aaph Privacy Policy

This Privacy Policy is issued by aaph ("aaph," "we," "us," or "our"), the operator of the online casino platform accessible at aaph.net. aaph acts as the data controller in respect of personal data collected through the platform from players based in the Philippines.

aaph is committed to protecting the privacy and security of its players and operates in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected through the aaph website, mobile-optimized platform, customer support channels, and any other services provided under the aaph brand. By creating an account or continuing to use the aaph platform, you acknowledge that you have read and understood this Privacy Policy.

aaph collects only the personal data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of personal data we may collect include:

2.1 Identity Data

Full legal name, date of birth, nationality, and copies of government-issued identification documents (such as a PhilSys National ID, passport, driver's license, SSS ID, or UMID card) provided during account registration and KYC verification.

2.2 Contact Data

Email address, Philippine mobile number, and residential address (including barangay, city or municipality, and province). This information is used to manage your account, send transaction notifications, and communicate important service updates.

2.3 Financial Data

Payment method details including GCash mobile number, PayMaya account reference, BPI, BDO, Metrobank, or UnionBank account details (last four digits only), transaction history, deposit and withdrawal records, and account balances. Full payment credentials are never stored on aaph servers.

2.4 Technical & Usage Data

IP address, device type and identifiers, browser type and version, operating system, session duration, pages visited, games played, bet history, and platform interaction logs. This data is collected automatically when you access the aaph platform.

2.5 Communications Data

Records of your communications with aaph customer support, including live chat transcripts, support ticket history, and any feedback or complaints submitted through the platform.

aaph collects personal data through the following methods:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the aaph platform (see Section 7 on Cookies);
• From third-party service providers — such as payment processors (GCash, PayMaya, BPI, BDO), identity verification agencies, and fraud prevention partners, who may share relevant data with us to fulfill our legal and regulatory obligations;
• From publicly available sources — where permitted by applicable law, including public records and databases maintained by Philippine government agencies.

aaph uses the personal data we collect for the following specific purposes:

• Account creation and management — to register your player account, verify your identity, and maintain accurate account records;
• Age and eligibility verification — to confirm that you are at least 21 years old and legally permitted to use the aaph platform under Philippine law;
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, and to maintain accurate financial records;
• Regulatory compliance — to fulfill our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorized account access, and other illegal conduct;
• Customer support — to respond to your inquiries, resolve disputes, and improve our support services;
• Platform improvement — to analyze usage patterns, identify technical issues, and enhance the overall quality of the aaph gaming experience;
• Marketing communications — to send you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, aaph relies on the following legal bases for processing your personal data:

• Contractual necessity — processing is required to perform the contract between you and aaph (i.e., to operate your player account and deliver gaming services);
• Legal obligation — processing is necessary to comply with applicable Philippine laws, including PAGCOR licensing requirements, the AMLA, and the Data Privacy Act;
• Legitimate interests — processing is necessary for aaph's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental privacy rights;
• Consent — for non-essential processing activities such as marketing communications and the use of non-essential cookies, aaph relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

aaph does not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

6.1 Trusted Service Providers

We share data with carefully selected third-party service providers who assist us in operating the aaph platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), identity verification providers, fraud detection services, cloud infrastructure providers, and customer support tools. All service providers are contractually bound to handle your data securely and only for the purposes specified by aaph.

6.2 Regulatory Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where we are legally required to do so, or where disclosure is necessary to protect the integrity of the gaming ecosystem and the safety of players.

6.3 Legal Proceedings

aaph may disclose personal data to law enforcement agencies, courts, or other legal authorities where required by a valid legal order, court order, or subpoena issued under Philippine law.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of aaph's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this policy will continue to apply.

aaph uses cookies and similar tracking technologies to enhance your experience on the platform, ensure security, and analyze platform performance. The types of cookies we use include:

You can manage your cookie preferences through your browser settings. Please note that disabling essential or security cookies may prevent you from accessing certain features of the aaph platform.

aaph retains your personal data for as long as is necessary to fulfill the purposes described in this policy, and in accordance with our legal and regulatory obligations under Philippine law. The following general retention periods apply:

• Account data and KYC records — retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the AMLA;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, in compliance with the AMLA and Bureau of Internal Revenue (BIR) requirements;
• Customer support communications — retained for two (2) years from the date of the last interaction;
• Technical and usage logs — retained for twelve (12) months, after which they are automatically deleted or anonymized;
• Marketing consent records — retained for the duration of your consent and for two (2) years after withdrawal of consent, for compliance documentation purposes.

After the applicable retention period expires, aaph will securely delete or permanently anonymize your personal data so that it can no longer be associated with you.

aaph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the aaph platform;
• Encrypted data storage — all personal and financial data is stored in encrypted form on secure, access-controlled servers;
• Multi-factor authentication options for player accounts to prevent unauthorized access;
• Firewalls and intrusion detection systems to monitor and protect the platform perimeter;
• Role-based access controls ensuring that only authorized aaph personnel with a legitimate need can access player data;
• Regular security audits and penetration testing conducted by independent cybersecurity professionals;
• Staff training on data protection best practices and the requirements of the Data Privacy Act of 2012.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by aaph:

To exercise any of these rights, please contact the aaph Data Protection Officer using the contact details in Section 14. aaph will respond to all valid data rights requests within fifteen (15) calendar days of receipt, as required by the NPC.

The aaph platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing online casino gaming. aaph does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account or provided personal data to aaph without your consent, please contact us immediately using the details in Section 14. We will investigate the matter promptly and take appropriate action, including closing the account and deleting any associated data.

Some of aaph's service providers and technology partners may be located outside of the Philippines. Where your personal data is transferred to a country that may not provide the same level of data protection as Philippine law, aaph will take all necessary steps to ensure that your data remains protected to the standard required by the Data Privacy Act of 2012.

These steps may include entering into data processing agreements that incorporate the standard contractual clauses recognized by the National Privacy Commission, or ensuring that the recipient country provides adequate data protection guarantees.

aaph will not transfer your personal data to a third country without first ensuring that appropriate safeguards are in place and that the transfer is authorized under applicable Philippine data protection law.

aaph may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or enhancements to our platform. When material changes are made, we will notify you by posting a prominent notice on the aaph platform and, where appropriate, by sending a notification to your registered email address.

The updated Privacy Policy will take effect on the date specified in the notice. Your continued use of the aaph platform after the effective date constitutes acceptance of the revised policy. If you do not agree with the changes, you should cease using the platform and close your account before the new policy takes effect.

The "Last Updated" date at the top of this document always reflects the most recent revision. We encourage you to review this page periodically to stay informed about how aaph protects your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aaph handles your personal data, please contact our Data Protection Officer (DPO):

• Live Chat: Available 24/7 directly on the aaph platform — the fastest way to reach our support and privacy team;
• Email: privacy@aaph.net — for formal data rights requests, privacy inquiries, and complaints.

aaph will acknowledge all privacy-related inquiries within 72 hours and will respond in full within fifteen (15) calendar days. For formal data rights requests, we may require you to verify your identity before processing the request.

If you are not satisfied with aaph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.