ph291 Privacy Policy

1 Who We Are

ph291 ("ph291," "we," "us," or "our") operates the online gaming platform accessible at ph291.net, offering casino games, sports betting, bingo, slots, Joker Poker, and live dealer games to players in the Philippines. ph291 is the data controller responsible for the personal data of registered players and website visitors.

This Privacy Policy applies to all personal data collected through the ph291 website, mobile platform, customer support channels, and any other ph291 service. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

If you have any questions about this Privacy Policy or how ph291 handles your personal data, please contact our Data Privacy Officer at [email protected].

2 Personal Data We Collect

ph291 collects the following categories of personal data from players and website visitors:

Identity Data:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Government-issued identification number (e.g., Philippine passport, SSS, PhilHealth, driver's licence)
• Nationality and country of residence

Contact Data:

• Email address
• Mobile phone number
• Residential address (including barangay, city/municipality, province)

Financial Data:

• GCash or PayMaya account details (mobile number linked to e-wallet)
• Bank account details for BPI, BDO, or Metrobank transfers
• Transaction history, including deposits, withdrawals, and bonus activity

Technical Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps

Gaming Data:

• Game history, bet amounts, and outcomes
• Responsible gaming settings (deposit limits, self-exclusion status)
• Bonus and promotion participation records

Communications Data:

• Records of your correspondence with ph291 customer support
• Survey responses and feedback submitted to ph291

3 How We Collect Your Data

ph291 collects personal data through the following means:

• Direct collection: Data you provide when registering for a ph291 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the ph291 platform, including through cookies, web beacons, and server logs. See Section 7 for details on our cookie practices.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.

ph291 does not purchase personal data from data brokers or other third-party list providers.

4 How We Use Your Personal Data

ph291 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your ph291 player account, including processing deposits and withdrawals in Philippine Peso (₱ PHP).
• Identity verification: To verify your identity and age (21+) in compliance with applicable Philippine regulations and our KYC obligations.
• Service delivery: To provide access to ph291 games, including slots, live casino, bingo, Joker Poker, and sports betting on PBA, NBA, UFC, and other events.
• Customer support: To respond to your enquiries, complaints, and support requests via live chat and email.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the ph291 platform.
• Responsible gaming: To monitor gaming patterns and enforce responsible gaming tools, including deposit limits, loss limits, and self-exclusion requests.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have cons ented to receive such communications. You may opt out at any time by contacting [email protected].
• Legal compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, Anti-Money Laundering Act, and any directives from relevant regulatory authorities.
• Platform improvement: To analyse usage patterns and improve the ph291 platform, user experience, and game offerings.

ph291 will not use your personal data for any purpose that is incompatible with the purposes described in this Privacy Policy without first obtaining your consent or establishing another lawful basis for processing.

5 Legal Basis for Processing

ph291 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173):

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your ph291 account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC, AML, and responsible gaming regulations.
• Legitimate interests: Processing necessary for ph291's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

ph291 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to process deposits and withdrawals to and from your ph291 account.
• KYC and identity verification providers: Third-party services that assist ph291 in verifying player identities and ages in compliance with Philippine regulatory requirements.
• AML and fraud screening providers: Compliance technology partners that help ph291 detect and prevent money laundering and fraudulent activity.
• IT and hosting providers: Cloud infrastructure and technology service providers that host and maintain the ph291 platform under strict confidentiality obligations.
• Regulatory and law enforcement authorities: Philippine government agencies, including the relevant gaming regulatory authority and the Anti-Money Laundering Council (AMLC), where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants engaged by ph291, subject to professional confidentiality obligations.

All third parties with whom ph291 shares personal data are required to process that data in accordance with applicable Philippine data protection law and ph291's data processing standards. ph291 does not permit third-party service providers to use your personal data for their own marketing or commercial purposes.

7 Cookies & Tracking Technologies

ph291 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit ph291.net. ph291 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the ph291 platform to function. These include session authentication cookies that keep you logged in to your ph291 account. These cookies cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming configurations, to personalise your ph291 experience.
• Analytics cookies: Collect anonymised data about how players use the ph291 platform, helping us identify areas for improvement. This data does not identify you personally.
• Security cookies: Help ph291 detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph291 platform. ph291 does not use third-party advertising or cross-site tracking cookies.

8 Data Retention

ph291 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your ph291 account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and related regulations.
• Gaming history: Retained for a minimum of three (3) years to support dispute resolution and regulatory compliance.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of consent.

When personal data is no longer required, ph291 will securely delete or anonymise it in accordance with our data destruction procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph291:

• Right to be informed: The right to know what personal data ph291 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data ph291 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You can update most account details directly in your ph291 account settings.
• Right to erasure: The right to request deletion of your personal data, subject to ph291's legal retention obligations. Note that ph291 may be required to retain certain data for regulatory compliance purposes even after account closure.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph291 has violated your data privacy rights.

To exercise any of these rights, please contact ph291's Data Privacy Officer at [email protected]. ph291 will respond to all data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

ph291 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10 Data Security

ph291 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph291's servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorised ph291 personnel can access player data.
• Regular security audits and penetration testing of the ph291 platform.
• Multi-factor authentication for ph291 staff accessing internal systems.
• Continuous monitoring for suspicious activity and potential data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph291 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

While ph291 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph291 login credentials and for ensuring that your device is adequately secured.

11 Children's Privacy

ph291 is strictly an adult gaming platform. We do not knowingly collect personal data from individuals under the age of 21 years. The minimum age to register and play on ph291 is 21, in accordance with Philippine law governing online gambling.

If ph291 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data, and — where applicable — return any deposits made. If you believe that a minor has registered on ph291, please contact us immediately at [email protected].

12 Changes to This Privacy Policy

ph291 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When material changes are made, ph291 will notify registered players via email and display a prominent notice on the ph291 platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the ph291 platform following the effective date of any update constitutes your acknowledgement of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how ph291 protects your personal data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ph291's handling of your personal data, please contact our Data Privacy Officer:

• Email: [email protected]
• Live Chat: Available 24/7 inside your ph291 account dashboard

ph291's support team is available around the clock and is familiar with the needs of Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and all regions of the Philippines. We are committed to handling all privacy enquiries promptly, professionally, and in full compliance with the Philippine Data Privacy Act of 2012.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with ph291's response to your privacy concern.

This Privacy Policy was last reviewed and updated in January 2026. ph291 reserves the right to amend this policy at any time. Players are encouraged to review this page periodically.