ace222 Privacy Policy

1Definitions

For the purposes of this Privacy Policy:

• "ace222," "we," "us," "our" refers to the operator of the ace222 online casino and sports betting platform accessible at ace222.net.
• "You," "Player," "Data Subject" refers to any individual whose personal data is processed by ace222, including registered account holders, prospective registrants, and site visitors.
• "Personal Data" means any information relating to an identified or identifiable natural person, as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
• "Sensitive Personal Information" has the meaning given to it under Republic Act No. 10173 and includes government-issued ID numbers, financial information, and biometric data collected for KYC purposes.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Protection Officer" (DPO) refers to the designated officer responsible for overseeing ace222's compliance with applicable data protection laws.
• "NPC" means the National Privacy Commission of the Philippines, the regulatory body responsible for enforcing Republic Act No. 10173.

2Data Controller Identity

ace222 operates as the data controller for personal data collected through the ace222 platform. As data controller, ace222 determines the purposes and means of processing your personal data in accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

ace222 is registered with the National Privacy Commission as required by applicable regulations. Our Data Protection Officer can be contacted at [email protected] for all data privacy inquiries, requests, and concerns.

3Personal Data We Collect

ace222 collects personal data across the following categories, depending on how you interact with our platform:

3.1 Registration Data

• Full legal name;
• Date of birth (to verify 21+ age eligibility);
• Email address;
• Philippine mobile number;
• Chosen username;
• Residential address (for KYC purposes).

3.2 Identity Verification (KYC) Data

• Copy of a government-issued Philippine ID (e.g., PhilSys ID, passport, driver's license, UMID, voter's ID);
• Live selfie or facial scan for liveness verification;
• Proof of address where required by regulatory standards.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods;
• GCash account reference, Maya account reference, or bank account details as applicable to the payment method used;
• Transaction history and account balance information.

3.4 Gaming Activity Data

• Game session data (games played, bets placed, results, session duration);
• Sports betting activity including markets selected and wager amounts;
• Bonus and promotion participation history.

3.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Login timestamps and session durations;
• Cookies and similar tracking technology data (see Section 8).

3.6 Communications Data

• Customer support correspondence (live chat transcripts, emails);
• Survey and feedback responses if voluntarily provided.

4How We Collect Your Data

ace222 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC, make deposits or withdrawals, contact customer support, or submit any form on the Platform;
• Automatically: through server logs, cookies, and similar technologies as you navigate and use the ace222 Platform;
• From third-party KYC providers: where we use licensed identity verification services to assist with age and identity checks, those providers may share verification results and associated data with ace222;
• From payment processors: GCash, Maya, BPI, BDO, and other payment service providers may share transaction confirmation data with ace222 for reconciliation and fraud prevention purposes.

5Legal Basis for Processing

ace222 processes your personal data on the following legal bases under Republic Act No. 10173:

6How We Use Your Personal Data

ace222 uses your personal data for the following purposes:

6.1 Account and Platform Operations

To create and manage your Player Account, authenticate your identity at login, process your gaming activity, calculate balances, and provide the full range of ace222 casino and sports betting services.

6.2 Identity Verification and Regulatory Compliance

To verify that you meet the minimum age requirement of 21 years, to comply with PAGCOR licensing conditions, and to fulfil our obligations under the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended). ace222 is legally required to conduct these checks and cannot process withdrawal requests without satisfactory KYC completion.

6.3 Payment Processing

To facilitate deposits via GCash, Maya, BPI, BDO, Metrobank, Coins.ph, 7-Eleven Cliqq, and USDT TRC20, and to process withdrawal requests to your verified payment method. Transaction data is retained for accounting, audit, and regulatory reporting purposes.

6.4 Security and Fraud Prevention

To detect and prevent unauthorized access, fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities. This includes behavioral analysis of gaming patterns and transaction monitoring.

6.5 Customer Support

To respond to your support inquiries, resolve disputes, and maintain records of communications for quality assurance and compliance purposes.

6.6 Responsible Gaming

To administer your responsible gaming settings (deposit limits, session reminders, self-exclusion), to monitor gaming behavior for indicators of problem gambling, and to comply with PAGCOR's responsible gaming program requirements.

6.7 Marketing Communications (with consent)

Where you have provided consent, to send you promotional emails, SMS notifications, and in-account messages about bonuses, new games, sports events, and other ace222 promotions. You may withdraw this consent at any time through Account Settings or by contacting our support team.

6.8 Platform Analytics and Improvement

To analyze usage patterns, identify performance issues, improve game lobby design, and optimize the overall ace222 player experience. Analytics data is processed in aggregated or pseudonymized form wherever possible.

