9ace Casino
Privacy Policy

1. Introduction

9ace Casino is committed to protecting the privacy and personal data of every player who uses the 9ace platform — whether you are playing from Manila, Cebu, Davao, Quezon City, Makati, or anywhere else across the Philippines. This Privacy Policy describes the types of personal data 9ace collects, the purposes for which it is processed, and the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its implementing rules and regulations.

This Privacy Policy forms part of the 9ace Terms & Conditions and should be read alongside them. Defined terms used in the Terms & Conditions carry the same meaning in this Privacy Policy unless the context requires otherwise. Where a conflict exists between this Privacy Policy and the Terms & Conditions with respect to data privacy matters, this Privacy Policy prevails.

9ace processes your personal data as a data controller under the DPA. This means 9ace determines the purposes and means by which your personal data is processed, and bears primary responsibility for ensuring that processing is lawful, fair, and transparent.

2. Data Controller

The data controller responsible for personal data collected through the 9ace platform is 9ace Casino, operating the website at 9ace.org. For all data privacy enquiries, requests, and complaints, you may contact the 9ace Data Protection Officer through the support channels listed in Section 14 of this Privacy Policy.

9ace has designated a Data Protection Officer (DPO) as required under the DPA. The DPO is responsible for overseeing compliance with this Privacy Policy and applicable data protection law, conducting data privacy impact assessments where required, and acting as the primary point of contact for the National Privacy Commission (NPC) of the Philippines.

3. Personal Data We Collect

9ace collects the following categories of personal data from players and platform visitors. The specific data points collected may vary depending on the features you use and the verification level required for your account.

4. How We Collect Your Data

9ace collects personal data through the following means:

• Direct collection: Data you provide when registering your 9ace account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the 9ace platform, via cookies, session tracking, and server log files. See Section 10 for full details on cookies.
• Third-party sources: Identity verification and fraud prevention data received from licensed KYC/AML service providers, payment processors (e.g., GCash, Maya, BPI, BDO, Metrobank), and where required, government databases accessible under Philippine law.
• Regulatory sources: Self-exclusion lists and prohibited persons registers maintained by applicable Philippine gaming regulatory bodies.

5. How We Use Your Personal Data

9ace uses the personal data it collects for the following purposes:

• Creating, managing, and maintaining your 9ace player account.
• Verifying your identity and age (21+) in compliance with Philippine gaming and anti-money laundering regulations.
• Processing deposits, withdrawals, and all other financial transactions on the 9ace platform.
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other unlawful conduct.
• Personalising your experience on the 9ace platform, including game recommendations and promotional offers relevant to your activity.
• Administering bonuses, promotions, and loyalty programmes in accordance with their applicable terms.
• Providing customer support, resolving disputes, and responding to your enquiries.
• Monitoring and enforcing responsible gaming obligations, including administration of deposit limits, cooling-off periods, and self-exclusion requests.
• Complying with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), Republic Act No. 9160 as amended, and reporting obligations to relevant regulatory authorities.
• Improving the 9ace platform through analytics, performance monitoring, and user experience research.
• Sending you transactional communications (account notifications, security alerts, withdrawal confirmations) and, where you have opted in, promotional communications about 9ace offers.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 9ace relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and 9ace — including account management, transaction processing, and game operation.
• Legal obligation: Processing required to comply with Philippine law — including AML/CTF obligations under the AMLA, KYC requirements, and regulatory reporting to the National Privacy Commission and applicable gaming authorities.
• Legitimate interests: Processing necessary for 9ace's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time by updating your communication preferences in your 9ace account settings or by contacting support.

7. Sharing Your Personal Data

9ace does not sell or rent your personal data to third parties. Your data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya (PayMaya), BPI, BDO, Metrobank, UnionBank, InstaPay, PesoNet, GrabPay, Coins.ph, and cryptocurrency payment processors — for the purpose of executing your deposit and withdrawal transactions.
• Identity verification providers: Licensed KYC and AML service providers engaged by 9ace to verify your identity and screen against sanctions and prohibited persons lists.
• Game content providers: Third-party game studios and live dealer platform providers who supply games accessible through the 9ace platform. These providers may receive limited technical and usage data necessary to deliver game services.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by 9ace under strict data processing agreements that prohibit secondary use of your data.
• Regulatory and law enforcement authorities: The National Privacy Commission (NPC), Philippine gaming regulatory bodies, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement agencies — where disclosure is required by Philippine law or a valid legal order.
• Professional advisers: Legal, audit, and compliance advisers engaged by 9ace, subject to confidentiality obligations.

All third-party service providers engaged by 9ace are required to implement appropriate technical and organisational security measures to protect your personal data, and are prohibited from using your data for any purpose beyond what is specified in their service agreement with 9ace.

8. Data Retention

9ace retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such longer periods as are required by applicable Philippine law. Key retention periods are as follows:

• Account and identity data: Retained for the duration of your active 9ace account and for a minimum of five (5) years following account closure, as required under the AMLA and applicable gaming regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML record-keeping requirements.
• Support communications: Retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or regulatory investigation.
• Technical and usage data: Retained for up to twenty-four (24) months from collection for analytics and security purposes, unless a longer retention period is required for a specific legal or regulatory reason.
• Self-exclusion records: Retained indefinitely to prevent re-registration during the exclusion period and to maintain a permanent record of the self-exclusion request.

Upon expiry of the applicable retention period, 9ace will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9. Data Security

9ace implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 9ace platform.
• Encryption of sensitive data fields (including identity and financial data) at rest using industry-standard algorithms.
• Role-based access controls limiting access to personal data to authorised 9ace personnel on a need-to-know basis.
• Regular security vulnerability assessments, penetration testing, and code reviews of the 9ace platform.
• Two-factor authentication (2FA) options available to all registered 9ace players.
• Comprehensive incident response procedures for the detection, containment, and notification of personal data breaches.

In the event of a personal data breach that poses a real risk of harm to you, 9ace will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and applicable DPA implementing rules.

10. Cookies & Tracking Technologies

9ace uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit the 9ace website. The following types of cookies are used:

• Essential cookies: Required for the 9ace platform to function correctly — including session management, login state maintenance, and security features. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences (such as language settings and responsible gaming tool configurations) to provide a more personalised experience on 9ace.
• Analytics cookies: Collect aggregated, anonymised data about how players use the 9ace platform, which pages are visited most frequently, and where errors occur — used to improve platform performance and user experience.
• Security cookies: Assist in detecting fraudulent activity, bot behaviour, and suspicious login attempts on the 9ace platform.

You may manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to access and use certain features of the 9ace platform. 9ace does not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving ads on external websites.

11. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by 9ace:

• Right to be informed: You have the right to be informed about how 9ace collects and uses your personal data, as set out in this Privacy Policy.
• Right of access: You may request a copy of the personal data 9ace holds about you, including information about the purposes for which it is processed and the third parties with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by 9ace. Minor corrections (e.g., contact details) can be made directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, provided 9ace has no overriding legal obligation to retain it (e.g., AML record-keeping requirements).
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 9ace's assessment of overriding grounds.
• Right to data portability: Where technically feasible and permitted by law, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 9ace has processed your personal data in violation of the DPA.

To exercise any of these rights, please contact the 9ace Data Protection Officer via the support channels described in Section 14. 9ace will respond to all verified data subject requests within thirty (30) calendar days of receipt, in accordance with DPA requirements.

12. Minors

If 9ace discovers that personal data has been collected from an individual who is under 21 years of age — whether through account registration, payment processing, or any other means — that data will be deleted immediately and the associated account will be permanently closed. All funds credited to the underage account will be forfeited in accordance with the 9ace Terms & Conditions.

If you are a parent or guardian and believe that your child (under 21 years of age) has registered a 9ace account or provided personal data to 9ace, please contact support immediately via live chat so that the matter can be resolved without delay.

13. Changes to This Privacy Policy

9ace reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. The "Last Updated" date at the top of this Privacy Policy will be revised accordingly with each update.

Where changes are material — meaning they affect your rights, the categories of data collected, or the purposes for which data is used — 9ace will notify registered players via the email address on file or through a prominent notice displayed on the 9ace platform upon login, at least fourteen (14) days before the changes take effect.

Your continued use of the 9ace platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised Privacy Policy, you should discontinue use of the platform and may request account closure in accordance with Section 12 of the 9ace Terms & Conditions.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 9ace, please contact the 9ace Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the 9ace platform — the fastest way to reach the support team for urgent data privacy concerns.
• Email: [email protected] — for written data subject requests, formal complaints, and DPO correspondence. Please include "Data Privacy Request" in the subject line.

9ace will acknowledge all data privacy requests within five (5) business days and provide a substantive response within thirty (30) calendar days, as required under the DPA. Complex requests involving large volumes of data or requiring third-party consultations may take longer; in such cases, 9ace will notify you of the anticipated timeline.

If you are not satisfied with 9ace's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines. Information on filing a complaint with the NPC is available through official Philippine government channels.