8ace Privacy Policy

The 8ace Platform, accessible at https://8ace.club, is operated by the 8ace entity ("8ace", "we", "us", "our"). 8ace acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform, as that term is defined under the Philippine Data Privacy Act of 2012 (RA 10173).

As a Personal Information Controller, 8ace determines the purposes and means by which your personal data is processed. 8ace has appointed a Data Protection Officer (DPO) who is responsible for overseeing the Platform's data privacy compliance program. Contact details for the DPO are provided in Section 15 of this Policy.

This Privacy Policy applies to all personal data collected by 8ace through: the 8ace website and mobile web application; account registration and management processes; payment processing and KYC verification; customer support interactions; and marketing and promotional communications where you have consented to receive them.

8ace collects the following categories of personal data from users of the Platform:

8ace collects personal data through the following means:

• Directly from you: When you register an account, submit KYC documentation, make a deposit or withdrawal request, contact customer support, or respond to a promotional communication.
• Automatically through Platform use: Through server logs, cookies, analytics tools, and device fingerprinting technologies that record your interactions with the Platform. See Section 11 for details on our cookie practices.
• From third-party service providers: Identity verification agencies that process your KYC documentation; payment service providers that process your deposit and withdrawal transactions; fraud detection services that help identify suspicious account activity; and analytics providers that help us understand Platform usage patterns.
• From regulatory and law enforcement bodies: Where 8ace is legally required to collect or receive personal data in connection with a regulatory investigation, court order, or law enforcement request.

8ace processes your personal data for the following purposes:

• Account creation and management: To create, maintain, and administer your 8ace account, including verifying your identity, managing your balance, and processing gaming activity.
• KYC compliance: To verify your identity and age (21+) in accordance with PAGCOR requirements and applicable Philippine anti-money laundering regulations (Republic Act No. 9160, as amended).
• Payment processing: To process deposits and withdrawals to and from your 8ace account via GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment channels.
• Gaming service provision: To operate gaming sessions, settle bets, apply bonuses, and record your gaming history across all game categories available on the Platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming monitoring: To monitor gaming behavior patterns that may indicate problem gambling, to implement deposit limits and self-exclusion requests, and to fulfill our duty of care obligations under responsible gaming regulations.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our customer service operations.
• Legal and regulatory compliance: To fulfill reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other relevant Philippine regulatory authorities.
• Marketing communications (with consent): Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates via SMS, email, or push notification. You may withdraw consent at any time.
• Platform improvement: To analyze aggregated, anonymized usage data to improve the features, performance, and user experience of the 8ace Platform.

8ace processes personal data on the following legal bases as recognized under RA 10173:

• Contractual necessity: Processing required to perform the contract between you and 8ace (i.e., the Terms and Conditions governing your account and use of the Platform).
• Legal obligation: Processing required for compliance with Philippine law, including PAGCOR online gaming regulations, the Anti-Money Laundering Act (AMLA), and reporting obligations to the AMLC and NPC.
• Legitimate interests: Processing necessary for 8ace's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, security monitoring, and platform analytics — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the processing of personal data for direct marketing purposes. Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8ace does not sell your personal data. We share personal data only in the following limited circumstances:

• Service providers acting as Personal Information Processors (PIP): Third-party processors engaged to provide services on 8ace's behalf, including KYC verification providers, payment gateway operators (GCash, PayMaya, BancNet-connected banks), cloud hosting providers, fraud detection services, and customer support platform providers. All processors are bound by data processing agreements that require them to process your data only on 8ace's instructions and in accordance with RA 10173.
• Game Providers: Where necessary for the operation of specific games, limited technical session data (such as a pseudonymous session token) may be shared with our Game Providers (e.g., JILI, Pragmatic Play, Evolution Gaming). Game Providers do not receive your identity data unless explicitly required for a specific integration and disclosed to you in advance.
• Regulatory and law enforcement authorities: 8ace will disclose personal data to PAGCOR, AMLC, the NPC, the Bureau of Internal Revenue (BIR), or other competent Philippine authorities when required to do so by law, court order, or binding regulatory directive.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of 8ace's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the Privacy Policy of the acquiring entity before your data is subject to a materially different privacy policy.
• With your consent: In any other circumstances not listed above, 8ace will share your personal data only with your prior explicit consent.

