291Casino Privacy Policy –
How We Protect Your Data

1. Introduction

291Casino ("we," "us," "the Platform") values your privacy and is fully committed to protecting the personal information of every player who uses our services at 291casino.net. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have under Philippine law.

This policy applies to all users who visit, register on, or interact with 291Casino in any way — whether you're browsing our sports betting markets, spinning slots, or claiming a promotion. By creating an account and using our services, you confirm that you have read and accepted the terms of this Privacy Policy.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy. Together, these documents define the full scope of your relationship with 291Casino.

2. What Personal Data We Collect

291Casino collects only the personal data that is necessary to deliver a safe, fair, and functional gambling experience. The categories of data we collect include:

Account Registration Data:

• Full name, date of birth, and nationality
• Email address and mobile number
• Residential address in the Philippines
• Username and encrypted password

Identity Verification Data (KYC):

• Government-issued ID (PhilSys, passport, driver's licence, or UMID)
• Proof of address (utility bill or bank statement)
• Selfie or photo verification where required

Financial & Transaction Data:

• Payment method details (GCash number, Maya account, bank account number)
• Deposit and withdrawal history
• Betting and gaming activity records
• Bonus and promotion participation history

Technical & Usage Data:

• IP address, device type, and browser information
• Session logs and navigation patterns on the site
• Cookie identifiers and preference settings

Communication Data:

• Records of customer support interactions via live chat or email
• Survey responses and feedback you voluntarily submit

We do not collect sensitive personal data such as biometric identifiers, political opinions, or medical information, except where strictly required for identity verification or responsible gaming assessments.

3. How We Use Your Personal Data

Your data is used only for specific, legitimate purposes. Here is a clear breakdown of why we process different types of data:

• Account management: To create, maintain, and secure your 291Casino account.
• Identity verification: To comply with Know Your Customer (KYC) requirements and prevent underage gambling.
• Transaction processing: To handle deposits, withdrawals, and bonus credits accurately and promptly.
• Fraud prevention and security: To detect suspicious activity, prevent money laundering, and protect both players and the platform.
• Customer support: To respond to your queries, resolve disputes, and improve our service quality.
• Regulatory compliance: To fulfill our obligations under PAGCOR licensing conditions and Philippine AML regulations.
• Platform improvement: To analyse usage patterns and improve the 291Casino website and mobile experience.
• Marketing communications: Only with your explicit consent — to inform you about relevant promotions, new games, and special offers. You can opt out at any time.
• Responsible gaming: To monitor betting patterns and intervene proactively when problem gambling indicators are detected.

We will never use your data for any purpose beyond what is listed above without obtaining your prior consent.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations (IRR), 291Casino processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the contract between you and 291Casino (e.g., account creation, transaction processing).
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, and other applicable Philippine statutes.
• Legitimate interests: Processing for fraud detection, security monitoring, and platform improvement that does not override your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given clear and freely given consent that can be withdrawn at any time.

5. How We Share Your Data

291Casino does not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• Licensed payment processors: GCash, Maya, BDO, BPI, UnionBank, and other Philippine payment partners receive transaction-related data strictly to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who help us verify your identity securely and efficiently.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and Philippine law enforcement agencies when legally required to do so.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and analytics vendors who operate under strict data processing agreements with 291Casino.
• Group companies: Affiliated entities within the 291Casino group, solely for internal administrative purposes and consistent with this Privacy Policy.

All third parties who receive your data are contractually obligated to handle it with the same level of care as 291Casino and to use it only for the specific purpose it was shared.

6. How Long We Keep Your Data

291Casino retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by Philippine law. Specific retention periods include:

• Active account data: Retained for the full duration of your account and for at least 5 years after account closure, in line with PAGCOR and AML requirements.
• Transaction and betting records: Minimum of 5 years from the date of the transaction.
• Identity verification documents: Retained for at least 5 years after your last transaction, as required by AML regulations.
• Marketing consent records: Retained until you withdraw consent, plus an additional period to demonstrate compliance.
• Customer support communications: Up to 3 years from the date of the last interaction.
• Technical logs and cookies: Typically up to 13 months, depending on the specific cookie type and purpose.

