Your Privacy Matters to 29php

This Privacy Policy ("Policy") describes how 29php ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of players and visitors who access the 29php website at https://29php.net and all related services, including the 29php Wallet, gaming products, sportsbook, and promotional programs.

29php is committed to handling your personal data with care, integrity, and full compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines.

By registering an account, accessing the 29php platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the 29php platform.

29php operates the online gaming and sports betting platform accessible at https://29php.net. As the entity that determines the purposes and means of processing your personal data, 29php acts as the Personal Information Controller (PIC) under the Data Privacy Act of 2012.

Where 29php engages third-party service providers — such as payment processors, KYC verification services, or game technology providers — who process personal data strictly on 29php's instructions and for the purposes described in this Policy, those providers act as Personal Information Processors (PIPs). 29php remains responsible for ensuring those processors handle your data in a manner consistent with this Policy and applicable Philippine law.

For all privacy-related enquiries, requests, and complaints, you may contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Policy.

29php collects only the personal information that is strictly necessary for the purposes described in Section 5. The categories of personal data we collect include:

29php collects your personal data through the following means:

• Direct registration: When you create a 29php account, you voluntarily provide your name, mobile number, email address, date of birth, and chosen credentials.
• KYC submission: When you complete identity verification to unlock withdrawal privileges, you upload government-issued ID documents and a selfie photograph through our secure KYC portal.
• Transaction activity: Each time you make a deposit, place a bet, claim a bonus, or request a withdrawal through the 29php Wallet, transaction records are automatically generated and stored.
• Device and browser data: When you access the 29php website, our servers automatically log technical data including your IP address, device type, and browser version for security and fraud prevention purposes.
• Customer support interactions: When you contact 29php support via live chat or email at [email protected], the content of those communications is recorded and stored for service quality and dispute resolution purposes.
• Cookies and tracking technologies: As described in Section 9, 29php uses cookies and similar technologies to maintain your session, remember your preferences, and gather anonymized platform analytics.

29php does not purchase personal data from third-party data brokers and does not collect personal data from social media platforms without your explicit consent.

29php processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The primary purposes for which we process your data, and the corresponding legal basis for each, are as follows:

• Account creation and platform access — Processing is necessary for the performance of the contract (your player agreement with 29php) and to take steps at your request prior to entering into that contract.
• Age verification and KYC compliance — Processing is required to comply with 29php's legal obligations under PAGCOR regulations, which mandate that all players are verified to be at least 21 years of age before engaging in real-money gaming.
• Payment processing (deposits and withdrawals) — Processing is necessary for the performance of the contract between you and 29php, and to facilitate transactions through GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank.
• Anti-Money Laundering (AML) compliance — Processing is required by law under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments, which require 29php to monitor, record, and report covered and suspicious transactions to the Anti-Money Laundering Council (AMLC).
• Fraud detection and platform security — Processing is based on 29php's legitimate interest in maintaining a secure gaming environment and protecting both the platform and its players from fraud, multi-accounting, and unauthorized access.
• Responsible gaming monitoring — Processing is based on 29php's legal and ethical obligations to identify and assist players who may be exhibiting signs of problem gambling, including through self-exclusion tools and deposit limits.
• Customer support and dispute resolution — Processing is necessary for the performance of the contract and to comply with legal obligations related to record-keeping and complaint handling.
• Platform improvement and analytics — Processing is based on 29php's legitimate interest in optimizing the user experience and improving platform reliability. Analytics data used for this purpose is aggregated and anonymized where possible.
• Marketing and promotional communications — Where you have given explicit consent at the time of registration or subsequently through account settings, 29php may send you promotional offers, bonus notifications, and gaming news. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

29php does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information is shared only in the following limited and controlled circumstances:

• Payment processors: To facilitate deposits and withdrawals, 29php shares the minimum necessary financial and identity information with payment service providers including GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC and identity verification services: Third-party KYC technology providers may process your identity documents on 29php's behalf. These providers act as Personal Information Processors under written data processing agreements and are prohibited from using your data for any purpose other than identity verification for 29php.
• Game content providers: Game software providers whose titles are accessible on the 29php platform may receive session and technical data (such as player ID and bet amounts) necessary for game operation. These providers do not receive your personal identity or payment information.
• Regulatory authorities: 29php is legally required to share certain data with PAGCOR, the AMLC, the National Privacy Commission, and other Philippine government authorities in connection with regulatory supervision, licensing, and anti-money laundering compliance. Such disclosures are made without prior notice to the account holder where legally required.
• Law enforcement: Where 29php receives a valid court order, subpoena, or directive from Philippine law enforcement, we will disclose the requested data. 29php will attempt to notify the affected player where legally permitted to do so.
• Professional advisors: 29php's legal counsel, external auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis for the purpose of providing professional advice or conducting compliance audits.

