aaph Casino Privacy Policy

aaph Casino ("aaph," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at aaph.asia ("the Platform"). This Privacy Policy ("Policy") sets out in clear and accessible terms how aaph collects, uses, stores, discloses, and otherwise processes your personal data when you register for, access, or use any part of the aaph Casino services.

This Policy applies to all aaph players, registered account holders, and website visitors — including players accessing aaph from Metro Manila, Cebu, Davao, Quezon City, and anywhere else in the Philippines. By creating an aaph account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy is to be read in conjunction with aaph's Terms and Conditions, which are available at /terms-conditions, and our Responsible Gaming Policy, available at /responsible-gaming.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, aaph Casino is the personal information controller responsible for your personal data. aaph Casino is a PAGCOR-licensed online gambling operator operating within the jurisdiction of the Republic of the Philippines.

aaph Casino collects personal data that is necessary to provide our services, comply with legal and regulatory obligations, and maintain a safe and secure platform. The categories of personal data we collect include:

aaph does not collect sensitive personal information as defined under the Data Privacy Act (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by law or by a particular regulatory obligation, in which case you will be notified at the point of collection.

aaph collects personal data through the following means:

• Direct Collection: Data you provide when registering, completing KYC, making deposits or withdrawals, contacting support, responding to surveys, or entering promotions
• Automated Collection: Technical and behavioural data collected automatically via cookies, server logs, and similar technologies when you access or use the Platform (see Section 11)
• Payment Processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment partners when you initiate deposits or withdrawals
• Identity Verification Providers: Data received from third-party KYC and identity verification services engaged by aaph to confirm your identity and age
• Fraud Prevention Services: Risk signals and fraud indicators received from third-party anti-fraud and AML screening services
• Regulatory Bodies: Information received from PAGCOR or other competent authorities in connection with compliance obligations, self-exclusion registers, or investigations

aaph uses the personal data we collect for the following purposes:

• Account Registration and Management: Creating and maintaining your aaph account, verifying your identity and age, and managing your account settings and preferences
• Service Delivery: Enabling you to play casino games, place sports bets, participate in bingo, access promotions, and use all features of the aaph platform
• Payment Processing: Processing your deposits and withdrawals via GCash, Maya, and other supported Philippine payment methods; reconciling transactions; issuing refunds
• Legal and Regulatory Compliance: Fulfilling obligations under PAGCOR licensing conditions, the Data Privacy Act, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and other security threats
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling; administering deposit limits, self-exclusion requests, and cooling-off periods
• Customer Support: Responding to your queries, resolving disputes, and providing assistance through aaph's 24/7 support channels
• Communications: Sending you transactional notifications (deposit confirmations, security alerts, account updates) and, where you have consented, promotional communications about aaph offers
• Platform Improvement: Analysing aggregated usage data to improve the performance, design, and features of the aaph platform

Under the Data Privacy Act of 2012, aaph processes your personal data on the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and aaph — including account creation, game provision, and payment processing
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, AML obligations, KYC mandates, PAGCOR self-exclusion registries, and other applicable Philippine laws
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where aaph's interests do not override your rights
• Consent: Processing for optional purposes such as marketing communications, where aaph has obtained your prior, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing

aaph Casino does not sell your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• PAGCOR and Regulatory Authorities: As required by aaph's licensing conditions, anti-money laundering regulations, and any lawful order from a competent Philippine authority
• Payment Service Providers: GCash, Maya, and banking partners (BPI, BDO, Metrobank) to process your deposits and withdrawals. Each provider operates under their own privacy policy
• KYC and Identity Verification Providers: Third-party services engaged to verify your identity and age as required by PAGCOR and AML compliance
• Fraud Prevention and AML Service Providers: Services that assist aaph in detecting fraudulent transactions and suspicious activity
• Game Software Providers: To the minimum extent necessary to provide game functionality. Game providers do not receive your financial data
• IT and Infrastructure Providers: Cloud hosting, database management, and security services operating under data processing agreements that obligate them to protect your data
• Professional Advisors: Legal, accounting, and audit firms, subject to professional confidentiality obligations, where necessary for aaph's legal and compliance activities

aaph retains your personal data for as long as your account remains active and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act. Financial transaction records may be retained for up to ten (10) years as required by applicable AML regulations.

Where personal data is no longer required for the purposes for which it was collected, and no legal obligation requires its continued retention, aaph will securely delete or anonymise the data. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

aaph implements and maintains appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and aaph's servers
• Encryption at rest for sensitive personal and financial data stored in aaph's databases
• Cryptographic hashing of account passwords — plaintext passwords are never stored
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need
• Two-factor authentication options for player account access
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified security professionals
• Incident response procedures for detecting, containing, and reporting personal data breaches in accordance with NPC requirements

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying aaph immediately if you suspect any unauthorised access to your account.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by aaph:

• Right to be Informed: The right to be notified of how your personal data is collected, used, and processed — fulfilled through this Policy
• Right of Access: The right to obtain a copy of the personal data aaph holds about you and information about how it is processed
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. Many details can be updated directly in your aaph account settings
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to aaph's legal retention obligations
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format
• Right to Object: The right to object to the processing of your personal data for legitimate interests or direct marketing purposes
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting prior processing
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe aaph has processed your data unlawfully

To exercise any of the above rights, please contact aaph's Data Protection Officer by writing to [email protected]. aaph will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or as otherwise required by the Data Privacy Act.

aaph Casino uses cookies and similar tracking technologies to operate and improve the Platform, ensure platform security, and (where you have consented) personalise your experience. A "cookie" is a small data file stored on your device by your browser when you visit a website.

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management, login state, and security cookies. Cannot be disabled without affecting core functionality
• Functional Cookies: Remember your preferences such as language settings and game display options. Improve your experience but are not essential
• Analytics Cookies: Collect aggregated and anonymised data about how users interact with the Platform (pages visited, time on site, error events). Used to improve platform performance. No advertising profiles are built from this data
• Security Cookies: Support aaph's fraud detection and account protection systems by identifying unusual access patterns or device anomalies

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the aaph Platform from functioning correctly. aaph does not use third-party advertising or retargeting cookies on the Platform.

aaph Casino is strictly for adults aged 21 years and above, in accordance with PAGCOR regulations. aaph does not knowingly collect or process personal data belonging to individuals under the age of 21. All account registrations are subject to age verification.

If aaph discovers or is notified that it has collected personal data from a person under 21 years of age, aaph will promptly suspend the relevant account, delete the associated personal data to the extent legally permissible, and report the incident to PAGCOR as required by our licensing conditions. If you have reason to believe that a minor has registered an account on aaph, please contact our support team immediately via live chat.

aaph Casino reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or changes to our services. When material changes are made, aaph will notify registered players via email or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the aaph platform following the publication of an updated Policy constitutes your acceptance of the revised terms, subject to your rights under the Data Privacy Act.

If you have any questions, concerns, or requests relating to this Privacy Policy or aaph's handling of your personal data, please contact us through the following channels:

• Live Chat Support: Available 24/7 via the aaph platform — fastest response for general inquiries
• General Support Email: [email protected] (plain text — not a link)
• Data Protection Officer: [email protected] (plain text — not a link) — for formal data subject requests, complaints, or privacy-specific inquiries

If you are not satisfied with aaph's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act and can be reached through official NPC channels.