Your personal data belongs to you. This Privacy Policy explains exactly what information 291ph collects, why we collect it, how we use it, and the rights you hold under Philippine law — written in plain language, not legalese.
Fully compliant with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
291ph does not sell, rent, or trade your personal data to third-party marketers under any circumstances.
You have the right to access, correct, delete, and port your data. Exercise your rights anytime by contacting our Data Protection Officer.
All data in transit is protected by TLS encryption. Sensitive data at rest is stored using industry-standard encryption protocols.
291ph ("291ph," "we," "us," or "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the 291ph online gaming platform at 291ph.app and all associated services (collectively, the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information, and explains the rights available to you under applicable Philippine law.
This Policy applies to all users of the Platform, including registered players, visitors who browse without registering, and individuals who contact our support team. It should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
By accessing the Platform or creating a 291ph account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.
This Policy is written in English. In the event of any inconsistency between this English version and any translation, the English version shall prevail.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, 291ph acts as the Personal Information Controller (PIC) in respect of the personal data it collects from users of the Platform.
291ph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time using the contact details provided in Section 14 of this Policy.
Where 291ph engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and game software suppliers — those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with 291ph's instructions and applicable law.
291ph collects the following categories of personal data, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Registration & KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Registration & account updates |
| Financial Data | GCash number, Maya account, bank account name and number, transaction history | Deposits, withdrawals & KYC |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, bonus usage | During gameplay |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Automatically on Platform access |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact support |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred contact channel | Registration & account settings |
291ph does not intentionally collect sensitive personal information (as defined under the DPA) unless strictly required for regulatory compliance — for example, where a government-issued ID contains information about a player's civil status or physical characteristics. Where such data is incidentally collected, it is handled with the heightened protections required by law.
291ph collects personal data through the following means:
291ph processes your personal data only where it has a lawful basis to do so under the DPA. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Identity verification (KYC) and age verification | Legal obligation (PAGCOR regulations, DPA, AML laws) |
| Processing deposits and withdrawals | Performance of contract |
| Fraud prevention and anti-money laundering compliance | Legal obligation; legitimate interests |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Platform security and technical operations | Legitimate interests |
| Marketing communications (where opted in) | Consent |
| Analytics and Platform improvement | Legitimate interests |
| Compliance with court orders or regulatory requests | Legal obligation |
Where 291ph relies on consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, update your preferences in your account settings or contact our support team.
291ph does not sell, rent, or trade your personal data to third-party marketers. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
In all cases, 291ph requires third parties to respect the security of your personal data and to treat it in accordance with applicable Philippine data protection law.
291ph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
When personal data is no longer required, 291ph will securely delete or anonymize it in accordance with industry best practices and applicable law.
291ph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
While 291ph takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying 291ph immediately if you suspect unauthorized access to your account.
291ph uses cookies and similar tracking technologies to operate and improve the Platform, personalize your experience, and analyze usage patterns. The following types of cookies are used:
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. 291ph does not use third-party advertising or retargeting cookies.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 291ph. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14. 291ph will respond to all verified requests within fifteen (15) business days.
Please note that certain rights are subject to limitations under the DPA — for example, 291ph may be unable to delete data that it is legally required to retain for regulatory compliance purposes.
The 291ph Platform is strictly restricted to individuals aged 21 years and above, as required under Philippine law and PAGCOR regulations. 291ph does not knowingly collect personal data from individuals under the age of 21.
If 291ph becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact our support team immediately.
291ph employs age verification as part of its KYC process and reserves the right to request proof of age from any player at any time. Providing false information about your age constitutes a material breach of our Terms & Conditions and may result in account termination and forfeiture of funds.
Access to 291ph is strictly limited to players aged 21 and above. Underage gambling is illegal under Philippine law and will result in immediate account closure and data deletion.
291ph's primary data processing infrastructure is located within the Philippines. However, certain third-party service providers — including game software suppliers and cloud infrastructure providers — may process data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, 291ph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the DPA. These safeguards may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to jurisdictions recognized as providing adequate data protection.
291ph will not transfer your personal data to a foreign jurisdiction unless it has a lawful basis to do so and has implemented appropriate safeguards as required by the DPA and its implementing rules.
291ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever material changes are made.
Where changes are material, 291ph will notify registered players via email to their registered address or via a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
We encourage you to review this Policy periodically to stay informed about how 291ph protects your personal data.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact 291ph's Data Protection Officer:
If you are not satisfied with 291ph's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
Six commitments we make to every player on the Platform.
Every data processing activity at 291ph is mapped to a lawful basis under Republic Act No. 10173. We don't process your data unless we have a clear legal reason to do so.
Your data is encrypted in transit using TLS and at rest using industry-standard algorithms. From your GCash number to your game history — it's all protected.
291ph has never sold player data to advertisers or data brokers, and we never will. Your information is used only to operate and improve the Platform for you.
Access, correct, delete, or export your data anytime. Our DPO responds within 15 business days — no runaround, no bureaucratic delays.
Marketing emails and SMS? Opt out in one click from your account settings. We respect your inbox as much as we respect your privacy.
If you're ever unsatisfied with how we handle your data, you can escalate directly to the National Privacy Commission. We support your right to do so.
Play with Confidence
Now that you know how 291ph handles your personal data, you can play with full confidence. Register today and enjoy slots, bingo, table games, and more — all in Philippine Peso.
Must be 21 or older to register and play. | Gambling is addictive. Know when to stop.