Privacy Policy

1. Who We Are

8ace ("8ace," "we," "us," or "our") is an online casino and sports betting platform operating at https://8ace.vip, serving registered players throughout the Philippines. 8ace acts as the data controller in respect of the personal information collected through its platform, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") of the Republic of the Philippines, its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected from individuals who visit the 8ace website, register an account, engage in gameplay, make transactions, or otherwise interact with the 8ace platform. By using 8ace, you acknowledge that you have read, understood, and consent to the data practices described herein.

2. Personal Data We Collect

8ace collects the following categories of personal data:

8ace does not collect sensitive personal information as defined under Section 3(l) of the DPA except where strictly necessary for identity verification, compliance with PAGCOR requirements, or fraud prevention, in which case such data is handled with heightened security measures.

3. How We Collect Your Data

8ace collects personal data through the following means:

• Direct Collection: Information you provide when you register an 8ace account, complete KYC verification, make deposits or withdrawals, contact support, or respond to promotional communications.
• Automated Collection: Technical and usage data collected automatically when you access the 8ace platform, through server logs, cookies, session tracking, and similar technologies.
• Third-Party Sources: Identity verification data from document scanning services used during KYC; transaction data from payment processors including GCash, PayMaya, and partner banks; fraud intelligence from third-party risk management providers.

4. How We Use Your Personal Data

8ace processes your personal data for the following purposes:

• To create and manage your 8ace account and provide access to platform services.
• To verify your identity and age in compliance with PAGCOR requirements (minimum age: 21 years).
• To process deposits and withdrawals through your nominated payment methods.
• To detect and prevent fraud, money laundering, and other financial crimes in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines.
• To comply with all applicable Philippine laws, PAGCOR directives, and NPC guidelines.
• To operate and improve the 8ace platform, including personalising your gaming experience.
• To communicate with you regarding your account, transactions, promotions, and platform updates.
• To administer responsible gaming tools including deposit limits, self-exclusion, and session monitoring.
• To resolve disputes, investigate complaints, and enforce our Terms & Conditions.
• To conduct internal analytics and research to improve 8ace products and services.

5. Legal Basis for Processing

8ace processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and 8ace, including account creation, gameplay, and financial transactions.
• Legal Obligation: Processing necessary to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate Interests: Processing conducted in pursuit of 8ace's legitimate interests in fraud prevention, platform security, and service improvement, where such interests do not override your rights and freedoms.
• Consent: Where 8ace relies on your consent as the legal basis for processing (e.g., for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

8ace does not sell your personal data to third parties. 8ace may share your personal data with the following categories of recipients where necessary and on a need-to-know basis:

• Payment Processors: GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations), and partner banks (BPI, BDO, Metrobank) to process financial transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to confirm player identity and age.
• Fraud Prevention & Security Providers: Third-party risk management and cybersecurity vendors operating under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies where disclosure is required by law or regulation.
• Legal & Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations.
• Group Companies: Affiliated entities within the 8ace group, where relevant for operational or compliance purposes, under intra-group data sharing agreements.

All third parties with whom 8ace shares personal data are required to handle that data in compliance with the Data Privacy Act of 2012 and to implement appropriate security measures. 8ace does not transfer personal data outside the Philippines except where adequate protections are in place.

7. Cookies & Tracking Technologies

The 8ace platform uses cookies and similar tracking technologies to deliver and improve its services. Cookies used by 8ace fall into the following categories:

• Strictly Necessary Cookies: Essential for the operation of the 8ace platform, including authentication session management and security functions. These cannot be disabled.
• Performance & Analytics Cookies: Collect anonymous data about how players interact with the 8ace platform to help identify areas for improvement.
• Functional Cookies: Remember your preferences (such as language settings and game lobby filters) to improve your experience on subsequent visits.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the 8ace platform. 8ace does not use third-party advertising cookies or cross-site tracking technologies.

8. Data Retention

8ace retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law:

• Account and KYC Records: Retained for a minimum of five (5) years from account closure, as required by PAGCOR and AMLC regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Support and Communications Records: Retained for a minimum of two (2) years from the date of the communication, or longer where relevant to an ongoing dispute.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, unless longer retention is required for security investigations.

Upon expiry of the applicable retention period, 8ace will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

9. Data Security

8ace implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS encryption on all data transmissions between your device and the 8ace platform.
• Encryption of sensitive data at rest, including financial account details and identity documents.
• Multi-factor authentication for 8ace staff accessing administrative systems.
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the 8ace platform.
• Incident response procedures including mandatory breach notification to the National Privacy Commission within seventy-two (72) hours of discovery of a reportable personal data breach.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 8ace:

• Right to be Informed: The right to be notified of how your personal data is being processed, as provided in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data 8ace holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to overriding legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact 8ace via live chat on the platform or by sending an email to [email protected]. 8ace will respond to verified data rights requests within thirty (30) calendar days.

11. Children & Minors

The 8ace platform is strictly intended for individuals aged twenty-one (21) years and older in accordance with PAGCOR requirements for online casino gaming in the Philippines. 8ace does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the 8ace account registration and KYC process.

If 8ace becomes aware that personal data has been collected from an individual below the minimum age, that data will be deleted immediately and the associated account will be permanently closed. Any deposits made by underage players will be refunded to the originating payment method after deducting any withdrawals already made.

12. Changes to This Privacy Policy

8ace reserves the right to update this Privacy Policy at any time to reflect changes in its data practices, applicable laws, or PAGCOR requirements. Where a material change is made, 8ace will notify registered players via their registered mobile number or email address with reasonable advance notice before the change takes effect. The revised Privacy Policy will be published on this page with the last-updated date amended accordingly.

Your continued use of the 8ace platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. We encourage you to review this page periodically.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 8ace, please contact us through the following channels:

• Live Chat: Available 24/7 on the 8ace platform — the fastest way to reach the support team.
• Email: [email protected] — responses within 12 hours.

For formal data privacy requests or complaints, please address your correspondence to the attention of the 8ace Data Protection Officer (DPO) via the email address above, with the subject line "Data Privacy Request." 8ace will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) calendar days.

If you are not satisfied with 8ace's response to your data rights request or complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC).