Privacy Policy

This Privacy Policy is issued by 291bet ("291bet," "we," "us," or "our"), the operator of the online gaming platform accessible at https://291bet.app. 291bet acts as the data controller in respect of the personal data of players and visitors collected through the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our Data Privacy Officer through the following channel:

We aim to respond to all privacy-related inquiries within fifteen (15) business days of receipt. For complex requests, we may require up to thirty (30) days and will notify you of any extension within the initial fifteen-day period.

This Privacy Policy applies to all personal data collected by 291bet through the following channels:

• The 291bet website at https://291bet.app and all associated subdomains and pages.
• The 291bet mobile application, where available.
• Communications between you and 291bet via email, live chat, or any other support channel.
• Your participation in games, promotions, tournaments, and other activities offered on the 291bet platform.
• Any other interaction you have with 291bet in connection with the services we provide.

This Policy applies to all registered players, prospective players who have initiated but not completed registration, and visitors who browse the 291bet platform without registering. It applies regardless of whether you access 291bet from Metro Manila, Cebu, Davao, Quezon City, or any other location in the Philippines.

291bet collects personal data in two ways: information you provide directly to us, and information collected automatically when you use the platform. The following table summarizes the categories of personal data we collect and the context in which each category is gathered.

291bet does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where strictly required by applicable law or regulation (for example, facial recognition as part of enhanced KYC verification where mandated by PAGCOR).

291bet uses the personal data we collect for the following purposes. We process your data only where we have a valid legal basis to do so, as described in Section 5.

• Account creation and management: To register your 291bet account, verify your identity, and maintain your account in good standing.
• Service delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all other features of the 291bet platform.
• Identity verification (KYC): To verify that you meet the 21+ age requirement and to comply with PAGCOR regulations and Philippine anti-money laundering laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other illegal activities.
• Regulatory compliance: To fulfill our obligations under the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, PAGCOR licensing conditions, and other applicable Philippine laws.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion and deposit limits, and identify players who may need responsible gaming support.
• Marketing and promotions: To send you information about 291bet promotions, bonuses, and new features — but only where you have consented to receive such communications or where we have a legitimate interest in doing so.
• Platform improvement: To analyze usage patterns, conduct research, and improve the design, performance, and content of the 291bet platform.
• Legal proceedings: To establish, exercise, or defend legal claims involving 291bet.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 291bet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your 291bet account, process transactions, and deliver the gaming services you have signed up for.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for 291bet's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional analytics features. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital interests: In exceptional circumstances, processing may be necessary to protect your vital interests or those of another person — for example, in connection with responsible gaming interventions.

291bet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals. These providers receive only the data necessary to complete your transaction.
• Identity verification providers: Third-party KYC and age verification services engaged by 291bet to verify your identity and age in compliance with PAGCOR requirements.
• Game software providers: Licensed game studios and software providers whose games are available on the 291bet platform. These providers may receive anonymized or pseudonymized session data for game integrity purposes.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and technical support providers who process data on 291bet's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulation.
• Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by 291bet, subject to professional confidentiality obligations.

All third parties with whom 291bet shares personal data are required to handle that data in accordance with applicable Philippine data protection laws and 291bet's data protection standards. 291bet does not transfer personal data outside the Philippines except where necessary and subject to appropriate safeguards.

The 291bet platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze platform usage. The following types of cookies may be used:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the 291bet platform. For analytics and marketing cookies, you can also manage your preferences directly within your 291bet account settings.

291bet retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, to demonstrate compliance.
• Technical and usage data: Typically retained for thirteen (13) months in anonymized or aggregated form for analytics purposes.
• Responsible gaming records: Self-exclusion and limit records are retained for the duration of the restriction and for a minimum of five (5) years thereafter.

When personal data is no longer required, 291bet will securely delete or anonymize it in accordance with our data destruction procedures. Where deletion is not immediately possible due to technical constraints, the data will be isolated and protected until deletion can be completed.

291bet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 291bet servers.
• Encryption at rest for sensitive personal and financial data stored in 291bet databases.
• Multi-factor authentication options for player accounts and mandatory MFA for all 291bet staff with access to personal data.
• Role-based access controls ensuring that 291bet employees can only access personal data necessary for their specific job functions.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• 24/7 fraud monitoring systems that detect and flag suspicious account activity in real time.
• Secure data centers with physical access controls, redundant systems, and disaster recovery capabilities.

Despite these measures, no security system is completely impenetrable. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 291bet will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by 291bet. To exercise any of these rights, contact our Data Privacy Officer at [email protected].

291bet will respond to all data rights requests within fifteen (15) business days. We may need to verify your identity before processing your request to ensure we do not disclose your data to an unauthorized person.

The 291bet platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. 291bet does not knowingly collect personal data from individuals under the age of 21.

If 291bet becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data, and — where applicable — return any deposited funds to the payment source after completing required verification procedures.

If you are a parent or guardian and believe that your child has registered on the 291bet platform, please contact us immediately at [email protected] so that we can take prompt action.

291bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email to the address on file and by displaying a prominent notice on the 291bet platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how 291bet protects your personal data.

Your continued use of the 291bet platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with any changes, you should stop using the platform and may request account closure by contacting our support team.

If you have a concern about how 291bet has handled your personal data, we encourage you to contact our Data Privacy Officer in the first instance so that we can attempt to resolve the matter directly and promptly.

If you are not satisfied with our response, or if you believe that 291bet has violated your rights under the Data Privacy Act of 2012, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing data privacy law in the Philippines.

You may also raise concerns related to 291bet's gaming operations with the Philippine Amusement and Gaming Corporation (PAGCOR), which oversees the licensing and regulation of online gaming platforms operating in the Philippines.