ph291 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ph291 ("ph291," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information obtained from users ("you," "your," or "User") of our online casino and sports betting services accessible through the website located at ph291.cam (the "Website") and related mobile applications and services (collectively, the "Services").

ph291 is committed to protecting your privacy and safeguarding your personal information in accordance with applicable data protection laws and regulations, including the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and other relevant international data protection standards. This Policy applies to all personal information collected through the Services, regardless of how it is collected or stored.

By accessing, registering for, or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, disclosure, and processing of your personal information as described herein. If you do not agree with this Policy, you must immediately discontinue use of the Services and refrain from providing any personal information to ph291.

2. Information We Collect

2.1 Personal Information Provided Directly by You

When you register for an account, use our Services, or communicate with us, we collect personal information that you voluntarily provide, including but not limited to:

• Account Registration Information: Full legal name, date of birth, gender, email address, mobile phone number, residential address, nationality, and username;
• Identity Verification Information: Government-issued identification documents (passport, driver's license, national ID), proof of address documents (utility bills, bank statements), and biometric data (photographs, selfies) for KYC compliance;
• Financial Information: Payment method details including GCash account information, PayMaya account information, bank account numbers, credit/debit card details (processed through secure third-party payment processors), cryptocurrency wallet addresses, and transaction history;
• Communications: Content of messages, emails, live chat transcripts, support tickets, and other communications between you and ph291 customer support or other representatives;
• Marketing Preferences: Communication preferences, marketing consent, and promotional opt-in/opt-out selections.

2.2 Information Collected Automatically

When you access or use the Services, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, UDID, advertising ID), and mobile network information;
• Connection Information: IP address, ISP information, geographic location (country, city, region derived from IP address), connection speed, and network type;
• Usage Information: Pages viewed, games played, bet history, deposit and withdrawal activity, session duration, click-stream data, referring/exit pages, timestamps, and navigation patterns within the Services;
• Cookie Data: Information stored in cookies and similar technologies placed on your device to remember preferences, authenticate sessions, and analyze usage patterns.

2.3 Information from Third-Party Sources

We may receive personal information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment verification, and fraud prevention data from GCash, PayMaya, banks, and cryptocurrency payment providers;
• Identity Verification Services: Enhanced due diligence information, sanction screening results, politically exposed person (PEP) checks, and adverse media screening from third-party KYC/AML service providers;
• Fraud Prevention Services: Device fingerprinting, behavioral analysis, and fraud risk scores from specialized security vendors;
• Affiliates and Marketing Partners: Referral information, attribution data, and promotional campaign performance metrics;
• Public Records: Information available from public databases, social media platforms, and other publicly accessible sources used for verification and fraud prevention purposes.

3. How We Use Your Information

3.1 Primary Purposes

ph291 uses your personal information for the following primary purposes:

• Account Management: Creating and maintaining your account, verifying your identity, authenticating login sessions, and providing access to the Services;
• Transaction Processing: Processing deposits, withdrawals, bets, winnings, bonuses, and other financial transactions; maintaining accurate account balances; and generating transaction records;
• Service Delivery: Providing access to casino games, sports betting markets, live dealer tables, and all other features of the Services; delivering promotional offers and bonuses; and enabling participation in tournaments and competitions;
• Customer Support: Responding to inquiries, resolving disputes, troubleshooting technical issues, and providing assistance through live chat, email, and other support channels;
• Legal Compliance: Complying with applicable laws, regulations, and licensing requirements; fulfilling KYC/AML obligations; responding to legal process and law enforcement requests; and protecting against fraud, money laundering, and other illegal activities;
• Security and Fraud Prevention: Monitoring for suspicious activity, detecting and preventing fraud and collusion, enforcing Terms and Conditions, investigating rule violations, and protecting the integrity of games and the platform;
• Responsible Gaming: Implementing responsible gaming tools including deposit limits, self-exclusion, and reality checks; identifying and intervening with potentially problematic gambling behavior; and complying with player protection regulations.

3.2 Secondary Purposes

With your consent where required by law, we may also use your personal information for:

• Marketing and Communications: Sending promotional emails, SMS messages, push notifications, and other marketing communications about new games, special offers, bonuses, and events that may interest you;
• Personalization: Customizing your experience on the Services by recommending games, tailoring promotional offers, and displaying personalized content based on your preferences and activity;
• Analytics and Research: Analyzing usage patterns, player behavior, game performance, and business metrics to improve the Services, develop new features, and enhance user experience;
• Business Operations: Managing business processes, conducting internal audits, preparing financial reports, and facilitating corporate transactions such as mergers, acquisitions, or asset sales.

4. Legal Basis for Processing

ph291 processes your personal information on the following legal bases, as applicable under data protection laws:

• Contractual Necessity: Processing necessary to perform our contract with you (providing the Services in accordance with our Terms and Conditions);
• Legal Obligations: Processing required to comply with applicable laws, regulations, court orders, and regulatory requirements (KYC/AML compliance, age verification, tax reporting, licensing obligations);
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, network security, business analytics, direct marketing (where permitted), and improving the Services, provided such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing based on your explicit consent, which you may withdraw at any time by contacting customer support or adjusting your account settings, though withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5. How We Share Your Information

5.1 Service Providers and Business Partners

We share your personal information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: GCash, PayMaya, banks, cryptocurrency payment gateways, and other payment service providers who process deposits and withdrawals;
• Identity Verification Services: KYC/AML compliance providers who verify identity documents, conduct background checks, and screen against sanctions lists;
• Game Providers: Software suppliers who provide casino games, live dealer services, sports betting platforms, and related gaming content;
• Hosting and Infrastructure: Cloud service providers, data centers, content delivery networks (CDNs), and IT infrastructure vendors who host and maintain our systems;
• Customer Support: Third-party customer service platforms and live chat providers who assist with player inquiries and support tickets;
• Marketing and Analytics: Email service providers, SMS gateways, analytics platforms, and marketing automation tools (subject to your marketing consent);
• Security and Fraud Prevention: Cybersecurity firms, fraud detection services, and risk management providers who help protect the platform and players from malicious activity.

