This Privacy Policy applies to all players who register, visit, or otherwise use the Super 291 platform at super291.best. By using Super 291, you acknowledge that you have read and understood this policy. If anything here is unclear, our support team is available 24/7 to explain it to you in plain terms.
1 About This Privacy Policy
Super 291 takes the privacy of its players seriously. This Privacy Policy explains how we, the operators of super291.best, collect, use, store, and protect your personal data. It also explains your rights regarding your information under applicable Philippine law.
This policy applies to all users of the Super 291 platform — whether you've just landed on the homepage for the first time, you're a fully registered player, or you've contacted our customer support team. It covers all data processing activities related to your use of Super 291, including your betting activity, account management, payment transactions, and any communications you have with us.
We recommend you read this policy in full. But if you're looking for a specific topic, you can use the table of contents on the left to jump directly to the relevant section. If you have any questions at all, you can reach us at support@super291.best — our team will be glad to help.
2 Who We Are
Super 291 is an online gaming platform operating at super291.best, offering sports betting, casino games, fishing games, card games including Tongits, and various promotional programmes to players in the Philippines and other permitted jurisdictions.
For the purposes of data protection law, Super 291 acts as the data controller for personal information collected through the platform. This means we determine the purpose and means of processing your data. Where we engage third-party processors — such as payment providers and identity verification services — those parties process your data on our behalf and are bound by strict contractual obligations to protect it.
Our Data Protection Officer can be reached at support@super291.best for any privacy-specific queries or concerns.
Super 291 – Trusted by Filipino players with transparent data practices
3 What Data We Collect
Super 291 collects different categories of personal data depending on how you interact with the platform. Here is a full breakdown:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID details | Registration, KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration, account updates |
| Financial Data | GCash / Maya account name, bank account details, transaction history | Deposits and withdrawals |
| Gaming Activity Data | Bets placed, games played, win/loss records, session duration | Ongoing platform use |
| Technical Data | IP address, browser type, device ID, operating system | Automatically on site visit |
| Communications Data | Support chat logs, email correspondence, complaint records | When you contact us |
| Preference Data | Favourite games, notification settings, marketing preferences | Account settings, site usage |
3.1 Data You Provide Directly
Most of the personal data Super 291 holds is provided directly by you — when you create your account, submit KYC documents, make a deposit or withdrawal request, or contact our support team. We do not collect more information than we need.
3.2 Data Collected Automatically
When you access Super 291, our systems automatically collect certain technical data including your IP address, device type, browser information, and session data. This helps us maintain platform security, detect fraud, and improve performance. It is collected through server logs and cookies as described in Section 7.
4 How We Use Your Data
Super 291 uses your personal data for specific, legitimate purposes only. We do not use it in ways that go beyond what is necessary to operate the platform and serve you as a player. The main purposes are:
- Account management: Creating and maintaining your Super 291 player account, including login authentication and account security.
- Identity verification: Confirming your age and identity to comply with our legal obligations and prevent underage gambling.
- Payment processing: Handling deposits and withdrawal requests through GCash, Maya, and other approved Philippine payment channels.
- Game delivery: Providing access to sports betting, casino games, fishing games, Tongits, and other products on Super 291.
- Customer support: Responding to your questions, complaints, and account queries through our 24/7 support channels.
- Fraud prevention and security: Monitoring transactions and account activity to detect and prevent fraud, money laundering, and abuse of the platform.
- Responsible gaming: Identifying players who may need support and applying responsible gaming tools such as deposit limits and self-exclusion.
- Marketing communications: Sending you promotional offers and updates if you have opted in to receive them. You can opt out at any time.
- Legal and regulatory compliance: Meeting our obligations under Philippine gaming law, anti-money laundering regulations, and data privacy law.
- Platform improvement: Analysing aggregated, anonymised usage data to identify bugs, improve features, and enhance the overall Super 291 experience.
Super 291 – Secure gaming wherever you are in the Philippines
5 Legal Basis for Processing
Super 291 processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations:
- Contractual necessity: Processing required to perform the contract between you and Super 291 — including account creation, payment processing, and game access.
- Legal obligation: Processing required to comply with applicable laws including Anti-Money Laundering regulations, gaming licence conditions, and data privacy law.
- Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics — where these interests do not override your privacy rights.
- Consent: Processing for optional activities such as marketing communications, where we rely on your explicit opt-in. You may withdraw consent at any time.
Your control: Where processing is based on consent — such as marketing emails — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Simply update your communication preferences in your Super 291 account settings or contact support.
6 Sharing Your Data
Super 291 does not sell your personal data. We do not share it with advertisers or marketing data brokers. Your information is shared only where it is genuinely necessary — and always under strict safeguards. The following categories of third parties may receive your data:
6.1 Payment Processors
To process deposits and withdrawals, Super 291 shares necessary financial and identity data with GCash, Maya, GrabPay, Coins.ph, InstaPay, and partner banks. These providers are regulated financial institutions operating under BSP supervision and maintain their own data protection obligations.
6.2 Identity Verification Providers
For KYC compliance, we use licensed identity verification services that process your submitted government ID documents. These providers act as data processors on Super 291's behalf and may not use your data for any other purpose.
6.3 Technology and Infrastructure Partners
Super 291 uses cloud hosting, security monitoring, and analytics tools provided by established technology companies. These partners may process certain technical data as part of delivering their services. They are contractually bound to keep this data confidential and to process it only as directed by Super 291.
6.4 Regulatory and Law Enforcement Authorities
Super 291 may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required by applicable Philippine law — for example, in connection with Anti-Money Laundering obligations or a valid court order. We will notify you of such disclosures where legally permitted to do so.
6.5 Business Transfers
In the event of a merger, acquisition, or sale of assets involving Super 291, player data may be transferred to the acquiring entity as part of that transaction. You would be notified in advance of any such transfer and your rights under this policy would continue to apply.
7 Cookies and Tracking Technologies
Super 291 uses cookies and similar technologies to help the platform function correctly, keep you securely logged in, and understand how players interact with the site. Here's what we use and why:
- Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. You cannot opt out of these and they do not track your behaviour.
- Functional cookies: Remember your preferences such as language settings, preferred game categories, and login state between sessions.
- Analytics cookies: Help us understand how players navigate the site — which pages are visited most, where drop-offs occur, and how features are used. This data is aggregated and anonymised. Super 291 uses this information to improve the platform, not to profile individual users.
- Fraud detection cookies: Help our security systems identify suspicious activity or potential account takeover attempts.
Super 291 does not use advertising or third-party tracking cookies that follow you across other websites. You can manage or clear cookies at any time through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the Super 291 platform.
8 How Long We Keep Your Data
Super 291 retains your personal data only for as long as necessary for the purposes set out in this policy, or as required by applicable law. Our retention practices by data type are as follows:
- Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in line with Anti-Money Laundering record-keeping requirements.
- Transaction and financial records: Retained for a minimum of five (5) years in accordance with financial regulation and Anti-Money Laundering obligations.
- Gaming activity logs: Retained for five (5) years for dispute resolution, regulatory audit, and responsible gaming monitoring purposes.
- Customer support communications: Retained for three (3) years after the last interaction or the resolution of a formal complaint, whichever is later.
- Technical and device data: Retained for up to twelve (12) months and then anonymised or deleted.
- Marketing preference data: Retained until you withdraw consent or close your account, whichever comes first.
When data is no longer needed, Super 291 securely deletes or anonymises it in a manner that prevents recovery. You may request earlier deletion of your data as described in Section 10, subject to any overriding legal retention obligations.
Super 291 – Celebrating Filipino culture while keeping your data safe
9 How We Keep Your Data Secure
Super 291 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:
- SSL/TLS encryption: All data transmitted between your browser or device and Super 291's servers is encrypted using industry-standard SSL/TLS protocols. You will always see "https" in the Super 291 URL.
