Privacy Policy – lol291 Online Casino Philippines

1. Introduction

This Privacy Policy ("Policy") describes how lol291 ("lol291," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of users ("you," "your," or "Player") who access or use the lol291 platform at lol291.net and any related mobile interfaces or Services.

lol291 is committed to safeguarding the privacy of every Filipino player on our platform. We recognize that the personal data you entrust to us — including your identity, financial information, and gaming activity — is sensitive, and we take our obligations as a personal information controller seriously under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "PDPA") and its Implementing Rules and Regulations ("IRR").

By registering an account or using the lol291 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please do not use our Services.

2. Data Controller

For the purposes of the Philippine Data Privacy Act, lol291 acts as the Personal Information Controller in respect of personal data collected through the lol291 platform. lol291 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable Philippine data privacy law. Contact information for our DPO is provided in Section 14 of this Policy.

3. Personal Data We Collect

lol291 collects the following categories of personal data in connection with providing its Services:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, gender, government ID type and number	Yes
Contact Data	Philippine mobile number, email address, residential address	Yes
Financial Data	GCash number, Maya account, BPI/BDO account details (last 4 digits), transaction history	Yes (for transactions)
Account Data	Username, password hash, account preferences, session history	Yes
Gaming Data	Game session records, bet history, win/loss records, bonus usage	Automatically collected
Technical Data	IP address, device type, browser, operating system, timestamps	Automatically collected
Communications Data	Support chat transcripts, emails, feedback submissions	When you contact us
KYC Documents	Scanned or photographed government-issued ID, selfie for identity verification	Required at withdrawal

lol291 does not collect or store full payment card numbers or CVV codes. All payment processing is handled by licensed third-party payment processors.

4. How We Collect Your Personal Data

lol291 collects personal data through the following means:

• Direct registration: Information you provide when creating your lol291 account, completing KYC verification, or updating your profile;
• Transactional data: Information generated when you make deposits, request withdrawals, or engage in any financial transaction on the platform;
• Gaming activity: Data automatically recorded by our gaming systems as you play, including bet amounts, outcomes, game types, and session durations;
• Technical collection: Device and connection data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access lol291.net;
• Customer support interactions: Information you share when contacting lol291 support via live chat, email, or any other channel;
• Third-party sources: Where permitted by law, identity verification data from third-party KYC and anti-fraud service providers, and payment status data from our licensed payment partners.

5. Purpose and Legal Basis for Processing

lol291 processes your personal data for the following purposes, each supported by a lawful basis under the PDPA:

• Account creation and service delivery — necessary for the performance of the contract between you and lol291;
• Identity verification and KYC compliance — required by PAGCOR regulations and Philippine Anti-Money Laundering Act (AMLA) obligations, constituting compliance with a legal obligation;
• Payment processing and fraud prevention — necessary for contract performance and lol291's legitimate interests in protecting the platform's financial integrity;
• Responsible gaming monitoring — required by PAGCOR regulations and lol291's legitimate interest in player welfare, including identification of problem gambling indicators;
• Platform improvement and analytics — lol291's legitimate interests in improving the quality and security of its Services, using aggregated and anonymized data where possible;
• Marketing communications — based on your explicit consent, which you may withdraw at any time through your account settings or by contacting support;
• Legal compliance and dispute resolution — compliance with legal obligations including PAGCOR reporting requirements, court orders, and regulatory investigations.

6. Sharing Your Personal Data

lol291 does not sell your personal data. We may share your personal data with the following categories of recipients under strict data processing agreements:

• Licensed payment processors — GCash (Globe Fintech Innovations), Maya (Voyager Innovations), BPI, BDO, and other licensed Philippine financial institutions, solely for processing your transactions;
• KYC and identity verification providers — third-party service providers that assist lol291 in verifying your identity as required by PAGCOR and AMLA regulations;
• Game content providers — third-party game studios whose titles are hosted on the lol291 platform, who may receive gaming session data necessary to operate their games;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any competent court or law enforcement authority in the Philippines, where disclosure is required by law;
• IT and infrastructure providers — cloud hosting, content delivery, and cybersecurity service providers operating under data processing agreements with lol291.

All third parties with whom lol291 shares personal data are contractually obligated to process such data only for the specified purpose and in compliance with applicable Philippine data privacy law.

7. Cookies and Tracking Technologies

lol291 uses cookies and similar tracking technologies on lol291.net for the following purposes:

• Essential cookies: Required for the platform to function, including maintaining your login session and security tokens. These cannot be disabled without affecting platform functionality;
• Performance cookies: Collect anonymized data on how players use the platform, helping lol291 identify and fix performance issues;
• Functional cookies: Remember your preferences such as language settings and interface customizations;
• Analytics cookies: Used by lol291's internal analytics tools to understand aggregate player behavior and improve the platform experience.

lol291 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the lol291 platform from functioning correctly.

8. Data Retention

lol291 retains personal data for the following periods:

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, as required by PAGCOR regulations and Philippine AMLA obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction, in compliance with AMLC record-keeping requirements;
• KYC documentation: Retained for five (5) years following the closure of your lol291 account or the completion of the verification process, whichever is later;
• Support communications: Retained for two (2) years following the resolution of your support request, unless a longer retention period is required for an ongoing dispute or regulatory investigation;
• Technical and gaming data: Retained for up to three (3) years for platform security and integrity monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with lol291's data disposal procedures.

9. Data Security

lol291 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS encryption for all data transmitted between your device and lol291.net;
• AES-256 encryption for sensitive personal data stored in lol291's databases;
• Multi-factor authentication requirements for administrative access to lol291's systems;
• Regular third-party penetration testing and security audits of the lol291 platform;
• Role-based access controls ensuring lol291 staff can only access personal data necessary for their specific job functions;
• Comprehensive incident response procedures aligned with NPC notification requirements under the PDPA.

While lol291 takes all reasonable precautions to protect your data, no internet transmission is 100% secure. Players are responsible for maintaining the security of their own account credentials.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by lol291:

To exercise any of these rights, contact lol291's Data Protection Officer at [email protected]. lol291 will respond to all valid data rights requests within thirty (30) days of receipt. Complex requests may require an additional thirty (30) days with prior notice.

11. Children's Privacy

lol291 strictly prohibits access to its platform by persons under 21 years of age. The lol291 platform does not knowingly collect personal data from anyone under 21. Age verification is a mandatory step during registration and prior to any withdrawal processing. If lol291 becomes aware that personal data has been collected from a person under 21 years of age, such data will be deleted and the account terminated immediately. Parents or guardians who believe their child has created a lol291 account should contact support immediately.

12. Cross-Border Data Transfers

lol291's primary data processing infrastructure is located within the Philippines. Where lol291 engages third-party service providers whose processing infrastructure is located outside the Philippines — such as certain cloud hosting or KYC service providers — lol291 ensures that such transfers are subject to appropriate safeguards including contractual data processing agreements that impose data protection standards equivalent to those required by the PDPA. lol291 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.

13. Policy Updates

lol291 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made, lol291 will notify registered Players by email or in-platform notification at least fourteen (14) days before the changes take effect. The most current version of this Policy is always available at lol291.net/privacy-policy. Continued use of the lol291 platform following notification of changes constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

For all privacy-related inquiries, data rights requests, or concerns regarding this Privacy Policy, please contact lol291's Data Protection Officer:

Email: [email protected]
Subject line: "Data Privacy Request – [Your Name]"

lol291 will acknowledge all privacy-related correspondence within five (5) business days. Where your inquiry requires investigation or involves a formal data rights request, lol291 will provide a substantive response within thirty (30) days as required by the PDPA.