ace888 Privacy Policy

1. Introduction

ace888 ("we," "us," "our," or "ace888") is committed to protecting the privacy and personal data of all users of the ace888 platform, accessible at ace888.app and any associated mobile interfaces (collectively, the "Platform"). This Privacy Policy ("Policy") describes how ace888 collects, uses, stores, shares, and protects your personal information when you access or use the Platform.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By registering for or using the ace888 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with the ace888 Terms & Conditions and Responsible Gaming Policy, which are incorporated herein by reference.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, ace888 acts as the Personal Information Controller in respect of the personal data you provide when using the Platform. This means ace888 determines the purposes and means of processing your personal data.

ace888 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO through the contact details provided in Section 16 of this Policy.

3. Personal Data We Collect

ace888 collects the following categories of personal data from users of the Platform:

ace888 does not intentionally collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless specifically required for regulatory compliance purposes, in which case your explicit consent will be sought.

4. How We Collect Your Data

ace888 collects your personal data through the following means:

• Direct interactions: Data you provide when registering an ace888 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors.
• Publicly available sources: Information from public databases or government registries where necessary for identity verification or fraud prevention purposes.

5. How We Use Your Personal Data

ace888 uses your personal data for the following purposes:

• To register and maintain your ace888 account, including verifying your identity and age (21+ requirement).
• To process deposits, withdrawals, and other financial transactions on the Platform.
• To provide, operate, and improve the ace888 Platform and its features.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and PAGCOR reporting requirements.
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities.
• To administer bonuses, promotions, and loyalty programs.
• To provide customer support and respond to your enquiries.
• To send you service-related communications, including account notifications, security alerts, and policy updates.
• To send you marketing communications about ace888 promotions and offers, where you have consented to receive such communications.
• To enforce our Terms & Conditions and other applicable policies.
• To conduct analytics and research to improve the Platform and user experience.
• To support responsible gaming by monitoring gaming patterns and applying responsible gaming tools where appropriate.

6. Legal Basis for Processing

ace888 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including operating your account, processing transactions, and providing Platform services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and PAGCOR regulatory reporting.
• Legitimate interests: Processing necessary for ace888's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular, for marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

ace888 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• KYC and identity verification providers: Third-party services that assist ace888 in verifying your identity and age in compliance with regulatory requirements.
• Fraud prevention and AML partners: Service providers that help ace888 detect and prevent fraud, money laundering, and other prohibited activities.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers who process data on ace888's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

All third parties with whom ace888 shares personal data are required to handle such data in accordance with applicable data privacy laws and ace888's data protection standards.

8. International Data Transfers

Some of ace888's service providers and technical infrastructure may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, ace888 will implement appropriate safeguards — such as standard contractual clauses or binding corporate rules — to ensure that your data remains protected in accordance with the DPA.

By using the ace888 Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Policy.

9. Data Retention

ace888 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In particular:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations.
• KYC verification documents are retained for a minimum of five (5) years following the end of the business relationship.
• Marketing consent records are retained for the duration of your account and for three (3) years following account closure.
• Technical and usage data collected via cookies is retained in accordance with the cookie retention periods set out in Section 10.

When your personal data is no longer required, ace888 will securely delete or anonymize it in accordance with our data retention and disposal procedures.

10. Cookies & Tracking Technologies

ace888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled. They include session management, security, and load-balancing cookies.
• Functional cookies: Remember your preferences (such as language and display settings) to provide a more personalized experience.
• Analytics cookies: Help us understand how users interact with the Platform, which pages are most visited, and where improvements can be made. Data collected is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant promotional content about ace888. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ace888:

• Right to be informed: The right to be informed of how your personal data is being processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data ace888 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ace888's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the ace888 Data Protection Officer using the contact details in Section 16. ace888 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

Please note that certain rights are subject to limitations under applicable law — for example, ace888 may be required to retain certain data to comply with AML regulations even if you request erasure.

12. Children's Privacy

The ace888 Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. ace888 does not knowingly collect personal data from individuals under the age of 21.

If ace888 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately using the details in Section 16.

13. Security Measures

ace888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ace888 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication for account access and administrative systems.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ace888 will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the DPA and NPC Circular No. 16-03.

While ace888 takes all reasonable steps to protect your data, no method of transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your ace888 account credentials.

14. Third-Party Links

The ace888 Platform may contain links to third-party websites or services for informational purposes. ace888 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

This Policy applies solely to personal data collected and processed by ace888 through the ace888 Platform.

15. Updates to This Policy

ace888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, ace888 will notify registered users via email or a prominent notice on the Platform.

The updated Policy will take effect from the date of publication on the ace888 website. The "Last updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed of how ace888 protects your personal data.

Your continued use of the ace888 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ace888, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the ace888 Platform.
• Email: [email protected]

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.