291lodi Privacy Policy – How We Handle Your Personal Data

291lodi ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at https://291lodi.best. For the purposes of this Privacy Policy, 291lodi is the data controller — meaning we are the entity responsible for deciding how and why your personal data is processed.

This Privacy Policy applies to all personal data collected from players, visitors, and users who interact with the 291lodi website, mobile browser platform, games, customer support channels, promotions, and any other services offered by 291lodi. It applies to players based in the Philippines and to any other person who accesses the platform from any location.

By registering on 291lodi or using any of our services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with this Policy, please do not register or use the platform.

Our designated privacy contact can be reached at support@291lodi.best for any data protection queries, requests, or concerns.

291lodi collects only the data that is necessary to operate the platform, verify your identity, process transactions, and comply with our legal obligations. Here is a clear breakdown of what we collect and why each category is needed:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity verification photos), or health information unless specifically required by law or responsible gaming obligations. We never store full payment card numbers — card payments are processed through PCI-DSS compliant third-party processors.

291lodi collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions and surveys.
• Automated Collection: Technical data collected automatically when you access and use the platform — including IP addresses, device information, session data, and cookie-based identifiers. See Section 10 for more on cookies.
• Third-Party Sources: Where permitted by law, 291lodi may receive identity verification data from our KYC service providers, fraud signals from payment processors, and publicly available information for AML (anti-money laundering) compliance purposes.
• Gaming Activity: Data generated by your activity on the platform — including game outcomes, bet history, and session behavior — is automatically recorded to operate your account and comply with gaming integrity obligations.

291lodi uses your personal data only for the purposes described below. We do not process your data for any purpose that is incompatible with the reason it was collected without first obtaining your consent.

• Account Creation and Management: To set up and maintain your 291lodi account, verify your identity, authenticate your logins, and manage account preferences.
• Processing Transactions: To process deposits, withdrawals, and bonus credits — including verifying that payment accounts belong to you and recording all financial activity in your account history.
• KYC and Age Verification: To verify that you are at least 21 years old and to comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations applicable to online gaming operations.
• Game Delivery: To deliver and record gameplay, calculate winnings, settle bets, and maintain game history for dispute resolution.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior, enforce self-imposed limits and exclusions, and contact players proactively when concerning patterns are detected. This processing is in your interest and in some cases required by our regulatory obligations.
• Fraud Detection and Security: To detect and prevent fraud, account takeover, money laundering, bonus abuse, and other prohibited conduct. Technical data including IP addresses and device fingerprints are used for this purpose.
• Customer Support: To respond to your inquiries, resolve disputes, and maintain records of communications for quality and training purposes.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from law enforcement or regulatory authorities.
• Marketing (with consent): To send promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and special events at 291lodi — only if you have opted in. You can withdraw your marketing consent at any time.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the 291lodi platform, fix bugs, and develop new features. This analysis uses data in a form that does not identify individual players.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, 291lodi processes personal data under the following legal bases:

• Consent: For marketing communications and any processing that is not strictly necessary for the operation of the platform. You can withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual Necessity: For processing required to fulfil our obligations under the player account agreement — including account management, payment processing, and game delivery.
• Legal Obligation: For KYC/AML compliance, age verification, and responding to regulatory or law enforcement requests.
• Legitimate Interests: For fraud prevention, platform security, and improving the 291lodi service — where these interests are not overridden by your privacy rights.

291lodi does not sell, rent, or trade your personal data to any third party. We share data only with the categories of recipients listed below and only to the extent necessary for each stated purpose:

• Payment Processors: GCash, Maya, BDO, BPI, UnionBank, and other payment providers receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy and security obligations.
• Identity Verification Providers: Third-party KYC service providers who verify the authenticity of identity documents submitted during account verification. These providers process data under strict contractual data protection agreements.
• Game Software Providers: Third-party game providers whose software powers games on the 291lodi platform. They may receive technical session data to deliver games but do not receive personally identifiable information beyond what is needed for game delivery.
• Fraud Prevention Services: Anti-fraud and risk management services that help 291lodi detect suspicious activity. These services process IP addresses, device data, and transaction patterns.
• Legal and Regulatory Authorities: Philippine regulatory bodies, law enforcement agencies, or courts — when required by law or valid legal process. 291lodi will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and accountants who provide professional services to 291lodi under strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of 291lodi's business, personal data may be transferred to the acquiring entity. Players will be notified of any such transfer and given the opportunity to close their accounts if they do not consent to the transfer.

Some of 291lodi's third-party service providers — including certain payment processors, cloud infrastructure providers, and KYC verification services — may be located or operate servers outside of the Philippines. When your personal data is transferred to a country that does not have the same level of data protection laws as the Philippines, 291lodi ensures appropriate safeguards are in place.

These safeguards include: standard contractual clauses approved by data protection authorities, binding corporate rules where applicable, or transfers to countries recognised as providing an adequate level of data protection. By using 291lodi, you consent to the transfer of your personal data under these conditions.