- Encrypted data storage: Sensitive data — including financial records and identity documents — is stored in encrypted form on secure, access-controlled servers.
- Two-factor authentication: Super 291 supports two-factor authentication (2FA) for player accounts, adding an additional layer of protection against unauthorised access.
- Access controls: Only authorised Super 291 personnel with a legitimate operational need can access player data. Access is logged and audited.
- Fraud monitoring: Automated systems and human review processes monitor for suspicious account activity, unusual transactions, and potential data breaches.
- Regular security audits: Super 291 conducts periodic security assessments and penetration testing to identify and address vulnerabilities.
Your role in security: No platform can guarantee absolute security if account credentials are compromised. Please use a strong, unique password for your Super 291 account, enable 2FA, and never share your login details with anyone. Report any suspected unauthorised access immediately.
10 Your Privacy Rights
Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights regarding your personal data held by Super 291. These rights are not absolute and are subject to applicable legal limitations, but we are committed to facilitating their exercise promptly and transparently.
Right to Access
Request a copy of the personal data Super 291 holds about you and information on how it is being used.
Right to Correction
Request that inaccurate or outdated personal data held by Super 291 be corrected or updated.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
Right to Object
Object to processing of your data for direct marketing or where processing is based on our legitimate interests.
Right to Data Portability
Request your personal data in a structured, machine-readable format to transfer to another service where technically feasible.
Right to Withdraw Consent
Where processing is based on your consent — such as marketing emails — withdraw that consent at any time via your account settings.
To exercise any of these rights, contact our Data Protection Officer at support@super291.best. We will acknowledge your request within 48 hours and respond in full within 15 business days. In some cases, we may need to verify your identity before processing your request. Super 291 does not charge a fee for reasonable data subject requests.
11 Children's Privacy
Super 291 does not knowingly collect personal data from individuals under the age of 21. Our platform is strictly for adults of legal gaming age. Age verification checks are conducted as part of the registration and KYC process to prevent underage access.
If we become aware that personal data has been collected from someone under 21 — whether through our own review or notification from a parent or guardian — we will immediately close the relevant account, void any associated bets or transactions, and delete the data from our systems. If you believe a minor has registered on Super 291, please notify us immediately at support@super291.best.
12 Cross-Border Data Transfers
Super 291 primarily stores and processes data within the Philippines. In some cases, data may be processed by third-party service providers operating in other countries — for example, cloud infrastructure or fraud detection services. Where this occurs, Super 291 ensures that appropriate safeguards are in place to protect your data in line with Philippine data privacy standards.
These safeguards include contractual obligations on the third-party processor requiring them to apply equivalent protection to your personal data, and limiting their use of your data strictly to the services they provide to Super 291. We do not transfer data to countries with inadequate data protection frameworks without implementing appropriate contractual protections.
13 Changes to This Privacy Policy
Super 291 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered players via email or a notice displayed within the platform prior to the changes taking effect.
The updated policy will always be published at super291.best/privacy-policy with an updated effective date at the top of the page. We encourage you to review this page periodically. Continued use of Super 291 after the effective date of any update constitutes your acknowledgement of the revised policy.
14 Contact Us and Complaints
If you have any questions about this Privacy Policy, how Super 291 handles your data, or you wish to exercise any of your data subject rights, please reach out to us:
- Email: support@super291.best
- Support Hours: 24 hours a day, 7 days a week
- Response Time: Privacy requests are acknowledged within 48 hours and resolved within 15 business days
If you are not satisfied with how Super 291 has handled a privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for enforcing the Data Privacy Act of 2012. Details on how to file a complaint are available on the NPC's official government website.
Super 291 takes all privacy complaints seriously and we're committed to resolving them fairly and promptly. Hindi kami basta-basta magsasayang ng iyong tiwala.