291ace Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal information collected by 291ace ("Company", "we", "us", or "our") through our website located at 291ace.cam, mobile applications, customer service channels, and any other services we provide (collectively, the "Service"). By registering an account, accessing the 291ace platform, or using our gaming services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

This Policy should be read in conjunction with our Terms & Conditions, Responsible Gaming Policy, and Cookie Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using 291ace services and close any existing account. We encourage all Filipino players to carefully review this Policy to understand how their personal data is handled and protected.

291ace takes data privacy seriously and has implemented comprehensive technical, administrative, and physical security measures to protect the personal information of all players. We comply with the requirements of the Philippine Data Privacy Act of 2012 and maintain strict internal policies governing data access, processing, and retention. This Privacy Policy is designed to provide transparency regarding our data practices and to empower you with control over your personal information.

2. Information We Collect

2.1 Personal Information Provided Directly

When you register for a 291ace account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (passport number, driver's license number, UMID, or postal ID number)
• Contact Information: Residential address, email address, mobile phone number, and alternative contact details
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers
• Financial Information: Bank account details, GCash mobile number, PayMaya account information, credit/debit card numbers (only last four digits retained), and transaction history
• Verification Documents: Copies of government-issued identification, proof of address documents (utility bills, bank statements), and payment method verification documents
• Communication Records: Customer support inquiries, live chat transcripts, email correspondence, and feedback submissions

2.2 Information Collected Automatically

When you access and use 291ace services, we automatically collect certain technical and behavioral information:

• Device Information: Device type, operating system, browser type and version, unique device identifiers, mobile network information, and device settings
• Usage Data: IP address, login dates and times, pages visited, games played, wager amounts, session duration, click patterns, and navigation paths through the website
• Location Data: General geographic location derived from IP address to ensure compliance with jurisdictional restrictions and Philippine gaming regulations
• Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies as detailed in our Cookie Policy
• Gaming Activity: Betting history, game outcomes, winnings and losses, bonus utilization, tournament participation, and responsible gaming tool usage

2.3 Information from Third Parties

291ace may receive personal information about you from third-party sources including:

• Payment Processors: Transaction verification information from GCash, PayMaya, banks, and other payment service providers
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from specialized verification providers
• Affiliate Partners: Basic registration referral information from marketing affiliates who introduce players to 291ace
• Public Databases: Information from publicly available sources used to verify identity and prevent fraudulent activity

3. How We Use Your Information

291ace collects and processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Create, maintain, and manage your 291ace player account
• Process account registrations and verify identity and age eligibility (21+ years)
• Authenticate users during login and protect against unauthorized account access
• Provide access to casino games, sports betting, live dealer tables, and other gaming services
• Process deposits, withdrawals, and other financial transactions
• Maintain accurate transaction records and account balance information
• Communicate important account notifications, security alerts, and service updates

3.2 Legal and Regulatory Compliance

• Comply with Philippine gaming regulations and licensing requirements
• Verify player age and jurisdiction to ensure compliance with legal restrictions
• Conduct anti-money laundering (AML) checks and suspicious transaction monitoring
• Implement know-your-customer (KYC) verification procedures
• Detect and prevent fraud, cheating, collusion, and other prohibited activities
• Respond to legal process, court orders, and regulatory inquiries
• Maintain records required by gaming authorities and financial regulators

3.3 Platform Security and Fraud Prevention

• Monitor accounts for suspicious activity, irregular betting patterns, and potential security threats
• Investigate suspected terms violations, bonus abuse, and fraudulent transactions
• Protect 291ace systems against cyber attacks, unauthorized access, and technical vulnerabilities
• Implement responsible gaming measures and identify problem gambling behaviors
• Enforce self-exclusion requests and account closure procedures

3.4 Customer Support and Service Improvement

• Respond to customer inquiries, complaints, and support requests through live chat, email, and phone
• Troubleshoot technical issues and resolve account problems
• Analyze platform usage patterns to improve user experience and interface design
• Conduct surveys and gather feedback to enhance service quality
• Test new features, games, and platform functionality

3.5 Marketing and Promotional Communications

• Send promotional offers, bonus notifications, and exclusive deals to Filipino players
• Communicate information about new games, tournaments, and special events
• Provide personalized recommendations based on gaming preferences and history
• Administer VIP programs, loyalty rewards, and cashback schemes
• Deliver targeted marketing content through email, SMS, and push notifications (with your consent)

4. Legal Basis for Processing

291ace processes your personal information based on the following legal grounds as permitted under the Philippine Data Privacy Act of 2012:

4.1 Consent

By registering an account and accepting this Privacy Policy, you provide explicit consent for 291ace to collect, process, and use your personal information as described herein. You may withdraw consent at any time by closing your account, though this may prevent you from accessing certain services.

4.2 Contract Performance

Processing your personal information is necessary to fulfill our contractual obligations under the Terms & Conditions, including providing gaming services, processing transactions, and maintaining your account.

4.3 Legal Obligation

We are required by Philippine law and gaming regulations to collect and retain certain personal information for identity verification, age verification, anti-money laundering compliance, and regulatory reporting purposes.

4.4 Legitimate Interests

291ace has legitimate business interests in processing personal information for fraud prevention, platform security, service improvement, and direct marketing to existing customers, provided such interests do not override your fundamental rights and freedoms.