291lodi retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by law. Here are the key retention periods that apply:

• Account Data: Retained for the duration of your active account plus a minimum of 5 years after account closure, in compliance with AML and gaming record-keeping obligations under Philippine law.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• KYC Documents: Retained for a minimum of 5 years after the end of the customer relationship. These records may be retained longer if required by specific regulatory obligations.
• Gaming History: Retained for a minimum of 5 years. Game logs used for dispute resolution are retained until the dispute is resolved and any applicable appeal period has passed.
• Support Communications: Retained for 2 years from the date of last interaction, unless the communication relates to a dispute or legal matter in which case retention follows the timeline of that matter.
• Marketing Data: Retained until you withdraw your marketing consent or for 2 years from your last engagement with a marketing communication, whichever comes first.
• Technical / Log Data: Standard server logs are retained for 12 months. Security-relevant logs (e.g., failed login attempts, fraud flags) may be retained for longer.

When personal data is no longer required, 291lodi securely deletes or anonymises it in accordance with our data lifecycle procedures.

Under the Philippine Data Privacy Act of 2012 and its implementing regulations, you have the following rights with respect to your personal data held by 291lodi:

To exercise any of these rights, contact 291lodi's privacy team at support@291lodi.best with the subject line "Data Privacy Request." We will respond within 15 business days. We may need to verify your identity before processing your request.

291lodi uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and improve the user experience. Here is a breakdown of the types of cookies used:

291lodi does not use third-party advertising cookies or cross-site tracking. We do not place tracking pixels or beacons from social media networks on the platform. When you first visit 291lodi, you will be presented with a cookie consent notice allowing you to accept or manage your cookie preferences. You can update these preferences at any time via your account settings.

Most browsers also allow you to control cookies through browser settings. Note that disabling essential cookies will prevent you from logging in and using the platform.

291lodi is strictly an adult platform. The minimum age to register is 21 years old, consistent with Philippine gaming regulations. 291lodi does not knowingly collect personal data from individuals under the age of 21.

If 291lodi becomes aware that personal data has been collected from a minor — through a falsified date of birth during registration or any other means — the account will be immediately closed, all balances forfeited, and the data deleted in accordance with our data lifecycle procedures. Any deposits made by an underage player will be refunded to the payment method used, subject to identity verification.

If you are a parent or guardian and believe your child has registered on 291lodi, please contact us immediately at support@291lodi.best so we can take appropriate action.

291lodi takes data security seriously and applies the following technical and organisational measures to protect your personal data:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and 291lodi is encrypted in transit using industry-standard SSL/TLS encryption. The padlock icon in your browser confirms this encryption is active.
• Encryption at Rest: Sensitive personal data stored in 291lodi's databases — including identity documents and financial information — is encrypted at rest.
• Access Controls: Internal access to personal data is granted on a strict need-to-know basis. Staff access is logged, reviewed regularly, and access privileges are revoked when no longer needed.
• Two-Factor Authentication: 291lodi offers two-factor authentication for player accounts as an optional additional security layer. We strongly recommend enabling this feature.
• Fraud Detection Systems: Automated systems continuously monitor account activity for signs of unauthorised access, suspicious transactions, or fraud patterns.
• Security Testing: The 291lodi platform undergoes regular security assessments and penetration testing by qualified security professionals.
• PCI-DSS Compliance: Card payment processing is handled exclusively through PCI-DSS compliant third-party processors. 291lodi does not store full card numbers at any time.

The 291lodi platform does not contain links to third-party websites other than those integrated directly into platform operations (such as payment processor interfaces). Where any such links exist, they operate under the privacy policies of their respective operators, and 291lodi accepts no responsibility for how those parties collect or process your data.

291lodi does not host third-party advertising networks, affiliate tracking scripts, or social media widgets that would allow third parties to collect data about your behaviour on our platform without your knowledge.

291lodi reviews and updates this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When material changes are made to this Policy, we will notify registered players via email and/or a prominent notice on the platform at least 7 days before changes take effect.

The "Last Updated" date at the top of this page and in the Table of Contents reflects the date of the most recent revision. Your continued use of 291lodi after any update to this Policy constitutes your acknowledgment of the revised terms. We encourage you to review this page periodically.

If a proposed change to this Privacy Policy would involve processing your data for a materially different purpose from the one stated when the data was collected, 291lodi will seek fresh consent from affected players before implementing that change.

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data on 291lodi, please reach out to us through any of the following channels:

• Email (Privacy Requests): support@291lodi.best — use subject line "Data Privacy Request"
• Live Chat: Available 24/7 on the 291lodi platform — mention "privacy" in your first message to be connected to the relevant team member
• Response Time: Privacy requests and data subject access requests are acknowledged within 5 business days and fully responded to within 15 business days

If you are not satisfied with our response to a privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent data protection authority responsible for enforcing the Data Privacy Act of 2012.