Some of 8ace's third-party service providers are located outside the Philippines. Where your personal data is transferred to a country outside the Philippines, 8ace ensures that such transfers are subject to appropriate safeguards, including:

• Data processing agreements with the overseas recipient that incorporate the standard contractual clauses recognized under NPC guidelines;
• Transfer to countries that the NPC has determined provide an adequate level of data protection; or
• Where the transfer is necessary for the performance of a contract between you and 8ace (e.g., processing a transaction through an international payment network).

8ace's primary data processing infrastructure is hosted within the Asia-Pacific region to minimize the geographic scope of international data transfers.

8ace retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to applicable legal retention requirements:

• Account data: Retained for the duration of your active account relationship with 8ace, plus a period of five (5) years following account closure, to meet regulatory record-keeping requirements and to handle any post-closure disputes or regulatory inquiries.
• KYC documentation: Retained for a minimum of five (5) years from the date of the last transaction on your account, as required by the AMLA and PAGCOR regulations.
• Transaction records: Retained for a minimum of five (5) years from the transaction date.
• Customer support communications: Retained for a period of three (3) years from the date of the last interaction, to enable review of historical support cases.
• Marketing consent records: Retained for the duration of your consent, plus a period sufficient to demonstrate compliance with consent requirements in the event of a regulatory inquiry.
• Technical and device data: Log data is retained for a maximum of twelve (12) months, after which it is either deleted or anonymized for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard methods.

8ace implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All personal data transmitted between your device and 8ace servers is encrypted using TLS 1.2 or higher. Sensitive data stored at rest (including KYC documents and payment details) is encrypted using AES-256.
• Access controls: Access to personal data within 8ace's systems is restricted to authorized personnel on a need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication for all administrative access.
• Network security: 8ace's infrastructure is protected by firewalls, intrusion detection systems, and regular third-party penetration testing to identify and remediate vulnerabilities.
• Staff training: All 8ace staff with access to personal data receive regular data privacy and information security training aligned with RA 10173 requirements.
• Incident response: 8ace maintains a documented data breach response procedure. In the event of a breach likely to result in serious harm, 8ace will notify the NPC within 72 hours and affected users as soon as reasonably practicable.

While 8ace implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 8ace:

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 15. 8ace will respond to all verifiable data subject requests within thirty (30) calendar days of receipt.

The 8ace Platform uses cookies and similar tracking technologies to operate correctly, to improve your user experience, and to support our security and fraud prevention systems. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and user preference cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences (such as your preferred language, last visited games, and display settings) to provide a more personalized experience across sessions.
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform (page views, session durations, navigation patterns). This data is used to improve Platform performance and user experience. No personally identifiable information is included in analytics reports.
• Security cookies: Support fraud detection and account security functions, including identifying login anomalies and detecting automated access attempts.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. 8ace does not use cookies for the purpose of serving third-party advertising.

The 8ace Platform is strictly prohibited for use by persons under the age of 21 years. 8ace does not knowingly collect personal data from individuals under 21 years of age. This restriction is enforced through mandatory age declaration at registration and KYC identity verification for all accounts.

If 8ace becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental consent (or any person under 21, given the absolute prohibition on under-21 access to gambling services), 8ace will immediately suspend the relevant account, delete the personal data collected, and report the matter to the appropriate authorities where required by law.

If you believe that an underage individual has registered on the 8ace Platform, please contact us immediately at the details provided in Section 15.

8ace will send you promotional offers, bonus notifications, and gaming-related updates only where you have provided explicit opt-in consent during registration or at a subsequent point. Marketing communications from 8ace are sent via SMS to your registered Philippine mobile number, email, and optionally via browser push notification if enabled.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your 8ace account settings;
• Clicking the "unsubscribe" link included in all 8ace marketing emails; or
• Contacting 8ace customer support to request removal from all marketing lists.

Withdrawal of marketing consent will not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) which are necessary for the operation of your account.

8ace may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent update is displayed at the top of this page.

Where changes are material — meaning they significantly affect your rights or how your data is processed — 8ace will provide advance notice through the Platform interface or by email to your registered address before the changes take effect. Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and may request closure of your account in accordance with the Terms and Conditions.

For all data privacy inquiries, requests to exercise your data subject rights, or to report a suspected data privacy concern, please contact the 8ace Data Protection Officer: