29ph Privacy Policy

1. Who We Are

29ph is an online gaming platform operated for the Philippine market, offering a range of skill-based and chance-based games including fishing shooters, crash games, card games, and more. The platform is accessible via 29ph.club and through the official 29ph mobile application.

As the operator of the 29ph platform, we act as the data controller for all personal information collected from players and visitors. This means we are responsible for determining the purposes and means by which your personal data is processed.

If you have any questions about how 29ph handles your personal data, you may contact our support team at any time. Contact details are provided at the end of this Policy.

2. Personal Data We Collect

29ph collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

We collect only the minimum data necessary for the stated purposes. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or health information unless specifically required by law or regulatory authority.

3. How We Collect Your Data

29ph collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the 29ph platform, including through cookies, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; payment confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors; fraud prevention data from security service providers.
• Publicly available sources: Information from government databases or public records where required for compliance purposes.

All data collection is conducted in accordance with applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

4. How We Use Your Personal Data

29ph uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your 29ph player account, including processing your registration and verifying your identity.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the core features of the 29ph platform.
• Legal compliance: To comply with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and other applicable regulatory requirements under Philippine law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the platform.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer self-exclusion and limit-setting tools.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the 29ph platform.
• Marketing communications: To send you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time.

29ph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5. Legal Basis for Processing

29ph processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out for 29ph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

29ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention services: Security and fraud detection service providers who assist 29ph in identifying and preventing fraudulent activity on the platform.
• IT and infrastructure providers: Cloud hosting, data storage, and technical service providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: Government agencies, law enforcement bodies, and regulatory authorities where disclosure is required by law, court order, or regulatory direction.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

29ph does not transfer your personal data outside the Philippines except where required by law or where adequate data protection safeguards are in place.

7. Data Retention

29ph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial regulations.
• KYC and identity documents: Retained for the period required by applicable AML regulations, typically five (5) years from the end of the business relationship.
• Support communications: Retained for up to three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Retained for up to two (2) years for platform analytics and security monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 29ph's data disposal procedures.

8. Data Security

29ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Access controls limiting data access to authorized personnel on a need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data privacy and security obligations.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

You are responsible for maintaining the security of your own account credentials. Do not share your 29ph username or password with any other person. If you suspect unauthorized access to your account, contact 29ph support immediately.

9. Cookies and Tracking Technologies

29ph uses cookies and similar tracking technologies on its platform to ensure proper functionality, maintain your session, and analyze platform performance. The types of cookies we use are as follows:

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect anonymized data about how players use the platform, such as which pages are visited most frequently and whether error messages are encountered. This data helps us improve the platform.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

29ph does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements. You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 29ph platform.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, you have the following rights with respect to your personal data held by 29ph:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as described in this Policy.
• Right of access: The right to request a copy of the personal data 29ph holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by 29ph.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 29ph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the 29ph support team. We will respond to all verified requests within thirty (30) days of receipt. In some cases, we may need to verify your identity before processing your request.

11. Children's Privacy

If you are a parent or guardian and believe that a minor has registered on the 29ph platform or provided personal data to us, please contact our support team immediately. We take underage access to our platform very seriously and will act promptly upon receiving such a report.

12. Third-Party Links and Services

The 29ph platform may contain references to third-party payment providers and services. This Privacy Policy applies solely to data collected and processed by 29ph. It does not cover the privacy practices of third-party service providers such as GCash, PayMaya, BPI, BDO, or Metrobank.

When you interact with a third-party payment provider to make a deposit or withdrawal, you are subject to that provider's own privacy policy and terms of service. 29ph encourages you to review the privacy policies of any third-party services you use in connection with your 29ph account.

29ph is not responsible for the privacy practices or content of any third-party services and accepts no liability in connection with your use of those services.

13. Changes to This Privacy Policy

29ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the contact details held on their account and update the "Last Updated" date at the top of this page.

Your continued use of the 29ph platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically to stay informed about how 29ph protects your personal data.

If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 29ph handles your personal data, please contact our support team. We are available 24 hours a day, seven days a week.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been respected. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.