All service providers are contractually obligated to protect your personal information, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Disclosure

We may disclose your personal information to government authorities, law enforcement agencies, regulators, and courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests;
• Enforce our Terms and Conditions and other agreements;
• Protect the rights, property, or safety of ph291, our users, or the public;
• Investigate and prevent fraud, money laundering, underage gambling, or other illegal activities;
• Respond to claims that content violates third-party rights;
• Comply with responsible gaming regulations and report self-excluded players to relevant authorities.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other corporate transaction involving ph291, your personal information may be transferred to the acquiring or successor entity as part of the transaction. You will be notified via email or prominent notice on the Website of any change in ownership or control of your personal information, along with choices you may have regarding your information.

5.4 With Your Consent

We may share your personal information with third parties for purposes not described in this Policy when we have obtained your explicit consent to do so. You may withdraw such consent at any time by contacting us.

6. Data Security Measures

ph291 implements comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

• Encryption: All sensitive data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption. Passwords are hashed using strong cryptographic algorithms and never stored in plain text;
• Access Controls: Personal information is accessible only to authorized personnel who require access to perform their job functions. Access is granted on a need-to-know basis and subject to strict authentication and authorization protocols;
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and other security infrastructure protect our networks and systems from external threats;
• Data Segregation: Player funds are held in segregated accounts separate from operational funds. Sensitive personal information is stored separately from less sensitive data;
• Regular Audits: Security practices, systems, and controls undergo regular internal and external security audits and penetration testing;
• Employee Training: All employees with access to personal information receive mandatory data protection and security training;
• Incident Response: We maintain incident response procedures to quickly detect, contain, and remediate security incidents, with notification protocols for affected individuals when required by law.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to using commercially reasonable efforts to protect your personal information.

7. Data Retention

ph291 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of information and purpose:

• Account Information: Retained for the duration of your active account plus seven (7) years following account closure to comply with financial and regulatory record-keeping requirements;
• Transaction Records: Retained for a minimum of seven (7) years from the date of transaction to comply with financial regulations and tax laws;
• Identity Verification Documents: Retained for seven (7) years following account closure or the end of the business relationship to comply with AML/KYC regulations;
• Communications: Customer support communications retained for three (3) years for quality assurance and dispute resolution purposes;
• Marketing Data: Retained until you opt o ut of marketing communications or close your account;
• Usage and Analytics Data: Aggregated and anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes;
• Self-Exclusion Records: Retained permanently to prevent circumvention of self-exclusion measures and comply with responsible gaming regulations.

When personal information is no longer needed, it will be securely deleted or anonymized so that it cannot be associated with you. You may request deletion of your personal information subject to our legal obligations to retain certain records.

8. Your Rights and Choices

8.1 Access and Correction

You have the right to access the personal information we hold about you and request correction of any inaccurate or incomplete information. You may view and update certain account information through your account settings. For additional access requests or corrections, contact our customer support team.

8.2 Data Portability

You have the right to receive a copy of certain personal information in a structured, commonly used, and machine-readable format and to transmit that information to another service provider where technically feasible.

8.3 Deletion and Restriction

You may request deletion of your personal information or restriction of certain processing activities, subject to our legal obligations to retain records for regulatory compliance, dispute resolution, and fraud prevention purposes. We will respond to deletion requests within thirty (30) days.

8.4 Marketing Opt-Out

You may opt out of receiving promotional communications at any time by clicking the unsubscribe link in emails, adjusting notification preferences in your account settings, or contacting customer support. Please note that even if you opt out of marketing communications, we will continue to send transactional and administrative messages related to your account and use of the Services.

8.5 Cookie Management

You can control cookies through your browser settings to refuse all cookies, accept only certain cookies, or receive notifications when cookies are set. However, disabling cookies may affect functionality and your ability to access certain features of the Services.

9. International Data Transfers

Your personal information may be transferred to, stored, and processed in jurisdictions outside the Philippines, including countries that may have different data protection laws than your country of residence. When we transfer personal information internationally, we implement appropriate safeguards including standard contractual clauses, adequacy decisions, and other legally recognized transfer mechanisms to ensure your information receives adequate protection.

10. Children's Privacy

The Services are strictly intended for individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal information from individuals under the legal gambling age. If we become aware that we have inadvertently collected personal information from a person under 21 years of age, we will delete such information immediately and close any associated account. If you believe we have collected information from a minor, please contact us immediately.

11. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services not operated by ph291. This Privacy Policy does not apply to third-party websites or services. We are not responsible for the privacy practices or content of third parties. We encourage you to review the privacy policies of any third-party sites or services before providing personal information.

12. Changes to This Privacy Policy

ph291 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting a prominent notice on the Website, sending an email to your registered address, or through other appropriate communication channels. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Services following the posting of changes constitutes acceptance of those changes.

13. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us through the following channels:

• 24/7 Live Chat: Available through the Website for immediate assistance;
• Customer Support: Reach our dedicated support team anytime;
• Data Protection Inquiries: For specific privacy-related questions, requests to exercise your rights, or complaints about how we handle your personal information.

We will investigate all complaints and respond within thirty (30) days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines or other relevant data protection authority in your jurisdiction.