aah88 Privacy Policy

This Privacy Policy describes how aah88 ("aah88", "we", "us", "our") — the operator of the online gaming platform accessible at https://aah88.vip — collects, processes, stores, and protects the personal data of individuals who access, register with, or use the aah88 Platform (each a "Data Subject" or "Player").

This Policy applies to all personal data processing activities conducted by aah88 in connection with the operation of the Platform, including but not limited to account registration, identity verification, payment processing, gameplay activity, customer support, and marketing communications, where applicable.

By accessing the aah88 Platform and creating an Account, you acknowledge that you have read, understood, and consented to the data processing practices described in this Policy. If you do not agree, you must discontinue use of the Platform immediately. This Policy should be read together with the aah88 Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules, aah88 is the Personal Information Controller in respect of personal data collected from Players using the Platform. aah88 determines the purposes and means of processing personal data in connection with Platform operations.

Certain categories of personal data — specifically relating to payment processing — are handled by aah88's licensed payment service partners (GCash, PayMaya, and Philippine banking institutions). In those cases, the respective payment service provider acts as an independent Personal Information Controller for data processed within their own systems. aah88's responsibility is limited to the data transmitted to and received from those providers in connection with deposit and withdrawal transactions.

aah88 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the Data Privacy Act. The DPO may be contacted at: [email protected] (marked: Attention — Data Protection Officer).

aah88 collects personal data from Players through the following categories and means:

aah88 does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation — unless strictly required by specific regulatory obligations (for example, problem gambling identification under PAGCOR's responsible gaming framework). Where such data is required, Players will be separately informed and explicit consent will be obtained.

aah88 processes your personal data for the following specific and legitimate purposes:

• Account Registration & Management: To create and maintain your aah88 Account, verify your identity, and ensure only one Account is held per Player.
• Age & Identity Verification (KYC): To comply with PAGCOR's mandatory know-your-customer requirements and to verify that all Players are at least 21 years of age, as required by Philippine law.
• Payment Processing: To process deposits, execute withdrawals, and maintain accurate financial records of all transactions in your Account, denominated in Philippine Pesos.
• Gameplay & Platform Services: To operate the games, record game outcomes, process wager settlements, apply bonus credits, and maintain your loyalty points and VIP tier status.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for suspicious activity and fulfill aah88's reporting obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• Fraud Prevention & Security: To detect, investigate, and prevent unauthorized access, fraudulent account activity, bonus abuse, and other forms of illegal or prohibited conduct on the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical and account-related assistance.
• Responsible Gaming: To administer and enforce deposit limits, session limits, self-exclusion requests, and other responsible gaming tools activated on your Account.
• Regulatory Compliance & Legal Obligations: To comply with PAGCOR's reporting requirements, respond to lawful requests from law enforcement or regulatory authorities, and fulfill aah88's legal obligations under Philippine law.
• Marketing Communications (where consented): To send you promotional offers, bonus notifications, and aah88 Platform news — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.

Under the Data Privacy Act of 2012, aah88 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and aah88 (i.e., the Terms & Conditions governing your use of the Platform). This covers account management, payment processing, and gameplay.
• Legal Obligation: Processing is required for aah88 to comply with applicable laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for aah88's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and improving the quality of our services — provided these interests are not overridden by your rights and interests.
• Consent: For marketing communications and certain optional data processing activities, aah88 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

aah88 does not sell, rent, or trade your personal data to third parties. We disclose personal data only in the following circumstances:

• Payment Service Providers: Financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and by applicable Philippine financial regulations.
• Game Providers: Technical and gameplay data may be shared with aah88's licensed game content providers for the purpose of game operation, fairness verification, and dispute resolution. See Section 13 for further details.
• KYC/AML Service Providers: Identity documents and verification data may be processed by aah88's accredited KYC service partners for the purposes of identity verification and anti-money laundering screening.
• Regulatory Authorities: aah88 is required to share player data with PAGCOR and other Philippine regulatory or law enforcement authorities upon lawful request or as required by applicable regulations. This includes mandatory reporting under the Anti-Money Laundering Act.
• Legal Proceedings: Personal data may be disclosed to courts, arbitral tribunals, or legal advisors where necessary for the establishment, exercise, or defense of legal claims.
• Business Transfers: In the event of a merger, acquisition, or transfer of aah88's business operations, Player data may be transferred to the acquiring entity, subject to a notice being provided to affected Players and the same level of data protection being maintained.

aah88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention obligations:

• Account Data & KYC Records: Retained for a minimum of five (5) years following the closure of your Account, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date, in compliance with the Anti-Money Laundering Act of 2001 as amended.
• Gameplay Logs: Retained for a minimum of three (3) years to support dispute resolution and regulatory reporting.
• Customer Support Records: Retained for two (2) years from the date of the last support interaction, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained for as long as you maintain an active Account or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized such that it can no longer be linked to an identifiable individual.

