Privacy Policy – ace 58 Casino

1. Introduction

ace 58 ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of all users who access or register on the ace 58 online casino platform at ace58.xyz and any associated mobile applications or services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how ace 58 collects, uses, stores, shares, and protects personal information in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines.

By registering on or using the ace 58 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2. Data Controller Information

For the purposes of the Data Privacy Act of 2012, ace 58 acts as the Personal Information Controller (PIC) in respect of the personal data it collects from users of the Platform.

Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and the DPA. You may contact the DPO directly at [email protected] for any privacy-related queries or concerns.

3. Personal Data We Collect

ace 58 collects the following categories of personal data from users of the Platform:

ace 58 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where strictly required by PAGCOR regulations or applicable law (e.g., facial recognition for identity verification purposes).

4. How We Collect Your Data

ace 58 collects personal data through the following means:

4.1 Direct Collection

• When you register for an ace 58 account and complete the registration form;
• When you complete KYC verification by submitting identity documents;
• When you make a deposit or request a withdrawal;
• When you contact our customer support team via live chat or email;
• When you participate in promotions, surveys, or feedback requests;
• When you update your account profile or preferences.

4.2 Automated Collection

• Through cookies and similar tracking technologies when you browse the Platform (see Section 7);
• Through server logs that automatically record technical data such as your IP address, device information, and session activity;
• Through our gaming systems, which log all game sessions, wagers, and outcomes for regulatory compliance and dispute resolution purposes.

4.3 Third-Party Sources

• From identity verification service providers used to conduct KYC checks;
• From payment processors (GCash, Maya, banks) to confirm transaction status;
• From fraud prevention and anti-money laundering screening services;
• From PAGCOR or other regulatory authorities where required by law.

5. Purposes & Legal Basis for Processing

ace 58 processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

6. Data Sharing & Disclosure

ace 58 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

6.1 Service Providers

We share data with carefully selected third-party service providers who assist us in operating the Platform, including: payment processors (GCash, Maya, banks), identity verification providers, game software providers, cloud hosting providers, customer support platform providers, and fraud detection services. All service providers are contractually bound to process your data only on our instructions and in compliance with the DPA.

6.2 Regulatory Authorities

We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request or as required by applicable regulations.

6.3 Legal Requirements

We may disclose your personal data where required to comply with a court order, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of ace 58, our users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ace 58's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via email or a prominent notice on the Platform.

7. Cookies & Tracking Technologies

ace 58 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The following types of cookies are used:

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may manage your preferences for functional, analytics, and marketing cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

ace 58 does not use cookies to track your activity on third-party websites unrelated to the Platform.

8. Data Retention

ace 58 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and PAGCOR regulations. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AML record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of prior consent;
• Technical and usage data: Retained for up to twenty-four (24) months in aggregated or anonymised form.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-approved data disposal procedures.

9. Data Security

ace 58 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

9.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and the ace 58 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols;
• Data Encryption at Rest: Sensitive personal data, including identity documents and financial information, is encrypted at rest using AES-256 encryption;
• Two-Factor Authentication (2FA): Available to all registered users and mandatory for high-value withdrawal requests;
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems;
• Regular Security Audits: The Platform undergoes regular penetration testing and security audits by independent third-party security firms.

9.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis, with role-based access controls enforced across all internal systems;
• All ace 58 staff who handle personal data are required to complete data privacy training and are bound by confidentiality obligations;
• A formal data breach response procedure is in place, including notification to the NPC and affected users within seventy-two (72) hours of discovering a breach, as required by the DPA.

While ace 58 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ace 58:

To exercise any of the above rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

Please note that certain rights may be limited where processing is required to comply with a legal obligation, to protect the vital interests of another person, or for the establishment, exercise, or defence of legal claims.

11. Children & Minors

ace 58 does not knowingly collect, process, or store personal data from individuals under the age of twenty-one (21). Our registration process includes mandatory age verification steps, and all accounts are subject to KYC verification to confirm that users meet the minimum age requirement.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected].

12. Cross-Border Data Transfers

Some of ace 58's service providers — including cloud hosting providers, game software suppliers, and identity verification services — may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, ace 58 ensures that appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to protect personal data to a standard equivalent to the DPA;
• Verification that the recipient country has been assessed as providing adequate data protection by the NPC;
• Binding corporate rules where the recipient is part of the same corporate group as ace 58.

By using the ace 58 Platform, you consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

13. Updates to This Privacy Policy

ace 58 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, ace 58 will notify registered users via email and/or a prominent notice on the Platform at least seven (7) days before the changes take effect. For non-material changes, the updated Policy will be posted on this page with a revised effective date.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how ace 58 protects your personal data.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ace 58 handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 and adjudicating complaints from data subjects.