ace222 is committed to protecting the privacy and security of your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and the rights you hold as a data subject under Philippine law.
ace222 collects personal data only for specific, legitimate purposes: account management, identity verification, financial transactions, regulatory compliance, and where you have opted in, marketing communications.
This Policy is designed to comply with the Republic Act 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable National Privacy Commission (NPC) issuances governing personal data in the Philippines.
Under the Data Privacy Act, you have the right to access, correct, erase, restrict, and object to the processing of your personal data held by ace222. You also have the right to data portability and to withdraw consent at any time.
ace222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your information is shared only as described in this Policy and only where a lawful basis exists for such sharing.
Personal data held by ace222 is stored on secured servers with appropriate technical and organizational safeguards, including encryption at rest and in transit, access controls, and regular security assessments.
ace222 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by PAGCOR regulations and Philippine law, whichever period is longer. Data is securely deleted or anonymized thereafter.
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data held by ace222
Request confirmation of whether ace222 holds personal data about you and obtain a copy of that data.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of personal data where there is no compelling reason for its continued processing, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
Receive your personal data in a structured, commonly used format to transfer to another service where technically feasible.
Request that ace222 restrict the processing of your data in certain circumstances, such as when accuracy is contested.
Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
Lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.
1.1 This Privacy Policy applies to all personal data collected, processed, stored, and used by ace222 in connection with the operation of the ace222 online gaming platform accessible at ace222.org and all associated subdomains, mobile-optimized interfaces, and services (collectively, "the Platform").
1.2 This Policy applies to all registered players, prospective players who interact with the Platform without completing registration, and any other individuals whose personal data ace222 processes in the course of its operations.
1.3 By registering an account on ace222.org, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or use the Platform.
1.4 This Policy should be read alongside the ace222 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall framework of your relationship with ace222.
2.1 For the purposes of the Republic Act 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, ace222 is the Personal Information Controller (PIC) in respect of personal data collected through the Platform.
2.2 ace222 operates under PAGCOR authorization. As a PAGCOR-regulated entity, ace222 is also subject to PAGCOR's data governance and reporting requirements, which may require the disclosure of certain player information to PAGCOR as described in Clause 8 of this Policy.
2.3 ace222 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with the Data Privacy Act. The DPO may be contacted via the details set out in Clause 17.
3.1 ace222 collects the following categories of personal data in connection with the operation of the Platform:
4.1 ace222 collects personal data through the following means:
| Collection Method | Data Collected |
|---|---|
| Account Registration | Name, date of birth, contact details, username, password (hashed) |
| KYC Verification | Government ID images, selfie photographs, residential address documentation |
| Deposits & Withdrawals | Payment method details, transaction amounts, timestamps, reference numbers |
| Platform Use | Gaming activity, session data, responsible gaming tool usage, support interactions |
| Automated Technical Collection | IP address, device data, cookies, session tokens, log files |
| Third-Party Sources | Identity verification results from KYC service providers; fraud-check results from financial partners; PAGCOR exclusion registry status |
4.2 ace222 does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for age verification and compliance purposes. Where health data is relevant (e.g., self-exclusion related to problem gambling), it is collected solely on the basis of explicit consent and processed with appropriate additional safeguards.
5.1 ace222 processes personal data on the following lawful bases under the Data Privacy Act of 2012:
6.1 ace222 uses your personal data for the following specific purposes:
6.2 ace222 does not use personal data for automated profiling that produces legal effects or similarly significantly affects you, except where such processing is required by law or explicitly consented to.
7.1 ace222 uses cookies, local storage, pixel tags, and similar tracking technologies on the Platform for the following purposes:
7.2 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the core Platform but may affect the availability of personalized features.
7.3 ace222 does not permit third-party advertising networks to place tracking cookies on the Platform without your consent.
8.1 ace222 does not sell, rent, or transfer your personal data to third parties for their own independent marketing or commercial purposes. Personal data is shared only as described in this Clause and only where a lawful basis for sharing exists.
ace222 engages third-party service providers who process personal data on ace222's behalf and under ace222's instructions, including:
All third-party processors are bound by data processing agreements requiring them to handle personal data in compliance with the Data Privacy Act and ace222's instructions.
ace222 is required to share certain player data with the following authorities as part of its regulatory obligations:
Game providers whose products are integrated into the ace222 platform may receive limited session and technical data necessary to deliver game functionality. Game providers do not receive full player identity data and are bound by contractual confidentiality and data protection obligations.
In the event of a merger, acquisition, or sale of all or part of ace222's business, personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and any changes to the data controller's identity.
