299 Privacy Policy

1 Introduction

299 ("we", "us", "the Platform") is committed to protecting the privacy of all players who access our online betting and gaming services. This Privacy Policy describes what personal information we collect, why we collect it, how we use and store it, and what rights you have in relation to your data.

This policy applies to all users of the 299 website at 299.vin and any associated mobile application. It should be read alongside our Terms and Conditions, which govern the overall use of the platform.

299 operates exclusively in the Philippines. All services are directed at players physically located in the Philippines, and we handle personal data in accordance with applicable Philippine data privacy requirements, including the principles set out under Republic Act No. 10173, also known as the Data Privacy Act of 2012.

2 Data We Collect

We collect personal information when you register, verify your identity, make transactions, or interact with the platform. The categories of data we collect are described below.

Registration Data

When you create a 299 account, we collect your full name, date of birth, email address, mobile number, and a username and password of your choosing. This information is required to create and manage your account.

Identity Verification (KYC) Data

Before your first withdrawal, we require identity verification. This involves submitting a copy of a valid Philippine government-issued ID — such as a passport, driver's licence, UMID, SSS card, or PhilSys national ID — along with a selfie photograph for matching purposes. This data is used solely to confirm your identity and meet our compliance obligations.

Transaction and Financial Data

We record details of all deposits, bets, game activity, and withdrawal requests associated with your account. This includes transaction amounts, timestamps, payment channel references, and account balance history. We do not store full bank account numbers or e-wallet credentials — these remain within your bank's or e-wallet provider's secured environment.

Device and Usage Data

When you access 299, we automatically collect certain technical data including your IP address, browser type and version, device type and operating system, pages visited, time spent on the platform, and session duration. This information helps us detect fraud, improve platform performance, and resolve technical issues.

Communications Data

If you contact our support team, we retain records of that communication — including messages sent and received — to assist with follow-up queries and to maintain a record of any issues raised.

Data Category	Examples	Primary Purpose
Registration Data	Name, email, mobile number, date of birth	Account creation and identity management
KYC / Verification Data	Government ID, selfie photograph	Identity verification and compliance
Transaction Data	Deposit and withdrawal records, bet history	Payment processing and account records
Device and Usage Data	IP address, browser type, session logs	Security, fraud detection, performance
Communications Data	Support messages and ticket history	Customer service and dispute resolution

3 How We Use Your Data

We use the personal information we collect for the following purposes:

• Account management — to create, maintain, and secure your 299 account, and to verify that you meet eligibility requirements (21 years of age or above, physically located in the Philippines).
• Identity verification — to process KYC submissions and confirm that your identity documents are valid before processing withdrawal requests.
• Payment processing — to handle deposits and withdrawals through Philippine payment channels including bank transfers, InstaPay, PESONet, GCash, and Maya.
• Platform operation — to settle bets, calculate winnings, apply promotional offers to your account, and maintain accurate account records.
• Security and fraud prevention — to detect suspicious activity, prevent unauthorised access, and protect both you and the platform from fraudulent transactions.
• Customer support — to respond to your queries, resolve disputes, and follow up on any issues you raise through the support team.
• Legal and compliance obligations — to meet applicable data privacy, anti-money laundering, and other regulatory requirements that apply to online gaming operations in the Philippines.
• Platform improvement — to analyse usage patterns and technical performance so we can improve the overall experience for all players.

We do not use your personal data for automated decision-making that produces significant legal effects without human review. Decisions that directly affect your account — such as suspension or withdrawal holds — involve human assessment of the relevant facts.

4 Sharing Your Data

299 does not sell your personal data to third parties. We share personal information only in the circumstances described below, and only to the extent necessary for each purpose.

Payment Service Providers

When you make a deposit or request a withdrawal, we share the transaction details necessary to complete the payment with our partner payment processors and Philippine banking channels. These providers handle your payment data under their own privacy and security standards.

Identity Verification Partners

KYC submissions may be processed through a third-party identity verification service. This service receives only the data required to confirm your identity and returns a verification result to 299. Your documents are not retained by the verification provider beyond the period required to complete the check.

