Privacy Policy of 29ph22

This Privacy Policy ("Policy") is published by 29ph22 ("the Company," "we," "us," or "our") and governs the collection, use, storage, disclosure, and protection of personal data obtained from individuals ("Players," "you," or "your") who access or use the 29ph22 online casino platform available at 29ph22.cam (the "Platform").

29ph22 recognizes the importance of data privacy and is committed to processing personal data in a manner that is transparent, proportionate, and respectful of your rights. This Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as administered and enforced by the National Privacy Commission (NPC).

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and 29ph22.

29ph22 collects personal data that is necessary to provide you with our gaming services, process your transactions, comply with legal and regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include the following:

We collect personal data directly from you (for example, during registration and when you use the Platform), automatically through your use of the Platform (for example, via cookies and server logs), and in limited circumstances from third-party verification service providers engaged to assist with identity verification and fraud prevention.

We do not collect special categories of sensitive personal data (such as health data, biometric data, or data about religious beliefs) unless you voluntarily provide such information in the context of a responsible gaming or self-exclusion request, in which case such data is processed solely for that purpose.

29ph22 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your 29ph22 account, including verifying your identity, processing your registration, and communicating with you about your account status.
• Service Delivery: To provide you with access to our games, process deposits and withdrawals in Philippine Pesos, credit bonuses, and deliver customer support services.
• Regulatory Compliance: To fulfill our obligations under applicable Philippine law, including identity verification requirements, anti-money laundering (AML) obligations, and responsible gaming obligations under the supervisory framework governing 29ph22's operations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct on the Platform.
• Platform Improvement: To analyze aggregate usage patterns, identify technical issues, and improve the performance, security, and content of the 29ph22 Platform for all players.
• Responsible Gaming: To monitor gaming activity patterns that may indicate gambling-related harm, and to provide you with appropriate responsible gaming tools, resources, and communications where relevant.
• Communications: To send you transactional notifications (such as deposit confirmations and withdrawal receipts), account security alerts, and — where you have opted in — promotional communications about 29ph22 offers and games.

We process your personal data only for the purposes described in this Policy. We do not use your personal data for automated decision-making processes that produce significant legal effects on you without providing an opportunity for human review.

Under the Data Privacy Act of 2012 of the Philippines, 29ph22 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the contract we have with you (i.e., to operate your account and deliver gaming services as described in our Terms & Conditions).
• Legal Obligation: Processing is necessary for 29ph22 to comply with applicable Philippine legal and regulatory obligations, including AML compliance, age verification, and PAGCOR supervisory requirements.
• Legitimate Interests: Processing is necessary for 29ph22's legitimate interests, including fraud prevention, platform security, network and information security, and improvement of our services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above bases (for example, for optional marketing communications), we will seek your explicit, informed consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

29ph22 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial use. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Service Providers: We share data with carefully selected third-party service providers who process data on our behalf under contractual obligations consistent with this Policy. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard), identity verification providers, cloud hosting services, and customer support platform providers.
• Game Providers: Game studios whose titles are available on the 29ph22 Platform may receive limited technical data (such as player session tokens) necessary to deliver their game content. These providers do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: We disclose personal data to Philippine regulatory authorities (including PAGCOR), the National Privacy Commission, or law enforcement agencies where we are legally obligated or authorized to do so, including in response to valid court orders or regulatory directives.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 29ph22's business, personal data held by 29ph22 may be transferred to the acquiring entity, subject to commitments of confidentiality and privacy protections consistent with this Policy.

29ph22 uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to operate the Platform, maintain your session state, enhance security, and understand how players interact with our services in aggregate. Cookies are small text files placed on your device when you access the Platform.

The types of cookies used on the 29ph22 Platform include:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your login session, preventing cross-site request forgery, and enforcing security controls. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and responsible gaming limits) to provide a more personalized experience.
• Analytics Cookies: Used to collect aggregated, anonymized information about how players use the Platform, helping us identify areas for improvement. These do not identify you individually.

29ph22 does not use cookies to track your activity across third-party websites unrelated to the Platform. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair your ability to use certain Platform features.

29ph22 retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active 29ph22 account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and financial record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable Philippine financial regulations.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of gaming activity, for audit, dispute resolution, and responsible gaming monitoring purposes.
• Support Communications: Retained for up to three (3) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Technical and Log Data: Retained for up to twelve (12) months, after which it is aggregated or deleted unless required for an ongoing security investigation.

Where personal data is no longer required and no legal retention obligation applies, 29ph22 will securely delete or anonymize such data. Anonymized data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data under applicable law.

29ph22 implements appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 29ph22 Platform.
• Encryption at rest for sensitive personal and financial data stored in 29ph22's systems.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability management processes.
• Two-factor authentication options available to Players for their 29ph22 account access.
• Incident response procedures enabling prompt detection, assessment, and notification of personal data breaches in accordance with NPC notification requirements.

While 29ph22 takes reasonable and appropriate steps to protect your personal data, no security system is impenetrable. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures. You are also responsible for maintaining the security of your own 29ph22 account credentials. Please refer to the account security provisions in our Terms & Conditions for your obligations in this regard.

In the event of a personal data breach that poses a real risk of serious harm to affected Players, 29ph22 will notify the National Privacy Commission and affected individuals within the timeframes mandated by the Data Privacy Act and NPC regulations.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 29ph22:

• Right to Be Informed: You have the right to be informed about the personal data 29ph22 collects, the purposes for which it is processed, and the manner in which it is used. This Policy fulfills that obligation.
• Right to Access: You have the right to request a copy of the personal data 29ph22 holds about you, subject to reasonable verification of your identity.
• Right to Correction: You have the right to request that inaccurate or outdated personal data held about you be corrected or updated promptly.
• Right to Erasure / Blocking: You have the right to request that personal data that is no longer necessary for the purpose for which it was collected be deleted or blocked, subject to any overriding legal retention obligations.
• Right to Data Portability: Where technically feasible, you have the right to receive a structured, commonly used copy of the personal data you provided to 29ph22, for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to 29ph22 demonstrating that compelling legitimate grounds for processing override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint about 29ph22's data processing practices with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact the 29ph22 data privacy team via our customer support channels. We will respond to verified requests within the timeframe required by applicable Philippine law.

The 29ph22 Platform is strictly intended for adults who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Our account registration process includes age verification mechanisms designed to identify and prevent underage registration.

If 29ph22 discovers that personal data has been collected from a person under the age of 21 without proper parental or guardian consent (where applicable), we will take immediate steps to delete such data and close the associated account. Any funds associated with an underage account will be handled in accordance with applicable legal and regulatory requirements.

If you are a parent or guardian and believe that your child has registered on the 29ph22 Platform, please contact our customer support team immediately. We will investigate promptly and take appropriate remedial action.

Some of 29ph22's service providers and technology partners are located outside of the Republic of the Philippines. In certain circumstances, processing your personal data may require transferring it to servers or systems located in other countries.

Where such international transfers occur, 29ph22 ensures that appropriate safeguards are in place to protect the confidentiality and integrity of your personal data. These safeguards may include:

• Contractual clauses with overseas data processors that impose data protection obligations consistent with Philippine standards.
• Selection of processors located in jurisdictions recognized as providing adequate levels of data protection under applicable Philippine NPC guidelines.
• Technical measures ensuring that data transmitted internationally is encrypted in transit and at rest.

By using the 29ph22 Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the delivery of our services, subject to the safeguards described above.

29ph22 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, applicable legal requirements, or regulatory guidance issued by the National Privacy Commission.

When material changes are made to this Policy, we will notify registered Players by posting the updated Policy on this page with a revised effective date and, where the changes materially affect your rights or the way we process your data, by sending a notification to your registered email address.

Your continued use of the 29ph22 Platform following the effective date of any update to this Policy constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure.

If you have questions about this Privacy Policy, wish to exercise your data privacy rights, or need to report a privacy concern relating to 29ph22, please contact our data privacy team through the customer support channels available on the Platform.

Our support team is available 24/7 in English and will direct your inquiry to the appropriate data privacy officer. We aim to acknowledge all data privacy requests within three (3) business days and to resolve them within the timeframe required by the Data Privacy Act of 2012.

Players who are not satisfied with 29ph22's handling of a privacy matter have the right to escalate their complaint to the National Privacy Commission of the Philippines, the regulatory authority responsible for enforcing the Data Privacy Act.