7Data Sharing and Third-Party Disclosure

ace222 does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment processors receive transaction data necessary to process deposits and withdrawals.
• KYC and Identity Verification Providers: Licensed third-party services that assist ace222 in verifying player identities and ages receive the identity documents and biometric data submitted during the KYC process, under strict data processing agreements.
• Game Software Providers: JILI, Pragmatic Play, Evolution Gaming, NetEnt, and other game providers may receive session data necessary for game delivery, RNG auditing, and jackpot administration.
• Regulatory Authorities: PAGCOR and other Philippine regulatory bodies including the Anti-Money Laundering Council (AMLC) may receive data as required by law, regulation, or lawful order.
• Law Enforcement: ace222 will disclose personal data to law enforcement authorities where required by a valid court order, subpoena, or legal process under Philippine law.
• Professional Advisors: Lawyers, accountants, and auditors engaged by ace222 may access personal data in connection with professional services, subject to applicable professional confidentiality obligations.

All third parties with whom ace222 shares personal data are required to implement appropriate technical and organizational security measures and are prohibited from using the data for any purpose other than the one for which it was shared.

8Cookies and Tracking Technologies

The ace222 platform uses cookies and similar technologies to ensure proper functionality, improve your experience, and gather analytics data. The types of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and language preferences. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as game lobby filters, notification settings, and login information (if "Remember Me" is selected).
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate the Platform. This helps ace222 identify and fix usability issues and improve the overall experience.
• Security Cookies: Used for fraud detection, bot prevention, and monitoring suspicious login activity.

You can manage cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of some parts of the ace222 Platform, including persistent login and game lobby personalization.

9Data Retention

ace222 retains personal data for the minimum period necessary to fulfil the purposes outlined in this Privacy Policy, taking into account applicable legal and regulatory retention obligations. Our general retention framework is as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized. Data retained for regulatory purposes is protected with the same security controls as active account data.

10Data Security

ace222 implements a layered approach to data security that includes technical, administrative, and organizational safeguards:

Technical Measures:

• 128-bit SSL/TLS encryption for all data transmitted between your device and the ace222 Platform;
• Encryption at rest for sensitive stored data including KYC documents and payment details;
• Multi-factor authentication for internal system access;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Web application firewall (WAF) and DDoS mitigation systems;
• Automated intrusion detection and real-time security monitoring.

Organizational Measures:

• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular data protection training for all staff who handle personal data;
• Data processing agreements with all third-party service providers;
• An incident response plan for managing personal data breaches in compliance with NPC reporting requirements.

11Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by ace222:

To exercise any of the above rights, please contact ace222's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond to verified requests within 15 business days of receipt, in accordance with NPC guidelines. We may request additional information to verify your identity before processing your request.

12Children's Privacy and Underage Players

The ace222 Platform is strictly intended for adults who are at least 21 years of age. ace222 does not knowingly collect, process, or retain personal data from individuals under 21 years of age.

If ace222 discovers or reasonably suspects that personal data has been collected from an individual under the age of 21, we will:

• Immediately suspend the associated account;
• Return any deposited funds to the originating payment method following AML checks;
• Permanently delete the underage individual's personal data from our systems, except where retention is required to prevent re-registration or to comply with legal obligations;
• Report the matter to PAGCOR as required by licensing conditions.

If you believe a minor has created an ace222 account, please notify us immediately at [email protected].

13Cross-Border Data Transfers

The ace222 Platform operates primarily within the Philippines. However, certain third-party service providers — including game software suppliers, cloud infrastructure providers, and cybersecurity services — may be based outside the Philippines or may process data on servers located in other jurisdictions.

Where personal data is transferred outside the Philippines, ace222 ensures that such transfers comply with the requirements of the Data Privacy Act of 2012, including the use of appropriate safeguards such as:

• Data processing agreements incorporating standard contractual clauses approved by the NPC;
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the NPC;
• Technical and organizational measures to maintain the security of transferred data consistent with our Philippine standards.

14Updates to This Privacy Policy

ace222 reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered players by email to the address on file and/or through a prominent notice on the ace222 Platform at least 14 days before the changes take effect.

Minor or non-material updates — such as corrections of typographical errors or clarifications that do not change the substance of our data practices — may be made without advance notice, with the effective date updated at the top of this page.

Your continued use of the ace222 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Privacy Policy periodically.

15Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or ace222's data protection practices, please contact our Data Protection Officer:

• Email: [email protected] — use subject line "Data Privacy Request" for prioritized handling.
• Live Chat: Available 24/7 within your logged-in ace222 account for general data privacy queries.

For formal complaints regarding ace222's compliance with the Data Privacy Act of 2012, you may also contact the National Privacy Commission of the Philippines directly through their official channels.

ace222 takes all data privacy inquiries seriously. We aim to provide a substantive response to all data subject requests within 15 business days. Complex requests involving large volumes of data or requiring legal review may take up to 30 days; we will notify you if this applies to your request.