Your Data, Your Rights
How aceph21 Safeguards Your Privacy
These highlights give you a quick overview of the most important privacy commitments aceph21 makes to you. Full details for each topic are in the policy sections below.
Important: This Privacy Policy applies to all personal data collected by aceph21 through its website at aceph21.net, its mobile applications, and any related services. By registering an account or using the aceph21 platform, you confirm that you have read and understood this policy. Please read it carefully before providing any personal information.
1. Introduction
Welcome to the aceph21 Privacy Policy. aceph21 operates an online casino and gaming platform designed specifically for Filipino players, offering slots, live casino games, bingo, Plinko, high-roller tables, and more. In providing these services, we necessarily collect and process certain personal data about you.
We take that responsibility seriously. This Privacy Policy is written in plain, accessible English so that every Filipino player on our platform — whether based in Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the archipelago — can clearly understand what data we hold and why.
This policy has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. Where applicable, it also reflects guidance issued by the National Privacy Commission (NPC) of the Philippines.
2. Data Controller
aceph21 acts as the Data Controller in respect of personal data collected through the aceph21 platform. As Data Controller, aceph21 determines the purposes and means by which your personal data is processed.
aceph21 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations under the DPA. You may contact our DPO directly using the contact information set out in Section 14 of this policy.
Data Protection Officer: Our DPO is your dedicated point of contact for all privacy-related queries, data subject access requests, complaints, and consent withdrawals. Reach the aceph21 DPO at support@aceph21.net with the subject line "DPO — Privacy Request."
3. Personal Data We Collect
aceph21 collects the following categories of personal data from players and site visitors:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID type and number | Mandatory (KYC) |
| Contact Data | Email address, Philippine mobile number, residential address | Mandatory |
| Financial Data | GCash number, Maya account, BPI / BDO / UnionBank account details, USDT wallet address, deposit and withdrawal transaction history | Mandatory |
| Account Data | Username, hashed password, account preferences, bonus history, responsible gaming settings | Mandatory |
| Gaming Data | Game session logs, bet amounts, win/loss records, game type preferences, session duration | Automatic |
| Technical Data | IP address, browser type, device type and OS, screen resolution, referring URL, cookie identifiers | Automatic |
| Communications Data | Records of Live Chat conversations, email correspondence, support ticket history | When applicable |
| Marketing Data | Communication preferences, consent records, promotion participation history | Optional (opt-in) |
aceph21 does not knowingly collect sensitive personal information as defined under the DPA (e.g., health data, religious beliefs, sexual orientation) unless you voluntarily disclose such information in the course of a support interaction. Any such data is handled with additional care and is not used for profiling or marketing purposes.
4. How We Collect Your Data
aceph21 collects your personal data through the following channels:
- Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile, you directly provide us with personal data.
- Automated collection: When you browse or interact with the aceph21 platform, our servers and analytics tools automatically collect technical data such as your IP address, device fingerprint, session duration, and pages visited. This data is collected via cookies, web beacons, and similar technologies — described further in Section 8.
- Third-party providers: Our licensed game providers, payment processors (e.g., GCash, Maya, BPI, BDO, UnionBank), and identity verification partners may share data with us about your transactions and verification status as part of the service they provide to aceph21.
- Regulatory sources: Regulatory bodies such as PAGCOR or the Anti-Money Laundering Council (AMLC) may provide or request data in connection with compliance obligations.
5. Why We Use Your Personal Data
aceph21 uses your personal data for the following specific purposes:
- Account creation and management: To register your aceph21 account, authenticate your identity at login, and maintain your account in good standing.
- Identity verification (KYC): To verify that you are at least 21 years of age and to comply with PAGCOR-mandated know-your-customer obligations and anti-money laundering requirements under RA 9160.
- Payment processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, Coins.ph, and USDT, and to detect and prevent fraudulent transactions.
- Service delivery: To provide access to all games and features on the aceph21 platform, personalise your gaming experience, and maintain your game session history.
- Responsible gaming: To administer self-imposed deposit limits, session reminders, cool-down periods, and self-exclusion requests. To monitor for signs of problem gambling in accordance with PAGCOR responsible gaming guidelines.