29php retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, or as required by Philippine law. The following retention schedule applies:

When personal data reaches the end of its required retention period and is no longer needed, 29php will securely delete or permanently anonymize that data in accordance with the NPC's guidelines on personal data disposal. Physical documents containing personal data are shredded; digital data is overwritten using industry-standard secure deletion methods.

29php implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security program includes:

• Transport encryption: All communications between your device and the 29php platform are encrypted using TLS 1.2 or higher. The 29php website enforces HTTPS across all pages and uses HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks.
• Data-at-rest encryption: Personal data stored in 29php's databases — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Password security: Player passwords are never stored in plain text. 29php uses industry-standard one-way cryptographic hashing with salt to store password data, ensuring that even 29php staff cannot view your password.
• Access controls: Access to systems holding personal data is restricted to 29php staff on a strict need-to-know basis. All staff access is authenticated, logged, and audited. Privileged access requires multi-factor authentication.
• OTP authentication: Sensitive account actions — including withdrawals, password changes, and contact detail updates — require one-time password (OTP) verification sent to your registered mobile number.
• Intrusion detection: 29php's platform is monitored 24/7 for suspicious activity using automated intrusion detection systems. Anomalous login attempts trigger automatic account protection measures including temporary lockouts.
• Regular security assessments: 29php conducts periodic security assessments and vulnerability scans of its platform infrastructure. Critical vulnerabilities identified are remediated on a priority basis.

29php uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the platform. We use the following types of cookies:

• Strictly necessary cookies: These cookies are essential for the 29php website to function correctly. They maintain your login session, preserve your security token between page loads, and remember your language and display preferences. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember choices you make — such as your preferred game lobby view or notification settings — to personalize your 29php experience. They are set only with your consent.
• Analytics cookies: 29php uses privacy-respecting analytics to understand how players use the platform — which games are most popular, how players navigate between pages, and where technical errors occur. Analytics data is aggregated and does not identify you individually.

What we do not use: 29php does not use third-party advertising cookies, social media tracking pixels, or cross-site tracking technologies that follow you outside the 29php platform.

Managing cookies: You can manage or delete cookies through your browser settings at any time. Most browsers allow you to block all cookies or selectively block third-party cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your 29php account. Instructions for managing cookies are available in your browser's help documentation.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by 29php. You may exercise any of these rights by contacting our Data Protection Officer at [email protected]:

29php will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request to ensure we do not disclose your personal data to an unauthorized third party.

The 29php platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gambling in the Philippines. 29php does not knowingly collect, process, or retain personal data from individuals below the age of 21.

As part of our mandatory KYC process, every player is required to verify their date of birth using a valid Philippine government-issued identification document prior to accessing real-money gaming features. Accounts where the player is found to be below 21 years of age will be immediately suspended, any funds held will be processed in accordance with applicable regulations, and all personal data collected will be deleted or anonymized after satisfying any mandatory legal retention requirements.

If you believe that a minor has registered on the 29php platform or that we have inadvertently collected personal data from a minor, please contact our Data Protection Officer immediately at [email protected] so that we can take prompt corrective action.

Some of the third-party service providers engaged by 29php — including certain game technology providers and platform infrastructure vendors — may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, 29php ensures that adequate safeguards are in place to protect your personal data, including:

• Contractual clauses in data processing agreements that require the recipient to apply data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012;
• Transfer only to jurisdictions or entities that the National Privacy Commission has recognized as providing adequate protection for personal data; and
• Implementation of technical security controls — including encryption in transit and at rest — that apply regardless of the physical location of the data.

By using the 29php platform, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines, subject to the safeguards described above. If you would like more information about the specific safeguards in place for any particular cross-border transfer, please contact our Data Protection Officer.

29php may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable Philippine law and NPC guidelines. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this page;
• Post a prominent notice on the 29php homepage and within the player account dashboard for a minimum of 30 days following the update; and
• Where changes significantly affect your rights or the way we process your personal data, send a direct notification to your registered email address or mobile number.

Your continued use of the 29php platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting support.

We encourage you to review this Privacy Policy periodically to stay informed about how 29php is protecting your personal information.

29php has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions about this Policy, wish to exercise your data subject rights, or need to report a privacy concern, you may contact our DPO using the details below:

If you are not satisfied with 29php's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available at the NPC's official website.

Please note that we may need to verify your identity before processing any data subject request to ensure the security of your personal information.