Privacy Policy – Casino Ace Philippines Data Protection

Data You Provide Directly: When you register a Casino Ace account, you provide your name, mobile number, date of birth, and address. When you verify your identity (KYC), you provide a government-issued ID. When you deposit or withdraw, your payment method details are processed. All of this data is provided directly by you and used only for the purposes listed in this Policy.

Data We Collect Automatically: When you visit casinoace.app or use the Casino Ace mobile platform, we automatically collect technical and usage data including your IP address, device identifiers, browser type, and the pages and features you access. This data is collected using standard web technologies including cookies and server logs.

Data from Third Parties: Casino Ace may receive personal data about you from identity verification partners (for KYC), fraud prevention services, payment processors, and PAGCOR where required for regulatory purposes. Any such data is handled in accordance with this Policy and only used for the purposes for which it was received.

Sensitive Personal Information: Casino Ace does not collect sensitive personal information as defined under the Data Privacy Act — such as health data, racial or ethnic origin, political or religious beliefs — unless specifically required by PAGCOR regulations in a particular context. If we ever need to collect sensitive data beyond our standard set, we will obtain your explicit consent at that time.

Account Registration and Management: Your identity and contact data is used to create and maintain your Casino Ace account, verify your identity, confirm your age eligibility, and manage your player profile. This processing is necessary to perform the contract between you and Casino Ace.

Payment Processing: Your financial data is used solely to process deposits you initiate and withdrawals you request. Casino Ace does not store full card numbers — only the information necessary to identify your payment method and process transactions is retained. Payment data processing is handled by PCI-DSS compliant payment processors.

Regulatory Compliance: Casino Ace is legally required to collect and retain certain player data under PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA). This includes identity data, transaction records, and betting history for a minimum period specified by those regulations. This processing is based on legal obligation and cannot be opted out of while you hold a Casino Ace account.

Fraud Prevention and Security: Technical data including IP addresses, device identifiers, and session logs are used to detect and prevent fraud, unauthorised account access, bonus abuse, and other security threats. This processing is based on Casino Ace's legitimate interest in protecting the security of its platform and its players.

Responsible Gaming Monitoring: Casino Ace uses your betting data and usage patterns to identify signs of potentially problematic gaming behaviour, to monitor compliance with your self-imposed limits, and to administer self-exclusion periods. This processing is based on both contractual obligation (our Terms and Conditions) and regulatory requirement.

Service Improvement and Analytics: Aggregated and anonymised usage data helps Casino Ace understand how players use the platform, identify features that need improvement, and prioritise development work. This analytics processing does not identify individual players and is based on our legitimate interest in improving our services.

Marketing Communications: With your consent, Casino Ace may send you promotional messages about new games, betting markets, and special offers via SMS and email. You can withdraw this consent at any time through your account settings or by replying STOP to any marketing SMS. Withdrawing marketing consent does not affect your ability to use Casino Ace.

Customer Support: When you contact Casino Ace support, we collect and retain the content of that interaction — including chat logs and email correspondence — for the purpose of resolving your query, maintaining support quality, and as a compliance record in case of future disputes.

Payment Processors: When you make a deposit or request a withdrawal, your payment information is shared with the relevant payment provider — GCash, Maya, your bank, or card network — to process the transaction. These processors are bound by their own data protection obligations and by our data processing agreements.

Identity Verification Partners: Casino Ace uses third-party KYC (Know Your Customer) services to verify player identity and age. These partners receive only the minimum data necessary for verification purposes and are bound by strict confidentiality agreements.

PAGCOR and Regulatory Bodies: Casino Ace is legally required to share player data with PAGCOR and other Philippine regulatory and law enforcement agencies upon lawful request. This includes Anti-Money Laundering Council (AMLC) reporting under the AMLA. Casino Ace cannot refuse such requests and is not required to notify the player in advance where disclosure is required by law.

Game and Technology Providers: Some games and live sports data available on Casino Ace are provided by third-party suppliers. These suppliers may receive technical data necessary for game delivery (such as session tokens) but do not receive your personal identity or financial data unless that is specifically necessary for the service they provide.

Fraud Prevention Networks: Casino Ace participates in fraud prevention information sharing to protect the platform and its players. If fraud is detected on your account, relevant data may be shared with other licensed operators or fraud prevention services to prevent further harm. Such sharing is conducted within the framework of applicable privacy law.

Encryption in Transit: All communications between your device and Casino Ace are encrypted using TLS 1.2 or higher. This protects your login credentials, payment details, and personal information from interception on any network.

Encryption at Rest: Sensitive data stored in Casino Ace databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption. Even in the unlikely event of a server breach, this data would be unreadable without the decryption keys.

Access Controls: Casino Ace employee access to player personal data is restricted to those with a documented business need. All access is logged and reviewed regularly. No employee can access player data outside of their defined role without triggering a security alert.

Regular Security Testing: Casino Ace conducts regular penetration testing and vulnerability assessments on all systems that process player data. Critical vulnerabilities identified through testing are remediated on a priority basis. Our security programme is reviewed at least annually.

Incident Response: Casino Ace maintains a documented data breach response procedure. In the event of a breach that is likely to result in harm to players, we will notify affected individuals and the National Privacy Commission within 72 hours of discovery, as required by Philippine law.