Privacy Policy
super291a Data Commitment

1 Introduction

super291a is committed to protecting the privacy and personal data of every player who uses our online casino platform. Whether you are accessing our slots, live dealer tables, bingo rooms, fishing games like Fortune Dragon and Captain Fisher, or any other service we offer, we want you to feel confident that your personal information is handled with the utmost care and professionalism.

This Policy applies to all personal data collected through the super291a website, mobile platform, customer support channels, and any other touchpoint through which you interact with us. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with super291a.

If you have any questions about how we handle your data, our dedicated Data Protection Officer (DPO) is available to assist. Contact details are provided in Section 14 of this Policy.

2 Personal Data We Collect

super291a collects the following categories of personal data, depending on how you interact with our platform:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or with your explicit consent.

3 How We Collect Your Data

super291a collects personal data through the following means:

• Direct Interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in promotions, you provide us with personal data directly;
• Automated Technologies: When you access the super291a platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data helps us maintain platform security and improve your experience;
• Third-Party Sources: We may receive data about you from third-party identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention agencies, and regulatory bodies where permitted by law;
• KYC Verification Providers: To comply with anti-money laundering (AML) regulations and age verification requirements, we may use third-party KYC service providers who process your identity documents on our behalf.

4 How We Use Your Personal Data

super291a uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your player account, including verifying your identity and age (21+ requirement) at registration and on an ongoing basis;
• Service Delivery: To provide you with access to all super291a games and features, process your deposits and withdrawals in Philippine Peso (PHP), and deliver customer support;
• Legal & Regulatory Compliance: To comply with our obligations under Philippine law, including AML regulations, PAGCOR licensing requirements, and the Data Privacy Act of 2012. This includes reporting obligations to regulatory and law enforcement authorities where required;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the platform;
• Responsible Gaming: To monitor gameplay patterns and identify players who may be exhibiting signs of problem gambling, enabling us to offer appropriate support tools and interventions;
• Platform Improvement: To analyze aggregate usage data and improve the functionality, performance, and user experience of the super291a platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

super291a processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your player account, process transactions, and deliver the services you have requested;
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML obligations, PAGCOR regulatory requirements, and tax reporting obligations;
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms;
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

super291a does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only where necessary and lawful:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your financial transactions;
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist us in verifying your identity and meeting our regulatory obligations;
• Regulatory & Law Enforcement Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other government bodies where disclosure is required by law or court order;
• IT & Security Service Providers: Cloud hosting providers, cybersecurity firms, and platform infrastructure partners who process data on our behalf under strict data processing agreements;
• Professional Advisors: Legal counsel, auditors, and compliance consultants where necessary for the operation of our business, subject to professional confidentiality obligations.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

7 Cookies & Tracking Technologies

super291a uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and understand how you use our platform.

We use the following types of cookies:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting platform functionality;
• Analytics Cookies: Used to collect aggregate, anonymized data about how players use the super291a platform. This helps us identify areas for improvement and optimize the user experience;
• Preference Cookies: Used to remember your settings and preferences, such as language selection and display options, so you do not need to re-enter them on each visit;
• Marketing Cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications. These cookies track your interaction with promotional materials.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the super291a platform. For more information on managing cookies, refer to your browser's help documentation.

8 Data Retention

super291a retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations;
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer Support Records: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings;
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymized within 30 days.

When personal data is no longer required, super291a will securely delete or anonymize it in accordance with our data disposal procedures.

9 Data Security

super291a implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the super291a platform is encrypted using industry-standard SSL/TLS protocols;
• AES-256 Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations;
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses in our systems;
• Incident Response: super291a maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected individuals in accordance with the Data Privacy Act of 2012.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by super291a:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy;
• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within 30 calendar days. We may need to verify your identity before processing your request.

11 Children's Privacy

If you are a parent or guardian and believe that a minor under your care has provided personal data to super291a, please contact us immediately at the details provided in Section 14. We take underage gambling extremely seriously and will act promptly on any such report.

12 Third-Party Links

The super291a platform may contain references to third-party services such as payment providers. Please note that once you leave the super291a platform and interact with a third-party service, that service's own privacy policy will govern the collection and use of your data. super291a is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before providing any personal information.

13 Updates to This Policy

super291a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect.

The most current version of this Privacy Policy will always be available on the super291a platform. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. Your continued use of super291a following the publication of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically to stay informed about how we are protecting your personal information.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer (DPO). We are committed to addressing all privacy-related enquiries promptly and transparently.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have not been adequately addressed by super291a. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming concerns, please visit our dedicated Responsible Gaming page, or review our full Terms & Conditions.