Privacy Policy

1Introduction and Scope

This Privacy Policy applies to all personal data collected by aha88 through our website (https://aha88.cam), mobile applications, customer service communications, and all other platforms where aha88 Services are offered. This policy describes:

• What personal information we collect from you;
• How and why we collect, use, and process your data;
• With whom we may share your information;
• How we protect your data through security measures;
• Your rights regarding your personal information;
• How to contact us with privacy concerns or requests.

aha88 operates as a data controller under Philippine law, meaning we determine the purposes and means of processing your personal data. We are committed to processing your information lawfully, fairly, and transparently in accordance with applicable data protection legislation.

By creating an Account with aha88, accessing our Platform, or using any of our Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with our privacy practices, please do not use aha88 Services.

2Information We Collect

aha88 collects various categories of personal information necessary to provide gaming services, comply with legal obligations, and improve user experience. The data we collect includes:

2.1 Information You Provide Directly

2.2 Information Collected Automatically

2.3 Information from Third Parties

We may receive personal data from third-party sources including payment processors (transaction confirmation and fraud screening data), game providers (gaming activity and technical logs), identity verification services (document authentication results), and publicly available sources (verification of information accuracy).

3How We Use Your Information

aha88 processes your personal data for specific, legitimate purposes in accordance with Philippine data protection law. We use your information to:

3.1 Provide Gaming Services

• Create, maintain, and authenticate your Account;
• Process deposits, withdrawals, and other financial transactions;
• Provide access to casino games, sports betting, and other gaming products;
• Calculate and credit winnings to your Account;
• Process bonus and promotional offers you participate in;
• Maintain accurate records of your gaming activity and transaction history.

3.2 Legal and Regulatory Compliance

• Verify your identity and age to ensure compliance with 21+ requirements;
• Comply with PAGCOR licensing conditions and regulatory reporting obligations;
• Fulfill anti-money laundering (AML) and counter-terrorism financing (CTF) requirements;
• Respond to legal requests from law enforcement and regulatory authorities;
• Detect, prevent, and investigate fraud, cheating, and terms violations;
• Maintain records as required by applicable Philippine gaming laws.

3.3 Security and Fraud Prevention

• Monitor Account activity for unauthorized access or suspicious behavior;
• Implement security measures to protect against cyber threats;
• Verify the legitimacy of transactions and prevent payment fraud;
• Enforce our Terms and Conditions and protect the integrity of gaming;
• Identify and prevent duplicate Accounts and bonus abuse.

3.4 Customer Service and Support

• Respond to your inquiries, complaints, and support requests;
• Provide technical assistance and troubleshoot Platform issues;
• Investigate and resolve disputes regarding gaming outcomes or transactions;
• Improve our customer service processes based on feedback.

3.5 Marketing and Communication

• Send promotional offers, bonuses, and special event notifications (with your consent);
• Provide personalized gaming recommendations based on your preferences;
• Notify you of important Account updates and Platform changes;
• Conduct customer satisfaction surveys and gather feedback.

3.6 Platform Improvement and Analytics

• Analyze usage patterns to improve Platform functionality and user experience;
• Conduct research and statistical analysis on gaming preferences;
• Test new features and optimize Platform performance;
• Identify technical issues and improve mobile compatibility.

3.7 Responsible Gaming

• Monitor gaming behavior for signs of problem gambling;
• Implement deposit limits and self-exclusion requests;
• Provide responsible gaming tools and intervention when necessary;
• Comply with responsible gaming obligations under PAGCOR regulations.

4Information Sharing and Disclosure

aha88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with specific third parties under the following circumstances:

4.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who assist in operating the aha88 Platform, including:

• Payment Processors: GCash, PayMaya, banks, and cryptocurrency payment gateways process your deposits and withdrawals;
• Game Providers: Pragmatic Play, PG Soft, JILI Gaming, Evolution Gaming, and other suppliers receive limited data necessary to provide gaming content;
• Identity Verification Services: Third-party KYC providers verify your identity documents and screen for fraud;
• Cloud Hosting Providers: Secure data centers store encrypted Account information and transaction records;
• Customer Support Tools: Live chat and helpdesk platforms manage customer service communications;
• Analytics Services: Website analytics tools help us understand Platform usage patterns.

