ace8 Privacy Policy
At ace8, protecting your personal information is something we take seriously. This Privacy Policy explains what data we collect from Filipino players, how we use it, who we share it with, and what your rights are under the Philippine Data Privacy Act of 2012. Please read this carefully before using the ace8 platform.
How ace8 Protects Your Privacy
ace8 handles your personal data with the same care we apply to your GCash withdrawals — fast, secure, and fully compliant with Philippine law.
Data Privacy Act Compliant
ace8 processes all player data in strict compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its implementing rules. Our data handling practices are aligned with the standards set by the National Privacy Commission (NPC) of the Philippines.
No Third-Party Marketing Sales
Your personal information — including your GCash number, mobile number, and betting history — is never sold to third-party advertisers or data brokers. ace8 only shares data where legally required by PAGCOR or Philippine anti-money-laundering authorities.
Encrypted Data Storage
All sensitive player data stored on ace8 servers is protected using industry-standard encryption protocols. Payment information and KYC documents are stored in isolated, access-controlled environments with audit logging enabled at all access points.
KYC for Your Protection
Identity verification is not just a regulatory requirement — it is a key security layer that protects your ace8 account from fraud and unauthorised access. KYC data is processed securely and used solely for verification, compliance, and responsible gaming monitoring purposes.
You Control Your Data
Registered ace8 players have the right to access, correct, and request deletion of their personal data, subject to legal retention obligations. You can also opt out of promotional communications at any time through your account settings or by contacting ace8 support.
Transparent Cookie Use
ace8 uses cookies and similar technologies solely to improve platform performance, maintain session security, and understand how players navigate the site. We do not use third-party tracking cookies for cross-site advertising profiling. Full details are in Section 8 of this policy.
Your Data Rights as a Filipino Player
Under the Philippine Data Privacy Act, ace8 players are entitled to the following rights regarding their personal information.
Right to Access
Request a copy of the personal data ace8 holds about you at any time.
Right to Correction
Request correction of inaccurate or incomplete personal information on your account.
Right to Erasure
Request deletion of personal data where no legal retention obligation applies.
Right to Object
Object to the processing of your personal data for direct marketing purposes.
Right to Data Portability
Receive your personal data in a structured, machine-readable format upon request.
Right to Complain
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if your rights are not upheld.
Summary: ace8 collects personal data to operate your account, process GCash payments, comply with PAGCOR regulations, and keep the platform secure. We do not sell your data. You have clear rights under Philippine law. Questions? Contact us at support@ace8.bio.
1Introduction
This Privacy Policy describes how ace8 ("we", "us", or "our") collects, uses, stores, and protects the personal information of individuals ("you" or "the player") who access or use the ace8 online gaming platform available at ace8.bio.
ace8 is operated under a PAGCOR license and serves Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and surrounding areas. As an operator subject to Philippine jurisdiction, ace8 is bound by Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations (IRR), as overseen by the National Privacy Commission (NPC).
This Privacy Policy applies to all personal data collected through the ace8 website, account registration process, deposit and withdrawal transactions, customer support interactions, and any other service offered through the ace8 platform. By creating an ace8 account or using our services, you acknowledge that you have read and understood this Privacy Policy.
2Personal Data We Collect
ace8 collects only the personal data that is necessary and proportionate to the purposes described in this Privacy Policy. The categories of personal data we collect include the following:
2.1 Identity & Registration Data
- Full legal name (as it appears on government-issued ID);
- Date of birth (for 21+ age verification in compliance with PAGCOR regulations);
- Gender (optional, for account personalisation);
- Nationality and country of residence;
- Government-issued ID type and number (e.g., Philippine National ID, passport, driver's license, SSS/GSIS card).
2.2 Contact Data
- Email address;
- Mobile phone number (GCash-registered number where applicable);
- Home address or city of residence (for KYC and regulatory reporting).
2.3 Financial & Payment Data
- GCash account number or wallet identifier;
- Bank account details where bank transfer methods (BPI, BDO, Metrobank) are used;
- Card details (Visa/Mastercard) — partial card number and expiry only; full card data is handled by the payment processor and not stored by ace8;
- Transaction history: deposit amounts, withdrawal requests, timestamps, and reference numbers.
2.4 Gaming Activity Data
- Game types played (slots, live casino, bingo, sports betting, sabong, golf);
- Wager amounts, win/loss records, session durations;
- Bonus claims, wagering requirement progress, and loyalty programme point balances;
- Self-imposed responsible gaming limits and self-exclusion records.
