Privacy Policy

This Privacy Policy ("Policy") describes how ace8, accessible at ace8.cam ("ace8", "we", "our", "the Platform"), collects, uses, stores, and discloses personal information when you register for and use our online casino and sportsbook services. It applies to all players, visitors, and users of the ace8 website and mobile application.

ace8 is a Philippines-focused online gaming platform serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the country. We are committed to protecting your privacy and handling your personal data responsibly, transparently, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of ace8.

ace8 collects personal data in the categories set out below. We only collect information that is necessary for the purposes described in this Policy and as required by our legal and regulatory obligations.

We do not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. We do not collect biometric data other than optional selfie verification used solely for KYC identity matching purposes.

ace8 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or filling in any form on the platform.
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, session data, and browser information through cookies and similar tracking technologies.
• Third-party providers: Identity verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank), fraud detection services, and, where applicable, information provided by Philippine regulatory authorities.
• Publicly available sources: Sanction lists, politically exposed persons (PEP) databases, and other publicly available data used for AML and regulatory compliance purposes.

ace8 processes your personal data for the following purposes, each of which is supported by a lawful basis under the Philippine Data Privacy Act of 2012:

• Account management: To create, maintain, and administer your ace8 account, verify your identity, and authenticate your logins.
• Service delivery: To provide access to games, process bets, credit winnings, and facilitate all gameplay activities on the platform.
• Financial transactions: To process deposits and withdrawal requests via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, and 7-Eleven, and to maintain accurate financial records.
• Legal and regulatory compliance: To fulfil our obligations under Philippine gambling regulations, the Data Privacy Act, AML laws, and KYC requirements. This includes retaining transaction records and reporting to relevant authorities where required.
• Responsible gaming: To monitor gameplay patterns, identify potential problem gambling indicators, and administer self-exclusion, deposit limit, and cool-off tools in accordance with our Responsible Gaming Policy.
• Fraud prevention and security: To detect, prevent, and investigate fraudulent activity, account compromises, and platform abuse.
• Customer support: To respond to your enquiries, resolve disputes, and improve our service quality based on support interactions.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and enhance the ace8 user experience. This analysis is conducted on aggregated or anonymised data wherever possible.
• Communications: To send you account-related notifications (transaction confirmations, security alerts, policy updates) and, where you have consented, promotional communications about ace8 offers and new game releases.

ace8 does not sell, rent, or trade your personal information to third-party marketers or advertisers. We may share your personal data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment processors: GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, and 7-Eleven, for the purpose of processing your financial transactions. Each processor is subject to their own privacy obligations under Philippine law.
• Identity verification providers: Third-party KYC and age verification services that assist us in verifying your identity and age in compliance with regulatory requirements. These providers process data solely under our instruction.
• Technology and infrastructure providers: Cloud hosting, platform security, and software providers who process data on our behalf under strict contractual data processing agreements.
• Fraud prevention and AML services: Specialised providers that help us screen transactions and player accounts against sanction lists and fraud databases.
• Regulatory and law enforcement authorities: Philippine regulatory bodies, the National Privacy Commission (NPC), law enforcement agencies, and courts where we are legally required or compelled to disclose information.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to confidentiality obligations.

ace8 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law and regulatory obligations. The following retention periods generally apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML recordkeeping obligations under Philippine law.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by relevant Philippine financial regulations.
• Gameplay and betting history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for two (2) years from the date of the interaction, or longer if related to an ongoing dispute or legal matter.
• KYC verification documents: Retained in accordance with AML obligations and for a period consistent with applicable regulatory requirements.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual player.

ace8 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage for sensitive personal and financial data at rest.
• Two-factor authentication (2FA) available for all player accounts to protect against unauthorised logins.
• Role-based access controls ensuring that only authorised ace8 personnel can access personal data, on a strict need-to-know basis.
• Regular security audits and penetration testing of the platform infrastructure.
• 24/7 automated fraud and anomaly detection systems monitoring for suspicious account activity.
• Incident response procedures in compliance with the NPC notification requirements under the Data Privacy Act.

While ace8 implements robust security measures, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your ace8 account and to enable 2FA. If you suspect your account has been compromised, contact our support team immediately.

ace8 uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate the platform effectively and improve your experience. A cookie is a small text file placed on your device by a website. We use the following categories of cookies:

• Essential cookies: Required for the platform to function. They maintain your login session, secure your account, and enable core gameplay features. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences (language, display settings) to personalise your experience across sessions.
• Analytics cookies: Used internally to understand how players interact with ace8, identify areas for improvement, and measure platform performance. This data is processed in aggregated, anonymised form.
• Security cookies: Assist our fraud prevention systems in identifying suspicious access patterns and protecting your account.

ace8 does not use cookies for third-party advertising or to build marketing profiles for external advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to use the platform.

As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal information held by ace8:

• Right to be informed: To know what personal data we hold about you and how it is being processed.
• Right of access: To obtain a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking: To request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: To object to the processing of your personal data for marketing purposes or where processing is based on legitimate interests.
• Right to data portability: To receive your personal data in a structured, commonly used format, where technically feasible.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the ace8 Data Privacy team at [email protected] (plain text — not a clickable link). We will respond to verified requests within thirty (30) calendar days. We may request identity verification before processing your request.

ace8 strictly prohibits the registration or use of its platform by individuals under 21 years of age, in compliance with applicable Philippine gambling regulations. We do not knowingly collect personal data from persons under 21.

If we discover that personal data has been collected from a person under the age of 21, we will take immediate steps to close the associated account, return any deposits where appropriate and required by law, and delete the personal data in question from our systems.

If you believe that a minor has created an ace8 account or provided personal data to our platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

ace8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this page.
• Notify registered players via email or in-platform notification prior to the changes taking effect.
• Where required by law, obtain fresh consent for new processing activities.

We encourage you to review this Policy periodically. Your continued use of ace8 following the publication of any updated Policy constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ace8, please contact us through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 directly within the ace8 platform app
• Service Coverage: Our support team serves players across the Philippines, including Manila, Cebu, Davao, and Quezon City

Our Filipino-speaking support and data privacy team is available 24 hours a day, 7 days a week, including Philippine public holidays. We are committed to addressing all data privacy enquiries promptly and transparently.

This Privacy Policy was last updated on 1 January 2026. Previous versions of this policy are available on request.