222ace Privacy Policy

This Privacy Policy ("Policy") describes how 222ace ("Company," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of users ("you," "your," "Player") who access or use the 222ace website and online gaming platform located at https://222ace.net (the "Platform").

222ace is committed to protecting the privacy and security of your personal data. We recognize that when you share your personal information with us, you are placing your trust in 222ace, and we take that responsibility seriously. This Policy is designed to give you full transparency about our data practices so you can make informed decisions about using our Platform.

This Policy applies to all personal data collected through the 222ace Platform, including data collected via the website, mobile browser, customer support channels, and any promotional or marketing communications we send to you. It should be read alongside our Terms & Conditions, which govern your use of the Platform generally.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 222ace is the personal information controller responsible for your personal data collected through the Platform.

As the personal information controller, 222ace determines the purposes and means of processing your personal data. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for our DPO are provided in Section 14 of this Policy.

222ace collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Gender
• Nationality and country of residence
• Email address
• Philippine mobile number
• Residential address (barangay, city/municipality, province)

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, PhilSys National ID, SSS ID, UMID, driver's license, PRC ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or liveness check images submitted during verification
• Source of funds declarations where required by regulation

3.3 Financial Data

• GCash account number and registered name
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank, and other Philippine banks) where used for deposits or withdrawals
• Transaction history, including deposit amounts, withdrawal amounts, and dates

3.4 Gaming Activity Data

• Game session history, including games played, wagers placed, and outcomes
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Account balance history

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Login timestamps and session duration data
• Referring URLs and navigation paths within the Platform

3.6 Communications Data

• Records of customer support interactions via live chat, email, or other channels
• Feedback and survey responses
• Marketing communication preferences and opt-in/opt-out records

222ace collects personal data through the following means:

4.1 Directly From You

The majority of personal data we hold is provided directly by you when you register for a 222ace account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account profile.

4.2 Automatically Through the Platform

When you access and use the 222ace Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device information, and browsing behavior within the Platform. See Section 9 for full details on our use of cookies.

4.3 From Third Parties

We may receive personal data about you from the following third-party sources:

• Payment processors (e.g., GCash, PayMaya, BPI, BDO) — transaction confirmation and account verification data
• Identity verification service providers — results of automated KYC and document verification checks
• Fraud prevention and anti-money laundering (AML) screening services — risk scores and watchlist screening results
• Analytics providers — aggregated and anonymized usage data to help us improve the Platform

222ace uses your personal data for the following purposes:

222ace will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Data Privacy Act of 2012 (RA 10173), 222ace processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

222ace does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, fraud detection and AML screening services, cloud hosting and infrastructure providers, customer support platform providers, and email and SMS communication services.

7.2 Regulatory and Law Enforcement Authorities

222ace may disclose personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by law, court order, or regulatory directive. This includes disclosures required under anti-money laundering regulations and gaming regulatory requirements.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 222ace's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

7.4 With Your Consent

We may share your personal data with third parties in other circumstances where you have given your explicit consent to such sharing.

222ace retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, our retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity records: Retained for a minimum of three (3) years from the date of the activity.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing preference records: Retained until you withdraw consent or close your account, plus one (1) year for audit purposes.
• Technical and device data (logs): Retained for up to twelve (12) months from collection.

When personal data is no longer required, 222ace will securely delete or anonymize it in accordance with our data disposal procedures.

222ace uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit the Platform.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your 222ace account. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the Platform — which pages are visited most, where users drop off, and how the Platform performs. Data collected is aggregated and anonymized where possible.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

9.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the 222ace Platform — for example, you may be required to log in more frequently if session cookies are blocked.

222ace implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and the 222ace Platform is encrypted using industry-standard SSL/TLS protocols.
• Encryption at rest: Sensitive personal data, including KYC documents and financial data, is encrypted when stored on our servers.
• Access controls: Access to personal data is restricted to authorized 222ace personnel and service providers who have a legitimate need to access it. All access is logged and audited.
• Two-factor authentication: Available for player accounts to add an additional layer of security to your login process.
• Regular security assessments: 222ace conducts periodic security reviews, vulnerability assessments, and penetration testing of the Platform.
• Staff training: All 222ace personnel who handle personal data receive regular data privacy and security training.

While 222ace takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents that may occur.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 222ace. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

• Right to be informed: You have the right to be informed about how your personal data is collected and processed — which is the purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data 222ace holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, and where your interests override ours.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

222ace will respond to all data subject rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

The 222ace Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing online gambling and casino-style gaming. 222ace does not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the 222ace Platform, please contact us immediately using the details in Section 14 so we can take appropriate action.

We encourage parents and guardians to use parental control software and to monitor their children's internet usage to prevent access to gambling websites.

222ace reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this Policy, we will notify registered players by email to the address on file and/or by displaying a prominent notice on the Platform for a reasonable period before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 222ace protects your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 222ace handles your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing data privacy compliance at 222ace and will handle all data subject rights requests.

You may reach our Data Protection Officer and general support team via the live chat feature on the 222ace Platform, or by email:

Data Protection Officer Email:
[email protected]

General Support Email:
[email protected]

We aim to respond to all privacy-related inquiries within five (5) business days. For formal data subject rights requests, please include your full name, registered email address, and a clear description of your request to help us process it efficiently.