291ph Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, use, storage, and disclosure of personal information by 291ph ("we," "us," "our," or the "Company") in connection with your use of our online casino and gaming platform (the "Service"). This policy applies to all users who access or register on the 291ph website and mobile applications.

291ph operates as a licensed online gaming platform under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. By using the Service, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement between you and 291ph. If you do not agree with any part of this Privacy Policy, you must discontinue use of the Service immediately.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account with 291ph, we collect personal information that you voluntarily provide to us, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, government-issued identification documents (e.g., passport, driver's license, national ID), and photographs for identity verification purposes
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Financial Information: Payment method details, bank account information, e-wallet account details (GCash, Maya), transaction history, deposit and withdrawal records
• Account Credentials: Username, password (stored in encrypted form), and security questions
• Verification Documents: Proof of identity, proof of address (utility bills, bank statements), and proof of payment method ownership

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, games played, betting history, session duration, timestamps, referral sources, click-stream data
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with geographic restrictions
• Communication Records: Records of your interactions with our customer support team, including chat transcripts, emails, and phone call recordings

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions for transaction verification and fraud prevention
• Identity verification service providers who confirm your identity and age
• Game providers who supply usage data and game results
• Marketing partners who provide analytics and advertising services
• Public databases and credit bureaus for anti-fraud and compliance purposes

3. How We Use Your Personal Data

3.1 Primary Purposes

291ph collects and processes your personal information for the following primary purposes:

• Account Management: To create, maintain, and manage your 291ph account, including authentication and access control
• Service Provision: To provide you with access to our games, process your bets, manage your account balance, and facilitate deposits and withdrawals
• Identity Verification: To verify your identity and age in compliance with PAGCOR regulations and Philippine gambling laws requiring players to be at least 21 years of age
• Payment Processing: To process financial transactions, including deposits, withdrawals, winnings, and bonuses
• Customer Support: To respond to your inquiries, resolve disputes, troubleshoot technical issues, and provide customer assistance
• Security and Fraud Prevention: To detect, prevent, and investigate fraudulent activity, money laundering, underage gambling, multiple account creation, and other violations of our Terms and Conditions

3.2 Compliance and Legal Obligations

We process your personal data to comply with legal and regulatory requirements, including:

• Compliance with PAGCOR licensing conditions and Philippine gaming regulations
• Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) obligations under the Anti-Money Laundering Act (AMLA)
• Tax reporting and withholding requirements under Philippine tax laws
• Responding to lawful requests from law enforcement, regulatory authorities, and courts
• Maintaining records as required by applicable laws and regulations

3.3 Marketing and Communications

With your consent, we use your contact information to send you:

• Promotional offers, bonuses, and special deals tailored to your gaming preferences
• Information about new games, features, and platform updates
• Newsletters, surveys, and market research invitations
• Responsible gaming reminders and account activity notifications

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings. Opting out of marketing communications will not affect transactional or service-related messages.

3.4 Analytics and Improvement

We use aggregated and anonymized data to:

• Analyze usage patterns and player behavior to improve the Service
• Develop new features, games, and functionalities
• Conduct market research and business intelligence
• Measure the effectiveness of marketing campaigns and promotions
• Optimize website and mobile app performance

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share your personal information with trusted third-party service providers who perform functions on our behalf. These service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize. Third-party service providers include:

• Payment Processors: GCash, Maya, banks, and other payment gateways that process deposits and withdrawals
• Identity Verification Services: Providers that verify your identity, age, and residential address
• Game Providers: Third-party game developers and suppliers who operate the casino games on our platform
• Cloud Hosting Services: Infrastructure and data storage providers
• Customer Support Tools: Live chat, ticketing systems, and CRM platforms
• Marketing and Analytics Platforms: Email service providers, advertising networks, and analytics tools

4.2 Regulatory and Legal Disclosure

We may disclose your personal information to regulatory authorities, law enforcement agencies, and courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with PAGCOR reporting and licensing requirements
• Respond to subpoenas, court orders, or legal processes
• Investigate or prevent fraud, money laundering, or illegal activity
• Protect the rights, property, or safety of 291ph, our users, or the public
• Enforce our Terms and Conditions and other agreements

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring or successor entity. We will notify you of any such change in ownership or control of your personal data.