After the applicable retention period expires, your data is securely deleted or anonymised so it can no longer be linked back to you as an individual.

7. Cookies and Tracking Technologies

291Casino uses cookies and similar tracking technologies to improve your experience on our platform. Here is a breakdown of the types we use:

• Essential cookies: Required for the site to function properly — session management, login authentication, and security checks. These cannot be disabled.
• Functional cookies: Remember your preferences like language settings, game history, and deposit method choices so you don't have to re-enter them every time.
• Analytics cookies: Help us understand how users navigate the site so we can improve performance and fix issues. Data is aggregated and anonymised.
• Marketing cookies: Used only with your consent to show relevant promotions and track the effectiveness of our campaigns. You can opt out via your account settings.

You can manage your cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of some features on 291Casino. A full cookie policy is available on request by contacting our support team.

8. How We Keep Your Data Secure

We take the security of your personal information seriously, and we've invested in several layers of protection to keep it safe:

• 256-bit SSL/TLS encryption on all data transmissions between your device and 291Casino servers.
• Encrypted storage for all sensitive data fields, including passwords (hashed and salted), ID documents, and payment method details.
• Two-factor authentication (2FA) available for all player accounts for an added layer of login security.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Role-based access controls to ensure that only authorised 291Casino staff can access personal data, and only to the extent required for their role.
• 24/7 real-time monitoring of our infrastructure for unusual activity, intrusion attempts, and data anomalies.
• Data breach response plan: In the unlikely event of a data breach, we will notify affected users and the National Privacy Commission (NPC) within 72 hours, in compliance with RA 10173.

While we employ industry-standard security measures, no system is completely immune to risk. We encourage you to use strong, unique passwords for your 291Casino account and to enable 2FA for maximum protection.

9. Your Privacy Rights Under Philippine Law

As a data subject under RA 10173, you have the following rights with respect to your personal data held by 291Casino. Expand each right below to learn more about how to exercise it:

To exercise any of these rights, email us at support@291casino.net with the subject line "Data Subject Request." We will respond within 30 calendar days. If you believe your rights have been violated, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

10. Children and Minors

291Casino does not knowingly collect personal data from individuals under the age of 21. Our platform is strictly for adults as defined by Philippine gaming regulations. If you believe that a minor has accessed or registered on 291Casino, please notify us immediately at support@291casino.net.

Upon confirmation, we will deactivate the account and delete all associated personal data without delay. We also employ age verification checks during the registration process to prevent underage access as a first line of defence.

11. Third-Party Links and Services

From time to time, 291Casino may reference or link to third-party resources such as payment partner portals or regulatory body websites. These sites operate under their own privacy policies, and 291Casino is not responsible for how they handle your personal data.

We recommend reviewing the privacy policy of any third-party site before providing your personal information. Our privacy obligations extend only to data processed directly on the 291Casino platform at 291casino.net.

12. Changes to This Privacy Policy

291Casino may revise this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform functionality. When we make material changes, we will notify all registered players via email and post an updated version of this policy on the website with a new "Last Updated" date.

For minor clarifications or non-substantive edits, the updated policy will be posted immediately without prior notice. We encourage you to review this page periodically. Continued use of 291Casino after any update constitutes your acceptance of the revised Privacy Policy.

13. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please reach out to our team:

• Email: support@291casino.net
• Subject line for data requests: "Data Subject Request – [Your Full Name]"
• Live Chat: Available 24/7 from your account dashboard
• Response time: We aim to respond to all privacy-related queries within 5 business days and data subject requests within 30 calendar days.

For matters that are not resolved to your satisfaction, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines.