wildace Privacy Policy — How We Protect Your Data

01 Who We Are

wildace ("we," "us," "our," or the "Platform") operates the online casino and sports betting platform accessible at wildace.net, along with associated mobile web applications and player-facing digital channels. wildace functions as the personal information controller (PIC) in respect of all personal data processed in connection with the operation of this platform and the accounts held by registered players.

wildace operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC).

This Privacy Policy applies to all registered players, visitors to the wildace website, and individuals who interact with wildace through any of its communication channels — including live chat, email, and promotional campaigns. By registering on or continuing to use the wildace platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

02 Personal Data We Collect

wildace collects personal data through multiple channels: directly from you when you register, interact with the platform, or contact support; automatically through your use of the wildace website and games; and from third-party verification and payment service providers. The categories of personal data we collect are set out below.

Registration & Identity Data

When you create a wildace account, we collect your full legal name, date of birth, nationality, gender, registered mobile number, and email address. This information is required to create and administer your account and to verify that you meet the minimum age requirement of 21 years.

KYC & Verification Documents

To comply with PAGCOR licensing obligations and the Anti-Money Laundering Act (AMLA), wildace conducts Know Your Customer (KYC) verification. This requires you to submit a copy of one or more of the following government-issued Philippine identification documents: PhilSys National ID, UMID, passport, driver's licence, SSS ID, or PRC ID. We may also request a recent proof-of-address document (such as a utility bill or bank statement issued within the past three months) and, in some cases, a selfie photograph for identity matching purposes.

Financial & Transaction Data

wildace collects data relating to all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method details (GCash account numbers, PayMaya account numbers, BPI/BDO/Metrobank account identifiers), and the history of all wagers placed. Full payment card or bank account numbers are never stored by wildace — these are handled directly by our PCI-DSS-compliant payment processors.

Gameplay & Activity Data

wildace automatically records gameplay activity, including games played, bet amounts, win/loss history, session durations, and wagering patterns. This data is used for responsible gaming monitoring, fraud detection, bonus abuse prevention, and game performance analysis.

Technical & Device Data

When you visit the wildace website or use our platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages visited within the wildace platform. This data is collected via server logs and cookies (see Section 6).

Communications Data

We retain records of all communications between you and wildace, including live chat transcripts, support emails, and in-platform messages. These records are maintained for quality assurance, dispute resolution, and compliance purposes.

03 How We Use Your Personal Data

wildace uses your personal data only for the purposes described in this Privacy Policy. We do not use your data for any purpose incompatible with the original reason it was collected without first obtaining your consent or establishing a new lawful basis for processing.

• Account Creation & Management: To register your wildace account, verify your identity, manage your account settings, process wildace Login requests, and maintain the security of your account.
• Transaction Processing: To process deposits via GCash, PayMaya, BPI, BDO, and Metrobank; to fulfill withdrawal requests to your registered payment accounts; and to maintain accurate financial records of all transactions.
• Regulatory & Legal Compliance: To fulfill our obligations under PAGCOR's licensing framework, the Philippine AMLA (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws and regulations — including mandatory transaction reporting and record-keeping requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, unauthorised access attempts, and other prohibited conduct as defined in the wildace Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to enforce self-exclusion requests and deposit/loss limits, and to provide proactive responsible gaming interventions where our monitoring systems flag a concern.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and deliver effective customer service through our live chat and email channels.
• Platform Improvement: To analyse aggregated, anonymised gameplay and technical data for the purpose of improving the wildace platform, enhancing user experience, and optimising game performance — in a manner that does not identify individual players.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about wildace — but only where you have given your explicit consent to receive such communications and in accordance with the applicable data privacy regulations.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, wildace must have a lawful basis for each processing activity involving your personal data. The legal bases on which wildace relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and wildace — including operating your account, processing transactions, and delivering platform services — is conducted on the basis of contractual necessity under Section 12(b) of RA 10173.
• Legal Obligation: Processing that is required to comply with applicable Philippine law — including KYC verification, AML transaction reporting, and regulatory record-keeping — is conducted on the basis of legal obligation under Section 12(c) of RA 10173.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming monitoring, and platform improvement is conducted on the basis of wildace's legitimate interests under Section 12(f) of RA 10173, provided those interests are not overridden by your own fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies is conducted on the basis of your freely given, specific, and informed consent under Section 12(a) of RA 10173. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

wildace does not sell your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the defined purpose.

Payment Processors

To process your deposits and withdrawals, wildace shares relevant transaction data with our payment processing partners, including GCash (G-Xchange, Inc.), PayMaya (Maya Philippines, Inc.), BPI, BDO, and Metrobank. These partners act as independent data controllers in respect of the transaction data they process and are bound by their own privacy policies and applicable Philippine financial regulations.

KYC & Identity Verification Partners

wildace engages accredited third-party identity verification service providers to assist with KYC document verification. These providers process your identity documents solely for the purpose of verifying your identity on wildace's behalf and under a data processing agreement that restricts their use of your data to this purpose only.