- Customer support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of support interactions.
- Security and fraud prevention: To detect, investigate, and prevent cheating, collusion, money laundering, unauthorised account access, and other prohibited activities on the platform.
- Legal and regulatory compliance: To comply with applicable Philippine laws, PAGCOR directives, NPC requirements, court orders, and AMLC reporting obligations.
- Marketing communications (with consent only): To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in. You may withdraw this consent at any time.
- Platform improvement: To analyse aggregated, anonymised usage patterns to improve game selection, platform performance, and user experience.
6. Legal Basis for Processing
Under the Data Privacy Act of 2012, aceph21 relies on the following legal bases for processing your personal data:
- Contractual necessity: Processing required to fulfil our contractual obligations to you as an aceph21 account holder — including account management, payment processing, and game delivery.
- Legal obligation: Processing necessary to comply with applicable Philippine law — including KYC verification, AML reporting, tax obligations, and PAGCOR regulatory requirements.
- Legitimate interests: Processing carried out for aceph21's legitimate business interests — including platform security, fraud prevention, and aggregated analytics — where those interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications and optional personalisation features, carried out only where you have given clear, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
7. Data Sharing & Third Parties
aceph21 does not sell your personal data. We share your data only in the following circumstances and only to the minimum extent necessary:
- Licensed game providers: To deliver specific games on the aceph21 platform, your username and session token are shared with our partner game providers. These providers are contractually prohibited from using your data for any purpose beyond game delivery.
- Payment processors: Transaction-level data is shared with GCash, Maya, BPI, BDO, UnionBank, Coins.ph, and USDT network providers to process your deposits and withdrawals. Each processor operates under its own privacy policy and applicable Philippine financial regulations.
- Identity verification partners: Your government-issued ID data may be processed by a licensed identity verification service provider for KYC purposes. These providers are bound by strict data processing agreements with aceph21.
- Regulatory and law enforcement authorities: aceph21 will disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council, or other competent Philippine authorities when required by law, court order, or regulatory directive — without prior notice to you where the law prohibits such notice.
- Business transfers: In the event of a merger, acquisition, or sale of substantially all of aceph21's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and given the option to close your account if you do not consent.
Cross-Border Transfers: Where any of aceph21's service providers are located outside the Philippines, your data may be transferred internationally. aceph21 ensures that all cross-border data transfers are subject to contractual safeguards consistent with NPC guidelines on cross-border data flows, providing a level of protection equivalent to that required under Philippine law.
8. Cookies & Tracking Technologies
aceph21 uses cookies and similar technologies (including web storage and session tokens) to operate and improve the platform. Here is what each type does:
- Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your gaming session. You cannot opt out of these without losing access to the platform.
- Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limits you have set. Disabling these may reduce your personalised experience.
- Analytics cookies: Collect anonymised data on how players use the aceph21 platform — such as which game categories are most popular, average session length, and common navigation paths. This data helps us improve the platform. No personally identifiable information is included in analytics reports.
aceph21 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or cross-site behavioural profiling tools. Your gaming activity on aceph21 stays on aceph21.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform.
9. Data Retention
aceph21 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | 5 years after account closure | AML / PAGCOR regulatory requirements |
| Financial transaction records | 5 years from transaction date | RA 9160 (Anti-Money Laundering Act) |
| Gaming session logs | 2 years from session date | Dispute resolution and audit trail |
| Support communications | 3 years from last interaction | Quality assurance and dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent under DPA |
| Technical / analytics data | 13 months on a rolling basis | Platform performance analysis |
After the applicable retention period expires, your personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that can no longer be linked to you may be retained indefinitely for statistical analysis.
10. Your Rights Under the Data Privacy Act
As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by aceph21:
- Right to be informed: You have the right to know what personal data aceph21 holds about you, how it is being used, and with whom it is shared. This Privacy Policy is the primary vehicle for fulfilling that right.
- Right of access: You may request a copy of the personal data aceph21 holds about you at any time. We will provide this within 15 business days of receiving a verified request.
- Right to rectification: If any personal data aceph21 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account information directly in your account settings.