5. How We Share Your Information

291ace does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, and financial institutions that facilitate deposits and withdrawals
• Gaming Software Providers: Companies that supply casino games, live dealer platforms, and sports betting software
• Identity Verification Services: Third-party providers that perform age verification, identity authentication, and fraud checks
• Cloud Service Providers: Secure hosting infrastructure and data storage providers operating under strict data processing agreements
• Customer Support Platforms: Live chat and ticketing system providers that enable our support team to respond to player inquiries
• Marketing Analytics Providers: Services used to analyze campaign performance and player engagement (with aggregated, anonymized data only)

5.2 Legal and Regulatory Disclosures

• Philippine gaming authorities and regulatory bodies such as PAGCOR
• Law enforcement agencies in response to valid legal process, subpoenas, or court orders
• Anti-money laundering authorities for suspicious transaction reporting
• Tax authorities as required by Philippine tax laws and regulations

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of 291ace assets, your personal information may be transferred to the successor entity. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be transferred.

6. Data Security and Protection

291ace implements industry-leading security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our comprehensive security framework includes:

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and 291ace servers is protected using 256-bit SSL/TLS encryption
• Data Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted using AES-256 encryption
• Secure Password Storage: Passwords are stored using bcrypt hashing with salting — we never store plaintext passwords
• Two-Factor Authentication: Optional 2FA via SMS or authenticator app for enhanced account security
• Firewall Protection: Multi-layered firewall systems protect our servers from unauthorized access and DDoS attacks
• Intrusion Detection: Real-time monitoring systems detect and respond to potential security breaches

6.2 Administrative Security Measures

• Strict role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular staff training on data privacy, security procedures, and responsible data handling
• Background checks for all employees and contractors with access to player data
• Comprehensive data breach response procedures and incident management protocols
• Regular internal and external security audits and penetration testing

6.3 Data Breach Response

In the unlikely event of a data breach that affects your personal information, 291ace will notify the National Privacy Commission (NPC) within 72 hours of discovering the breach, as required by the Data Privacy Act of 2012. Affected players will be informed promptly if the breach is likely to result in a high risk to their rights and freedoms, and we will take immediate remedial action to contain and mitigate the impact.

7. Data Retention

291ace retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

Data Category	Retention Period	Reason
Account Registration Data	Duration of account + 5 years	Legal and regulatory compliance
Transaction and Financial Records	10 years from transaction date	Anti-money laundering regulations
KYC Verification Documents	Duration of account + 5 years	PAGCOR and AML requirements
Gaming Activity Logs	5 years from activity date	Regulatory audit requirements
Customer Support Communications	3 years from last interaction	Service quality and dispute resolution
Marketing Preferences	Until opt-out or account closure	Consent management
Self-Exclusion Records	Minimum 5 years	Responsible gaming obligations

After the applicable retention period expires, personal data will be securely deleted or anonymized so that it can no longer be associated with any individual player.

8. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 291ace:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you, information about how we use it, and details of any third parties with whom we have shared it. You can access much of your account data directly through your player account dashboard.

8.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. Most account details can be updated directly in your profile settings. For identity documents and financial information, please contact our support team.

8.3 Right to Erasure

You may request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. Please note that we may be unable to fulfill erasure requests where retention is required by law or for legitimate business purposes such as fraud prevention.

8.4 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

8.5 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may continue processing if we can demonstrate compelling legitimate grounds.

8.6 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC is available at privacy.gov.ph.

9. Cookies and Tracking Technologies

291ace uses cookies and similar tracking technologies to enhance your gaming experience, analyze platform usage, and deliver relevant content. Our use of cookies includes:

9.1 Essential Cookies

These cookies are strictly necessary for the 291ace platform to function and cannot be disabled. They include session management cookies, authentication tokens, security cookies, and load balancing cookies. Without these cookies, you would not be able to log in or use our services.

9.2 Functional Cookies

Functional cookies remember your preferences and settings, such as language selection, preferred currency display, and game lobby layout. These cookies enhance your experience by personalizing the platform to your preferences.

9.3 Analytics Cookies

We use analytics tools including Google Analytics to understand how players interact with our platform. This data helps us identify popular games, optimize navigation, and improve overall service quality. Analytics data is collected in aggregated, anonymized form.

9.4 Marketing Cookies

Marketing cookies track your interaction with 291ace content across the web and help us deliver relevant promotional messages. You may opt out of marketing cookies through your browser settings or our cookie preference center without affecting your ability to use core services.

For full details on the cookies we use and how to manage your preferences, please refer to our dedicated Cookie Policy available on the 291ace website.

10. Children's Privacy

291ace services are strictly intended for individuals who are 21 years of age or older in accordance with Philippine gaming law. We do not knowingly collect, process, or retain personal information from individuals under the age of 21. During the registration process, we implement age verification measures to prevent underage access to our gaming platform.

If we become aware that personal information has been collected from an individual under 21 years of age, we will immediately suspend the account, delete all associated personal data, and report the incident to relevant authorities as required by law. If you believe a minor has registered on 291ace, please contact us immediately at [email protected].

11. International Data Transfers

291ace primarily stores and processes your personal information within servers located in jurisdictions with adequate data protection laws. Where data is transferred to third-party service providers operating in other countries, we ensure appropriate safeguards are in place, including data processing agreements that require compliance with Philippine data privacy standards and equivalent levels of protection.

By using 291ace services, you acknowledge that your personal information may be transferred to and processed in countries other than the Philippines. We take all reasonable steps to ensure that any international transfer of personal data is conducted securely and in compliance with applicable privacy laws.

12. Changes to This Privacy Policy

291ace reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated Privacy Policy on our website with a new "Last Updated" date
• Send email notification to all registered players at the email address on file
• Display a prominent notice on the 291ace platform for at least 30 days following a material change
• Where required by law, seek your consent to the updated terms before continuing to process your data

Your continued use of 291ace services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us through any of the following channels:

Data Privacy Officer

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the 291ace website
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days and will provide a final response within 30 days

For complaints regarding data privacy violations, you also have the right to contact the National Privacy Commission of the Philippines directly at privacy.gov.ph.