Quick Summary
Aceph22 collects the personal data required to operate a licensed online betting platform — identity, contact, financial, and usage information. We use it to process your bets, verify your identity, comply with legal obligations, and improve the platform. We do not sell your personal data to third parties. You have the right to access, correct, restrict, and delete your data. Full details are in the sections below.
This Privacy Policy applies to all personal data collected and processed by aceph22 in connection with the operation of the aceph22 online betting and gaming platform at aceph22.net. It covers all products and services accessible through a registered aceph22 account — including sports betting, the online casino, fishing games, the VIP Club programme, and all associated promotional communications.
Aceph22 is the data controller responsible for the personal information you provide when you register, use, or interact with the platform. This means we determine what data is collected, why it is collected, and how it is handled — and we are accountable for ensuring that handling is lawful, fair, and transparent.
This policy is written in plain language because we believe Filipino players deserve a clear explanation of their privacy rights and our obligations — not a document that only a lawyer can understand. If you have questions about any part of this policy after reading it, reach out to our support team at support@aceph22.net.
Aceph22 collects different categories of personal data depending on how you interact with the platform. The table below summarises the main data categories and why each is collected.
| Data Category |
Examples |
Why It's Collected |
| Identity Data |
Full name, date of birth, gender, nationality |
Account registration and KYC verification |
| Contact Data |
Email address, mobile number, home address |
Account communication, support, security alerts |
| Verification Data |
Government ID, selfie/photo, proof of address |
Identity verification, age confirmation, AML compliance |
| Financial Data |
GCash/Maya number, bank account name, transaction records |
Processing deposits and withdrawals, fraud prevention |
| Transaction Data |
Bet history, game activity, deposit and withdrawal records |
Account management, dispute resolution, responsible gaming |
| Technical Data |
IP address, device type, browser, session data |
Platform security, fraud detection, performance optimisation |
| Usage Data |
Pages visited, features used, time spent on platform |
Platform improvement, personalised experience |
| Marketing Data |
Communication preferences, promotion responses |
Relevant promotional offers (with your consent) |
Aceph22 does not collect sensitive personal data categories — such as racial or ethnic origin, religious beliefs, or health data — unless specifically required by law or regulatory obligation in a particular circumstance.
Cebu IT Park, sari-sari simplicity — aceph22 keeps data handling as straightforward as your neighbourhood store's tally sheet.
Aceph22 collects personal data through several channels, depending on how you interact with the platform:
Direct input: Data you provide when registering your aceph22 account, completing identity verification, making a deposit or withdrawal, contacting support, or opting into promotional communications.
Automated collection: Technical data collected automatically when you access aceph22 — including your IP address, device identifiers, browser type, and session behaviour — through cookies, log files, and similar technologies.
Third-party verification providers: Identity and document verification services used to confirm that your registration details are accurate and that you are the person you claim to be. These providers supply verification results back to aceph22, not the raw document data.
Payment channels: When you transact through GCash, Maya, BDO, BPI, UnionBank, or other linked payment methods, confirmation and reference data flows back to aceph22 to record the transaction accurately in your account.
Analytics tools: Aggregated, anonymised usage data collected through platform analytics to help aceph22 understand how the platform is used and where improvements can be made.
Aceph22 uses personal data only for specified, legitimate purposes. We do not use your data in ways that are incompatible with the reason it was originally collected. The primary uses are:
- Account creation and management — setting up your aceph22 account, maintaining your profile, and enabling your use of all platform features
- Identity verification (KYC) — confirming that you meet eligibility requirements including age verification, which is a legal obligation for all licensed gambling platforms
- Processing bets and transactions — recording your wagering activity, crediting winnings, processing deposits, and fulfilling withdrawal requests to your registered Philippine payment account
- Fraud prevention and security — monitoring account activity for patterns consistent with fraud, account compromise, or prohibited behaviour as described in the aceph22 Terms and Conditions
- Regulatory compliance — meeting our obligations under applicable licensing conditions, anti-money laundering (AML) regulations, and any other legal requirements applicable to aceph22's operations
- Responsible gaming support — using transaction and usage data to identify patterns that may indicate a player needs support, and to administer deposit limits, self-exclusion, and other responsible gaming tools
- Customer support — accessing relevant account data when you contact aceph22 support, so that queries and disputes can be resolved accurately and efficiently
- Platform improvement — using anonymised usage data to understand how Filipino players interact with aceph22 and where the platform experience can be enhanced
- Marketing communications — sending relevant promotional offers and aceph22 updates to players who have opted in to receiving such communications. You can withdraw this consent at any time.
Aceph22 processes your personal data under one or more of the following lawful bases, depending on the specific processing activity:
- Contractual necessity: Processing required to perform the agreement between you and aceph22 — including account management, bet processing, and payment transactions.
- Legal obligation: Processing required to comply with applicable laws — including identity verification, AML reporting, and data retention obligations.
- Legitimate interests: Processing for purposes such as fraud prevention, platform security, and platform analytics, where those interests do not override your data rights.
- Consent: Processing for marketing communications and non-essential cookies, where aceph22 has obtained your explicit consent. You may withdraw consent at any time without affecting your account.
Iloilo Esplanade clarity — aceph22 is transparent about who handles your data and why, always.
Aceph22 does not sell your personal data to third parties. Period. We share data only where there is a specific, legitimate reason — and only with parties who are contractually bound to handle it responsibly. The categories of third parties who may receive your data are:
- Identity verification providers: Third-party KYC and AML compliance services used to verify your identity documents and confirm eligibility. These providers receive only what is necessary for verification and are prohibited from using your data for their own purposes.
- Payment processors and Philippine financial institutions: GCash, Maya, BDO, BPI, UnionBank, and similar partners receive transaction reference data necessary to process your deposits and withdrawals. Each is subject to its own data privacy obligations under applicable Philippine regulations.
- Game and software providers: Casino and game platform providers that power aceph22's online casino and fishing game titles may receive anonymised session and gameplay data for technical integration purposes.
- Regulatory and law enforcement authorities: Aceph22 will disclose data to relevant Philippine regulatory bodies, law enforcement agencies, or courts where legally required to do so. Such disclosures are made only where legally compelled.
- Internal group companies: Where aceph22 operates within a corporate group structure, data may be shared with affiliated entities for operational and compliance purposes. Such sharing is governed by intra-group data sharing agreements.
Third-Party Data Agreements
Every third party that receives personal data from aceph22 is subject to a formal data processing agreement that restricts how they may use that data, requires them to maintain appropriate security standards, and prohibits them from further sharing that data without authorisation.
Some of the third-party service providers that aceph22 works with — including certain technology and infrastructure partners — may process data in countries outside the Philippines. Where such transfers occur, aceph22 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to what would apply under Philippine data protection law.
These safeguards may include standard contractual clauses, data processing agreements with specific security obligations, or reliance on the adequacy of data protection standards in the receiving country. If you would like information about a specific international transfer, contact us at support@aceph22.net.
Aceph22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligation. The general retention principles aceph22 applies are:
- Active account data: Retained for the full duration of your registered aceph22 account relationship, plus the legally required period after account closure.
- Identity and KYC verification data: Retained for a minimum of five years after account closure in line with standard AML record-keeping requirements. Exact retention periods may vary based on applicable regulatory requirements.
- Transaction records: Retained for a minimum of five years from the date of each transaction for financial audit and dispute resolution purposes.
- Marketing consent records: Retained until you withdraw your consent, at which point consent records are archived for legal compliance purposes but no further marketing activity occurs.
- Technical and usage data: Typically retained in anonymised or aggregated form for platform analytics. Raw session logs are retained for shorter periods consistent with security monitoring needs.
When data is no longer required and retention obligations have been met, aceph22 securely deletes or anonymises the data so that it can no longer be linked to an individual.
As a registered aceph22 user and a person whose data we process, you have a set of rights over your personal information. Here's what those rights are and how to exercise them:
Right to Access
Request a copy of the personal data aceph22 holds about you and how it is being used.
Right to Rectification
Request correction of inaccurate or incomplete personal data on your aceph22 account.
Right to Erasure
Request deletion of your data where it is no longer necessary, subject to legal retention obligations.
Right to Restriction
Request that aceph22 restrict processing of your data in certain circumstances while a dispute is resolved.
Right to Portability
Request your data in a structured, machine-readable format to transfer to another service provider.
Right to Object
Object to processing carried out on the basis of legitimate interests, including profiling for marketing.
Withdraw Consent
Withdraw consent for marketing communications or non-essential cookies at any time without affecting your account.
Right to Complain
Lodge a complaint with the relevant data protection authority if you believe aceph22 has mishandled your data.
To exercise any of these rights, contact the aceph22 privacy team at support@aceph22.net. We will respond to verified requests within a reasonable timeframe consistent with applicable data protection requirements. Note that some requests may be subject to identity verification before we can action them — this is to protect you, not to create obstacles.
Limitations on Erasure
The right to erasure does not override aceph22's legal obligations to retain certain data. Financial transaction records and KYC verification data must be retained for the legally required period even if you request account closure. We will explain any such limitations clearly when responding to your request.
Aceph22 uses cookies and similar tracking technologies to support the operation and improvement of the platform. A cookie is a small text file stored on your device when you visit aceph22. The types of cookies used are:
- Essential cookies: Required for the aceph22 platform to function correctly — including session management, login state maintenance, and security features. These cannot be disabled without breaking core functionality.
- Analytics cookies: Used to collect anonymised information about how players navigate and use aceph22, helping us identify popular features and areas that need improvement. These are only placed with your consent.
- Functional cookies: Store your preferences — such as language settings and platform layout choices — so that aceph22 remembers your preferences between sessions.
- Security cookies: Support fraud detection and account security by identifying unusual login patterns or device changes associated with your aceph22 account.
You can control non-essential cookies through your browser settings or through the cookie preference options available on the aceph22 platform. Disabling essential cookies will affect your ability to use the platform.
Aceph22 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from individuals under 18 years of age. If aceph22 discovers that an account has been registered by a person under 18, all data associated with that account will be deleted and the account closed immediately.
If you are a parent or guardian and believe that a minor in your care has registered an aceph22 account without authorisation, please contact us immediately at support@aceph22.net and we will take immediate action to close the account and delete all associated data.
Aceph22 applies technical and organisational security measures appropriate to the sensitivity of the personal data held on the platform. These measures are reviewed and updated regularly to reflect the evolving security landscape.
- End-to-end encryption for all data transmitted between your device and the aceph22 platform, using current TLS standards
- Encrypted storage for sensitive personal and financial data at rest within aceph22 infrastructure
- Role-based access controls ensuring that aceph22 staff can only access personal data relevant to their specific function
- Regular security audits and penetration testing to identify and address potential vulnerabilities
- Documented incident response procedures in the event of a data breach, including notification obligations to affected users and relevant authorities
- Staff training on data protection obligations and secure data handling practices
Your Role in Account Security
No security system eliminates risk entirely. You play an important role by keeping your aceph22 login credentials private, using a strong and unique password, and contacting support immediately if you suspect your account has been accessed without your authorisation.
Aceph22 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our data handling practices. When material changes are made, we will notify registered users via email or through an in-platform notification prior to the changes taking effect.
The "Last Updated" date at the top of this page reflects when the current version of the policy came into effect. We recommend reviewing this policy periodically, especially if you have been inactive on aceph22 for an extended period. Continued use of the platform following any policy update constitutes acceptance of the revised terms.
