ace219 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected, used, stored, and disclosed by ace219 (hereinafter referred to as "we," "us," "our," "the Company," or "the Platform") through our website (https://ace219.cam), mobile applications, customer service channels, and all related gaming services offered to players in the Republic of the Philippines.

By creating an account, depositing funds, or using any ace219 services, you acknowledge that you have read, understood, and consent to the data collection and processing practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you must immediately cease using our platform and close your account.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with ace219, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (passport number, driver's license number, or national ID number)
• Contact Information: Email address, mobile telephone number, residential address including street, barangay, city/municipality, province, and postal code
• Financial Information: GCash account details, Maya account information, bank account numbers, credit/debit card details (first six and last four digits only, never full card numbers), payment transaction history
• Account Credentials: Username, password (stored in encrypted hash format only), security questions and answers, PIN codes for account protection
• Verification Documents: Photographs or scanned copies of government-issued identification documents, utility bills, bank statements, selfie photographs for enhanced verification
• Communication Records: Content of messages sent through live chat, email correspondence, telephone call recordings with customer support

2.2 Information Collected Automatically

When you access and use ace219 services, we automatically collect technical and usage information including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), mobile carrier information
• Connection Data: IP address, internet service provider, geographic location (country, region, city level based on IP geolocation), timezone settings
• Usage Analytics: Pages visited, features accessed, games played, time spent on platform, click patterns, navigation paths, referring URLs
• Gaming Activity: Bet amounts, game selections, win/loss records, bonus usage patterns, session durations, deposit and withdrawal transactions
• Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage data, device fingerprinting information (see Section 8 for detailed cookie policy)

2.3 Information from Third-Party Sources

ace219 may receive personal information about you from external sources including:

• Payment Processors: Transaction verification data from GCash, Maya, BDO, BPI, and other payment service providers
• KYC Verification Partners: Identity verification results, document authentication reports, fraud detection alerts from specialized KYC service providers
• Regulatory Authorities: Self-exclusion lists, problem gambling registries, law enforcement inquiries, PAGCOR compliance databases
• Marketing Partners: Referral source information, affiliate tracking data (when applicable under partnership agreements)

3. How We Use Your Information

3.1 Account Management and Service Provision

ace219 uses your personal information to:

• Create, maintain, and secure your gaming account
• Process deposits, withdrawals, and financial transactions
• Verify your identity and age to ensure compliance with 21+ age restrictions
• Provide customer support and respond to inquiries
• Enable gameplay across lottery, bingo, slots, live casino, and other gaming products
• Calculate and award bonuses, promotions, and VIP tier rewards
• Maintain accurate transaction records and account histories

3.2 Regulatory Compliance and Legal Obligations

We process personal information to comply with:

• PAGCOR licensing requirements and gaming regulations
• Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) laws under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160 as amended)
• Data Privacy Act of 2012 (Republic Act No. 10173) and National Privacy Commission regulations
• Tax reporting obligations to the Bureau of Internal Revenue (BIR)
• Court orders, subpoenas, and lawful government requests
• Internal audit requirements and financial reporting standards

3.3 Fraud Prevention and Platform Security

Your information is analyzed to:

• Detect and prevent fraudulent account creation and multi-accounting violations
• Identify suspicious betting patterns, bonus abuse, and collusion attempts
• Monitor for unauthorized access, account takeover attempts, and security breaches
• Verify the authenticity of payment methods and prevent payment fraud
• Investigate disputes, chargebacks, and terms of service violations
• Maintain fair gameplay and protect the integrity of gaming outcomes

3.4 Marketing and Communications

With your consent, we may use your contact information to:

• Send promotional offers, bonus announcements, and VIP tier upgrade notifications
• Deliver personalized game recommendations based on your playing preferences
• Provide updates on new game releases, features, and platform improvements
• Send account notifications, transaction confirmations, and security alerts
• Conduct customer satisfaction surveys and gather feedback

You may opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in emails. Note that you cannot opt out of essential service communications such as transaction confirmations and security alerts.

