Privacy Policy — Mega Ace Philippines Online Gaming Platform

1. Introduction

When you use mega ace, you share certain personal information with us. This Privacy Policy explains exactly what happens to that information. It covers every type of personal data we handle, the reasons we handle it, how long we keep it, and what you can do if you want to see, change, or delete it.

This policy applies to all users of the mega ace platform — whether you're browsing as a guest, completing registration, depositing funds, or actively placing bets. By continuing to use mega ace after being presented with this policy, you acknowledge that you have read and understood it.

This policy should be read alongside our Terms and Conditions, which govern your use of the platform more broadly. Where there is any conflict between the two documents on a privacy matter, this Privacy Policy takes precedence.

2. Who We Are

Mega ace is an online gaming platform operating at megaace.asia, serving Filipino players across the Philippines. For the purposes of data protection law, mega ace is the data controller — meaning we are responsible for determining how and why your personal data is processed.

We have designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection regulations, including the Philippine Data Privacy Act of 2012 (Republic Act 10173). If you have any concern about how your data is being handled, you can contact the DPO directly at the address provided in Section 15 of this policy.

3. Data We Collect

Mega ace collects the following categories of personal data. We only collect what is genuinely necessary for the purpose identified against each category.

4. How We Collect Your Data

Mega ace collects your personal data through several channels:

• Directly from you: When you register an account, complete KYC, make deposits or withdrawals, contact support, or update your account settings.
• Automatically: When you use the platform, our systems collect technical and behavioural data including your IP address, session details, page views, and gameplay patterns. This happens whether you are logged in or browsing as a guest.
• From third parties: Identity verification services, payment processors, fraud prevention partners, and credit reference agencies may provide us with information to verify your identity or assess risk.
• Through cookies and similar technologies: Our platform uses cookies and similar tracking tools as described in Section 11 of this policy.

5. How We Use Your Data

Mega ace uses your personal data only for clearly defined purposes. Here is a complete breakdown of what we do with your information and why:

• Account management: Creating and maintaining your mega ace account, processing your registrations and login sessions, and keeping your account information accurate and current.
• Transaction processing: Handling deposits, withdrawals, and bet settlements in Philippine Pesos through your chosen payment channels.
• Identity verification: Confirming your age, identity, and eligibility to use the platform in compliance with applicable gaming regulations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, account takeover attempts, and other security threats.
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations, the Data Privacy Act, anti-money laundering laws, and other applicable legislation.
• Customer support: Resolving your queries, complaints, and disputes efficiently and accurately.
• Platform improvement: Analysing how players use mega ace to fix problems, improve features, and develop new services.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and intervening appropriately to protect players.
• Marketing communications: Sending promotional offers, bonus announcements, and platform news to players who have opted in to receive them. We do not send marketing messages without your explicit consent.
• Personalisation: Tailoring your platform experience — for example, surfacing game categories you frequently play or displaying relevant promotions.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act and applicable regulations, mega ace processes your personal data on the following legal grounds:

• Contract performance: Processing your account data, transactions, and gameplay records is necessary to deliver the services you've signed up for. Without this data, we simply cannot operate your account.
• Legal obligation: Age verification, KYC, anti-money laundering checks, and certain reporting obligations are required by Philippine gaming regulations and financial laws. We have no choice but to process this data to remain compliant.
• Legitimate interests: Fraud prevention, security monitoring, and platform analytics are carried out on the basis of legitimate interests — ours and yours. We have assessed that these interests are not overridden by your rights and freedoms.
• Consent: Marketing communications and certain optional personalisation features are only activated with your explicit, freely given consent. You can withdraw consent at any time.

7. Who We Share Your Data With

Mega ace shares personal data only with the following categories of third parties, and only to the extent necessary:

• Payment processors: GCash, Maya, BDO, BPI, UnionBank, and other supported payment channel operators, to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and document verification services that help us confirm your identity as required by regulations.
• Fraud prevention partners: Services that assist in detecting suspicious activity, fraudulent transactions, and security threats.
• Game software providers: The third-party game developers whose titles are available on mega ace may receive anonymised gameplay data necessary to operate their games.
• Regulatory and government authorities: The relevant Philippine gaming regulator, the National Privacy Commission, anti-money laundering authorities, and law enforcement agencies when legally required to do so.
• IT and infrastructure providers: Cloud hosting and database service providers who process data on our behalf under strict data processing agreements that bind them to the same privacy standards we apply.
• Professional advisers: Lawyers, auditors, and consultants who assist us in operating the platform, under confidentiality obligations.

