Privacy Policy of 49aceph

1 Introduction

49aceph ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users who access or register on the 49aceph platform at 49aceph.org. This Privacy Policy ("Policy") describes how 49aceph collects, uses, stores, shares, and protects personal information in connection with the operation of our online casino and sports betting services.

This Policy applies to all users of the 49aceph platform, including registered account holders, visitors who browse without registering, and any individual whose personal data is processed by 49aceph in connection with the provision of our services. By accessing or using the 49aceph platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 49aceph acts as the Personal Information Controller in respect of the personal data it collects and processes in connection with the platform. This means 49aceph determines the purposes and means of processing your personal data.

Where 49aceph engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors and are contractually bound to process data only in accordance with 49aceph's instructions and applicable law.

3 Data We Collect

49aceph collects the following categories of personal data:

4 How We Collect Your Data

49aceph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud signals from payment processors; publicly available information where relevant to AML compliance.

5 How We Use Your Data

49aceph uses your personal data for the following purposes:

• To create, verify, and manage your 49aceph account.
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• To verify your identity and age in compliance with Philippine gaming regulations and AML requirements.
• To provide customer support and resolve disputes.
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities.
• To monitor gaming activity for responsible gaming purposes, including identifying signs of problem gambling.
• To send you transactional communications (account confirmations, withdrawal notifications, security alerts).
• To send you promotional communications where you have opted in to receive them.
• To improve the platform through analytics and user research.
• To comply with applicable Philippine laws and regulatory obligations, including reporting requirements under the PAGCOR framework and the Anti- Money Laundering Act.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 49aceph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

49aceph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash (Mynt), PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank) to process financial transactions.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with regulatory requirements.
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants where necessary for legal compliance or dispute resolution.

8 Cookies & Tracking Technologies

49aceph uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how users interact with the platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.

49aceph does not use third-party advertising or retargeting cookies. You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the platform.

9 Data Security

49aceph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the 49aceph platform.
• Encryption of sensitive data at rest, including financial information and government ID data.
• Role-based access controls ensuring that only authorized personnel can access personal data, strictly on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified cybersecurity professionals.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Incident response procedures to detect, contain, and notify affected users and the National Privacy Commission in the event of a personal data breach, in accordance with NPC Circular 16-03.

While 49aceph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 49aceph login credentials and for notifying us immediately if you suspect unauthorized access to your account.

10 Data Retention

49aceph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with AML and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming activity records: Retained for a minimum of 3 years from the date of the activity.
• Customer support communications: Retained for 2 years from the date of the last interaction.
• Technical and usage data: Retained for up to 13 months in identifiable form, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where deletion is not immediately possible due to backup systems, data will be isolated and protected from further processing until deletion is feasible.

11 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 49aceph:

• Right to be informed: The right to know what personal data we collect and how it is used — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Request." We will respond within 15 business days of receiving a valid request. We may require identity verification before processing your request.

12 Children's Privacy

The 49aceph platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 49aceph does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the 49aceph platform, please contact us immediately at [email protected].

13 Changes to This Policy

49aceph reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the 49aceph platform following the posting of any changes to this Policy constitutes your acceptance of those changes. If you do not agree to the revised Policy, you must discontinue use of the platform and may request account closure by contacting our support team.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry / Data Subject Request
• Response Time: Within 15 business days for formal data subject requests; typically under 5 minutes for general support queries during peak hours.
• Support Hours: 24/7, Philippine Standard Time (PST, UTC+8)

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through their official channels.