ace219 Privacy Policy

1 Overview & Scope

This Privacy Policy ("Policy") describes how ace219 ("we," "us," "our," or "the Platform"), accessible at ace219.vip, collects, processes, stores, and protects personal data relating to users ("you," "your," or "the Player") of the ace219 online casino and sports betting platform.

ace219 operates in the Philippines under the regulatory oversight of PAGCOR and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). This Policy reflects our obligations under Philippine data privacy law and our genuine commitment to handling your personal information responsibly.

This Policy applies to all personal data collected through the ace219 website, mobile browser interface, customer support channels, and any other means by which you interact with ace219. By creating an account or using ace219's services, you acknowledge that you have read and understood this Policy. If you do not agree with how ace219 processes personal data as described herein, please do not use the platform.

2 Data We Collect

ace219 collects the following categories of personal data in connection with your use of the platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification details (e.g., Philippine passport number, driver's licence number, PhilSys National ID number). Collected for KYC and AML compliance purposes.
• Contact Data: Email address, Philippine mobile number, and residential address. Used for account communication, OTP verification, and regulatory correspondence.
• Financial Data: GCash account number or registered mobile number, BDO/BPI/UnionBank account details or registered email, USDT wallet address (where applicable), transaction history, deposit and withdrawal records. Used for payment processing and AML monitoring.
• Account Data: Username, encrypted password hash, account preferences, responsible gaming settings, session history, bonus claim history, and login timestamps.
• Technical Data: IP address, device type and operating system, browser type and version, referring URL, and session cookies. Collected automatically when you access ace219.
• Gaming Data: Bet history, game session records, win/loss records, and game preferences. Collected for regulatory compliance, dispute resolution, and personalisation.
• Communications Data: Records of your interactions with ace219's customer support team, including live chat transcripts and email correspondence.

3 How We Collect Data

ace219 collects personal data through the following means:

• Direct Provision: Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating account settings.
• Automated Collection: Technical data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the ace219 platform.
• Third-Party Sources: Identity verification data from licensed KYC/AML service providers; transaction data from payment processors (GCash, Maya, BPI, BDO, UnionBank); fraud detection signals from anti-fraud service providers. ace219 only receives data from third parties where we have a lawful basis to do so.
• Publicly Available Sources: In limited circumstances related to AML compliance, ace219 may consult publicly available databases such as sanction lists maintained by relevant Philippine authorities.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, ace219 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to register your account, process deposits and withdrawals, resolve disputes, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws and regulations, including mandatory KYC and transaction reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where ace219's legitimate interests do not override your rights and freedoms.
• Consent: Where required by law, ace219 will seek your explicit consent before processing your data for purposes not covered by the above bases, such as certain marketing communications. You may withdraw consent at any time by contacting support.

5 How We Use Your Data

ace219 uses the personal data it collects for the following purposes:

• To create and manage your ace219 account, including identity verification and age verification (21+ compliance);
• To process deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, and other approved payment methods;
• To deliver gaming services and record your game sessions for regulatory and dispute resolution purposes;
• To comply with PAGCOR licensing requirements and AML obligations under the Anti-Money Laundering Act;
• To detect, prevent, and investigate fraud, cheating, bonus abuse, and other prohibited conduct;
• To enforce ace219's Terms and Conditions and Responsible Gaming Policy, including self-exclusion requests;
• To communicate with you regarding your account, transactions, and service updates via email or SMS to your registered Philippine mobile number;
• To provide customer support and resolve disputes;
• To improve the ace219 platform through aggregated and anonymised analytics;
• To send you promotional communications, where you have consented or where permitted under applicable law.

6 Data Sharing

ace219 does not sell your personal data to third parties. We share your personal data only in the following circumstances and with the following categories of recipients:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment partners receive the minimum data necessary to process your financial transactions.
• Game Providers: Game software providers (JILI, PG Soft, Pragmatic Play, Evolution Gaming, and others) receive game session data required to operate their games and maintain game integrity. These providers are contractually prohibited from using your data for independent marketing purposes.
• KYC/AML Service Providers: Licensed identity verification and AML screening service providers assist ace219 in fulfilling its regulatory obligations. These providers act as data processors under ace219's instructions.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities when required by law, regulation, court order, or official investigation.
• Fraud Prevention Services: Third-party fraud detection providers who help ace219 identify suspicious activity. These providers do not use your data for any purpose other than fraud prevention services provided to ace219.

Where ace219 transfers data to service providers, those providers are bound by data processing agreements that require them to handle your data in accordance with the Data Privacy Act of 2012 and this Policy.

7 Data Retention

ace219 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC Records: Retained for a minimum of five (5) years from the date of account closure, in accordance with PAGCOR requirements and AMLA record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act.
• Gaming Records: Game session and bet history records are retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Communications Records: Support interaction records are retained for two (2) years, after which they are anonymised or deleted.
• Technical Data: Server logs and IP records are retained for twelve (12) months, unless extended retention is required for an active security investigation.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

8 Data Security

ace219 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ace219's servers;
• Encryption at rest for sensitive personal and financial data stored in ace219's databases;
• Access controls and role-based permissions limiting internal access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for ace219 staff accessing production systems;
• Regular security assessments, penetration testing, and vulnerability management;
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with the Data Privacy Act's mandatory breach notification requirements.

9 Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ace219:

• Right to Access: You may request a copy of the personal data ace219 holds about you, together with information about how it is used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections may require KYC re-verification.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ace219's legal obligations to retain certain data under PAGCOR and AMLA requirements.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe ace219 has handled your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, please contact ace219's Data Protection Officer via live chat or by email at [email protected]. ace219 will respond to data subject requests within thirty (30) days.

10 Cookies

ace219 uses cookies and similar tracking technologies on its website for the following purposes:

• Strictly Necessary Cookies: Session management, authentication state, and security tokens. These cannot be disabled as they are essential to platform functionality.
• Functional Cookies: Remembering your language preference, game lobby filter settings, and responsible gaming tool configurations.
• Analytics Cookies: Aggregated, anonymised data about how players navigate the platform, used to improve site performance and user experience. ace219 uses privacy-respecting analytics that do not identify individual users.
• Fraud Prevention Cookies: Device fingerprinting tokens used by anti-fraud systems to detect suspicious login patterns and multi-account creation attempts.

You may control non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain ace219 features. ace219 does not use advertising tracking cookies or share cookie data with advertising networks.

11 Children's Privacy

ace219's services are strictly for persons aged 21 years and above. ace219 does not knowingly collect personal data from persons under the age of 21. If you believe a minor has accessed or registered on the ace219 platform, please contact support immediately at [email protected]. Upon receiving credible notice, ace219 will promptly close the account, delete associated personal data, and reverse any financial transactions in accordance with PAGCOR's underage gambling protocols. Parents and guardians are encouraged to use parental control software and to monitor internet access by persons under 21 in their household.

12 Contact & Updates to This Policy

If you have questions, concerns, or requests relating to this Privacy Policy or ace219's handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a mailto link)
• Live Chat: Available 24 hours a day, 7 days a week via the ace219 website

ace219 reserves the right to update this Privacy Policy to reflect changes in Philippine law, PAGCOR regulations, or our data processing practices. When material changes are made, we will notify registered players via email and/or a prominent notice on the platform. The effective date at the top of this Policy will be updated accordingly. Your continued use of ace219 following the effective date of any update constitutes your acceptance of the revised Policy.