This Privacy Policy explains how 8ace collects, uses, stores, discloses, and protects your personal information when you use the 8ace platform. It is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
Summary: 8ace collects only the personal data necessary to operate a PAGCOR-licensed gaming platform for Filipino players. We do not sell your data. We do not share it with third parties except as required to provide the service or comply with Philippine law. You have statutory rights over your data under the Philippine Data Privacy Act of 2012, and you may exercise them at any time by contacting our Data Protection Officer.
The data controller for personal information collected and processed through the 8ace platform is the operating entity behind 8ace, which holds the applicable PAGCOR license for Philippines-facing online gaming services ("8ace," "we," "us," "our"). 8ace is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act of 2012.
CLAUSE 1.2 — DATA PROTECTION OFFICER8ace has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. The DPO may be contacted via email (plain text, not a clickable link): [email protected], with the subject line "Data Privacy — DPO Enquiry." Written correspondence may also be addressed to the 8ace Data Protection Officer at the address on file with the NPC.
8ace collects personal data in the following categories, depending on the nature of your interaction with the platform:
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | KYC verification; PAGCOR compliance; age verification (21+) |
| Contact Data | Philippine mobile number (+63), email address | Account communication; 2FA delivery; withdrawal alerts |
| Government ID Data | ID type, ID number, ID image (passport, PhilSys, SSS, etc.) | Identity verification prior to first withdrawal; AML compliance |
| Financial Data | GCash number, Maya account, bank account details (BDO/BPI/Metrobank) | Processing deposits and withdrawals; AML monitoring |
| Transaction Data | Deposit history, withdrawal history, wager history, game session logs | Account management; regulatory reporting; dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Fraud prevention; security monitoring; geolocation compliance |
| Usage Data | Pages visited, games played, features used, session duration | Platform improvement; responsible gaming monitoring |
| Communications Data | Support chat logs, email correspondence, complaint records | Customer service; dispute resolution; quality assurance |
8ace does not collect sensitive personal information as defined by the Data Privacy Act (such as health data, political affiliations, or religious beliefs) unless specifically required and authorised by applicable law.
8ace collects personal data through the following channels:
Under the Philippine Data Privacy Act of 2012, 8ace processes your personal data on the following legal bases:
8ace uses the personal data described in Section 2 for the following purposes:
8ace does not sell personal data to third parties. 8ace shares personal data only in the following circumstances:
8ace retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | PAGCOR licensing; AML law (RA 9160) |
| Transaction Records | 5 years from transaction date | AML law; tax obligations |
| KYC Documents | 5 years after account closure | AML law; PAGCOR requirements |
| Support Communications | 3 years from last interaction | Dispute resolution; legitimate interests |
| Technical / Log Data | 12 months | Security; fraud prevention |
| Marketing Consent Records | Until consent withdrawn + 1 year | Consent documentation |
8ace implements technical and organisational security measures proportionate to the risk associated with processing your personal data. These measures include:
No data transmission over the internet or electronic storage system is completely impenetrable. While 8ace takes all reasonable and legally required steps to protect your data, we cannot guarantee absolute security. In the event of a personal data breach affecting your rights and interests, 8ace will notify you and the NPC as required by the Data Privacy Act.
The 8ace platform uses cookies and similar tracking technologies to operate core platform functions, maintain your login session, remember your preferences, and support fraud prevention and security monitoring. The categories of cookies used are:
You may control non-essential cookies through your browser settings. Instructions for managing cookies in Chrome, Safari, Firefox, and other major browsers are available in the respective browser's help documentation. Disabling all cookies may impair your ability to log in to or use the 8ace platform.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 8ace:
You have the right to obtain confirmation of whether 8ace processes your personal data, and to receive a copy of that data together with information about how it is processed. Requests are fulfilled within 15 calendar days.
You may request correction of inaccurate or incomplete personal data held by 8ace. Identity data (name, date of birth) may require supporting documentation before correction is applied.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal retention obligations under PAGCOR regulations and Philippine AML law.
You may object to processing based on legitimate interests, including profiling for marketing purposes. Objections to processing required for legal compliance (e.g., AML obligations) cannot be honoured.
Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format. This right applies to data you provided directly to 8ace.
If you believe 8ace has processed your data unlawfully, you may lodge a complaint with the Philippine National Privacy Commission (NPC). Contact our DPO first at [email protected] — most concerns can be resolved directly without NPC escalation.
To exercise any of the above rights, contact the 8ace Data Protection Officer: [email protected] — subject line "Data Privacy Rights Request." Please include your registered Philippine mobile number and specify the right you are exercising. 8ace will respond within fifteen (15) calendar days in accordance with NPC guidelines.
The 8ace platform is strictly limited to individuals who are at least twenty-one (21) years of age, as required by PAGCOR regulations. 8ace does not knowingly collect personal data from individuals under 21. If 8ace becomes aware that personal data has been collected from an individual under 21, the associated account will be immediately suspended, the data will be reviewed in accordance with PAGCOR guidelines, and the data will be deleted where legally permissible.
CLAUSE 11.2If you are a parent or guardian and believe that a person under 21 in your household has created an 8ace account using false age information, contact [email protected] immediately. 8ace takes underage access seriously and will act promptly on all such reports.
8ace is a Philippine-focused platform and processes the majority of personal data within the Philippines. Certain third-party service providers — including cloud infrastructure providers and KYC verification services — may process data in other jurisdictions. Where cross-border transfers occur, 8ace ensures they are subject to appropriate safeguards, including contractual protections equivalent to those required by the Philippine Data Privacy Act and approval from the NPC where required.
CLAUSE 12.2Game providers integrated into the 8ace platform may receive anonymised session data (player ID, wager amount, game outcome) through APIs that operate across jurisdictions. This data does not include your name, contact details, or financial account information.
8ace may update this Privacy Policy from time to time to reflect changes in Philippine law, NPC guidelines, PAGCOR requirements, or 8ace's data processing practices. Material changes will be communicated to registered players via SMS to the registered Philippine mobile number and/or via a prominent notice on the Platform at least seven (7) calendar days before the effective date.
CLAUSE 13.2The document reference number and effective date at the top of this page identify the current version. Continued use of the 8ace platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to a material change, you should discontinue use of the platform and contact [email protected] to request account closure and data handling in accordance with your rights under Section 10.
For any privacy-related enquiries, requests to exercise your data subject rights, or concerns about 8ace's data processing practices, contact the 8ace Data Protection Officer:
8ace Data Protection Officer
Email (plain text): [email protected]
Subject line: "Data Privacy — [nature of enquiry]"
Response time: Within 15 calendar days for rights requests; within 5 business days for general privacy enquiries
National Privacy Commission of the Philippines
For complaints that cannot be resolved with 8ace directly, you may contact the NPC. The NPC's contact details are published on the official NPC website at privacy.gov.ph (external site — access via your own browser).
8ace handles your personal data with the same discretion we apply to your wallet balance. PAGCOR-regulated, NPC-registered, and committed to your privacy under Philippine law.
PAGCOR REGULATED · 21+ ONLY · DATA PRIVACY ACT 2012 COMPLIANT