All third-party data processors working with mega ace are bound by contractual obligations to process your data only as directed, to maintain appropriate security, and to comply with applicable data protection laws.

8. Data Retention

Mega ace retains personal data only as long as necessary for the purpose for which it was collected, or as required by applicable laws and regulations. Here are the key retention periods we apply:

• Active account data: Retained for the duration of your account relationship with mega ace and for a period of five years after account closure, as required by anti-money laundering regulations.
• KYC documents: Retained for five years following the end of the business relationship or the date of a one-off transaction, consistent with Philippine AML requirements.
• Transaction records: Retained for a minimum of five years to satisfy financial and regulatory record-keeping obligations.
• Support communications: Retained for up to three years after resolution to assist with any follow-up queries or disputes.
• Marketing preferences: Retained until you change or withdraw your consent, or until your account is closed.
• Technical and log data: Typically retained for up to 12 months, after which it is anonymised or deleted.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

9. Security Measures

Mega ace implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These include:

• SSL/TLS encryption for all data transmitted between your device and the mega ace platform
• Encryption of sensitive data at rest, including payment details and identity documents
• Access controls ensuring that only authorised personnel can access personal data, and only to the extent their role requires
• Regular security audits and penetration testing conducted by independent specialists
• Two-factor authentication available to all account holders and mandatory for internal staff accounts
• Automated anomaly detection systems to flag unusual account activity in real time
• Staff training on data protection obligations and security best practices

Despite these measures, no online platform can guarantee 100% security against all threats. If you suspect your mega ace account has been compromised, contact our support team immediately so we can take action to protect it.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by mega ace. These are genuine rights and we take them seriously:

To exercise any of these rights, contact our Data Protection Officer at the details provided in Section 15. We may need to verify your identity before processing the request to protect against unauthorised access. We will respond within 30 days unless the request is complex, in which case we may take up to 60 days with prior notice to you.

If you are unhappy with how mega ace has handled your personal data or responded to a rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11. Cookies & Tracking Technologies

Mega ace uses cookies and similar technologies on the platform. A cookie is a small file placed on your device when you visit a website. Here is how we use them:

• Strictly necessary cookies: These are essential for the platform to function — they keep you logged in, maintain your session security, and remember your shopping cart. You cannot opt out of these without breaking the platform.
• Functional cookies: These remember your preferences — for example, your preferred language, game display settings, or last-visited game categories — to provide a smoother experience.
• Analytical cookies: These help us understand how players navigate the platform so we can improve it. Data collected this way is aggregated and anonymised where possible.
• Security cookies: Used to detect fraud, suspicious sessions, and bot activity. These protect the integrity of the platform and your account.

We do not use third-party advertising or retargeting cookies that track your activity across other websites. You can manage cookie preferences through your browser settings, though disabling cookies may affect your ability to use some platform features.

12. Minors

The mega ace platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory part of the registration and KYC process for precisely this reason.

If we discover that personal data has been collected from a minor, we will immediately close the associated account and delete the data, subject to any retention obligations required by law. If you have reason to believe a minor has registered on mega ace, please contact us immediately at support@megaace.asia.

13. Cross-Border Data Transfers

Some of our third-party service providers — for example, cloud infrastructure providers or international game software companies — may be located outside the Philippines. When personal data is transferred outside the Philippines, mega ace ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Philippine data protection requirements.

Safeguards include contractual clauses requiring the overseas recipient to apply equivalent data protection standards, and where relevant, ensuring transfers are made only to countries with an adequate level of data protection. If you would like more information about the safeguards applied to overseas transfers of your data, contact our DPO.

14. Changes to This Policy

Mega ace may update this Privacy Policy from time to time to reflect changes in our data practices, new service offerings, or updates to applicable law. When we make material changes, we will notify you by email and/or through a prominent notice on the platform at least 7 days before the changes take effect.

The "last updated" date at the top of this policy reflects when the most recent changes were made. We encourage you to review this policy periodically. The current version is always accessible at megaace.asia/privacy-policy.

If you continue to use the mega ace platform after the updated policy takes effect, that constitutes your acknowledgement of the revised terms. If you disagree with material changes, you should stop using the platform and contact us to close your account.

15. Contact Us & Data Protection Officer

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how mega ace handles your personal data, please reach out to us. We're committed to responding promptly and helpfully.