22aceph Privacy Policy

22aceph is an online casino and sports betting platform accessible at 22aceph.net, operated for the benefit of Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. The 22aceph platform provides a full suite of online gaming products including slots, live dealer casino games, bingo, card games such as Jacks or Better, and sports betting markets.

For the purposes of this Privacy Policy, "22aceph," "we," "us," and "our" refer to the operator of the 22aceph platform. "You," "your," and "player" refer to any individual who accesses, browses, registers on, or uses any 22aceph service.

22aceph acts as the data controller in respect of the personal data collected from players and visitors to the platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

22aceph collects personal data from you in the following ways: directly from you when you register an account or interact with the platform; automatically through your use of the platform; and from third-party verification and payment service providers as necessary to operate your account. The categories of data we collect are set out below.

22aceph does not knowingly collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses such information in the context of a responsible gaming self-exclusion request or similar support interaction.

22aceph processes your personal data for the following defined purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or being required to do so by law.

• Account Registration & Management: To create, verify, and maintain your 22aceph player account, including processing your KYC documents and confirming your age eligibility (21+).
• Service Delivery: To provide access to all platform games, process deposits and withdrawals in Philippine Pesos (₱ PHP) via GCash, PayMaya, BDO, BPI, and Metrobank, and deliver the full 22aceph gaming experience.
• Identity & Fraud Prevention: To verify your identity, prevent duplicate accounts, detect and investigate fraudulent activity, and protect the integrity of the 22aceph platform and its player community.
• Regulatory Compliance: To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, responsible gaming regulations, and any lawful requests from Philippine authorities.
• Responsible Gaming: To monitor player activity for signs of problem gambling behaviour, enforce deposit limits, self-exclusion requests, and cooling-off periods elected by players through the responsible gaming tools on the platform.
• Customer Support: To respond to your queries, process complaints, and resolve disputes submitted through our support channels.
• Marketing Communications: To send promotional offers, bonus notifications, and event-related communications to players who have opted in to receive marketing materials from 22aceph. You may opt out at any time.
• Platform Improvement: To analyse platform usage, diagnose technical issues, improve game performance, and develop new features based on aggregated, anonymised player behaviour data.

22aceph processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform the contract between you and 22aceph — specifically, to operate your player account, process transactions, and deliver gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including AML obligations, age verification requirements, and lawful data disclosure requests from competent authorities.
• Legitimate Interests: Processing is necessary for 22aceph's legitimate interests in preventing fraud, ensuring platform security, maintaining accurate records, and improving service quality — provided such interests do not override your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — for example, for marketing communications or the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

22aceph uses cookies and similar tracking technologies (including web beacons and local storage) to deliver a secure, personalised, and high-performance platform experience. The types of cookies used on the 22aceph platform are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without significantly impairing platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players use the platform — which pages are visited, which games are most popular, and where technical errors occur. This data helps us improve the 22aceph experience.
• Functional Cookies: Remember your preferences such as your chosen language, display settings, and responsible gaming limits so you do not need to re-enter them on each visit.
• Marketing & Targeting Cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of 22aceph marketing campaigns. These cookies do not share your data with external advertisers.

You can manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your 22aceph account. Most browsers provide a "help" function that explains how to manage cookie settings.

22aceph does not sell or rent your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share necessary transaction data with Philippine payment service providers (GCash, PayMaya, BDO, BPI, Metrobank) to process deposits and withdrawals. These providers are bound by their own data protection obligations and may not use your data for any other purpose.
• KYC & Identity Verification Partners: To fulfil our age verification (21+) and identity verification obligations, we may share identity documents and personal details with certified third-party KYC verification providers. All such providers are contractually bound to maintain strict data confidentiality.
• Fraud Prevention & Security Services: We share technical and behavioural data (such as IP addresses and device fingerprints) with fraud detection and cybersecurity service providers to protect the 22aceph platform and its players from fraudulent activity.
• Legal & Regulatory Authorities: We may disclose personal data to Philippine government agencies, law enforcement bodies, or regulatory authorities where required by law, court order, or in connection with the investigation of suspected criminal activity involving the 22aceph platform.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 22aceph's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and its implications for your data rights.

