291jl Privacy Policy

1 Overview

291jl is committed to protecting the privacy and personal data of every Filipino member who registers and plays on the platform. We understand that when you share your information with us — whether to open your 291jl account, make a GCash deposit, or contact our support team — you are placing trust in us. We take that responsibility seriously.

This Policy has been written in plain English so that every member, from Manila to Davao, from Cebu to Quezon City, can clearly understand what happens to their data. We do not sell your personal information to third-party marketers. We do not share your data with unaffiliated organisations except where strictly necessary for operating the platform, processing your payments, or complying with legal obligations.

2 Personal Data We Collect

291jl collects only the personal data that is necessary to provide a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are described below.

2.1 Registration Data

When you create a 291jl account via the 291jl Login registration form, we collect:

• Full legal name (as it appears on your government-issued Philippine ID);
• Date of birth (to verify the 21+ age requirement mandated by PAGCOR regulations);
• Gender (optional, for personalisation purposes);
• Philippine mobile number;
• Email address;
• Username and encrypted password;
• City and province of residence within the Philippines.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) and anti-money laundering (AML) obligations, we may collect:

• A copy of a valid Philippine government-issued photo ID (SSS, UMID, PhilHealth ID, Passport, or Driver's Licence);
• A recent proof of address (utility bill, bank statement, or barangay certificate dated within 90 days);
• Proof of ownership of the payment method used for deposits or withdrawals (e.g., a screenshot of your GCash or Maya wallet showing your registered name);
• A selfie photograph for liveness verification where required.

2.3 Financial Transaction Data

When you make deposits or request withdrawals on 291jl, we collect:

• Transaction amounts in Philippine Peso (₱);
• Payment method type (GCash, Maya, BPI, BDO, QR Ph, GrabPay, 7-Eleven, USDT, Coins.ph);
• Transaction reference numbers and timestamps;
• Partial payment account identifiers (e.g., the last four digits of a registered mobile number associated with a GCash wallet — never full wallet credentials).

2.4 Gameplay and Activity Data

As part of normal platform operation, 291jl automatically records:

• Game session logs, including game titles played, wager amounts, results, and session duration;
• Bonus and promotion redemption history;
• Account login timestamps and IP addresses used at login;
• Device type, operating system, and browser version used to access 291jl.

2.5 Communications Data

When you contact the 291jl support team or respond to platform communications, we retain:

• The content of live chat transcripts, email correspondence, and support ticket exchanges;
• Your contact preferences and communication history;
• Feedback or survey responses you choose to submit.

3 How We Collect Your Data

291jl collects personal data through the following mechanisms:

• Directly from you — when you register a 291jl account, complete KYC verification, make a deposit or withdrawal, use our live chat support, or respond to a platform survey;
• Automatically via technology — through cookies, web server logs, session tracking tools, and device fingerprinting technologies that are activated when you access the 291jl website;
• From payment service providers — such as GCash, Maya, BPI, and BDO, which return transaction confirmation data to 291jl upon the completion of a deposit or withdrawal;
• From identity verification partners — third-party KYC service providers that assist 291jl in verifying documents submitted during account verification;
• From fraud prevention and security systems — which may cross-reference provided data against known fraud databases or watchlists as part of 291jl's AML compliance programme.

4 How We Use Your Personal Data

291jl processes your personal data only where we have a lawful basis to do so. The primary purposes for which we use your data are set out below.

4.1 Account Management and Service Delivery

We use your registration data and login credentials to create and maintain your 291jl account, authenticate your identity at each 291jl Login session, and provide you with access to the full range of casino games, slots, bingo, fishing games, and sports betting available on the platform.

4.2 Payment Processing

Your financial transaction data is used to process deposits and withdrawals in Philippine Peso via your chosen payment method. 291jl passes the minimum data necessary to your selected payment provider (GCash, Maya, BPI, BDO, etc.) to complete each transaction. We never store your full GCash PIN, Maya password, or online banking credentials on our servers.

