291jl Casino Privacy Policy

1. Introduction and Scope

1.1 Purpose of This Policy

This Privacy Policy sets forth the manner in which 291jl Casino ("291jl," "we," "us," "our") collects, uses, maintains, discloses, and protects information obtained from users ("you," "your," "Player") of the 291jl gaming platform (the "Platform"). This policy applies to the Platform and all products and services offered by 291jl. We are committed to transparency in our data handling practices and compliance with all applicable Philippine data protection laws.

1.2 Legal Framework

291jl operates under the jurisdiction of the Republic of the Philippines and is bound by the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all circulars and issuances of the National Privacy Commission (NPC). As a PAGCOR-licensed gaming operator, we are also subject to PAGCOR's data protection and anti-money laundering regulations. This Privacy Policy is designed to comply with these legal requirements while ensuring best practices in data security and user privacy.

1.3 Consent and Acceptance

By registering an account on 291jl, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not use our services. Continued use of the Platform after any modifications to this Privacy Policy constitutes acceptance of those changes.

1.4 Data Controller Information

291jl Casino acts as the data controller for all personal information collected through the Platform. We are responsible for determining the purposes and means of processing your personal data. For inquiries regarding your personal information or this Privacy Policy, you may contact our Data Protection Officer via the contact details provided at the end of this document.

2. Information We Collect

2.1 Personal Identification Information

When you register an account on 291jl, we collect personal identification information necessary to verify your identity, comply with know-your-customer (KYC) and anti-money laundering (AML) regulations, and provide our services. This information includes:

• Full legal name as it appears on your government-issued identification
• Date of birth and age verification
• Gender
• Nationality and citizenship status
• Residential address (street, city, province, postal code)
• Government-issued identification documents (passport, driver's license, UMID, or other valid Philippine ID)
• Selfie photograph for identity verification (when required)
• Proof of address documentation (utility bill, bank statement, or similar)

2.2 Contact Information

We collect contact information to communicate with you regarding your account, transactions, promotions, and customer support inquiries. Contact information collected includes:

• Primary email address
• Mobile phone number (Philippine mobile number required)
• Alternative contact information (if provided voluntarily)
• Communication preferences (email, SMS, push notifications)

2.3 Financial and Payment Information

To process deposits, withdrawals, and manage your account balance, we collect payment and financial information including:

• Payment method details (GCash account, PayMaya account, bank account information)
• Transaction history (deposits, withdrawals, wagers, winnings)
• Payment instrument verification information
• Source of funds documentation (for large transactions or as required by AML regulations)

Important: 291jl does not store full credit card numbers, CVV codes, or complete bank account credentials. Payment processing is handled by certified third-party payment processors who maintain PCI DSS compliance. We retain only transaction identifiers and summary information necessary for account management and regulatory compliance.

2.4 Gaming and Behavioral Data

To provide personalized gaming experiences, detect fraudulent activity, and improve our services, we collect information about your use of the Platform including:

• Gameplay history (games played, bet amounts, win/loss records, session duration)
• Bonus and promotion participation and wagering progress
• Platform navigation patterns and feature usage
• Responsible gaming tool usage (deposit limits, self-exclusion, session timers)
• Customer support interactions and chat transcripts
• Marketing communication responses and preferences

2.5 Technical and Device Information

When you access the 291jl Platform, we automatically collect certain technical information to ensure platform security, optimize performance, and provide technical support:

• IP address and approximate geographic location
• Device type, model, and operating system (iOS, Android, Windows, etc.)
• Browser type and version
• Screen resolution and device language settings
• Mobile network carrier and connection type (4G, 5G, WiFi)
• Cookies, local storage, and similar tracking technologies
• Access times, session duration, and page views
• Referral source (how you arrived at our Platform)

2.6 Information from Third Parties

We may receive information about you from third-party sources including payment processors, identity verification services, fraud prevention agencies, and credit reference bureaus. This information is used to verify your identity, prevent fraud, and comply with legal and regulatory obligations. Third-party data is handled in accordance with the same privacy standards applied to directly collected information.

2.7 Voluntary Information

You may choose to provide additional information voluntarily, such as feedback through surveys, participation in promotions, or communication via customer support channels. Provision of such information is entirely optional, and you may choose what to share. However, withholding certain mandatory information may limit our ability to provide specific services or features.

3. How We Use Your Information

3.1 Account Management and Service Provision

We use your personal information primarily to create and manage your gaming account, process transactions, facilitate gameplay, and provide customer support. This includes:

• Creating and maintaining your 291jl account
• Verifying your identity and age (21+ requirement)
• Processing deposits, withdrawals, and bonus credits
• Facilitating gameplay across all gaming categories (slots, live casino, sports betting, etc.)
• Tracking wagering requirements and bonus eligibility
• Responding to customer support inquiries and resolving disputes
• Providing personalized game recommendations and user experience optimization

3.2 Legal and Regulatory Compliance

As a PAGCOR-licensed operator, 291jl is subject to extensive regulatory requirements that mandate collection and use of personal data for compliance purposes:

• Know Your Customer (KYC) verification to prevent underage gambling and identity fraud
• Anti-Money Laundering (AML) monitoring and suspicious transaction reporting
• Compliance with tax reporting obligations under Philippine law
• Cooperation with law enforcement and regulatory investigations
• Maintaining records for the mandatory five-year retention period required by PAGCOR
• Generating reports for PAGCOR, NPC, and other government agencies as legally required

3.3 Fraud Prevention and Security

Protecting the integrity of our Platform and safeguarding player accounts requires continuous monitoring and analysis of user activity. We use your information to:

• Detect and prevent fraudulent transactions, account takeovers, and payment fraud
• Identify and block multi-accounting, bonus abuse, and collusion
• Monitor for automated bot activity and gameplay manipulation
• Enforce Terms and Conditions and take action against policy violations
• Conduct risk assessments and security audits
• Implement responsible gaming safeguards and detect problem gambling patterns

3.4 Marketing and Communications

With your consent, we use your contact information to send promotional materials, bonus offers, and updates about 291jl services. Marketing communications may include:

• Email newsletters featuring new games, exclusive promotions, and platform updates
• SMS notifications for time-sensitive bonus offers and account alerts
• Push notifications for mobile app users (if installed)
• Personalized offers based on your gaming preferences and activity

You may opt out of marketing communications at any time by adjusting your account preferences, clicking unsubscribe links in emails, or contacting customer support. Opting out of marketing does not affect transactional communications (account notifications, withdrawal confirmations, security alerts) which are necessary for service provision.

3.5 Platform Improvement and Analytics

We analyze aggregated and anonymized data to understand how players use the Platform, identify areas for improvement, and develop new features:

• Analyzing gameplay patterns to optimize game selection and placement
• Monitoring page load times and technical performance across devices and networks
• Evaluating promotional campaign effectiveness
• Conducting A/B testing for user interface improvements
• Researching player preferences to guide business strategy

Analytics data is typically aggregated and does not identify individual users. However, where individual-level analysis is necessary, such data is handled in accordance with this Privacy Policy and applicable data protection laws.

4. Data Sharing and Disclosure

4.1 No Sale of Personal Information

291jl does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is shared only in the limited circumstances described below, all of which are necessary for service provision, legal compliance, or protection of rights.

4.2 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf. These providers have access to personal information only to the extent necessary to perform their services and are contractually obligated to maintain confidentiality and data protection standards equivalent to those in this policy. Service providers include:

• Payment processors: GCash, PayMaya, and banking institutions process deposits and withdrawals
• Game providers: Pragmatic Play, JILI, Evolution Gaming, and other software providers host gaming content
• Identity verification services: Third-party KYC providers verify documents and detect fraud
• Cloud hosting providers: Secure servers and databases storing platform data
• Customer support platforms: Live chat and ticketing systems used by our support team
• Marketing service providers: Email delivery services and analytics platforms (used only for consented communications)

4.3 Regulatory and Legal Disclosures

291jl is legally obligated to disclose personal information to government authorities under certain circumstances:

• Compliance with PAGCOR reporting requirements and regulatory audits
• Response to lawful requests from Philippine law enforcement agencies
• Cooperation with court orders, subpoenas, and other legal processes
• Reporting to the Anti-Money Laundering Council (AMLC) for suspicious transactions
• Submission of tax-related information to the Bureau of Internal Revenue (BIR) as required

Where legally permitted, we will notify affected users of such disclosures unless prohibited by law or court order. We will disclose only the minimum information necessary to satisfy the legal requirement.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving 291jl, personal information may be transferred to the successor entity. In such cases, we will notify affected users and ensure that the successor entity commits to protecting personal information in accordance with this Privacy Policy or a policy offering equivalent protections.

4.5 Protection of Rights and Safety

We may disclose personal information if we believe in good faith that such disclosure is necessary to:

• Protect and defend the rights, property, or safety of 291jl, our users, or the public
• Detect, prevent, or address fraud, security vulnerabilities, or technical issues
• Enforce our Terms and Conditions and investigate violations
• Comply with responsible gaming obligations, including self-exclusion enforcement

5. Data Security and Protection

5.1 Security Measures

291jl implements industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same encryption standard used by major Philippine banks
• Secure data storage: Personal information is stored on secure servers in access-controlled data centers with physical security measures
• Access controls: Only authorized 291jl personnel with a legitimate business need have access to personal data, subject to role-based permissions
• Password protection: User passwords are hashed and salted using strong cryptographic algorithms; we cannot retrieve your plaintext password
• Regular security audits: Independent security assessments and penetration testing to identify and remediate vulnerabilities
• Employee training: All staff members handling personal data receive training on data protection obligations and security best practices

5.2 Segregation of Funds

Player funds are held in segregated bank accounts separate from 291jl's operational accounts. This ensures that your deposits are protected even in the event of business insolvency. Financial information related to these segregated accounts is subject to the highest level of security and access restriction.

5.3 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 291jl will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Affected users will be notified without undue delay where the breach is likely to result in high risk to their personal data. Notifications will include the nature of the breach, potential consequences, and measures taken to address it.

5.4 Limitations of Security

While we implement robust security measures, no system is completely secure. Internet transmission of data carries inherent risks, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any suspected unauthorized access. We recommend using strong, unique passwords and enabling two-factor authentication if available.

6. Your Privacy Rights Under Philippine Law

6.1 Right to be Informed

You have the right to be informed about the collection and processing of your personal data. This Privacy Policy serves as notice of such processing. You may request additional information about specific processing activities by contacting our Data Protection Officer.

6.2 Right to Access

You have the right to obtain confirmation that 291jl is processing your personal data and to access such data. You may request a copy of your personal information in our possession, subject to reasonable administrative fees for excessive or repetitive requests. To request access, contact customer support or our Data Protection Officer.

6.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You may update most account information directly through your account settings. For changes requiring verification (such as name or date of birth), contact customer support with supporting documentation.

6.4 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data under certain circumstances. However, this right is subject to limitations under Philippine law, particularly where data retention is required for:

• Compliance with legal obligations (PAGCOR requires five-year record retention)
• Establishment, exercise, or defense of legal claims
• Completion of pending transactions or investigations

Upon account closure, we will anonymize or delete personal data that is no longer required for regulatory purposes, subject to the mandatory retention periods.

6.5 Right to Object to Processing

You have the right to object to processing of your personal data for direct marketing purposes at any time. You may opt out of marketing communications through account settings or by contacting customer support. You may also object to other processing activities on grounds relating to your particular situation, which we will evaluate on a case-by-case basis.

6.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request transmission of such data to another controller where technically feasible. To exercise this right, submit a written request to our Data Protection Officer specifying the data you wish to receive.

6.7 Right to Lodge a Complaint

If you believe that 291jl has violated your data privacy rights, you may file a complaint with the National Privacy Commission of the Philippines. Contact details for the NPC are available at privacy.gov.ph. You may also contact our Data Protection Officer to address concerns before escalating to the NPC.

6.8 Exercising Your Rights

To exercise any of the rights described above, please submit a written request through customer support or via email to our Data Protection Officer. We will respond to verified requests within the timeframes required by Philippine law (typically within fifteen (15) days). Identity verification may be required to protect against unauthorized access to your personal information.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device by websites you visit. They help websites remember your preferences, recognize you on return visits, and provide a personalized user experience. 291jl uses cookies and similar tracking technologies to optimize platform functionality and analyze usage patterns.

7.2 Types of Cookies We Use

Strictly Necessary Cookies: These cookies are essential for the Platform to function properly. They enable core features such as secure login, session management, and shopping cart functionality. These cookies cannot be disabled without significantly impairing platform functionality.

Performance and Analytics Cookies: These cookies collect aggregated information about how visitors use the Platform, such as which pages are visited most often and whether users encounter errors. This data helps us improve site performance and user experience. These cookies do not collect personally identifiable information.

Functionality Cookies: These cookies remember choices you make (language preference, region, username for convenience) to provide enhanced, personalized features. They may also remember changes you make to text size, fonts, and other customizable elements.

Advertising and Targeting Cookies: Where legally permitted and with your consent, these cookies track your browsing activity to deliver personalized advertisements and measure campaign effectiveness. You may opt out of targeting cookies through your browser settings or privacy preference center.

7.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may impact your ability to use certain Platform features. To manage cookies, refer to your browser's help documentation or visit aboutcookies.org for instructions.

7.4 Third-Party Cookies

Game providers and analytics services integrated into the 291jl Platform may set their own cookies. We do not control third-party cookies and recommend reviewing the privacy policies of these providers to understand their data practices.

8. Data Retention and Deletion

8.1 Retention Periods

291jl retains personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

• Active accounts: Personal data is retained for the duration of account activity plus the regulatory retention period
• Closed accounts: Data is retained for a minimum of five (5) years after account closure as mandated by PAGCOR regulations
• Transaction records: Financial transaction records are retained for ten (10) years in compliance with Anti-Money Laundering Act requirements
• Customer support records: Chat transcripts and support tickets are retained for three (3) years for quality assurance and dispute resolution purposes
• Marketing data: Contact information for marketing purposes is retained until you opt out or request deletion

8.2 Secure Deletion

Upon expiration of the applicable retention period and subject to legal obligations, personal information is securely deleted or anonymized to prevent recovery or reconstruction. Deletion methods include cryptographic erasure, overwriting, and physical destruction of storage media. Anonymization techniques render data non-personally identifiable while preserving analytical value.

8.3 Archival for Legal Compliance

Certain records may be archived beyond standard retention periods if required for ongoing legal proceedings, regulatory investigations, or dispute resolution. Archived data is stored with heightened security controls and access restrictions, and is deleted once the legal basis for retention ceases to exist.

9. Children's Privacy

9.1 Age Restriction

The 291jl Platform is strictly intended for individuals aged twenty-one (21) years and older, in compliance with Philippine gambling laws and PAGCOR regulations. We do not knowingly collect personal information from individuals under 21. Registration requires age verification, and accounts found to belong to underage individuals will be immediately closed.

9.2 Parental Notice

If you are a parent or guardian and believe that your child under 21 has provided personal information to 291jl, please contact us immediately. We will take steps to verify the claim and, if confirmed, delete the account and associated personal information in accordance with applicable law.

9.3 Age Verification Mechanisms

291jl employs multiple layers of age verification including document verification, database cross-referencing, and behavioral monitoring to prevent underage gambling. Players are required to provide government-issued identification showing date of birth before completing account registration and making deposits.

10. Changes to This Privacy Policy

10.1 Right to Modify

291jl reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Amendments become effective immediately upon posting to the Platform unless a later effective date is specified.

10.2 Notification of Material Changes

For material changes that significantly affect your rights or how we process personal information, we will provide prominent notice through one or more of the following methods: email notification to your registered email address, in-platform notification upon login, or banner notice on the homepage. We encourage you to review this Privacy Policy periodically to stay informed of our data practices.

10.3 Continued Use as Consent

Your continued use of the 291jl Platform after any modifications to this Privacy Policy constitutes acceptance of the revised policy. If you do not agree with changes, you should cease using the Platform and request account closure before the changes take effect.

11. Contact Information and Data Protection Officer

11.1 General Inquiries

For questions about this Privacy Policy, our data practices, or to exercise your privacy rights, you may contact 291jl through the following channels:

• Live Chat: Available 24/7 through the Platform
• Email: [email protected] (general inquiries)
• Messenger and Viber: Contact details available on the Platform

11.2 Data Protection Officer

For privacy-specific concerns, data access requests, or to file a privacy complaint, you may contact our designated Data Protection Officer who oversees compliance with the Data Privacy Act and this Privacy Policy. The Data Protection Officer can be reached via dedicated email channel or through our customer support team.

11.3 Response Timeframes

We strive to respond to all privacy inquiries within fifteen (15) business days as required by Philippine data privacy regulations. Complex requests may require additional time, and we will notify you if an extension is necessary. For urgent privacy concerns, please indicate priority in your communication.