In all cases where data is shared with third-party service providers, 22aceph ensures appropriate contractual safeguards are in place to protect your personal data and restrict its use to the defined processing purpose.

22aceph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include:

• Encryption of data in transit using TLS (Transport Layer Security) across all platform connections.
• Encryption of sensitive data at rest, including hashed password storage using industry-standard algorithms.
• Restricted access controls ensuring that only authorised 22aceph personnel with a defined operational need can access personal data.
• Regular security assessments and penetration testing of the 22aceph platform infrastructure.
• Secure session management with automatic timeout for inactive sessions to reduce the risk of unauthorised account access.
• Multi-factor authentication options for player accounts to provide an additional layer of login security.

In the unlikely event of a data breach that poses a risk to your personal data, 22aceph will notify affected players and relevant authorities in accordance with applicable legal requirements, and will take immediate steps to contain and remediate the breach.

22aceph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory obligations. The general retention periods we apply are as follows:

• Active Account Data: Retained for the full duration of your registered account relationship with 22aceph, plus a period of five (5) years following account closure, to meet AML and regulatory record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial compliance obligations.
• KYC & Verification Documents: Retained for the duration of your account plus five (5) years following account closure.
• Customer Support & Complaint Records: Retained for three (3) years from the date the matter was resolved.
• Marketing Preference Records: Retained for two (2) years from the date of your last interaction with a marketing communication, or until you withdraw consent, whichever is earlier.
• Technical & Log Data: Retained for up to twelve (12) months from the date of collection for security and performance monitoring purposes.

Once the applicable retention period expires, your data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

As a data subject, you have the following rights in respect of your personal data held by 22aceph. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within thirty (30) calendar days.

As part of our registration and KYC process, 22aceph verifies the age of all players before their account is fully activated. Government-issued photo ID confirming the player's date of birth is required before withdrawal of funds is permitted.

If 22aceph becomes aware that a registered account belongs to an individual under the age of 21, that account will be immediately suspended. Any deposits made by an underage player will be returned via the original payment method after deduction of any amounts won through gameplay, and the matter may be referred to the appropriate Philippine authorities.

If you believe that a minor may have registered on the 22aceph platform, please report this immediately to [email protected] so that we can take prompt action.

The 22aceph platform may contain references to third-party services — such as payment providers (GCash, PayMaya, BDO, BPI, Metrobank) — that operate under their own privacy policies and data protection practices. 22aceph is not responsible for the privacy practices or content of any third-party service, even where a link or integration exists on the 22aceph platform.

We strongly recommend that you review the privacy policy of any third-party service you interact with in connection with your use of 22aceph — particularly your chosen payment provider — to understand how they collect and process your data independently of 22aceph.

22aceph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on this page with a revised effective date.
• Notify registered players via email if the changes materially affect how we process their personal data.
• Where required by law, obtain fresh consent from players before applying the updated processing terms.

Your continued use of the 22aceph platform after a Privacy Policy update has been posted constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how 22aceph protects your personal data.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way 22aceph handles your personal data, please reach out to us through the following channel:

• Email: [email protected] — available 24 hours a day, 7 days a week.
• Subject line recommended: "Privacy Enquiry" or "Data Rights Request" — this helps our team route your message to the correct department promptly.

When contacting us about a data rights request, please include your registered email address, your 22aceph account username, and a clear description of your request. 22aceph will verify your identity before processing any request that involves access to, modification of, or deletion of personal data.

All privacy-related enquiries are handled with strict confidentiality by our dedicated support team. We are committed to responding to all privacy requests within thirty (30) calendar days of receipt, and to resolving data concerns in a transparent and fair manner.