ace219 Privacy Policy

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ace219 acts as the Data Controller in respect of the personal data of all registered players and visitors to the ace219 platform.

As Data Controller, ace219 determines the purposes and means of processing your personal data. We are responsible for ensuring that all personal data collected through the ace219 platform is processed lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

If you have any questions, concerns, or requests relating to the processing of your personal data by ace219, you may contact our Data Protection Officer (DPO) at any time using the contact details provided in Section 12 of this Privacy Policy.

ace219 collects personal data from players through several channels, including account registration, KYC verification, payment processing, gameplay activity, and customer support interactions. The categories of personal data we collect are described below.

ace219 does not collect sensitive personal information as defined under RA 10173 (such as health data, political opinions, or religious beliefs) unless specifically required for responsible gaming or legal compliance purposes, and only with your explicit consent.

ace219 uses the personal data we collect for the following purposes, each of which is grounded in a lawful basis as described in Section 4 of this Privacy Policy:

• Account Management: To create, maintain, and administer your ace219 player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to ace219's full range of gaming services, including slots, live dealer games, bingo, fishing games, and sports betting on PBA, NBA, UFC, boxing, and other markets.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in Philippine Peso (PHP).
• KYC & Regulatory Compliance: To verify your identity and age (21+) as required by PAGCOR regulations and Philippine law, and to comply with anti-money laundering obligations under the AMLA.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the ace219 platform and its players.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, and administer deposit limits and other responsible gaming tools.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns and player feedback to improve the ace219 platform, fix technical issues, and develop new features.
• Legal Obligations: To comply with applicable Philippine laws, court orders, regulatory requirements, and lawful requests from government authorities including PAGCOR and the AMLC.

Under the Philippine Data Privacy Act of 2012 (RA 10173), ace219 is required to have a lawful basis for each category of personal data processing. The legal bases on which ace219 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your ace219 account, process your bets, and pay out your winnings. Without this processing, we cannot provide our services to you.
• Legal Obligation: Processing that is required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself. This includes KYC verification, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing that is necessary for ace219's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided these interests are not overridden by your privacy rights.
• Consent: Processing that is based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where ace219 relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms as a data subject under Philippine law.

ace219 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers require certain financial and identity data to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by ace219 to verify player identity and age in compliance with PAGCOR requirements. These providers process only the minimum data necessary for verification purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where disclosure is required by law, court order, or regulatory mandate.
• Technology Service Providers: Cloud hosting providers, cybersecurity firms, and platform infrastructure providers who process data on ace219's behalf under strict data processing agreements that prohibit unauthorized use or disclosure.
• Game Content Providers: Third-party game studios and content providers whose games are available on the ace219 platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your full personal profile.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by ace219, subject to professional confidentiality obligations.

In the event that ace219 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

ace219 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, ace219 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

ace219 takes the security of your personal data seriously. We implement a comprehensive set of technical and organizational security measures designed to protect your data against unauthorized access, accidental loss, destruction, or disclosure.

Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the ace219 platform is encrypted using TLS (Transport Layer Security) protocols. Look for the padlock icon in your browser's address bar when accessing ace219.
• Encryption at Rest: Sensitive personal data stored on ace219's servers — including financial data and identity documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within ace219 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: ace219 supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorized access.
• Regular Security Audits: ace219 conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities in our platform.
• Incident Response: In the event of a personal data breach, ace219 will notify affected players and the National Privacy Commission (NPC) within the timeframes required by RA 10173 and its implementing rules.

ace219 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze how players use our services. A cookie is a small text file placed on your device when you visit ace219. Cookies do not contain viruses or malware and cannot access other files on your device.

The types of cookies used by ace219 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the ace219 platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming limits — to provide a more personalized experience on ace219.
• Analytics Cookies: These cookies collect anonymized information about how players use the ace219 platform, such as which pages are visited most frequently and how long players spend on each section. This data helps us improve the platform. Analytics cookies are only placed with your consent.
• Security Cookies: These cookies help ace219 detect and prevent fraudulent activity, unauthorized account access, and other security threats. They are strictly necessary for platform security.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ace219 platform. For more information on managing cookies, refer to your browser's help documentation.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by ace219. These rights may be exercised at any time by contacting our Data Protection Officer using the details in Section 12.

• Right to Be Informed: You have the right to be informed about how ace219 collects and uses your personal data. This Privacy Policy fulfils that obligation, and our support team is available to answer any specific questions you may have.
• Right of Access: You have the right to request a copy of the personal data that ace219 holds about you, along with information about how it is being processed. We will respond to access requests within 15 business days.
• Right to Rectification: If any personal data held by ace219 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your ace219 account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ace219's legal retention obligations under PAGCOR regulations and the AMLA.
• Right to Object: You have the right to object to the processing of your personal data where ace219 relies on legitimate interests as the legal basis, or where your data is being used for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: If you believe that ace219 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

ace219 strictly prohibits the use of its platform by persons under the age of 21, in compliance with PAGCOR regulations governing online gambling in the Philippines. We do not knowingly collect personal data from individuals under 21 years of age.

As part of our KYC verification process, ace219 requires all players to provide proof of age before their account is fully activated and before any deposits or withdrawals can be processed. Any account found to belong to a person under 21 will be immediately suspended, and any personal data collected in connection with that account will be securely deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account with ace219, please contact us immediately at [email protected]. We will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.

ace219 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When we make material changes to this Policy, we will notify registered players via their registered email address and display a prominent notice on the ace219 platform.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. We encourage you to review this Policy periodically to stay informed about how ace219 protects your personal data.

Your continued use of the ace219 platform following notification of any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ace219, please contact our Data Protection Officer using the details below. We are committed to resolving all privacy-related inquiries promptly and transparently.

If you are not satisfied with ace219's response to your privacy concern, or if you believe that ace219 has violated your rights under the Philippine Data Privacy Act, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing RA 10173 in the Philippines.

ace219 takes all privacy complaints seriously and will cooperate fully with any investigation conducted by the NPC or other competent Philippine authorities in connection with the processing of personal data on our platform.