Privacy Policy — How aaaph Protects Your Data

§ 01 Introduction and Scope

This Privacy Policy applies to all personal information collected by aaaph through the aaaph website at aaaph.cam, its mobile-optimised interfaces, and any associated applications or services (collectively, the "Platform"). By accessing the aaaph Platform, creating an account, or submitting personal information to aaaph, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

aaaph is committed to protecting the privacy and personal data of all Filipino players in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission of the Philippines.

If you do not agree with any provision of this Privacy Policy, you must immediately cease using the aaaph Platform and refrain from providing any personal information to aaaph.

§ 02 Data Controller

aaaph acts as the data controller with respect to all personal information collected through the Platform. As data controller, aaaph determines the purposes for which and the manner in which personal data is processed.

For all privacy-related inquiries, data subject access requests, or complaints regarding the processing of your personal data, you may contact the aaaph Data Protection Officer at:

§ 03 Personal Data We Collect

aaaph collects the following categories of personal information from players, depending on the nature of the interaction with the Platform:

3.1 Registration Data

When you create an aaaph account, we collect:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify compliance with the 21+ age requirement)
• Residential address in the Philippines (city, province, barangay, postal code)
• Email address
• Mobile phone number
• Username and password (password is stored in hashed, encrypted format)
• Currency preference (PHP)

3.2 Identity Verification Data (KYC)

To comply with Philippine anti-money laundering regulations and PAGCOR requirements, aaaph collects:

• Copy of government-issued identification (Philippine passport, UMID, SSS card, PhilHealth ID, driver's license, voter's ID, or other valid ID accepted under Philippine KYC standards)
• Proof of address documents (utility bills, bank statements, or government correspondence showing your residential address)
• Facial verification or selfie photograph to match against ID documents

3.3 Financial and Transaction Data

When you deposit, wager, or withdraw funds on aaaph, we collect:

• Payment method details (GCash account name, Maya account name, bank account holder name and last four digits of account number)
• Transaction amounts, timestamps, and payment channel used
• Deposit and withdrawal history
• Bonus acceptance and wagering progress records
• Gaming activity logs (games played, bet amounts, win/loss records, session timestamps)

3.4 Technical and Usage Data

aaaph automatically collects certain technical information when you access the Platform:

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Pages visited on the Platform, clickstream data, and time spent on each page
• Referral source (how you arrived at aaaph.cam)
• Login timestamps and session duration

3.5 Customer Support Communications

When you contact aaaph support via live chat, email, or any other communication channel, we collect and retain the content of your inquiry, correspondence history, and any attachments or screenshots you provide to assist with resolving your issue.

§ 04 How We Use Your Personal Data

aaaph processes your personal data only for the following legitimate purposes:

4.1 Account Management

To create, maintain, and manage your aaaph account, including authentication, login security, password resets, and account recovery processes.

4.2 Payment Processing

To process deposits, withdrawals, and refunds through GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and other payment channels supported by aaaph.

4.3 Identity Verification and Fraud Prevention

To verify your age (21+ requirement), identity, and address in accordance with Philippine anti-money laundering obligations and to detect and prevent fraudulent activity, multi-accounting, collusion, and unauthorised access to the Platform.

4.4 Legal Compliance

To comply with obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, the Philippine Data Privacy Act, tax reporting requirements, and any lawful order issued by a Philippine court or regulatory authority.

4.5 Customer Support

To respond to your inquiries, resolve disputes, investigate complaints, and provide technical assistance. Support communications are logged for quality assurance and dispute resolution purposes.

4.6 Platform Improvement and Analytics

To analyse user behaviour on the Platform, identify technical issues, optimise game performance for Philippine mobile networks, and improve the overall user experience. Aggregated, anonymised data may be used for internal research and development purposes.

4.7 Marketing and Promotions (With Consent)

If you have opted in to receive promotional communications, aaaph may send you email or SMS messages regarding bonuses, new games, VIP offers, and special promotions. You may withdraw marketing consent at any time by clicking "Unsubscribe" in any marketing email or by adjusting your communication preferences in your account settings.

