ace219 Privacy Policy

1. Introduction and Data Controller Identity

This Privacy Policy applies to all personal data collected and processed by ace219 (the "Platform"), operated at ace219.org and all associated subdomains and mobile interfaces (collectively, the "Services"). For the purposes of this Policy, the entity operating the ace219 platform acts as the Data Controller responsible for your personal information.

ace219 is committed to protecting the privacy and personal data of all players, particularly Filipino users whose data is processed in connection with their participation in online gaming Services. This Policy has been prepared in compliance with the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, administered by the National Privacy Commission of the Philippines.

By registering for and using ace219 Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use ace219 Services.

2. Legal Basis for Processing

ace219 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil the gaming services contract you enter into when you create an ace219 account, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR gaming regulations, AMLA reporting obligations, and KYC requirements mandated by the Bangko Sentral ng Pilipinas and other regulatory bodies.
• Legitimate Interests: Processing necessary for ace219's legitimate interests in preventing fraud, ensuring platform security, and improving Services, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional platform personalisation features, where you have provided express, freely given consent. You may withdraw this consent at any time.

3. Personal Data We Collect

3.1 Registration Data

When you create an ace219 account, we collect: your full legal name, Philippine mobile number (+63 format), date of birth (to verify the 21+ age requirement), and the password you create. This information is mandatory for account creation.

3.2 Identity Verification (KYC) Data

To comply with PAGCOR licensing requirements and AMLA obligations, ace219 collects identity verification documents prior to processing your first withdrawal or upon regulatory request. KYC data may include: government-issued Philippine ID (e.g., PhilSys ID, driver's licence, passport, UMID, SSS ID, voter's ID), a selfie or live photograph for facial verification, proof of address, and payment method verification documents.

3.3 Financial and Transactional Data

ace219 records all deposits, withdrawals, wagers, and balance movements associated with your account. Payment method identifiers (e.g., GCash registered mobile number, bank account last four digits) are stored for transaction reconciliation and withdrawal processing. Full payment credentials such as PINs and complete bank account numbers are never stored by ace219.

3.4 Device and Technical Data

When you access ace219, we automatically collect device type, operating system, browser type and version, IP address, mobile network carrier, session timestamps, and platform navigation data. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.5 Gaming Activity Data

ace219 records your game history, bet amounts, game outcomes, session durations, and responsible gaming tool usage. This data is retained for regulatory compliance, dispute resolution, responsible gaming monitoring, and personalisation of your gaming experience.

3.6 Communications Data

Records of your communications with ace219 support — including live chat transcripts, email correspondence, and support ticket histories — are retained for service quality purposes and dispute resolution documentation.

4. How We Use Your Personal Data

ace219 uses your personal data for the following purposes:

• To create, operate, and maintain your ace219 account and provide access to the Services;
• To process deposits and withdrawals in Philippine Peso through your chosen payment methods (GCash, Maya, BPI, BDO, and others);
• To verify your identity and age (21+) as required by PAGCOR regulations and Philippine law;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities under the Anti-Money Laundering Act;
• To provide customer support and resolve disputes relating to your account or gaming activity;
• To enforce the ace219 Terms & Conditions, including identification of prohibited conduct such as multi-accounting or bonus abuse;
• To administer responsible gaming tools — including deposit limits, session reminders, and self-exclusion — and to monitor for indicators of problem gambling;
• To improve the ace219 platform through analysis of aggregated, anonymised usage data;
• To send you service-related notifications, including transaction confirmations, security alerts, and account-related updates — these communications are non-optional as they are integral to the Services;
• To send you promotional communications about ace219 bonuses, new games, and platform features, where you have consented to receive such communications.

5. Cookies and Tracking Technologies

ace219 uses cookies and similar tracking technologies to operate the platform effectively. The categories of cookies used are:

• Essential Cookies: Required for the platform to function. These maintain your login session, remember your preferences, and ensure secure access. You cannot opt out of essential cookies while using ace219.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and interact with the platform. This data helps ace219 identify technical issues and improve the user experience. No personally identifiable information is transmitted through analytics cookies.
• Security Cookies: Used to detect and prevent fraudulent activity, including recognition of trusted devices for OTP bypass and flagging of unusual login patterns.

You may configure your browser to block or delete cookies. Note that blocking essential cookies will impair your ability to use ace219 Services, including maintaining a logged-in session.

6. Disclosure of Personal Data to Third Parties

ace219 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is disclosed to third parties only in the following circumstances:

• Payment Processors: GCash, Maya (PayMaya), BPI, BDO, Metrobank, and other accepted payment partners receive the transactional data necessary to process your deposits and withdrawals. These parties process data under their own privacy policies and applicable Philippine financial regulations.
• Game Content Providers: Licensed game providers (such as PG Soft, Pragmatic Play, Evolution Gaming, and others) receive session tokens and bet data necessary to deliver game content. Identifiable personal information beyond a pseudonymous player identifier is not shared with game providers.
• KYC and Identity Verification Partners: Certified identity verification service providers receive copies of your KYC documents for identity verification processing under strict confidentiality obligations.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive player data as required by law, court order, or regulatory directive. ace219 will not notify you of such disclosures where prohibited by law.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by ace219 may access player data on a strictly confidential and need-to-know basis.

