aah88 Privacy Policy

1. Who We Are (Data Controller)

aah88 ("aah88," "we," "us," or "our") is the data controller responsible for the personal data collected through the aah88 platform at aah88.net. As data controller, aah88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

aah88 operates as an online gaming platform serving Filipino players and is subject to the regulatory oversight of PAGCOR (Philippine Amusement and Gaming Corporation) with respect to gaming operations, and the National Privacy Commission (NPC) with respect to data privacy compliance.

For all data privacy inquiries, you may contact our Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

2. Personal Data We Collect

aah88 collects the following categories of personal data from players and users of the Platform:

aah88 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, religious beliefs, or political affiliations) unless specifically required for responsible gaming assessments or legal compliance purposes.

3. How We Collect Your Data

aah88 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for details on cookies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from GCash, PayMaya, and banking partners. aah88 only receives data from third parties where you have consented to such sharing or where aah88 has a legitimate legal basis to receive it.
• PAGCOR and Regulatory Sources: aah88 may receive information from PAGCOR or other regulatory bodies in connection with licensing, compliance, or investigation matters.

4. How We Use Your Personal Data

aah88 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your aah88 player account, including processing your registration, verifying your identity, and managing your account settings.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, and PESONet, and to maintain accurate financial records of all transactions.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, Philippine anti-money laundering laws (AMLA), KYC obligations, and reporting requirements to the Anti-Money Laundering Council (AMLC).
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit and loss limits set by players.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform.
• Platform Improvement: To analyze usage patterns, improve game offerings, optimize the user interface, and develop new features for Filipino players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with your use of the Platform.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, aah88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between you and aah88 (i.e., to operate your player account, process payments, and provide gaming services).
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, KYC requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, security, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

aah88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners, solely to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to fulfil KYC obligations under PAGCOR regulations.
• Fraud Prevention Partners: Anti-fraud and security service providers who assist aah88 in detecting and preventing fraudulent activity on the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where disclosure is required by law or court order.
• IT & Infrastructure Providers: Cloud hosting, data storage, and technical service providers who process data on aah88's behalf under strict data processing agreements.
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants where necessary for legal proceedings or regulatory compliance.

aah88 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. All third-party service providers are contractually bound to process your data only for the specified purpose and in accordance with applicable Philippine data protection law.

7. Cookies & Tracking Technologies

aah88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limits you have set.
• Analytics Cookies: Collect anonymized data about how players use the Platform to help aah88 improve performance and user experience. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content to you on the Platform. Used only with your explicit consent.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the Platform. For more information on managing cookies on your mobile device (commonly used by Filipino players accessing aah88 via smartphone), refer to your device's browser settings.

8. Data Retention

aah88 retains your personal data for the following periods:

• Account Data: For the duration of your active account, plus five (5) years following account closure, as required by PAGCOR regulations and Philippine anti-money laundering law.
• Financial Transaction Records: Ten (10) years from the date of the transaction, in compliance with AMLA requirements.
• KYC Verification Documents: Five (5) years from account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Two (2) years from the date of the communication, unless the matter is subject to ongoing legal proceedings.
• Marketing Consent Records: Until you withdraw consent, plus three (3) years thereafter as evidence of prior consent.
• Technical Logs: Ninety (90) days for standard access logs; up to two (2) years for security-related logs.

Upon expiry of the applicable retention period, aah88 will securely delete or anonymize your personal data in accordance with NPC guidelines.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aah88:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data aah88 holds about you, including information on how it is being used.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your aah88 account dashboard.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to aah88's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact aah88's Data Protection Officer using the contact details in Section 14. aah88 will respond to all data subject requests within fifteen (15) business days, as required by NPC regulations.

10. Data Security Measures

aah88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data in transit is protected by TLS 1.3. All data at rest is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to aah88 staff and contractors who require it to perform their duties, subject to role-based access controls and confidentiality obligations.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) to prevent unauthorized access.
• Regular Security Audits: aah88 conducts regular penetration testing and security audits of its Platform and infrastructure.
• Incident Response: aah88 maintains a documented data breach response procedure and will notify affected players and the NPC within 72 hours of a confirmed breach.
• Staff Training: All aah88 staff with access to personal data receive regular data privacy and security training.

11. Children's Privacy (21+ Policy)

The aah88 Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. aah88 does not knowingly collect personal data from individuals under the age of 21.

If aah88 discovers that personal data has been collected from a person under 21 years of age, such data will be immediately deleted and the associated account will be permanently closed. Any winnings accrued by an underage player will be forfeited.

If you are a parent or guardian and believe that your child has registered on the aah88 Platform, please contact our Data Protection Officer immediately using the contact details in Section 14.

12. Cross-Border Data Transfers

aah88 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data outside the Philippines — for example, to cloud infrastructure providers or international KYC service providers — aah88 ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection, or subject to appropriate contractual safeguards such as standard contractual clauses approved by the NPC.

aah88 will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent or a valid legal basis under the Data Privacy Act.

13. Changes to This Privacy Policy

aah88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via email and/or by prominent notice on the Platform at least seven (7) days prior to the effective date of the changes.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the aah88 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes.

14. Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise your data subject rights, or complaints regarding aah88's handling of your personal data, please contact our Data Protection Officer:

• Data Protection Officer: aah88 Privacy Team
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 from any page on the aah88 Platform

If you are not satisfied with aah88's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available on the NPC's official website.