- Right to erasure / blocking: You may request that aceph21 delete or block your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where the data is being processed unlawfully. Note that erasure requests cannot override our legal obligations to retain certain data under AML and PAGCOR rules.
- Right to data portability: You may request that certain personal data held by aceph21 be provided to you in a structured, commonly used, machine-readable format so that you can transfer it to another service where technically feasible.
- Right to object: You have the right to object to aceph21 processing your personal data for direct marketing purposes or where the processing is based on our legitimate interests. Where you object to marketing, we will cease all such communications immediately.
- Right to damages: If you have suffered harm as a result of a violation of your rights under the DPA by aceph21, you may seek compensation through the National Privacy Commission or through the courts.
How to Exercise Your Rights: To submit a data subject rights request, contact the aceph21 Data Protection Officer at support@aceph21.net with the subject line "Data Subject Rights Request." Please include your full registered name, username, and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request. We will respond within 15 business days.
11. Security Measures
aceph21 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:
- Encryption: All data in transit is encrypted via TLS 1.3. All data at rest — including your personal details, KYC documents, and financial records — is encrypted using AES-256.
- Access controls: Personal data is accessible only to aceph21 staff on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
- Penetration testing: aceph21's infrastructure is subject to regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
- Incident response: aceph21 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the National Privacy Commission within 72 hours and affected data subjects without undue delay, in accordance with NPC Circular 16-03.
- Two-factor authentication: aceph21 encourages all players to enable two-factor authentication (2FA) on their accounts as an additional layer of personal account security. 2FA can be activated from your account security settings.
While aceph21 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in protecting your account — please use a strong, unique password and keep your login credentials confidential.
12. Minors & Age Restriction
The aceph21 platform is strictly restricted to persons who are 21 years of age or older, in compliance with PAGCOR regulations governing online casino gaming in the Philippines. aceph21 does not knowingly collect personal data from any person under 21 years of age.
If we discover or have reasonable grounds to believe that an account has been registered by or is being operated by a person under 21 years of age, we will immediately suspend the account, void any associated balances, and securely delete all personal data associated with that account to the extent not required for legal or regulatory retention purposes.
Parents and guardians are strongly encouraged to use internet parental control tools and to monitor their children's online activities to prevent access to online gaming platforms including aceph21.
Underage Gambling Reporting: If you believe a minor is using the aceph21 platform, please report this to our support team immediately via Live Chat or at support@aceph21.net. We treat all such reports with the highest urgency and will investigate within 24 hours.
13. Changes to This Privacy Policy
aceph21 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance from the National Privacy Commission. When material changes are made, we will:
- Post a prominent notice on the aceph21 platform informing players of the update.
- Update the "Last Updated" date at the top of this policy.
- Where required by the NPC or where changes are significant, seek fresh consent from affected players before the new policy takes effect.
Your continued use of the aceph21 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised policy, you should cease using the platform and may request account closure as described in our Terms & Conditions.
14. Contact Us
For any privacy-related questions, data subject rights requests, concerns, or complaints, please contact the aceph21 Data Protection Officer through the following channels:
- Email: support@aceph21.net — use subject line "DPO — Privacy Request" for fastest routing. We respond to privacy enquiries within 3–5 business hours; data subject rights requests are processed within 15 business days.
- Live Chat: Available 24/7 on the aceph21 platform. For complex privacy requests, our support agents will escalate directly to the DPO on your behalf.
If you are not satisfied with aceph21's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:
- National Privacy Commission (NPC) — the independent authority responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines. Contact the NPC through their official government website for the correct and current contact details.
This Privacy Policy was last reviewed and updated in January 2026. The English-language version is the authoritative version. aceph21 is committed to upholding the privacy rights of all Filipino players in accordance with the Data Privacy Act of 2012 and the regulations of the National Privacy Commission.
Play With Confidence
Your Privacy Is Protected — Now Let's Play
Now that you know exactly how aceph21 handles your personal data, you can enjoy our full range of games with complete confidence. From bingo and slots to live casino and Plinko — your data is safe, your experience is private, and the fun is real.