ace222 Privacy Policy

1. Who We Are (Data Controller)

1.1 ace222 ("we," "us," "our") is the operator of the online gaming platform accessible at https://ace222.club ("Platform"). For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations ("DPA"), ace222 is the Personal Information Controller in respect of personal data processed in connection with your use of the Platform.

1.2 ace222 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation ("PAGCOR"). This Privacy Policy applies to all personal data processed by ace222 in connection with the Platform, including registration, account management, gameplay, financial transactions, and customer support interactions.

2. Data We Collect

2.1 ace222 collects the following categories of personal data from you, either directly or through automated means:

2.2 ace222 does not knowingly collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for KYC compliance, specifically: government-issued identification document numbers and biometric-style selfie photos required for identity verification. These are processed solely for compliance purposes and are not used for any other purpose.

3. How We Use Your Data

3.1 ace222 processes your personal data for the following purposes:

• Account creation and management: to register your ace222 account, verify your identity, and maintain your account throughout its lifetime.
• Service delivery: to provide access to gaming products, process bets, calculate and credit winnings, and manage your wallet balance in Philippine Pesos.
• Financial transactions: to process deposits via GCash, Maya, BPI, BDO, and other accepted payment channels; to process withdrawal requests; to maintain accurate transaction records.
• Regulatory compliance: to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Terrorism Financing Prevention and Suppression Act, and other applicable Philippine laws.
• Responsible gaming: to monitor gaming patterns for indicators of problematic gambling behaviour; to enforce self-exclusion and account restriction requests; to enforce the 21+ age requirement.
• Security and fraud prevention: to detect and prevent fraudulent account activity, identity fraud, money laundering, and collusion.
• Customer support: to respond to your queries, complaints, and dispute submissions via live chat and email.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest. You may withdraw consent at any time via your account settings.
• Platform improvement: to analyse aggregated usage data to improve the Platform's features, performance, and user experience.

4. Legal Basis for Processing

4.1 ace222 processes your personal data on the following legal bases under the DPA:

• Performance of a contract: processing necessary to provide the gaming services you have contracted for when registering an ace222 account.
• Legal obligation: processing required to comply with PAGCOR regulations, AMLA, and other applicable Philippine laws.
• Legitimate interests: processing for fraud prevention, security, and Platform improvement, where those interests are not overridden by your privacy rights.
• Consent: processing for direct marketing communications, where we rely on your opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

5.1 ace222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 ace222 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• PAGCOR and regulatory authorities: as required by PAGCOR licensing conditions or Philippine law, including mandatory suspicious transaction reporting under AMLA.
• Payment processors: GCash (G-Xchange, Inc.), Maya Philippines, Inc., BancNet, banks, and other payment channel operators — for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: third-party services used to verify the authenticity of identity documents submitted during the KYC process.
• Game content providers: licensed game providers (e.g., Pragmatic Play, Ezugi) receive limited technical identifiers (non-personally identifying session tokens) to deliver game content. These providers do not receive your identity data.
• Cloud infrastructure providers: hosting and data storage providers who process your data on ace222's behalf under data processing agreements.
• Law enforcement: where required by a valid court order, subpoena, or legal process under Philippine law.

5.3 All third-party processors are contractually required to process your data only in accordance with ace222's instructions, to maintain adequate security standards, and to comply with applicable data privacy law.

6. Cookies & Tracking Technologies

6.1 ace222 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and collect usage analytics. The following types of cookies are used:

• Strictly necessary cookies: required for the Platform to function. These include session cookies that keep you logged in. These cannot be disabled.
• Functional cookies: remember your preferences (e.g., language, game lobby layout). Disabling these may affect Platform functionality.
• Analytics cookies: collect anonymised data about how players use the Platform to help us improve it. ace222 uses aggregated analytics only.

6.2 You can manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.

7. Data Retention

7.1 ace222 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

• Account data: retained for the duration of your account and for five (5) years following permanent account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial transaction records: retained for a minimum of five (5) years from the date of the transaction, as required under AMLA.
• KYC documents: retained for the period required by PAGCOR and AMLA — typically five (5) years from the end of the business relationship.
• Customer support records: retained for three (3) years from the date of the interaction, or longer where required for dispute resolution.
• Marketing preference data: retained until you withdraw consent or close your account.

7.2 Following the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents reconstruction.

8. Data Security

8.1 ace222 implements technical and organisational security measures appropriate to the risk, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and ace222 servers;
• Encryption of personal data and financial data at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for all internal systems that process personal data;
• Regular security vulnerability assessments and penetration testing;
• Incident response procedures, including mandatory notification to the National Privacy Commission (NPC) within 72 hours of becoming aware of a reportable personal data breach.

8.2 Notwithstanding these measures, no data transmission over the internet is completely secure. ace222 cannot guarantee the absolute security of your data in transit.

9. Your Rights Under the Data Privacy Act

9.1 As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data processed by ace222:

• Right to be informed: the right to know what personal data ace222 holds about you and how it is processed — addressed by this Privacy Policy.
• Right of access: the right to obtain a copy of your personal data and information about how it is used, upon written request.
• Right to rectification: the right to have inaccurate or incomplete personal data corrected. You can update most data directly in your account settings.
• Right to erasure: the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to ace222's legal retention obligations under AMLA and PAGCOR regulations.
• Right to object: the right to object to the processing of your personal data for direct marketing purposes. You may opt out at any time via account settings.
• Right to data portability: the right to receive your personal data in a structured, machine-readable format where technically feasible.
• Right to file a complaint: the right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your data privacy rights have been violated.

9.2 To exercise any of the above rights, please contact ace222's Data Protection Officer at the details provided in Section 13. ace222 will respond to all valid requests within thirty (30) days.

10. Children & Minors

10.1 The ace222 Platform is strictly for persons aged twenty-one (21) years and older. ace222 does not knowingly collect or process personal data from persons under the age of 21.

10.2 If ace222 becomes aware that it has inadvertently collected personal data from a person under 21, it will immediately close the relevant account, permanently delete the personal data collected, and where appropriate, report the matter to relevant Philippine authorities.

10.3 If you believe a minor has registered an ace222 account, please notify our Data Protection Officer immediately using the contact details in Section 13.

11. Cross-Border Data Transfers

11.1 Some of ace222's third-party service providers (including cloud infrastructure providers and game content providers) may process your personal data outside of the Republic of the Philippines. Where such transfers occur, ace222 ensures that adequate safeguards are in place in accordance with the DPA, including standard contractual clauses and data processing agreements that impose obligations equivalent to those applicable in the Philippines.

11.2 ace222 will not transfer your personal data to a jurisdiction that does not provide an adequate level of protection for personal data unless appropriate safeguards as described above are in place.

12. Amendments to This Policy

12.1 ace222 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the email address on file at least fourteen (14) days before taking effect.

12.2 Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the revisions. The current version of this Privacy Policy is always accessible at ace222.club/privacy-policy.

13. Contact & Data Protection Officer

13.1 ace222 has appointed a Data Protection Officer (DPO) as required under the DPA. For all data privacy enquiries, rights requests, or complaints, please contact:

13.2 You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). Information on the NPC's complaint process is available through official Philippine government channels.