8ace Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 8ace ("the Platform," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "your," or "Data Subject") who access or use the 8ace online gaming platform at https://8ace.org, including all associated games, features, and services.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all personal data processed by 8ace in connection with your use of the Platform, whether you are a registered player, a visitor, or a prospective user.

By accessing the Platform or creating an 8ace account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform.

2. Data Controller Information

8ace is the personal information controller (PIC) in respect of the personal data collected through the Platform. As required by the DPA, 8ace has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO using the contact details provided in Section 13 of this Policy.

3. Personal Data We Collect

Depending on how you interact with the 8ace Platform, we may collect the following categories of personal data:

Category	Examples
Identity Data	Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys, passport, driver's license, UMID)
Contact Data	Philippine mobile number, email address, residential address (city/province)
Account Data	Username, encrypted password, account registration date, account status
Financial Data	GCash number, Maya account, bank account details (for withdrawal processing), transaction history, deposit and withdrawal amounts in PHP
Gaming Data	Game history, wager amounts, win/loss records, session duration, responsible gaming settings
Technical Data	IP address, device type, browser type and version, operating system, session timestamps
Usage Data	Pages visited, features used, click-through data, referral source
Communications Data	Support chat transcripts, feedback submissions, correspondence with 8ace

We do not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive personal information is collected (e.g., government ID numbers for KYC), it is processed under the lawful bases described in Section 5.

4. How We Collect Your Data

8ace collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, through cookies, log files, and similar technologies (see Section 7).
• Third-party sources: Identity verification data from KYC service providers; transaction data from payment processors (GCash, Maya, Philippine banks); fraud prevention data from anti-money laundering screening services.

5. Purposes and Legal Bases for Processing

8ace processes your personal data for the following purposes, each supported by a lawful basis under the DPA:

• Account registration and management — to create and maintain your 8ace account, verify your identity, and provide access to Platform features. Legal basis: Performance of contract; compliance with legal obligation (KYC/AML).
• Payment processing — to process deposits and withdrawals in PHP via GCash, Maya, and Philippine bank transfers. Legal basis: Performance of contract.
• Regulatory compliance — to comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and NPC data privacy requirements, including reporting suspicious transactions to the Anti-Money Laundering Council (AMLC). Legal basis: Compliance with legal obligation.
• Responsible gaming — to monitor gaming activity, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling. Legal basis: Legitimate interests; compliance with legal obligation.
• Customer support — to respond to your inquiries, resolve disputes, and improve support quality. Legal basis: Performance of contract; legitimate interests.
• Platform improvement and analytics — to analyze usage patterns, improve game offerings, and optimize the Platform experience. Legal basis: Legitimate interests.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. Legal basis: Consent. You may withdraw consent at any time by updating your communication preferences in your account settings.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorized access, and other prohibited conduct. Legal basis: Legitimate interests; compliance with legal obligation.

6. Disclosure to Third Parties

8ace does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify government-issued IDs and screen against sanctions lists, as required by PAGCOR and AMLA regulations.
• IT and hosting providers: Cloud infrastructure and security service providers who host and maintain the Platform, subject to strict confidentiality obligations.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulatory directive.
• Legal and professional advisors: Lawyers, auditors, and compliance consultants engaged by 8ace, subject to professional confidentiality obligations.

Where personal data is transferred to service providers outside the Philippines, 8ace ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers.

7. Cookies and Tracking Technologies

8ace uses cookies and similar technologies (including web beacons and local storage) to operate the Platform, remember your preferences, maintain your session, and analyze usage. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without affecting core functionality (e.g., session authentication, security tokens).
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and user experience.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect your experience on the Platform. 8ace does not use cookies to serve third-party advertising.

8. Data Security

8ace implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial data and government ID information;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing;
• Incident response procedures for detecting and responding to data breaches, including mandatory notification to the NPC within 72 hours of discovering a breach that poses a real risk of serious harm.

While 8ace takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your 8ace login credentials.

9. Data Retention

8ace retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law. Specifically:

• Account and identity data: Retained for a minimum of five (5) years after account closure, as required by AMLA record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years in accordance with AMLA and PAGCOR requirements.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Marketing data: Retained until you withdraw consent or for two (2) years of inactivity, whichever is earlier.
• Technical and usage data: Retained in aggregated, anonymized form for analytics purposes; identifiable technical data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 8ace:

• Right to be informed: The right to know what personal data 8ace collects and how it is processed — as set out in this Policy.
• Right of access: The right to request a copy of the personal data 8ace holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to 8ace's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured , machine-readable format and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. 8ace will respond to verified requests within fifteen (15) business days. We may require proof of identity before processing your request.

11. Children's Privacy

The 8ace Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine gaming regulations. 8ace does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at the details provided in Section 13.

12. Changes to This Policy

8ace reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

13. Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 8ace, please contact our Data Protection Officer:

• Email: privacy@8ace.org (plain text only — not a clickable link)
• Live Chat: Available 24/7 via the 8ace Platform support widget
• Response time: Within fifteen (15) business days for formal data subject requests

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by 8ace.