Technology and Infrastructure Providers

We use third-party services for cloud hosting, platform security, and technical infrastructure. These providers may process certain data as part of their service delivery but are contractually restricted from using that data for their own purposes.

Legal and Regulatory Disclosure

We may disclose personal information to law enforcement, regulators, or other government authorities if required by applicable Philippine law, court order, or in response to a valid legal process. In such cases, we will only disclose what is legally required.

5 Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to meet our legal and compliance obligations. Specific retention periods vary by data type:

• Account and registration data — retained for the duration of your account and for a period after closure as required by applicable law.
• KYC documents — retained for the period mandated under Philippine anti-money laundering regulations, typically five years from the date of the last transaction.
• Transaction records — retained for at least five years to comply with financial record-keeping requirements.
• Support communications — retained for as long as reasonably necessary to resolve any ongoing or potential disputes.
• Device and usage logs — retained for a shorter period, generally sufficient for security monitoring and fraud investigation purposes.

Once data is no longer needed and the applicable retention period has passed, we securely delete or anonymise it so it can no longer be linked back to you.

6 Security Measures

299 uses a combination of technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. These include:

• SSL/TLS encryption for all data transmitted between your device and the platform.
• Secure, access-controlled storage for personal data and KYC documents.
• Two-factor authentication and OTP verification for account login and sensitive account actions.
• Regular internal security reviews and monitoring of access logs.
• Strict access controls — only staff with a legitimate need can access personal data, and all such access is logged.

While we take all reasonable precautions, no online platform can guarantee absolute security. You also play a role in keeping your account safe — keep your password strong, do not share it with anyone, and contact support immediately if you suspect unauthorised access to your account.

7 Cookies

299 uses cookies and similar tracking technologies to operate the platform and improve your experience. A cookie is a small file stored on your device that helps the platform recognise you across sessions.

Types of Cookies We Use

• Essential cookies — required for the platform to function. These keep you logged in, maintain your session, and support security features. They cannot be disabled without affecting core functionality.
• Performance cookies — collect anonymised data about how players use the platform, such as which pages are visited most. This helps us identify and fix issues and improve navigation.
• Functional cookies — remember your preferences such as language settings and display options, so you do not need to re-enter them each time you visit.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent parts of the platform from working correctly. We do not use cookies to serve third-party advertising on the 299 platform.

8 Your Rights Over Your Data

Under the Data Privacy Act of 2012 (RA 10173) and applicable Philippine regulations, you have the following rights in relation to your personal information:

• Right to be informed — you have the right to know what personal data we hold about you and how it is being used. This Privacy Policy is our primary means of fulfilling that obligation.
• Right of access — you may request a copy of the personal data 299 holds about you. Submit your request through the support team with sufficient details to identify your account.
• Right to rectification — if any of your personal data is inaccurate or incomplete, you may request that we correct it. Some data — such as your registered name — may require identity re-verification before changes can be made.
• Right to erasure — you may request deletion of your personal data in certain circumstances, for example if the data is no longer required for the purpose it was collected. Note that we may need to retain certain data to comply with legal obligations even after a deletion request.
• Right to object — you may object to the processing of your personal data where we rely on legitimate interest as the legal basis, unless we can demonstrate compelling grounds that override your interests.
• Right to data portability — where technically feasible and legally applicable, you may request a copy of the personal data you provided to us in a structured, commonly used format.

To exercise any of these rights, contact the 299 support team. We will acknowledge your request promptly and aim to respond within 30 days. In some cases, we may need to verify your identity before processing a data request.

9 Minors and Age Restriction

299 is strictly for players aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that an account belongs to a person under the minimum age, that account will be closed and any associated data will be handled in accordance with applicable law.

If you believe that a minor has registered on 299, please contact support so we can investigate and take appropriate action. Visit our Responsible Gaming page for more information on our age verification approach.

10 Updates to This Policy

We may revise this Privacy Policy from time to time to reflect changes in platform features, applicable laws, or how we handle data. When material changes are made, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via email or in-platform notification.

Your continued use of 299 after any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically so you are always aware of how your data is being handled.

11 Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please reach out to the 299 support team through the contact channels available in your account dashboard.

For questions about platform rules and account conduct, refer to our Terms and Conditions. For common questions, visit the FAQ page.