megaace Privacy Policy

megaace ("we", "us", "our") operates the online casino and sports betting platform available at https://megaace.app (the "Platform"). We are committed to protecting the privacy and personal data of every player and visitor who interacts with our Platform.

This Privacy Policy describes how megaace collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the Platform. It has been prepared in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and the implementing rules and regulations issued by the National Privacy Commission (NPC).

By registering an account on megaace or by continuing to use the Platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood this policy and you consent to the collection and processing of your personal data as described herein.

megaace collects the following categories of personal data from players and platform visitors:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless legally required or voluntarily provided by the player in a support context (for example, a player disclosing a gambling-related health concern when requesting self-exclusion).

megaace collects personal data through the following means:

3.1 Direct Collection

You provide data directly to megaace when you:

• Complete the player registration form on the megaace Platform.
• Submit identity verification documents as part of our KYC process.
• Make a deposit or request a withdrawal using GCash, Maya, BPI, BDO, Metrobank, or any other supported payment method.
• Contact the megaace support team via live chat or email.
• Participate in a promotion, survey, or feedback form on the Platform.
• Update your account profile or communication preferences.

3.2 Automated Collection

Certain data is collected automatically when you access or use the megaace Platform, including through cookies, web beacons, pixel tags, and server-side logging technologies. This includes your IP address, device identifiers, browser configuration, and behavioral data such as which games you play and how long you spend on each session.

3.3 Third-Party Sources

megaace may receive personal data about you from trusted third-party sources, including:

• Identity verification and KYC service providers used to validate your government-issued documents.
• Payment processors and e-wallet platforms (GCash, Maya, GrabPay, InstaPay, and banking partners) for the purpose of confirming transaction details.
• Fraud detection and anti-money laundering (AML) compliance databases.
• Publicly available sources such as government sanction lists or court records, where relevant to regulatory compliance obligations.

megaace processes your personal data only where we have a lawful basis to do so under the Data Privacy Act of 2012 and applicable regulations. The following table summarizes our processing purposes and the corresponding legal bases:

In addition to the purposes described in Section 4, megaace uses your personal data in the following specific ways:

• Account management: To create, maintain, and administer your megaace player account, including managing your wallet balance, bonus credits, and gaming history.
• Identity and age verification: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate and belongs to you, as required under applicable Philippine regulations.
• Transaction processing: To facilitate deposits and withdrawals via your chosen payment method (GCash, Maya, BPI, BDO, Metrobank, 7-Eleven CLiQQ, InstaPay, QR Ph, and GrabPay) and to maintain accurate financial records of all transactions.
• Fraud and security monitoring: To detect, investigate, and prevent unauthorized access, fraud, collusion, money laundering, and other prohibited activities that may affect the integrity of the megaace Platform.
• Responsible gaming: To monitor gaming activity patterns that may indicate problem gambling behavior and to administer self-exclusion requests, deposit limit settings, and session time controls requested by players.
• Platform personalization: To tailor the megaace experience to your preferences, including recommending relevant game categories, displaying personalized promotions (where you have opted in), and remembering your language and display settings.
• Legal compliance: To meet our obligations under the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and all other applicable Philippine laws and regulations governing online gaming operations.
• Analytics and improvement: To analyze aggregated and anonymized usage data for the purpose of improving Platform performance, game stability, and the overall player experience.

megaace does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Privacy Policy:

6.1 Service Providers

megaace works with carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include identity verification providers, payment processors, cloud hosting providers, fraud detection services, and customer support platform operators. All service providers are contractually bound to process your data only as instructed by megaace and to maintain appropriate security standards.

6.2 Payment Partners

To process your deposits and withdrawals, megaace shares relevant transaction data with your chosen payment provider (such as GCash, Maya, BPI, BDO, Metrobank, or 7-Eleven CLiQQ). These providers operate under their own privacy policies and are subject to Philippine financial regulations.

6.3 Regulatory and Law Enforcement Authorities

megaace may disclose your personal data to competent regulatory bodies, law enforcement agencies, or courts where required by law, court order, or regulatory directive. This includes disclosures required under the Anti-Money Laundering Act (AMLA) and its implementing rules.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of megaace's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. megaace will notify affected players of any such transfer via the email address registered on their account.