4.3 Regulatory Compliance and AML

As an online gaming platform serving the Philippine market, 291jl has legal obligations under applicable regulations — including PAGCOR-mandated Know Your Customer (KYC) requirements and anti-money laundering (AML) rules. We use identity and transaction data to fulfil these obligations, which may include reporting certain transactions to regulatory authorities where required by law.

4.4 Fraud Prevention and Platform Security

Technical data including IP addresses, device identifiers, and login patterns are analysed to detect and prevent fraudulent activity, account takeovers, bonus abuse, and other security threats. This processing is fundamental to maintaining a safe environment for all 291jl members.

4.5 Responsible Gaming

291jl uses gameplay data — including session duration, wagering frequency, deposit patterns, and net loss trends — to identify members who may be exhibiting signs of problem gambling. This analysis supports the responsible gaming tools available on the platform, including deposit limits, cooling-off periods, and self-exclusion. Members who are self-excluded are identified using registration and device data to prevent re-registration attempts.

4.6 Customer Support

Communications data is used by the 291jl support team to respond to your enquiries, resolve disputes, and improve the quality of our customer service. Support transcripts are retained for quality assurance purposes for a period of up to 24 months.

4.7 Platform Improvement and Analytics

Aggregated and anonymised gameplay and behavioural data is used to analyse platform performance, identify popular games, optimise user experience, and improve the overall quality of the 291jl Casino service. This analysis does not involve processing data in a form that identifies individual members.

4.8 Marketing Communications

Where you have provided explicit consent at registration or through your account communication preferences, 291jl may send you promotional emails or platform notifications about new games, bonus offers, and upcoming events. You may withdraw consent and opt out of marketing communications at any time through your account settings or by contacting 291jl support.

5 Data Sharing and Disclosure

291jl does not sell, rent, or trade your personal data to third-party marketers or unaffiliated commercial entities. We share your data only in the following limited and clearly defined circumstances.

5.1 Payment Service Providers

To process deposits and withdrawals, 291jl shares the minimum necessary data with your chosen payment provider — such as GCash, Maya, BPI, BDO, GrabPay, or Coins.ph. These providers operate under their own privacy policies and data protection obligations and are not permitted to use your data for any purpose other than processing your 291jl transaction.

5.2 Identity Verification Partners

KYC document verification is performed by contracted third-party verification service providers. These partners receive the documents and data you submit during the verification process and return a verification result to 291jl. They are contractually bound to process your data only for KYC purposes and to maintain appropriate security standards.

5.3 Technology and Hosting Providers

291jl uses third-party infrastructure, cloud hosting, and software services to operate the platform. These providers may process personal data on 291jl's behalf as data processors under contractual data processing agreements that restrict their use of your data to the delivery of services to 291jl only.

5.4 Regulatory and Law Enforcement Authorities

291jl will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent government authorities where required to do so by applicable Philippine law, a valid court order, or a regulatory demand. We will notify you of any such disclosure where we are legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 291jl's business, member personal data may be transferred to the acquiring entity as part of that transaction. In such a case, 291jl will notify affected members prior to the transfer and ensure the receiving entity is bound by privacy obligations consistent with this Policy.

6 Cookies and Tracking Technologies

291jl uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyse usage patterns. A cookie is a small text file placed on your device when you visit 291jl. Cookies do not execute code or deliver viruses.

6.1 Types of Cookies Used

6.2 Managing Cookies

You may configure your browser to refuse all cookies, accept only essential cookies, or delete existing cookies at any time. Please note that disabling essential cookies will prevent you from maintaining a login session on 291jl and will render certain platform functions unavailable. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

7 Data Retention

291jl retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations.

