Privacy Policy – aaaaph Casino

1. Introduction

aaaaph Casino ("aaaaph," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the aaaaph.one platform ("Platform"). This Privacy Policy ("Policy") describes how aaaaph collects, uses, stores, shares, and protects personal information in connection with the services we provide to players in the Philippines and elsewhere.

This Policy applies to all personal data collected through the Platform, including data provided during registration, during gameplay, through customer support interactions, and through your use of any aaaaph promotional or marketing communications. It should be read together with our Terms & Conditions, which govern your use of the Platform.

aaaaph takes its obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations seriously. We are committed to ensuring that your personal data is handled lawfully, fairly, and transparently.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, aaaaph Casino is the personal information controller responsible for your personal data collected through the aaaaph.one platform.

aaaaph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for our DPO are provided in Section 14 of this Policy.

Where aaaaph engages third-party service providers to process personal data on its behalf, those providers act as personal information processors and are contractually bound to process data only in accordance with aaaaph's instructions and applicable law.

3. Personal Data We Collect

aaaaph collects the following categories of personal data from players and users of the Platform:

3.1 Identity and Contact Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Gender
• Nationality and country of residence
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number

3.2 Identity Verification Data

• Government-issued photo identification (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys National ID)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Source of funds documentation where required by AML regulations

3.3 Account and Transaction Data

• aaaaph account username and encrypted password
• Account registration date and history
• Deposit and withdrawal history, including amounts, dates, and payment methods used
• Bonus and promotion history
• Gaming history, including games played, bets placed, wins, and losses
• Account balance and transaction records

3.4 Payment Data

• GCash account reference (mobile number)
• PayMaya/Maya account reference
• Bank account details (bank name, account number) for bank transfer transactions
• Debit card details (card number masked, expiry date, cardholder name)

aaaaph does not accept or store credit card details for gambling deposits, in compliance with Philippine regulations. aaaaph does not accept cryptocurrency transactions.

3.5 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited and features used on the Platform
• Referring website or source
• Cookie identifiers and similar tracking data (see Section 10)

3.6 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Feedback and survey responses
• Marketing communication preferences

4. How We Collect Your Data

aaaaph collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC/AML service providers; fraud detection data from security partners; payment confirmation data from payment processors such as GCash and Maya.
• Publicly available sources: Information from public records or databases where permitted by law for fraud prevention or AML compliance purposes.

5. How We Use Your Personal Data

aaaaph uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your aaaaph player account, including processing registrations, verifying identity, and managing account settings.
• Service delivery: To provide you with access to games, process deposits and withdrawals, award bonuses, and deliver all other services available on the Platform.
• Legal and regulatory compliance: To comply with obligations under the Philippine Data Privacy Act, PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable laws, including KYC verification, transaction monitoring, and suspicious activity reporting.
• Age verification: To verify that all players meet the minimum age requirement of 21 years in accordance with Philippine gaming regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming behavior, identify potential problem gambling indicators, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing and promotions: To send you information about aaaaph promotions, bonuses, and new features, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the aaaaph platform.
• Legal claims: To establish, exercise, or defend legal claims involving aaaaph.

6. Legal Basis for Processing

aaaaph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary for the performance of the contract between you and aaaaph (i.e., the Terms & Conditions), including account management and service delivery.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to aaaaph, including KYC/AML requirements, PAGCOR reporting obligations, and tax regulations.
• Legitimate interests: Where processing is necessary for the legitimate interests of aaaaph, such as fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and interests.

7. Sharing Your Personal Data

aaaaph does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, Maya, and banking partners, to process deposits and withdrawals.
• KYC/AML service providers: Third-party identity verification and anti-money laundering compliance providers engaged to assist with regulatory obligations.
• Game software providers: Licensed game developers and providers whose games are available on the aaaaph platform, to the extent necessary to deliver gameplay services.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection partners who process data on aaaaph's behalf under strict data processing agreements.
• Customer support platforms: Live chat and helpdesk software providers used to manage player support interactions.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or regulation.
• Law enforcement: Philippine law enforcement agencies, where required by a valid legal order or where aaaaph reasonably believes disclosure is necessary to prevent or investigate criminal activity.
• Professional advisers: Lawyers, auditors, and accountants engaged by aaaaph, subject to professional confidentiality obligations.

All third-party processors are contractually required to implement appropriate technical and organisational security measures and to process personal data only in accordance with aaaaph's instructions and applicable Philippine law.

8. Data Retention

aaaaph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guide:

• Account and transaction records: Retained for a minimum of five (5) years from the date of the last transaction or account closure, as required under the Anti-Money Laundering Act and PAGCOR regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support records: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing preferences and consent records: Retained until you withdraw your consent or for three (3) years from the date of last interaction, whichever is earlier.
• Technical and usage logs: Retained for up to twelve (12) months, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with aaaaph's data disposal procedures. Where data is anonymised, it may be retained indefinitely for analytical purposes as it can no longer be linked to an identifiable individual.

9. Security Measures

aaaaph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and aaaaph's servers.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication for internal systems handling personal data.
• Regular security audits, vulnerability assessments, and penetration testing.
• Intrusion detection and prevention systems monitoring the Platform 24/7.
• Staff training on data protection and information security best practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, aaaaph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

10. Cookies and Similar Technologies

aaaaph uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform to enhance your user experience, analyse Platform performance, and support our marketing activities.

10.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised information about how visitors use the Platform, helping us identify areas for improvement.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits, to provide a more personalised experience.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of aaaaph's marketing campaigns. These are only set with your consent.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the aaaaph platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

By continuing to use the aaaaph platform after being presented with our cookie notice, you consent to the use of cookies as described in this Policy.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aaaaph:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data aaaaph holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by aaaaph.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to aaaaph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact aaaaph's Data Protection Officer using the contact details provided in Section 14. aaaaph will respond to all valid requests within fifteen (15) business days. We may need to verify your identity before processing your request.

12. Minors and Age Restriction

The aaaaph platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. aaaaph does not knowingly collect personal data from individuals under the age of 21.

If aaaaph becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted promptly and the associated account will be permanently closed. If you believe that a minor has registered an account on the aaaaph platform, please contact us immediately at the details provided in Section 14.

13. Changes to This Privacy Policy

aaaaph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, aaaaph will post a notice on the Platform and, where practicable, notify registered players by email.

The revised Policy will take effect on the date indicated in the "Last Updated" notice at the top of this page. Your continued use of the aaaaph platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how aaaaph protects your personal data. If you have any concerns about changes to this Policy, please contact our Data Protection Officer.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by aaaaph, please contact our Data Protection Officer:

• Data Protection Officer: aaaaph Casino – Privacy Office
• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly on the aaaaph platform

For complaints regarding the handling of your personal data that have not been resolved to your satisfaction by aaaaph, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. For responsible gaming concerns, please visit our Responsible Gaming page.