3.5 Analytics and Platform Improvement

We analyze aggregated and anonymized data to:

• Understand user behavior patterns and improve user experience
• Optimize website performance, loading speeds, and mobile responsiveness
• Develop new features and gaming products based on player preferences
• Test and refine promotional strategies and bonus structures
• Conduct business intelligence analysis and strategic planning

4. Legal Basis for Processing (Data Privacy Act Compliance)

Under the Philippine Data Privacy Act, ace219 processes your personal information based on the following legal grounds:

• Consent: You have provided explicit consent for specific processing activities, particularly for marketing communications and optional data collection
• Contract Performance: Processing is necessary to fulfill our contractual obligations to provide gaming services as outlined in our Terms & Conditions
• Legal Obligation: We are required by law to process certain information for KYC verification, AML compliance, tax reporting, and regulatory oversight
• Legitimate Interests: Processing is necessary for fraud prevention, platform security, business analytics, and operational efficiency, provided such interests are not overridden by your fundamental rights and freedoms

5. Data Sharing and Third-Party Disclosures

5.1 Payment Service Providers

ace219 shares transaction-related information with payment processors including GCash, Maya (PayMaya), GrabPay, BDO, BPI, and other authorized payment partners to facilitate deposits and withdrawals. These providers process your financial information according to their own privacy policies and are subject to Philippine banking and electronic money regulations.

5.2 KYC and Verification Partners

We transmit identification documents and personal information to specialized third-party KYC service providers who perform identity verification, document authentication, and fraud detection analysis on our behalf. These partners are contractually bound to use your information solely for verification purposes and are prohibited from retaining data beyond the verification process.

5.3 Game Providers and Software Suppliers

When you play games powered by third-party providers (live casino dealers, slot manufacturers, lottery operators), limited information such as username, game session data, and bet/win records may be shared with these providers to enable gameplay. Game providers process this information according to their own privacy policies while remaining subject to ace219's data protection standards.

5.4 Regulatory and Government Authorities

ace219 may disclose personal information to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue, law enforcement agencies, and courts when legally required or in response to valid government requests. Such disclosures are limited to the minimum information necessary to satisfy the legal requirement.

5.5 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your personal information may be transferred to the acquiring entity. You will be notified via email of any change in ownership or control of your personal information, and you will have the opportunity to opt out of the transfer.

5.6 Service Providers and Contractors

ace219 engages third-party service providers for customer support operations, IT infrastructure maintenance, marketing analytics, email delivery services, and cloud hosting. These contractors have access to personal information only to the extent necessary to perform their functions and are contractually obligated to maintain confidentiality and implement appropriate security measures.

6. International Data Transfers

ace219 primarily stores and processes personal information on servers located within the Philippines. However, certain services such as cloud hosting infrastructure, payment processing networks, and specialized security tools may involve data transfers to servers located in other jurisdictions including Singapore, Japan, the United States, and the European Union.

When personal information is transferred internationally, ace219 ensures adequate protection through mechanisms including:

• Standard contractual clauses approved by the National Privacy Commission
• Verification that recipient countries provide adequate data protection standards
• Binding corporate rules and data transfer agreements with service providers
• Encryption of data in transit and at rest regardless of storage location

By using ace219 services, you acknowledge and consent to such international data transfers where necessary to provide our services efficiently and securely.

7. Data Security Measures

7.1 Technical Safeguards

ace219 implements comprehensive technical security measures including:

• Encryption: 256-bit SSL/TLS encryption for all data transmission, AES-256 encryption for data at rest, encrypted database storage
• Access Controls: Multi-factor authentication for employee access, role-based permission systems, strict need-to-know policies for personal information access
• Network Security: Firewalls, intrusion detection systems, DDoS protection, regular vulnerability scanning and penetration testing
• Infrastructure Security: Secure cloud hosting with ISO 27001 certified providers, redundant data backups, disaster recovery protocols
• Application Security: Regular security audits, code reviews, dependency scanning, patch management for all software components

7.2 Organizational Safeguards

Our organizational security practices include:

• Mandatory data protection training for all employees with access to personal information
• Confidentiality agreements and non-disclosure clauses in employment contracts
• Incident response procedures and data breach notification protocols
• Regular audits of data processing activities and security controls
• Appointment of a dedicated Data Protection Officer responsible for privacy compliance
• Third-party security assessments and independent compliance reviews

7.3 Your Security Responsibilities

While ace219 implements robust security measures, you also play a crucial role in protecting your account:

• Choose strong, unique passwords and never share your login credentials
• Enable two-factor authentication when available
• Keep your email account and mobile phone secure as these are used for account recovery
• Log out of your account when using shared or public devices
• Report suspicious activity or unauthorized access immediately
• Be cautious of phishing attempts and verify ace219 communications

8. Cookies and Tracking Technologies

8.1 Types of Cookies Used

ace219 uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic platform functionality including session management, security authentication, and load balancing
• Functional Cookies: Remember your preferences such as language selection, favorite games, and display settings
• Analytics Cookies: Collect aggregated usage data to understand traffic patterns, popular features, and areas for improvement
• Marketing Cookies: Track campaign effectiveness, personalize promotional content, and measure conversion rates (only with your consent)

8.2 Cookie Management

You can control cookie settings through your browser preferences. However, disabling essential cookies will prevent you from accessing certain platform features. Most browsers accept cookies by default but provide options to block or delete cookies. Note that blocking all cookies may result in reduced functionality.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

9.1 Right to Access

You may request a copy of all personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your verified request.

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. Most information can be updated directly through your account dashboard. For changes to critical identity information, we may require supporting documentation.

9.3 Right to Erasure

You may request deletion of your personal information, subject to exceptions for legal obligations, regulatory requirements, and ongoing investigations. Note that account closure typically triggers data deletion after a retention period required by PAGCOR regulations (7 years for financial records).

9.4 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

9.5 Right to Object

You may object to processing of your personal information for direct marketing purposes, automated decision-making, or processing based on legitimate interests grounds. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

9.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

9.7 Right to Lodge a Complaint

If you believe ace219 has violated your data privacy rights, you may file a complaint with our Data Protection Officer at [email protected]. If your complaint is not resolved satisfactorily, you have the right to lodge a complaint with the National Privacy Commission at [email protected].

To exercise any of these rights, please contact our Data Protection Officer with your request. We will respond within 30 days and may require identity verification before processing your request.

10. Data Retention

ace219 retains personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations:

• Active Accounts: Personal information is retained for the duration of your active account relationship
• Closed Accounts: Financial transaction records are retained for 7 years after account closure in accordance with PAGCOR requirements and Philippine tax laws
• Verification Documents: KYC documents are retained for 5 years after the end of the business relationship as required by AML regulations
• Communication Records: Customer support communications are retained for 3 years for quality assurance and dispute resolution purposes
• Marketing Data: Promotional communication records are deleted within 6 months after you opt out of marketing
• Technical Logs: Server logs and analytics data are retained for 12 months for security monitoring and platform optimization

After the applicable retention period expires, personal information is securely deleted or anonymized beyond recovery. Anonymized data may be retained indefinitely for statistical and research purposes.

11. Children's Privacy

ace219 services are strictly limited to individuals aged 21 years and older. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a person under 21 years of age, we will immediately delete that information, close the account, and forfeit any balances in accordance with our Terms & Conditions.

Parents or guardians who believe their child has provided personal information to ace219 should contact our Data Protection Officer immediately at [email protected].

12. Changes to This Privacy Policy

ace219 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be notified to registered users via email and prominently displayed on our website at least 30 days before taking effect.

The "Effective Date" at the top of this policy indicates when the current version was last revised. Your continued use of ace219 services after changes become effective constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

• Data Protection Officer: [email protected]
• General Customer Support: [email protected]
• Live Chat: Available 24/7 on the ace219 website
• National Privacy Commission: For unresolved complaints, contact [email protected]