• Active account data — retained for the full duration of your membership on 291jl;
• Transaction and financial records — retained for a minimum of five (5) years following the transaction date, as required under Philippine AML regulations;
• KYC identity documents — retained for a minimum of five (5) years following account closure or the completion of the member relationship;
• Support communications — retained for up to twenty-four (24) months from the date of the interaction;
• Marketing consent records — retained for the duration of your consent and for three (3) years thereafter as evidence of the consent given;
• Closed account data — after account closure, data is retained in a restricted archive for the applicable regulatory retention period, after which it is securely deleted or anonymised.

8 Data Security

291jl takes data security seriously and implements a layered security architecture to protect your personal information from unauthorised access, disclosure, alteration, and destruction.

8.1 Technical Safeguards

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 291jl platform;
• Password hashing using industry-standard cryptographic algorithms — your plain-text password is never stored on 291jl servers;
• Firewalls and intrusion detection systems monitoring platform traffic 24 hours a day;
• Segregated data environments ensuring that KYC documents, financial records, and gameplay data are stored in separate, access-controlled systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.

8.2 Organisational Safeguards

• Access to member personal data is restricted on a strict need-to-know basis — only 291jl staff whose role requires access to specific data categories are granted that access;
• All 291jl staff with access to personal data are subject to confidentiality obligations and receive regular data protection training;
• A formal data breach response procedure is in place. In the event of a breach affecting your personal data, 291jl will notify you and relevant regulatory authorities within the timeframes required by applicable law.

9 Your Data Rights

As a 291jl member and a data subject under applicable Philippine data protection law, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 291jl support team using the details in Section 13.

• Right to Access — You have the right to request a copy of the personal data that 291jl holds about you. We will provide this within thirty (30) days of receiving a verified request.
• Right to Correction — You have the right to request correction of inaccurate or incomplete personal data in your 291jl account. You may update some data directly through your account settings; for other changes, contact our support team.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 291jl's overriding legal and regulatory retention obligations described in Section 7.
• Right to Restrict Processing — You may request that 291jl restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to a particular use.
• Right to Data Portability — You may request that 291jl provide your personal data in a structured, commonly used, machine-readable format to facilitate transfer to another service provider.
• Right to Object to Marketing — You may opt out of receiving marketing communications from 291jl at any time, with immediate effect, via your account communication preferences or by contacting support.
• Right to Withdraw Consent — Where 291jl processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

291jl will respond to all verified data rights requests within thirty (30) calendar days. Where a request is particularly complex or numerous, we may extend this period by a further thirty (30) days and will notify you accordingly. There is no charge for submitting a data rights request.

10 Minors and the 21+ Requirement

291jl strictly prohibits persons under twenty-one (21) years of age from registering or using the platform. This age requirement is in accordance with PAGCOR regulations governing online gaming in the Philippines. 291jl does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted at the point of registration and may be supplemented by documentary age verification during KYC procedures. If 291jl becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated account, void any balances or winnings, and delete the minor's personal data from our systems (subject to any mandatory retention obligations relating to the transactions involved).

11 Cross-Border Data Transfers

As a platform serving Filipino members, 291jl primarily processes data within the Asia-Pacific region. However, some of our technology infrastructure providers and KYC partners operate in other jurisdictions, which may result in your personal data being transferred to and processed in countries outside the Philippines.

Where such transfers occur, 291jl ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Philippine data protection law. These safeguards include contractual data protection clauses with all data processors located outside the Philippines, and selection of service providers that maintain internationally recognised security certifications.

12 Changes to This Privacy Policy

291jl reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify you by posting a prominent notice on the 291jl platform and, where the change is significant, by sending a notification to the email address registered on your account. The updated Policy will include a revised "Last updated" date at the top of this page.

Your continued use of the 291jl platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the revised terms, you should discontinue use of the platform and contact our support team to close your account. The current version of this Privacy Policy is always available at 291jl.net/privacy-policy.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 291jl handles your personal data, please reach out to the 291jl support team. Our team is available 24 hours a day, 7 days a week on Philippine Standard Time.