7. Cross-Border Data Transfers

Some ace219 service providers and game content partners operate servers or infrastructure located outside the Philippines. When your personal data is transferred to a jurisdiction outside the Philippines, ace219 ensures that such transfers are made only to recipients in countries with adequate data protection standards, or pursuant to contractual arrangements that impose data protection obligations equivalent to those required under Philippine law.

Where data is transferred to game content providers operating in other jurisdictions, only pseudonymous session and bet data (no directly identifiable personal information) is transmitted. KYC and financial data is processed within Philippine-jurisdiction infrastructure to the maximum extent practicable.

8. Data Security

ace219 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ace219 servers;
• Encrypted storage of sensitive personal and financial data at rest;
• OTP (one-time PIN) authentication for account logins on unrecognised devices;
• Role-based access controls limiting employee access to player data on a strict need-to-know basis;
• Regular penetration testing and third-party security audits of the ace219 platform;
• Automated anomaly detection systems monitoring for unusual account activity, login patterns, and transaction behaviour.

No data security system is impenetrable. In the event of a personal data breach that is likely to result in harm to affected players, ace219 will notify the National Privacy Commission and affected players within 72 hours of becoming aware of the breach, as required by the Data Privacy Act of 2012.

9. Data Retention and Deletion

ace219 retains personal data for the following periods:

• Active Account Data: Retained for the duration of your ace219 account and for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR regulatory obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, in compliance with Philippine AML legislation.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for two (2) years from the date of the communication, unless the subject matter of a communication is part of an ongoing dispute or regulatory matter, in which case retention extends until final resolution.
• Analytics Data: Aggregated, anonymised analytics data is retained indefinitely. Data is anonymised such that individual players cannot be identified from it before long-term retention.

Upon the expiry of mandatory retention periods, ace219 securely deletes or permanently anonymises personal data. Deletion requests submitted before the expiry of mandatory retention periods will be fulfilled to the extent permitted by law — data subject to legal retention obligations cannot be deleted on request until those obligations are satisfied.

10. Your Rights Under Philippine Data Privacy Law

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by ace219:

• Right to Be Informed: The right to be informed of what personal data ace219 collects and how it is used — fulfilled by this Privacy Policy.
• Right to Access: The right to request a copy of the personal data ace219 holds about you. Requests will be responded to within thirty (30) calendar days.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. Contact ace219 support with your correction request and supporting documentation.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ace219's legal retention obligations. Mandatory regulatory retention periods may delay or limit deletion.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Object: The right to object to processing of your personal data for marketing purposes. Objection to processing on other grounds may be exercised where the processing is based on legitimate interests.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ace219 has violated your data privacy rights. The NPC may be contacted through the official NPC website and contact channels.

To exercise any of the above rights, contact ace219 support via live chat or by email at [email protected]. ace219 will verify your identity before processing any data subject rights request to ensure the security of your personal information.

11. Children and Minors

ace219 Services are strictly restricted to individuals aged 21 years and above. ace219 does not knowingly collect personal data from persons under 21. Account registration constitutes the registrant's declaration that they are at least 21 years old.

If ace219 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account closed. If you have reason to believe that a person under 21 has registered an ace219 account, please contact support at [email protected] immediately.

12. Marketing Communications

ace219 may send promotional communications — including information about bonuses, new games, special events, and platform updates — to players who have provided consent to receive such communications. Consent is collected during the account registration process and can be withdrawn at any time through your account settings or by contacting support.

Withdrawal of consent for marketing communications does not affect the delivery of mandatory service-related messages, including transaction confirmations, OTP messages, security alerts, and account status notifications, which are necessary for the operation of your account.

ace219 does not send unsolicited commercial messages (spam). Players who receive marketing communications they did not consent to should contact support immediately so the issue can be investigated and rectified.

13. Changes to This Privacy Policy

ace219 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ace219 will notify registered players via SMS to their registered Philippine mobile number and/or by a notice displayed prominently on the platform. The revised Policy will be published on this page with an updated effective date.

Your continued use of ace219 Services after the effective date of any amended Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the amended Policy, you should cease using ace219 Services and close your account.

14. How to Contact Us

For privacy-related queries, data subject rights requests, or concerns about the handling of your personal data at ace219, please contact us through the following channels:

• Live Chat: Available 24/7 on the ace219 platform. The fastest channel for account-related privacy queries.
• Email: [email protected] — for formal data subject rights requests, please mark the subject line "Data Privacy Request." ace219 commits to acknowledging formal privacy requests within five (5) business days.

For escalated privacy complaints unresolved through ace219 support, Filipino players may lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official channels.