Fraud Detection & Security Providers

wildace uses automated fraud detection systems that may involve data sharing with specialist security technology providers. These providers process gameplay and technical data to identify patterns indicative of fraud, bonus abuse, or multi-accounting, and are bound by strict confidentiality and data processing obligations.

Regulatory & Law Enforcement Authorities

wildace is obligated by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent government authorities when required by law, court order, or binding regulatory directive. wildace will not provide advance notice of such disclosures where doing so would be prohibited by law or would interfere with an investigation.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of wildace's assets, your personal data may be transferred to the acquiring entity. In such circumstances, wildace will notify affected players before their personal data is transferred and becomes subject to a different privacy policy.

06 Cookies & Tracking Technologies

wildace uses cookies and similar tracking technologies on its website to enable core platform functionality, maintain your session security, and — where you have consented — to analyse platform usage and deliver relevant promotional content.

Types of Cookies Used

• Essential Cookies: Required for the wildace platform to function. These include session authentication cookies (for wildace Login), security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Enable the platform to remember your preferences — such as language settings, responsible gaming limit configurations, and display preferences — across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the wildace platform. This data informs platform improvements. Analytics cookies are only placed where you have given your consent.
• Marketing Cookies: Used to track whether you have engaged with a wildace promotional campaign, to prevent the same promotional message from being shown repeatedly, and to measure the effectiveness of marketing activities. These are only placed where you have given explicit consent.

Managing Cookies

You can manage your cookie preferences through the wildace cookie consent panel, which is displayed on your first visit to the site. You may also manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to use the wildace Login and core platform features.

wildace does not use third-party advertising network cookies or any tracking technology designed to follow you across websites not operated by wildace.

07 Data Retention

wildace retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. wildace maintains a formal data retention schedule that is reviewed annually by the Data Privacy Officer.

08 Data Security Measures

wildace implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption: All personal data is encrypted at rest using AES-256 and in transit using TLS 1.3. KYC documents are stored in an isolated, access-controlled secure document vault with additional encryption layers.
• Access Controls: Access to personal data within wildace's internal systems is restricted on a strict need-to-know basis, enforced through role-based access control (RBAC). All staff access to player data is logged and auditable.
• Two-Factor Authentication: wildace's internal administrative systems require multi-factor authentication for all personnel with access to player data.
• Regular Security Audits: wildace engages independent cybersecurity professionals to conduct regular penetration testing, vulnerability assessments, and security audits of the platform infrastructure.
• Incident Response: wildace maintains a formal personal data breach response procedure, including designated response teams, escalation paths, and notification protocols aligned with NPC requirements.
• Staff Training: All wildace staff who handle personal data undergo mandatory data privacy training upon onboarding and annually thereafter.

09 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights as a data subject. wildace is committed to honouring these rights within the timeframes prescribed by law — generally within 15 calendar days of receiving a verifiable request.

How to Submit a Data Subject Request

To exercise any of the above rights, please contact the wildace Data Privacy Officer by email at [email protected] with the subject line "Data Subject Request — [Right Being Exercised]." You will be required to verify your identity before your request is processed. wildace will acknowledge your request within 72 hours and provide a substantive response within 15 calendar days, or notify you if an extension is required.

If you are not satisfied with wildace's response to your data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10 Children & Minors

The wildace platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. wildace does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the wildace registration process. All accounts are subject to KYC verification, which includes confirmation that the account holder meets the minimum age requirement. If wildace discovers that personal data has been collected from an individual who is under 21, that account will be immediately suspended, the personal data will be deleted without delay, and the matter will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and believe that your child (or a person under 21 in your care) has registered a wildace account, please contact our support team immediately at [email protected]. We will investigate and act promptly.

11 Cross-Border Data Transfers

Certain personal data processed in connection with the wildace platform may be transferred to and processed in countries outside the Philippines — for example, where game software providers or cloud infrastructure providers maintain data centres in other jurisdictions.

Where personal data is transferred outside the Philippines, wildace ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by RA 10173. These safeguards may include contractual clauses approved by the NPC, adequacy decisions, or binding corporate rules, depending on the destination jurisdiction and the nature of the transfer.

wildace does not transfer personal data to jurisdictions that the NPC has determined do not provide an adequate level of data protection without first ensuring that additional contractual or technical safeguards are in place.

12 Updates to This Privacy Policy

wildace reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or our platform operations. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

For material changes — particularly those that significantly affect how we use your personal data or that alter your rights — wildace will provide advance notice via your registered account email and/or a prominent in-platform notification before the changes take effect. The notice period will be at least 14 days for material changes, where practicable.

Your continued use of the wildace platform after a Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with an update, you should cease using the platform and may request account closure by contacting wildace support.

13 Contact & Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or wildace's data processing practices, please contact the wildace Data Privacy Officer through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy Inquiry" for general questions or "Data Subject Request" for formal rights requests.
• Response Time: wildace aims to acknowledge all privacy-related emails within 72 hours and provide a substantive response within 15 calendar days.
• Postal Address: Correspondence may also be sent to wildace's registered business address in the Philippines. Please request the current postal address via the support email above.

If you believe that wildace has not adequately addressed your privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for enforcing RA 10173.