Privacy Policy

01 Overview & Scope

This Privacy Policy ("Policy") describes how ace jl Casino ("ace jl", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and website visitors who access or use the ace jl Casino platform at acejl.biz and any associated mobile applications or gaming services (the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects applicable guidelines from the Philippine Amusement and Gaming Corporation (PAGCOR) relating to the collection and handling of player data in the context of licensed online gaming operations.

This Policy applies to all personal data processed by ace jl in connection with the operation of the Platform, regardless of whether such data is collected online, through the mobile application, via customer support interactions, or through any other channel associated with ace jl services. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read together with ace jl's Terms and Conditions available at acejl.biz/terms-conditions and the Responsible Gaming Policy at acejl.biz/responsible-gaming.

02 Identity of the Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the Data Controller responsible for your personal data is ace jl Casino, operating the Platform at acejl.biz. ace jl determines the purposes and means of processing your personal information collected through the Platform.

A designated Data Protection Officer (DPO) has been appointed by ace jl in accordance with Section 21 of the DPA and its IRR. Contact details for the DPO are provided in Section 15 of this Policy. Players who wish to exercise their data subject rights, lodge privacy complaints, or seek clarification regarding this Policy are encouraged to contact the DPO directly.

03 Personal Data We Collect

ace jl collects the following categories of personal data in connection with the provision of its services:

3.1 Registration & Identity Data

• Full name (as required during KYC verification);
• Date of birth (for age verification — you must be 21 or older);
• Philippine mobile number (primary account identifier);
• Username and hashed password;
• Residential address (province / city / barangay); and
• Government-issued identification document type and number (e.g., Philippine passport, PhilSys ID, UMID, driver's licence) — collected during KYC.

3.2 Financial & Transaction Data

• Deposit and withdrawal transaction records (amount, method, timestamp);
• GCash mobile number or account reference, Maya account reference, or bank account details used for transactions;
• Account balance history and wagering records; and
• Bonus activation, wagering progress, and cashback records.

3.3 Technical & Device Data

• IP address and approximate geolocation (country/region);
• Device type, operating system, and browser type;
• Unique device identifiers;
• Login timestamps and session duration; and
• Referring URL and on-site navigation patterns.

3.4 Communications Data

• Live chat transcripts with ace jl support agents;
• Email correspondence with ace jl; and
• Records of responsible gaming requests (deposit limit changes, self-exclusion submissions).

04 How We Collect Your Data

ace jl collects personal data through the following channels and mechanisms:

• Direct submission: Information you voluntarily provide during account registration, KYC verification, customer support interactions, or responsible gaming requests.
• Automated collection: Technical data collected automatically when you access the Platform, including through server logs, session tracking, and browser/device fingerprinting used for fraud prevention and security monitoring.
• Cookies and similar technologies: As described in Section 10 of this Policy.
• Third-party payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment service providers when you make deposits or withdrawals.
• KYC verification partners: Identity verification data received from third-party identity verification service providers engaged by ace jl for age and identity confirmation.
• Fraud prevention services: Risk signals and device reputation data received from third-party fraud prevention providers.

05 Purposes of Processing

ace jl processes your personal data for the following purposes:

1. Account management: Creating, verifying, and maintaining your ace jl player account, including authentication, password recovery, and multi-device session management.
2. Age and identity verification: Confirming that all players are at least 21 years of age and verifying their identity in compliance with PAGCOR requirements and the Anti-Money Laundering Act (AMLA).
3. Payment processing: Facilitating deposits and withdrawals via GCash, Maya, and other approved payment methods, and maintaining transaction records for accounting purposes.
4. Game and platform delivery: Providing access to casino games, sports betting, bingo, e-sabong, and all other features of the ace jl Platform.
5. Customer support: Responding to enquiries, resolving disputes, and providing assistance via live chat, email, and other support channels.
6. Regulatory compliance: Meeting obligations under PAGCOR licensing conditions, the DPA, AMLA, and other applicable Philippine laws, including reporting obligations to regulatory authorities.
7. Responsible gaming: Administering deposit limits, self-exclusion requests, and responsible gaming tools, and monitoring for patterns that may indicate problem gambling behaviour.
8. Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multiple account abuse, and unauthorized access to player accounts.
9. Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
10. Platform improvement: Analysing aggregated, anonymized usage data to improve game selection, user interface design, and platform performance.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, ace jl processes your personal data on the following legal bases:

07 Data Sharing & Third Parties

ace jl may share your personal data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment service providers: GCash (GXI), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment processors — solely to facilitate deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party identity verification services engaged to conduct age verification and document authenticity checks.
• Game technology providers: Licensed game content providers (such as JILI Games, PG Soft, Pragmatic Play, and CQ9) who may receive anonymized session data for game analytics purposes.
• Fraud prevention and cybersecurity providers: Third-party services providing device fingerprinting, risk scoring, and security monitoring.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement authorities — where required or permitted by applicable Philippine law.
• Legal and professional advisors: Legal counsel, auditors, and compliance consultants retained by ace jl, subject to confidentiality obligations.
• Business transfers: In connection with any merger, acquisition, or sale of business assets, your data may be transferred subject to the same data protection standards described in this Policy, with prior notice provided where required by the DPA.