2.5 Technical & Device Data
- IP address and approximate geographic location;
- Device type, operating system, and browser type;
- Session logs, login timestamps, and authentication records;
- Cookies and similar tracking technologies (see Section 8).
2.6 Communications Data
- Records of live chat support conversations;
- Email correspondence sent to support@ace8.bio;
- Feedback, complaint submissions, and dispute records.
3How We Collect Your Data
ace8 collects personal data through the following channels:
- Account Registration: Data you provide when creating your ace8 account, including name, date of birth, email, and mobile number;
- KYC Verification: Identity documents and supporting materials you submit to complete the verification process required by PAGCOR regulations;
- Deposits & Withdrawals: Payment data transmitted during financial transactions via GCash, PayMaya, bank transfers, or card payments;
- Platform Use: Gaming activity, session behaviour, and device data collected automatically while you use the ace8 platform;
- Customer Support: Information shared during live chat conversations, email correspondence, or feedback submissions;
- Cookies & Technology: Data collected automatically through cookies, session tokens, and analytics tools embedded in the ace8 platform (see Section 8);
- Third-Party Verification: In some cases, ace8 may receive identity or address verification data from licensed third-party KYC service providers to supplement information you have provided directly.
4How We Use Your Personal Data
ace8 uses the personal data we collect for the following specific and legitimate purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Identity data, contact data |
| Age verification (21+ PAGCOR requirement) | Date of birth, government ID |
| KYC and identity verification | Identity data, government ID, address |
| Processing deposits and GCash withdrawals | Financial data, GCash number |
| Fraud detection and anti-money-laundering monitoring | Transaction data, IP address, device data |
| Regulatory reporting to PAGCOR | Identity data, transaction records, gaming activity |
| Responsible gaming monitoring and enforcement | Gaming activity, session data, self-exclusion records |
| Customer support and dispute resolution | Communications data, account history |
| Loyalty programme management | Gaming activity, account data |
| Platform security and access control | Technical data, login records, device data |
| Sending promotional communications (with consent) | Contact data, gaming preferences |
| Platform performance analytics and improvement | Technical data, anonymised usage patterns |
ace8 does not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or as required by applicable Philippine law.
5Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, ace8 processes your personal data on the following legal bases:
- Contractual Necessity: Processing is necessary to perform the contract between ace8 and you as a registered player — including account management, payment processing, and game delivery;
- Legal Obligation: Processing is required for ace8 to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine laws;
- Legitimate Interests: Processing is necessary to protect the security and integrity of the ace8 platform, detect fraud, and prevent prohibited conduct as defined in the ace8 Terms & Conditions;
- Consent: Where required by law — for example, sending promotional emails or SMS messages — ace8 will obtain your explicit consent before processing your data for that purpose. You may withdraw consent at any time by contacting support or adjusting your account preferences.
6Data Sharing & Disclosure
6.1 Who We Share Data With
ace8 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and lawful:
- PAGCOR and Regulatory Authorities: ace8 is required by its PAGCOR license to report certain player data, transaction records, and suspicious activity reports to relevant Philippine government authorities, including the Anti-Money Laundering Council (AMLC);
- Payment Processors: GCash (Mynt — Globe Fintech Innovations), PayMaya, BPI, BDO, Metrobank, and card processors (Visa/Mastercard networks) receive transaction data necessary to process your deposits and withdrawals. These providers are independently regulated and maintain their own privacy policies;
- KYC and Identity Verification Providers: Licensed third-party identity verification service providers may process your government ID and biometric data on ace8's behalf as data processors under strict contractual obligations;
- Game Content Providers: Third-party game studios integrated into the ace8 platform (such as JILI and other providers) may receive your player ID and session data for game delivery and fairness certification purposes. They do not receive your full identity or financial data;
- Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on ace8's behalf as data processors, subject to data processing agreements and bound by confidentiality obligations.
6.2 International Data Transfers
Some of ace8's technology providers or game studios may be located outside the Philippines. Where personal data is transferred internationally, ace8 ensures that appropriate safeguards are in place — including contractual data protection clauses — to ensure that your data receives an equivalent level of protection as required under Philippine law.