4.8 Responsible Gaming

To monitor gaming activity for patterns indicative of problem gambling, enforce deposit limits and self-exclusion requests, and provide access to responsible gaming tools and resources as required under Philippine gaming regulations.

§ 05 Data Sharing and Disclosure

aaaph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, aaaph may share your personal information with the following categories of third parties under the circumstances described:

5.1 Payment Processors

Personal data necessary to process transactions (name, payment account details, transaction amounts) is shared with GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers used by aaaph to facilitate deposits and withdrawals.

5.2 Gam e Providers

aaaph shares anonymised session tokens and game activity data with licensed game providers whose titles appear on the Platform. These providers receive only the technical data required to operate their games and are contractually prohibited from using this data for any purpose other than game delivery and technical support.

5.3 Identity Verification Services

KYC documents and biometric data submitted during the identity verification process may be shared with third-party identity verification service providers engaged by aaaph to perform document authentication and facial matching. These providers operate under strict data processing agreements compliant with the Philippine Data Privacy Act.

5.4 Regulatory and Law Enforcement Authorities

aaaph is required by law to disclose personal data to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission, the Bureau of Internal Revenue, or any other competent Philippine authority upon receipt of a lawful request, court order, or legal process. aaaph will comply with such requests in accordance with applicable Philippine law.

5.5 Professional Advisors

Personal data may be disclosed to legal counsel, auditors, and accountants engaged by aaaph in connection with legal proceedings, compliance audits, or professional advisory services, subject to confidentiality obligations.

§ 06 Data Security Measures

aaaph implements technical, administrative, and physical security measures designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Encryption: All data transmitted between your device and the aaaph Platform is encrypted using 256-bit SSL/TLS encryption, the same standard used by Philippine banks and financial institutions.
• Data Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and identity information — is encrypted at rest using AES-256 encryption on aaaph's secure servers.
• Access Controls: Access to personal data within aaaph is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to fulfil their specific role. All internal access is logged and audited.
• Password Security: Account passwords are never stored in plaintext. aaaph uses industry-standard hashing algorithms with salt to store password credentials securely.
• Two-Factor Authentication: aaaph offers optional two-factor authentication (2FA) for all accounts, providing an additional layer of security against unauthorised login.
• Fraud Monitoring: Automated systems monitor login patterns, transaction behaviour, and account activity for signs of unauthorised access or fraud, triggering alerts and account protections where anomalies are detected.
• Security Audits: aaaph conducts periodic internal security reviews and engages independent security professionals to assess the Platform's security posture.

While aaaph takes all reasonable measures to protect your personal data, no data transmission over the internet or method of electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, aaaph will notify the National Privacy Commission and affected data subjects in accordance with the timeframes required under the Philippine Data Privacy Act.

§ 07 Cookies and Tracking Technologies

aaaph uses cookies and similar tracking technologies to operate the Platform, improve user experience, maintain session security, and analyse platform usage. By using the aaaph Platform, you consent to the use of cookies in accordance with this section.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies manage your login session, maintain your account authentication state, and enable core security features. The Platform cannot function without these cookies.
• Functional Cookies: Store your preferences such as language settings, game lobby filters, and notification preferences so that your settings are remembered between sessions.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform, which pages are most visited, and where technical issues occur. This data is used exclusively to improve the Platform and is not linked to individual player identities.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and bot activity on the Platform.

7.2 Managing Cookies

You may configure your browser to refuse all or some cookies, or to receive an alert when websites set or access cookies. However, disabling strictly necessary cookies will prevent you from logging in to your aaaph account and using core Platform features. Instructions for managing cookies are available in the help documentation of all major browsers.

7.3 Third-Party Cookies

Game providers whose titles are hosted on the aaaph Platform may set their own functional cookies to operate game interfaces. These cookies are governed by the respective privacy policies of those providers. aaaph does not control third-party cookies set by game providers and encourages you to review the privacy practices of individual game providers if you have concerns.

§ 08 Data Retention Periods

aaaph retains personal data for the periods described below, after which data is securely deleted, anonymised, or archived in accordance with applicable Philippine law:

• Account Registration Data: Retained for the duration of your account plus five (5) years following account closure, in compliance with PAGCOR recordkeeping requirements and Philippine anti-money laundering regulations.
• KYC and Identity Documents: Retained for five (5) years from the date of verification or account closure, whichever is later, as required under the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction to comply with AMLC reporting requirements and BIR tax record-keeping obligations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service quality management.
• Marketing Consent Records: Retained until you withdraw consent plus one (1) year, to maintain an accurate audit trail of consent status.
• Technical Usage Logs: Retained for ninety (90) days for security monitoring purposes, after which they are automatically purged from active systems.

§ 09 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aaaph. To exercise any of these rights, contact aaaph at [email protected] with the subject line "Data Privacy Request" and a clear description of the right you wish to exercise. aaaph will respond within fifteen (15) business days.

9.1 Right to Be Informed

You have the right to be informed that your personal data is being collected and processed by aaaph, the purposes for which it is processed, the recipients or classes of recipients to whom it is disclosed, and the retention period applicable to your data. This Privacy Policy fulfils aaaph's obligation to inform.

9.2 Right of Access

You have the right to request a copy of the personal data that aaaph holds about you, including information about the processing purposes, data categories, and any third parties to whom the data has been disclosed. aaaph will provide this information in a structured, commonly used, and machine-readable format upon verified request.

9.3 Right to Rectification

You have the right to request correction of any inaccurate, incomplete, or outdated personal data that aaaph holds about you. Certain corrections (such as changes to your registered name) will require supporting documentary evidence before aaaph can process the amendment.

9.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and aaaph has no other legal basis for processing. This right is subject to overriding legal retention obligations under Philippine anti-money laundering and gaming regulations.

9.5 Right to Data Portability

You have the right to receive a copy of the personal data you have provided to aaaph in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

9.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. Upon receipt of a marketing objection, aaaph will cease all marketing communications to you immediately and permanently, unless you subsequently re-consent.

9.7 Right to Lodge a Complaint

If you believe that aaaph has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

§ 10 Protection of Minors

The aaaph Platform is strictly intended for individuals who are twenty-one (21) years of age or older. aaaph does not knowingly collect personal data from individuals under the age of 21. Account registration requires declaration of age and is subject to mandatory KYC verification confirming the player's date of birth against a valid Philippine government-issued identification document.

If aaaph discovers that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, the data will be securely deleted where not subject to mandatory legal retention requirements, and the incident will be reported to relevant Philippine authorities where required by law.

Parents and guardians are advised to use parental control software to prevent minors from accessing the aaaph Platform using adult credentials. aaaph accepts no liability for minor access resulting from an adult player sharing their account credentials. For information on responsible gaming tools, visit the Responsible Gaming page.

§ 11 International Data Transfers

aaaph's primary data infrastructure is operated within secure data centres serving the Southeast Asian region. Where personal data is transferred to service providers or game platform vendors located outside the Philippines, aaaph ensures that such transfers are protected by appropriate contractual safeguards, including standard contractual clauses or equivalent data transfer agreements, as required under the Philippine Data Privacy Act's provisions on cross-border data transfers.

aaaph does not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards to protect the rights and freedoms of affected Filipino data subjects.

§ 12 Updates to This Privacy Policy

aaaph may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, aaaph will notify registered players via the email address on their account or via an in-Platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to remain informed about how aaaph protects your personal data.

Continued use of the aaaph Platform following notification of an update to this Privacy Policy constitutes your acceptance of the revised terms.

§ 13 Contact and Complaints

For all privacy-related inquiries, data subject access requests, consent withdrawals, or formal complaints regarding aaaph's data processing practices, please contact the aaaph Data Protection Officer:

If you are not satisfied with aaaph's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing the Philippine Data Privacy Act.

For general account support, payment queries, or responsible gaming assistance that does not relate to data privacy, please contact the aaaph customer support team via the live chat function available on the Platform at any time.