aha888 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by aha888 ("aha888," "we," "us," or "our"), the operator of the online gaming platform accessible at aha888.win. This Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information relating to players and visitors to our platform ("you" or "Data Subject").

aha888 is committed to protecting your privacy in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We are also guided by the principles of transparency, legitimate purpose, and proportionality in the processing of personal data.

By registering for an account with aha888 or by using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, you should refrain from using the aha888 platform.

2. Personal Data We Collect

aha888 collects the following categories of personal data from players and platform visitors:

aha888 does not intentionally collect sensitive personal information beyond what is necessary for identity verification, unless specifically required by PAGCOR regulations or Philippine law.

3. How We Collect Your Data

We collect personal data through the following channels:

• Direct Interactions: Information you provide when registering your aha888 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to surveys and promotions;
• Automated Technologies: Technical and usage data collected automatically as you interact with our platform, through cookies, server logs, and similar tracking technologies;
• Third-Party Sources: Identity and fraud-check data from KYC verification service providers; payment confirmation data from GCash, PayMaya, and banking partners; regulatory data from PAGCOR where required;
• Public Sources: Publicly available information used for fraud detection and identity verification purposes only.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, aha888 processes your personal data on the following legal bases:

• Performance of Contract: Processing necessary to provide you with the aha888 gaming services, manage your account, process transactions, and deliver customer support;
• Compliance with Legal Obligations: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (RA 9160) obligations, Data Privacy Act requirements, and other applicable Philippine laws;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics that do not override your fundamental privacy rights;
• Consent: Where we rely on your consent for specific processing activities — such as marketing communications — you may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

aha888 uses the personal data we collect for the following purposes:

• To create, verify, and administer your aha888 player account;
• To process deposits, withdrawals, and in-game transactions in Philippine Pesos;
• To fulfill our age verification and Know Your Customer (KYC) obligations under PAGCOR regulations;
• To comply with Anti-Money Laundering Act requirements and report suspicious transactions to the AMLC where mandated;
• To provide customer support and respond to your inquiries and complaints;
• To operate responsible gaming tools including deposit limits, self-exclusion management, and session monitoring;
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct;
• To improve, maintain, and secure the aha888 platform and its technical infrastructure;
• To send you transactional communications including account confirmations, OTPs, and security alerts;
• To send you promotional and marketing communications about aha888 offers, where you have consented or where permitted by law.

aha888 will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without your prior consent.

6. Disclosure & Sharing of Personal Data

6.1 Service Providers

aha888 may share your personal data with trusted third-party service providers who perform services on our behalf, including KYC verification providers, payment processors (GCash, PayMaya, and Philippine banking partners), cloud infrastructure providers, customer support systems, and fraud detection services. All service providers are contractually bound to process your data only as instructed by aha888 and in compliance with the Data Privacy Act.

6.2 Regulatory Authorities

aha888 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where required by law, court order, or regulatory mandate.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of aha888's business, personal data may be transferred to the relevant third party as part of the transaction, subject to equivalent privacy protections and notification to affected players.

6.4 No Sale of Data

aha888 does not sell, rent, or trade your personal data to any third party for their own independent commercial or marketing purposes.

7. Cookies & Tracking Technologies

aha888 uses cookies and similar client-side technologies (including local storage and session storage) to operate and improve the platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function, including maintaining your login session and security tokens. These cannot be disabled.
• Performance Cookies: Used to collect anonymized analytics about how players use aha888, helping us identify technical issues and improve user experience.
• Functionality Cookies: Remember your preferences (such as language settings) to provide a more personalized experience.

aha888 does not use third-party advertising or cross-site tracking cookies. You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies may impair your ability to log in and use the platform.

8. Data Retention

aha888 retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and operational obligations. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Financial Transaction Data: Retained for a minimum of five (5) years in compliance with AML record-keeping requirements;
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes;
• Technical and Log Data: Retained for up to twelve (12) months for security and fraud detection purposes.

After the applicable retention period expires, personal data is securely deleted or anonymized in a manner that prevents re-identification.

9. Data Security

aha888 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit between your device and our servers;
• AES-grade encryption for sensitive data stored at rest;
• Two-factor authentication (2FA) options for player accounts;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the aha888 platform;
• Incident response procedures for detecting and responding to data security breaches.

While aha888 takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aha888:

• Right to Be Informed: The right to know how your personal data is being processed;
• Right to Access: The right to obtain a copy of the personal data we hold about you;
• Right to Rectification: The right to correct inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to legal retention obligations;
• Right to Object: The right to object to specific processing activities, including direct marketing;
• Right to Data Portability: The right to receive your personal data in a structured, commonly-used format;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the contact details provided in Section 13 of this Policy. We will respond to verified requests within fifteen (15) days as required by Philippine law.

11. Children's Privacy — Strict 21+ Policy

aha888 is an online gambling platform strictly intended for adults aged 21 and above as mandated by PAGCOR regulations. We do not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If aha888 discovers or is notified that a player account has been registered by a person under 21 years of age, the account will be immediately closed, all funds will be returned to their source after identity verification, and all personal data associated with the account will be securely deleted in accordance with our data retention procedures and applicable law.

If you are a parent or guardian and believe that a minor has registered on aha888, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

aha888 reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, we will notify registered players by posting a prominent notice on the aha888 platform and, where practicable, by email or SMS to the contact details registered on your account.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the aha888 platform after any update to this Policy constitutes your acceptance of the revised terms.

13. Contact Our Data Protection Officer

aha888 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act. If you have any questions, concerns, or requests regarding this Policy or the processing of your personal data, please contact our DPO at:

[email protected] Data Protection Officer — aha888

Alternatively, you may raise a concern directly with aha888 customer support available 24/7 through the live chat system on the platform. For formal data privacy complaints, you may also contact the National Privacy Commission of the Philippines.