7Data Retention
ace8 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | Duration of account + 5 years after closure | PAGCOR / AMLA requirements |
| KYC documents (government ID, selfie) | Duration of account + 5 years after closure | AMLA / NPC guidelines |
| Transaction and payment records | 5 years from transaction date | AMLA, BIR requirements |
| Gaming activity logs | 3 years from activity date | PAGCOR reporting obligations |
| Customer support communications | 2 years from resolution date | Dispute resolution / legal claims |
| Self-exclusion records | Permanent (for lifetime exclusions) or duration + 2 years | Responsible gaming obligations |
| Marketing consent records | Until consent is withdrawn + 1 year | Data Privacy Act compliance |
When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with ace8's data destruction procedures. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes.
8Cookies & Tracking Technologies
8.1 What Cookies We Use
The ace8 platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve your experience. The cookies we use fall into the following categories:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, fraud prevention | Session only |
| Functional | Remembering your language preferences, account settings, and game history display | Up to 12 months |
| Analytics | Understanding how players navigate the platform to improve performance and layout | Up to 24 months |
| Security | Detecting suspicious login patterns, bot activity, and account takeover attempts | Up to 30 days |
8.2 Third-Party Cookies
ace8 does not permit third-party advertising networks to set cookies on the ace8 platform for cross-site profiling or behavioural advertising purposes. Some game content providers integrated into the platform may set functional cookies limited to game session management. These are governed by the respective provider's own cookie policy.
8.3 Managing Cookies
You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in to your ace8 account and using core platform features. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet) allow you to manage cookie preferences through their settings menus.
9Data Security
ace8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:
- Encryption in transit: All data transmitted between your device and the ace8 platform is protected using TLS (Transport Layer Security) encryption;
- Encryption at rest: Sensitive data stored on ace8 servers — including KYC documents and financial records — is encrypted using AES-256 or equivalent standards;
- Access controls: Access to personal data within ace8 is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging;
- Two-factor authentication (2FA): ace8 offers 2FA for player accounts and enforces it for all administrative access to systems containing personal data;
- Penetration testing and vulnerability assessments: The ace8 platform undergoes regular third-party security testing to identify and remediate vulnerabilities before they can be exploited;
- Incident response: ace8 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, ace8 will notify the National Privacy Commission (NPC) and affected players in accordance with the timelines prescribed by the Data Privacy Act.
While ace8 takes data security seriously, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their ace8 accounts and to enable two-factor authentication where available. Never share your account password or one-time PIN (OTP) with anyone, including individuals claiming to represent ace8 support.
10Exercising Your Data Rights
As a player registered with ace8, you have the right to exercise the data rights described in Section 2 of this policy and as guaranteed under the Philippine Data Privacy Act. To exercise any of these rights, please contact the ace8 Data Privacy team through the following channels:
Include "Data Privacy Request" in the subject line.
ace8 will acknowledge your request within 72 hours and aim to respond substantively within 15 business days of receipt, in line with NPC guidelines. In complex cases, this period may be extended by a further 15 business days, and you will be notified of the extension in advance.
To protect your privacy, ace8 may require you to verify your identity before processing a data rights request — for example, by confirming account details or providing a copy of a government-issued ID. This step is necessary to ensure that we do not inadvertently disclose your personal data to a third party.
If you are dissatisfied with ace8's response to your data rights request, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint process.
11Children & Minors
The ace8 platform is strictly for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online casino and sports betting services in the Philippines. ace8 does not knowingly collect personal data from any person under the age of 21.
As part of the account registration and KYC process, ace8 verifies the age of all applicants using government-issued identification. Any account found to belong to a person under 21 years of age will be immediately suspended, all pending withdrawals will be placed on hold pending investigation, and the matter will be reported to PAGCOR as required by our licensing conditions.
12Changes to This Privacy Policy
ace8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, our data processing practices, or the services we offer.
Where changes are material — for example, changes that affect how we use your personal data or that reduce your privacy rights — ace8 will notify registered players through the platform's internal messaging system and/or by email to the address on your account, at least 7 days before the changes take effect.
Non-material changes, such as formatting corrections or updates to contact details, may take effect immediately upon publication. The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the ace8 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
13Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ace8, please contact us through the following channels:
Please use subject line: "Privacy Policy Enquiry"
Play at ace8 — Your Data, Always Protected
Now that you know how ace8 handles your personal data, explore everything the platform has to offer — JILI slots, live dealer tables, PBA sports betting, and GCash withdrawals in as little as 1–2 hours. For Filipino players aged 21 and above only.
PAGCOR Licensed | 21+ Only | Philippines | Data Privacy Act Compliant