aha 88 Casino Privacy Policy

aha 88 Casino operates the online gaming platform accessible at aha88.club, offering casino games, live dealer tables, slots, bingo, dice, and related entertainment services to players in the Philippines. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), aha 88 acts as the Personal Information Controller in respect of the personal data it collects from users of the platform.

aha 88 is committed to handling your personal data responsibly, transparently, and in full compliance with RA 10173 and its Implementing Rules and Regulations, as well as any applicable PAGCOR data governance requirements. Our designated Data Protection Officer (DPO) oversees all data privacy matters and can be contacted using the details provided in Section 15 of this Policy.

aha 88 collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

aha 88 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, religious beliefs, or political affiliations) unless specifically required by law or regulation. Where such data is incidentally disclosed, it will be handled with the highest level of protection.

aha 88 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the aha 88 platform, including through cookies, log files, and similar tracking technologies (see Section 9).
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, and banking partners.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with our licensing and compliance obligations.

aha 88 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your aha 88 account, including processing deposits and withdrawals in Philippine Peso (₱).
• Identity verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• Legal and regulatory compliance: To fulfil our obligations under RA 10173, the Anti-Money Laundering Act (AMLA), PAGCOR licensing conditions, and other applicable Philippine laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gaming activity and apply responsible gaming tools, including deposit limits, session timers, and self-exclusion, in accordance with our Responsible Gaming Policy.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have given your consent or where permitted by applicable law. You may opt out at any time.
• Platform improvement: To analyse usage patterns, conduct research, and improve the functionality, security, and user experience of the aha 88 platform.

Under the Philippine Data Privacy Act of 2012, aha 88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your aha 88 account and provide gaming services.
• Legal obligation: Processing required to comply with Philippine law, including KYC/AML obligations, PAGCOR regulatory requirements, and tax reporting.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

aha 88 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with Philippine anti-money laundering regulations.
• Payment processors: GCash, PayMaya (Maya), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or regulatory obligation.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform technology partners who process data on our behalf under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
• Law enforcement: Philippine law enforcement agencies, where aha 88 is legally required or permitted to disclose data in connection with a criminal investigation or court order.

All third parties with whom aha 88 shares personal data are required to handle that data in accordance with RA 10173 and to implement appropriate technical and organisational security measures.

aha 88 primarily stores and processes your personal data within the Philippines. In certain circumstances — for example, where we use cloud infrastructure or technology partners with servers located outside the Philippines — your data may be transferred to and processed in other countries.

Where such international transfers occur, aha 88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173. These safeguards may include contractual data transfer agreements, standard contractual clauses, or transfers to countries recognised by the NPC as providing adequate data protection.

aha 88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR requirements and the Anti-Money Laundering Act.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and tax regulations.
• Gaming activity data: Retained for three (3) years from the date of each gaming session, for responsible gaming monitoring and dispute resolution purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account and for one (1) year following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, aha 88 will securely delete or anonymise your personal data in accordance with our data disposal procedures.

aha 88 uses cookies and similar technologies (such as local storage and session tokens) on the aha88.club platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and improve your experience.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences (e.g., language, game settings) to personalise your experience. These are enabled by default but can be disabled in your browser settings.
• Analytics cookies: Help us understand how players use the platform so we can improve it. Used only with your consent. No data is shared with external advertising networks.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the aha 88 platform.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by aha 88:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. aha 88 will respond to all verified data subject requests within fifteen (15) business days, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

The aha 88 Casino platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. aha 88 does not knowingly collect personal data from individuals under the age of 21.

If aha 88 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and return any deposited funds in accordance with our Terms & Conditions. If you believe a minor has registered on aha 88, please contact us immediately at the details provided in Section 15.

aha 88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the aha 88 platform.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) options for account access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls ensuring that aha 88 staff can only access personal data necessary for their specific job function.
• Comprehensive staff training on data privacy and security obligations under RA 10173.
• A documented data breach response procedure, including NPC notification within 72 hours of discovering a breach that poses a real risk of serious harm.

While aha 88 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your aha 88 login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

The aha 88 platform may contain links to third-party websites or services — for example, payment provider portals such as GCash or PayMaya. This Privacy Policy applies solely to the aha 88 platform and does not cover the data practices of any third-party websites or services.

aha 88 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the aha 88 platform.

aha 88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered account holders via email or a prominent notice on the aha 88 platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the aha 88 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or aha 88's data practices, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing aha 88's compliance with RA 10173 and is your primary point of contact for all data privacy matters.

You may also submit a formal complaint or enquiry to the National Privacy Commission of the Philippines if you believe your data privacy rights under RA 10173 have been violated and your concern has not been adequately addressed by aha 88.