6.5 With Your Consent

megaace may share your data with other parties where you have given explicit prior consent, such as opting into a third-party loyalty rewards program or co-branded promotional activity.

megaace uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze how players interact with our services. The following types of cookies are used:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as session management, login persistence, and security token validation. These cookies cannot be disabled without significantly impairing Platform functionality.
• Functional cookies: These remember your preferences such as your chosen language, display settings, and game lobby filters, so you do not need to reconfigure them on every visit.
• Analytics cookies: megaace uses first-party analytics tools to understand how players navigate the Platform — which pages are most visited, where sessions start and end, and how game lobby interactions occur. This data is aggregated and anonymized before analysis.
• Security cookies: Used to detect and prevent fraudulent account activity, unauthorized login attempts, and bot traffic.

You may manage your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality and performance of your megaace experience. megaace does not use third-party advertising cookies or behavioral tracking cookies for external ad targeting.

megaace retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your active account and for the periods required by applicable law after account closure.

Specific retention periods are guided by the following principles:

• Active account data: Retained for the full duration that your megaace account remains open and active.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with Philippine AML regulations and the implementing rules of the AMLC.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under applicable financial record-keeping obligations.
• Support and communications data: Retained for up to three (3) years from the date of the last interaction, to support dispute resolution and regulatory inquiries.
• Technical and usage logs: Retained for up to twelve (12) months in full detail, then aggregated and anonymized for longer-term analytics purposes.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

megaace takes the security of your personal data seriously and has implemented a range of technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and megaace servers.
• AES-256 encryption for sensitive data stored in megaace databases, including identity documents and financial records.
• Role-based access controls ensuring that only authorized megaace personnel with a legitimate operational need can access personal data.
• Regular third-party security audits and penetration testing of the megaace Platform infrastructure.
• Multi-factor authentication for megaace internal systems that process personal data.
• Continuous automated monitoring for unusual access patterns, brute-force attempts, and other indicators of unauthorized system access.

While megaace employs all reasonable security safeguards, no system connected to the internet can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your megaace login credentials and for immediately reporting any suspected unauthorized access to our support team.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by megaace:

• Right to be informed: You have the right to be notified of how your personal data is collected, used, and processed — which this Privacy Policy fulfills.
• Right of access: You may request a copy of the personal data megaace holds about you, including information about the purposes for which it is processed.
• Right to rectification: If any personal data megaace holds about you is inaccurate or incomplete, you have the right to request correction. Most basic profile information can be updated directly in your account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Note that this right is subject to legal retention obligations (see Section 8).
• Right to data portability: You may request a copy of the personal data you provided to megaace in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on megaace's legitimate interests, subject to applicable legal grounds.
• Right to lodge a complaint: If you believe that megaace has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact the megaace Data Protection Officer (DPO) using the contact details in Section 14. megaace will respond to all verified data rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days, with prior notification to you.

The megaace Platform is strictly intended for individuals who are at least twenty-one (21) years of age. megaace does not knowingly collect, process, or store personal data from any person under the age of 21.

If megaace becomes aware that personal data has been collected from a person below the minimum age threshold — whether through account registration, identity document review, or any other means — we will immediately suspend the relevant account, forfeit any associated balance, and securely delete all personal data collected from that individual in accordance with our data retention procedures.

If you are a parent or guardian and believe that a minor in your care has registered on megaace, please contact our support team immediately at the email address in Section 14 so that we can take prompt corrective action.

megaace primarily processes player data within the Philippines. However, some of our technology infrastructure providers and service partners may be located in, or operate data centers in, other countries. Where personal data is transferred outside the Philippines, megaace ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that provided under the Data Privacy Act of 2012.

These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission or equivalent data protection authority.
• Data processing agreements that impose binding obligations on the recipient consistent with Philippine data privacy law.
• Transfer to countries or organizations recognized by the NPC as providing adequate levels of data protection.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting the megaace DPO as described in Section 14.

megaace reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or applicable legal requirements. The most current version of this policy will always be accessible at the megaace Privacy Policy page, with the effective date clearly stated at the top.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights under this policy — megaace will notify you via the email address registered on your account at least fourteen (14) days before the changes take effect. For minor or administrative updates, we may provide notice via an on-Platform notification.

Your continued use of the megaace Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the Platform and request account closure before the effective date.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by megaace, you may contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the on-site chat widget on the megaace Platform. Average response time: under 2 minutes.

When contacting us about a data rights request, please provide your full name, registered email address, and account ID so that we can verify your identity and process your request promptly.

If you are not satisfied with megaace's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data protection matters under the Data Privacy Act of 2012.