All third parties with whom ace jl shares personal data are required to process that data only for the specified purpose, to implement appropriate security measures, and to comply with Philippine data privacy law where applicable.

08 Data Retention

ace jl retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law, whichever is longer. Specific retention periods are summarised in the table in Section 3 of this Policy.

In general:

• Account and identity data is retained for a minimum of five (5) years following account closure to satisfy regulatory record-keeping obligations;
• Financial transaction records are retained for a minimum of seven (7) years in compliance with AMLA and BIR requirements;
• Responsible gaming records, including self-exclusion records, are retained for the duration of the exclusion period plus five (5) years to prevent circumvention; and
• Technical and server log data is retained on a rolling thirteen (13) month basis for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or destroyed in accordance with ace jl's data disposal procedures and NPC guidelines.

09 Security Measures

ace jl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport encryption: All data transmitted between your device and the ace jl Platform is encrypted using 256-bit SSL/TLS protocols;
• Password protection: Passwords are stored using industry-standard one-way cryptographic hashing — ace jl staff cannot view your password in plain text;
• Access controls: Personal data is accessible only to authorized personnel with a legitimate need, subject to role-based access policies;
• Two-factor authentication: OTP verification is required for new device logins to protect accounts from unauthorized access;
• Secure infrastructure: Platform servers and databases are hosted in secured facilities with physical and logical access controls; and
• Incident response: ace jl maintains a data breach response procedure and will notify affected data subjects and the National Privacy Commission in accordance with NPC Circular 16-03 where a breach is likely to result in harm.

While ace jl takes all reasonable steps to protect your personal data, no security system is infallible. You are responsible for maintaining the security of your login credentials and for notifying ace jl promptly if you suspect unauthorized access to your account.

10 Cookies & Similar Technologies

ace jl uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website server that enables the site to recognize your device and remember certain information across sessions.

10.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function — including session authentication, account login persistence, and security verification. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences (e.g., language, game lobby filters, responsible gaming settings) to improve your experience. These are activated with your consent.
• Analytics cookies: Collect anonymized data about how players navigate the Platform, which games are most accessed, and where technical errors occur — used to improve Platform performance. Activated with your consent.
• Security and fraud prevention cookies: Used to identify and prevent automated bot activity, multiple account creation, and unauthorized login attempts.

10.2 Managing Cookies

On your first visit to the ace jl Platform, you will be presented with a cookie consent banner allowing you to accept, reject, or customize non-essential cookie categories. You can also manage or withdraw your cookie consent at any time through your browser settings. Please note that disabling certain cookies may affect Platform functionality.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, as a data subject you have the following rights with respect to your personal data held by ace jl:

To exercise any of these rights, please contact ace jl's Data Protection Officer as detailed in Section 15. We will respond to all verified data subject requests within thirty (30) calendar days in accordance with NPC guidelines. We may require you to verify your identity before processing your request.

12 Minors — 21+ Age Requirement

If ace jl becomes aware that personal data has been collected from a person under 21 years of age, that data will be promptly deleted, the associated account will be permanently closed, and any funds held in that account may be forfeited in accordance with our Terms and Conditions.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you have reason to believe that a minor has registered or is using an ace jl account, please contact our support team immediately so that the account can be investigated and appropriate action taken.

13 Cross-Border Data Transfers

Some of the third-party service providers engaged by ace jl may process personal data outside the Philippines — for example, game content providers and cloud infrastructure services. In any such case, ace jl ensures that appropriate safeguards are in place to protect personal data transferred internationally, including:

• Transfer to countries with an adequate level of data protection as recognized by the NPC;
• Standard contractual clauses or data processing agreements that impose data protection obligations on the recipient; or
• Binding corporate rules where applicable.

By using the ace jl Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines in connection with the services described in this Policy, subject to the safeguards described above.

14 Changes to This Privacy Policy

ace jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR requirements, or NPC guidance. The updated Policy will be posted at acejl.biz/privacy-policy with a revised "Last Updated" date.

Where material changes are made to this Policy — particularly changes that affect your rights or the way we process your personal data — ace jl will provide advance notice via your registered mobile number or through a prominent notice on the Platform. Your continued use of the ace jl Platform after the effective date of the updated Policy constitutes your acknowledgment of the revised terms.

We encourage you to review this Policy periodically to stay informed about how ace jl protects your personal information.

15 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ace jl Casino, please contact our Data Protection Officer (DPO) or customer support team using the following details:

If you are not satisfied with ace jl's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

This Privacy Policy was last reviewed and updated on 1 January 2026. ace jl Casino reserves all rights not expressly granted herein. This Policy is governed by the laws of the Republic of the Philippines.