9.1 In the course of providing its services, ace222 may transfer personal data to service providers or game providers located outside the Philippines. Any such transfer is made only where:
9.2 ace222 maintains a register of all cross-border data transfers and the safeguards applicable to each. Players may request information about specific transfers by contacting the Data Protection Officer.
10.1 ace222 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
10.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, ace222 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by the Data Privacy Act.
10.3 No system is completely immune to security risks. While ace222 takes all reasonable precautions, we cannot guarantee absolute security. Players are encouraged to use strong, unique passwords, enable two-factor authentication on their ace222 account, and report any suspected unauthorized access to support immediately.
11.1 ace222 retains personal data for the following periods, after which data is securely deleted or anonymized unless a longer retention period is required by law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration & KYC data | 5 years after account closure | AMLA compliance; PAGCOR license requirements |
| Financial transaction records | 5 years from the date of transaction | RA 9160 (AMLA) as amended; PAGCOR requirements |
| Gaming activity & session records | 3 years from account closure | PAGCOR regulatory reporting; dispute resolution |
| Customer support records | 3 years from resolution | Contractual; legitimate interest (dispute resolution) |
| Self-exclusion records | Duration of exclusion + 5 years | PAGCOR responsible gaming obligations |
| Marketing consent records | Duration of consent + 2 years | Proof of lawful basis for marketing |
| Technical / log data | 90 days (rolling) | Security monitoring; fraud detection |
11.2 Where a legal claim, regulatory investigation, or dispute is ongoing at the time data would otherwise be deleted, retention is extended until the matter is fully resolved and all applicable appeal periods have expired.
12.1 If you believe that a minor has registered an ace222 account or provided personal data to ace222, please contact us immediately at [email protected] so that we can take prompt action.
13.1 ace222 will send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, special events, and offers only where you have provided explicit opt-in consent during registration or subsequently via your account settings.
13.2 You may withdraw consent to marketing communications at any time by:
13.3 Withdrawal of marketing consent will be processed within 5 business days. Please note that service-related communications (account notifications, security alerts, deposit confirmations, withdrawal notifications, and required regulatory disclosures) are not marketing communications and will continue to be sent regardless of marketing preferences.
13.4 ace222 does not engage in unsolicited bulk commercial messaging. Players who receive unexpected communications purportedly from ace222 should report them to support as potential phishing attempts.
14.1 To exercise any of the rights described in the introductory section of this Policy (access, rectification, erasure, restriction, portability, objection, withdrawal of consent), please submit a written Data Subject Request to ace222's Data Protection Officer:
14.2 ace222 will acknowledge your request within 72 hours and respond substantively within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be informed of the extension and the reason for it.
14.3 Requests are processed free of charge. However, where requests are manifestly unfounded, repetitive, or excessive, ace222 reserves the right to charge a reasonable administrative fee or to refuse to act on the request, with written justification provided.
14.4 Note that certain rights are subject to limitations where legal obligations require retention or processing. For example, transaction records must be retained under AMLA obligations regardless of an erasure request. Where limitations apply, ace222 will explain the basis in writing.
15.1 If you believe that ace222 has not handled your personal data in accordance with this Policy or the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
15.2 ace222 encourages players to contact us directly in the first instance to resolve any privacy concerns before escalating to the NPC, as many issues can be resolved quickly through our internal process.
15.3 To escalate a privacy concern to the NPC, visit the NPC's official website or contact the NPC through its published channels. ace222 will cooperate fully with any NPC investigation.
16.1 ace222 reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory requirements, business operations, or data processing practices. Material changes — those that significantly affect your data rights or the way your information is used — will be communicated to registered players by email or prominent in-platform notification at least 14 days before the changes take effect.
16.2 Minor updates, such as clarifications, corrections, or restructuring that do not materially affect your rights, may be made without advance notice and will be effective from the date of publication.
16.3 The current version of this Policy, with its effective date shown at the top, is always available at ace222.org/privacy-policy. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the updated Policy.
17.1 For all privacy-related inquiries, Data Subject Requests, or complaints, you may contact ace222's Data Protection Officer through the following channels:
17.2 ace222 will make every reasonable effort to resolve privacy concerns efficiently and in good faith. All communications to the DPO are treated as confidential.
This Privacy Policy was last reviewed and updated on January 1, 2026. ace222 is operated under PAGCOR license in the Republic of the Philippines. © 2026 ace222. All rights reserved.
Your personal data is protected under the Philippine Data Privacy Act. Your funds are secured in segregated accounts. And your gaming is regulated by PAGCOR. Sign in and experience a genuinely trustworthy Filipino online casino.
Must be 21 or older. PAGCOR regulated. Play responsibly. Data protected under RA 10173.