aah88 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your browser and the aah88 Platform is protected using 256-bit TLS (Transport Layer Security) encryption. This is the same encryption standard used by Philippine banks and major e-wallets.
• Access Controls: Access to personal data within aah88's systems is restricted to authorized personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Password Security: Player passwords are stored using industry-standard cryptographic hashing algorithms. Plain-text passwords are never stored and cannot be retrieved by aah88 staff.
• Two-Factor Authentication: Players may enable OTP-based two-factor authentication on their Accounts to provide an additional layer of protection against unauthorized login attempts.
• Breach Response: In the event of a personal data breach that is likely to result in serious harm to affected data subjects, aah88 will notify the National Privacy Commission (NPC) and affected Players within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

Under the Data Privacy Act of 2012, you are entitled to exercise the following rights with respect to your personal data held by aah88:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected, used, and shared, which is the primary purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data aah88 holds about you. Requests will be responded to within 15 business days of receipt.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (such as contact details) can be made directly through your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Note that aah88 may be required to retain certain data for regulatory compliance purposes (see Section 7), which may limit the scope of deletion in some cases.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transmission to another controller, where technically feasible and not restricted by regulatory obligations.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time. For direct marketing, objection will take effect immediately. For other processing on the basis of legitimate interests, aah88 will assess whether its interests override yours.
• Right to Lodge a Complaint: You have the right to submit a complaint to the National Privacy Commission of the Philippines if you believe aah88 has violated your data privacy rights. Details on the NPC complaint process are available through the NPC's official channels.

To exercise any of the above rights, submit a written request to aah88's Data Protection Officer at: [email protected] (marked: Attention — Data Protection Officer). aah88 will respond within the timeframes required by the Data Privacy Act and will not charge a fee for reasonable access or rectification requests.

The aah88 Platform uses cookies and similar browser-based tracking technologies to support Platform functionality, maintain session security, and — where you have consented — analyze usage patterns to improve the user experience. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in securely. They cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and game display options) to personalize your experience on repeat visits.
• Analytics Cookies: Used — with your consent — to understand how Players navigate the Platform, which games are most accessed, and where technical issues may be occurring. Data collected is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats. These are a component of aah88's platform security framework.

You may manage or withdraw cookie consent at any time through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality, including session maintenance. First-time visitors are presented with a cookie consent notice prior to non-essential cookies being set.

The aah88 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine law governing casino-style online gambling. aah88 does not knowingly collect personal data from individuals under the age of 21.

In certain circumstances, personal data held by aah88 may be processed by service providers located outside the Republic of the Philippines — for example, cloud infrastructure providers or game content providers whose operations or data centres are based abroad.

Where personal data is transferred outside the Philippines, aah88 ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012 and NPC issuances on cross-border data transfers. Specifically, aah88 ensures that:

• The recipient country or organization provides a standard of data protection that is at least equivalent to the requirements of Philippine law; or
• Adequate contractual safeguards are in place between aah88 and the recipient entity — such as data processing agreements incorporating the standard contractual clauses recognized by the NPC — to ensure your personal data remains protected.

You may request information about specific cross-border transfers and the safeguards applicable to them by contacting aah88's Data Protection Officer.

The aah88 game library incorporates content supplied by licensed third-party game providers. To deliver gameplay functionality, certain technical data — including your aah88 account identifier (not your full personal profile), session data, bet amounts, and game outcomes — is transmitted to and processed by these providers.

All game providers engaged by aah88 are required to:

• Process Player data only for the purpose of delivering and auditing the specific game functionality for which they have been engaged.
• Maintain appropriate security measures consistent with industry standards for licensed gaming providers.
• Comply with applicable data protection law and aah88's data processing requirements as set out in written agreements.
• Not share Player data with unauthorized third parties or use it for purposes beyond game operation and regulatory reporting.

aah88 remains responsible to you as the primary Personal Information Controller for ensuring that game providers handle your data in accordance with this Policy.

aah88 may update this Privacy Policy periodically to reflect changes in our data processing practices, Philippine data protection law, NPC guidance, or PAGCOR regulatory requirements.

When material changes are made to this Policy, aah88 will notify registered Players by email to their registered address and by a notice on the Platform at least seven (7) calendar days before the changes take effect, except where immediate amendment is required by law or regulation. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Your continued use of the aah88 Platform following the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. If you do not accept the amended Policy, you must cease using the Platform and submit a request for Account closure to aah88's Data Protection Officer.

For any questions, requests, or concerns relating to this Privacy Policy or aah88's data processing practices, please contact the aah88 Data Protection Officer:

• Email: [email protected] — Subject line: "Attention — Data Protection Officer"
• Response Timeframe: aah88 will acknowledge all written privacy inquiries within five (5) business days and will respond substantively within fifteen (15) business days of receipt, as required by the Data Privacy Act.
• Support Hours: 8:00 AM to 12:00 MN (Philippine Standard Time), Monday through Sunday

If you are not satisfied with aah88's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information on submitting an NPC complaint is available through the NPC's official government channels.