aah88 Privacy Policy

1. Introduction

aah88 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services — including registered players, prospective members, and casual website visitors. This Privacy Policy is issued in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC").

This Policy applies to all personal information collected through the aah88 website at aah88.org, any related mobile-optimised interfaces, customer support communications, and any other touchpoint through which aah88 processes personal data in connection with its PAGCOR-licensed online gaming operations.

Please read this Policy carefully. By registering an account, depositing funds, placing wagers, or otherwise using any aah88 service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not consent, please discontinue use of the aah88 platform.

2. Data Controller Identity

The data controller responsible for personal information processed through the aah88 platform is aah88, a Philippine-registered entity operating under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). Our Data Protection Officer (DPO) is responsible for overseeing compliance with RA 10173 and this Privacy Policy. The DPO may be contacted at the details provided in Section 14 of this document.

aah88 is registered with the National Privacy Commission as required under the DPA and its IRR. Our registration reflects our commitment to lawful, transparent, and accountable personal data processing.

3. Categories of Personal Data Collected

aah88 collects and processes the following categories of personal data depending on the nature of your interaction with the platform:

aah88 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health records, political opinions, or religious beliefs) except where required by Philippine AML regulations, in which case data is collected solely to the extent legally mandated and handled with enhanced security controls.

4. How We Collect Personal Data

aah88 collects personal data through the following channels:

4.1 Direct Collection

Information you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions. This includes all information entered into registration forms, identity upload portals, and support chat interfaces.

4.2 Automated Collection

Technical and gaming data collected automatically as you use the aah88 platform. This includes IP address logging, session timing, device fingerprinting for fraud prevention, and game activity logs. This data is collected through server logs, browser cookies, and platform analytics tools operated by or on behalf of aah88.

4.3 Third-Party Sources

aah88 may receive personal data from third-party identity verification providers, payment processors (including GCash, PayMaya, and Philippine bank payment gateways), and fraud detection services. Data received from third parties is handled in accordance with this Privacy Policy and any contractual data processing agreements in place with those parties.

5. Purpose of Processing & Legal Basis

aah88 processes personal data for the following purposes, each supported by a lawful basis under RA 10173:

• Account registration and management: Processing is necessary for the performance of the contract between aah88 and the player.
• Identity verification (KYC/AML): Processing is required for compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act (RA 9160, as amended).
• Payment processing: Processing is necessary to execute deposit and withdrawal transactions as part of the gaming service contract.
• Gaming operations and fraud prevention: Processing is necessary for our legitimate interests in detecting and preventing fraud, system abuse, and money laundering that would otherwise harm the platform and its legitimate users.
• Customer support: Processing is necessary for the performance of our service obligations and our legitimate interests in resolving disputes.
• Marketing communications: Processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time.
• Legal and regulatory compliance: Processing is required to comply with applicable Philippine law, including reporting obligations to PAGCOR and the AMLC.

6. Data Sharing & Disclosure

aah88 does not sell, rent, or trade personal data. We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Regulatory Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies where disclosure is required by law or regulatory directive. Disclosure to law enforcement agencies is made only in response to valid legal process.

6.2 Service Providers

Payment processors (GCash, PayMaya, bank payment gateways), identity verification service providers, game content providers, cloud hosting operators, and customer support platform providers engaged under data processing agreements that obligate them to handle data only as instructed by aah88 and in accordance with RA 10173.

6.3 Fraud Prevention Networks

Where aah88 participates in industry-wide responsible gaming or fraud prevention initiatives, anonymised or pseudonymised data may be shared within those networks. No directly identifiable personal data is shared for this purpose without separate legal justification.

6.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of aah88's business, personal data held by aah88 may be transferred to the acquiring entity, subject to at least equivalent privacy protections as those described in this Policy.

7. Data Retention

aah88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Applicable retention periods include:

• Active account data: Retained for the duration of your account relationship with aah88;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required under PAGCOR regulations and the AMLA;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Support communications: Retained for two (2) years from the date of the last communication;
• Marketing consent records: Retained until consent is withdrawn and for two (2) years thereafter as evidence of consent management.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with aah88's data destruction procedures.

8. Data Security

aah88 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between user devices and aah88 servers;
• Encryption at rest for sensitive data fields including identity document images and financial account details;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing conducted by independent security professionals;
• OTP-based two-factor authentication for player account access;
• Incident response procedures in compliance with the NPC's 72-hour breach notification requirement.

Despite these measures, no online platform can guarantee absolute security. aah88 encourages players to use strong passwords, protect their OTP codes, and report any suspected unauthorised account activity immediately to support.

9. Your Data Subject Rights

Under RA 10173, registered players and data subjects have the following rights with respect to their personal data held by aah88:

• Right to be Informed: The right to know what personal data aah88 collects, how it is used, and with whom it is shared — as set out in this Policy;
• Right to Access: The right to request a copy of the personal data aah88 holds about you;
• Right to Correction: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure (Right to be Forgotten): The right to request deletion of personal data that is no longer necessary for its original purpose, subject to our legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to Object: The right to object to processing based on legitimate interests, including for direct marketing purposes;
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, as provided under RA 10173.

To exercise any of these rights, submit a written request to the aah88 Data Protection Officer using the contact details in Section 14. aah88 will respond to all verified data subject requests within fifteen (15) working days. We may request proof of identity before processing any request to protect against unauthorised disclosure.

10. Cookies & Tracking Technologies

aah88 uses cookies and similar tracking technologies on its website for the following purposes:

10.1 Strictly Necessary Cookies

Essential for the platform to function — including session authentication, login state persistence, and security token management. These cookies cannot be disabled without impairing platform functionality.

10.2 Analytics Cookies

Used to understand how players navigate and use the aah88 platform, enabling us to improve user experience and identify performance issues. Analytics data is aggregated and does not identify individual players.

10.3 Fraud Prevention Cookies

Device fingerprinting and behavioural analytics cookies used to detect automated bots, multi-accounting attempts, and other fraudulent activity that would harm legitimate players and the integrity of the platform.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to log in or play at aah88, though some personalisation features may be unavailable.

11. Minors & Age Restriction

Age verification is enforced through mandatory KYC documentation review prior to the processing of any withdrawal. aah88 cooperates fully with PAGCOR's age verification requirements and takes the protection of minors from gambling seriously as a core operational commitment.

12. Cross-Border Data Transfers

aah88 may transfer personal data to service providers located outside the Philippines — including cloud infrastructure providers and game content suppliers with servers in other jurisdictions. All such transfers are conducted only where the recipient country provides an adequate level of data protection, or where appropriate contractual safeguards (including data processing agreements incorporating RA 10173-equivalent protections) are in place. aah88 does not transfer personal data to jurisdictions without adequate protections in the absence of explicit player consent or a specific legal requirement.

13. Amendments to This Privacy Policy

aah88 reserves the right to update this Privacy Policy to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or our data processing practices. Where changes are material, aah88 will provide advance notice to registered players via email or in-platform notification at least seven (7) days before the revised Policy takes effect. The version date at the top of this document indicates when the Policy was last updated. Continued use of aah88 after the effective date of any amendment constitutes acceptance of the revised Policy.

14. Contact & Data Protection Officer

For all privacy-related enquiries, data subject rights requests, complaints, or to contact our Data Protection Officer, please use the following details: