidelines, dbx77 may process your gaming activity data — including deposit frequency, wager amounts, session duration, and loss patterns — for the purpose of identifying potential indicators of problem gambling behaviour.

Where our systems or support staff identify such indicators, dbx77 may:

• Proactively display responsible gaming information within your account interface;
• Contact you via SMS or account notification with responsible gaming resources;
• Apply cooling-off measures if required by PAGCOR guidelines;
• Retain records of your self-exclusion elections and deposit limit settings for enforcement purposes throughout the duration of those restrictions.

Responsible gaming processing is considered a legal obligation under PAGCOR regulations and a legitimate interest of dbx77 in protecting player welfare. This processing cannot be opted out of while your account is active. Responsible gaming data records are retained for the full period described in Section 8, including after account closure, to enforce ongoing self-exclusion elections.

14 Third-Party Links

The dbx77 Platform may contain references or links to third-party services such as payment providers (GCash, Maya) that operate their own independent websites and privacy policies. dbx77 is not responsible for the privacy practices or content of any third-party website or service. When you navigate to a third-party platform, you are subject to that platform's own terms and privacy policy.

dbx77 recommends that you review the privacy policy of any third-party service before providing personal data to them. The inclusion of a reference to a third-party service on the dbx77 Platform does not constitute an endorsement of that service's privacy practices.

15 Amendments to This Privacy Policy

dbx77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or NPC guidelines. When material changes are made, dbx77 will publish the updated Policy on the Platform with a revised effective date. Where practicable, registered players will be notified of significant changes via SMS to their registered mobile number or via a prominent Platform notification.

We encourage you to review this Privacy Policy periodically to remain informed of how your personal data is being handled. Your continued use of the dbx77 Platform following publication of an amended Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised Policy, you may close your account by contacting our support team.

16 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by dbx77, please contact:

Filing a Complaint with the National Privacy Commission

If you believe that dbx77 has processed your personal data in violation of your rights under the Philippine Data Privacy Act of 2012 and you have not received a satisfactory response from our Data Protection Officer, you have the right to lodge a complaint with the National Privacy Commission (NPC). Information on how to file a complaint with the NPC is available through official Philippine government channels.

This Privacy Policy was last reviewed and updated on 1 January 2026.