4.4 No Sale of Personal Data

291ph does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We only share data as described in this Privacy Policy.

5. Data Security Measures

5.1 Technical Security

291ph implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data stored on our servers is encrypted at rest.
• Firewalls and Intrusion Detection: Network firewalls and intrusion detection systems monitor and block unauthorized access attempts
• Access Controls: Role-based access controls ensure that only authorized personnel can access personal data on a need-to-know basis
• Secure Data Centers: Personal data is stored in secure, ISO-certified data centers with physical security controls
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration testing

5.2 Account Security

You play an important role in protecting your account. To maintain account security:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication (2FA) if available
• Log out of your account when using shared or public devices
• Monitor your account for suspicious activity and report it immediately
• Keep your contact information up to date so we can reach you about security matters

5.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, 291ph will notify affected users and the National Privacy Commission as required by the Data Privacy Act of 2012. We will take immediate steps to mitigate the impact of any breach and prevent future incidents.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and provide information to website owners. 291ph uses cookies and similar tracking technologies to enhance your experience and improve our Service.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These cookies enable basic functions like page navigation, account login, and access to secure areas. The website cannot function properly without these cookies.
• Performance Cookies: Collect anonymous information about how visitors use the website, including which pages are visited most often and any error messages. This helps us improve website performance.
• Functionality Cookies: Remember your preferences and choices (language, region, username) to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness. These cookies may be set by third-party advertising networks.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. However, disabling essential cookies may affect your ability to use certain features of the Service.

For more information on managing cookies, visit your browser's help section or visit www.allaboutcookies.org.

6.4 Third-Party Analytics

We use third-party analytics services such as Google Analytics to collect and analyze usage data. These services use cookies to track website traffic, user behavior, and demographic information. The data collected is used in aggregate form to improve the Service. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Your Privacy Rights Under Philippine Law

7.1 Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to be Informed: You have the right to be informed about the collection, use, and disclosure of your personal data
• Right to Access: You have the right to request access to your personal data and obtain copies of the information we hold about you
• Right to Rectification: You have the right to correct inaccurate or incomplete personal data
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data, subject to legal retention obligations
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format
• Right to File a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated

7.2 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at the contact details provided in Section 10. We will respond to your request within thirty (30) days. In some cases, we may need to verify your identity before processing your request.

7.3 Limitations on Rights

Your privacy rights are not absolute and may be limited by legal and regulatory obligations. For example, we may be required to retain certain data for tax, accounting, anti-money laundering, or regulatory purposes even after you request deletion.

8. Data Retention

8.1 Retention Periods

291ph retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. General retention periods include:

• Account Information: Retained for the duration of your account plus seven (7) years after account closure for regulatory and legal compliance
• Transaction Records: Retained for ten (10) years as required by anti-money laundering regulations
• Identity Verification Documents: Retained for seven (7) years after account closure
• Marketing Communications: Retained until you withdraw consent or two (2) years after your last interaction
• Website Usage Data: Retained for two (2) years for analytics and security purposes

8.2 Secure Deletion

Once the retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical and analytical purposes.

9. Changes to This Privacy Policy

291ph reserves the right to modify, update, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make changes, we will update the "Last Updated" date at the top of this page.

If we make material changes that significantly affect how we collect, use, or disclose your personal information, we will notify you by email or through a prominent notice on our website before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the Service after changes to this Privacy Policy constitutes your acceptance of the revised policy.

10. Contact Information

10.1 Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on our website
• Phone: Contact details available in your account dashboard

10.2 National Privacy Commission

If you believe that 291ph has violated your data privacy rights under the Data Privacy Act of 2012, you may file a complaint with the National Privacy Commission:

• Website: www.privacy.gov.ph
• Email: [email protected]
• Address: 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila, Philippines

10.3 Commitment to Privacy

291ph is committed to protecting your privacy and handling your personal data with care, transparency, and integrity. We continuously review and improve our data protection practices to ensure compliance with Philippine law and international best practices. Your trust is important to us, and we take our responsibility to safeguard your information seriously.