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with Philippine data protection standards.

4.2 Legal and Regulatory Authorities

aha88 may disclose personal information to government agencies, law enforcement, and regulatory bodies when:

• Required by PAGCOR regulations or other applicable Philippine laws;
• Responding to valid legal requests, court orders, or subpoenas;
• Reporting suspicious transactions under anti-money laundering obligations;
• Cooperating with investigations into illegal activity or terms violations;
• Protecting the rights, property, or safety of aha88, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and Platform notice of any such change in ownership or control of your data.

4.4 With Your Consent

We may share your information with other third parties when you provide explicit consent for specific purposes, such as participating in third-party promotions or tournaments.

4.5 Aggregated and Anonymized Data

aha88 may share aggregated, anonymized data that does not identify individual users for industry analysis, research, marketing purposes, or public reporting. Such data cannot be used to identify you personally.

5Data Security and Protection

aha88 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

5.1 Technical Safeguards

• 256-bit SSL Encryption: All data transmitted between your device and aha88 servers is encrypted using industry-standard SSL/TLS protocols;
• Secure Data Storage: Personal information is stored on encrypted servers located in secure, access-controlled facilities;
• Firewall Protection: Multi-layer firewalls protect against unauthorized network access and cyber attacks;
• Regular Security Audits: Independent security experts conduct periodic vulnerability assessments and penetration testing;
• Intrusion Detection Systems: Automated monitoring detects and responds to potential security threats in real-time.

5.2 Access Controls

• Personal data is accessible only to authorized aha88 personnel who require it to perform their duties;
• Multi-factor authentication protects administrative access to sensitive systems;
• Role-based permissions ensure employees access only necessary information;
• All access to personal data is logged and monitored for suspicious activity.

5.3 Employee Training and Obligations

All aha88 employees with access to personal data receive mandatory training on data protection principles and are bound by confidentiality obligations. Breach of data security policies results in disciplinary action including termination.

5.4 Data Breach Response

In the unlikely event of a data breach affecting your personal information, aha88 will:

• Promptly investigate the nature and scope of the breach;
• Notify affected users within seventy-two (72) hours via email;
• Report the incident to the National Privacy Commission as required by law;
• Take immediate remedial measures to prevent further unauthorized access;
• Provide guidance on steps you can take to protect yourself.

6Data Retention and Deletion

aha88 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations.

6.1 Active Account Data

While your Account remains active, we retain all personal information, transaction records, and gaming history necessary to provide Services and maintain regulatory compliance.

6.2 Closed Account Data

After you close your Account, aha88 retains certain information for legal and regulatory purposes:

• Financial Records: Transaction history retained for five (5) years to comply with anti-money laundering regulations and tax reporting requirements;
• Identity Verification Documents: KYC records retained for five (5) years as required by PAGCOR;
• Gaming Activity Logs: Bet history and game outcomes retained for three (3) years for dispute resolution and regulatory audits;
• Communication Records: Customer service correspondence retained for two (2) years for quality assurance purposes.

6.3 Automated Deletion

Once retention periods expire, personal data is securely deleted or anonymized through automated processes. Marketing communications data is deleted within six (6) months of opt-out, unless legal obligations require longer retention.

6.4 Right to Erasure

You may request deletion of your personal data by contacting our Data Protection Officer. However, we may decline deletion requests if retention is required by law, necessary for pending legal claims, or needed to detect and prevent fraud.

7Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request confirmation of whether aha88 processes your personal data and to obtain copies of such data. You can access most Account information through your Account dashboard. For additional data, contact our Data Protection Officer.

7.2 Right to Rectification

You may update inaccurate or incomplete personal information through your Account settings or by contacting customer support. We will verify your identity before processing rectification requests.

7.3 Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, you withdraw consent, or you object to processing. This right is subject to legal retention obligations as described in Section 6.

7.4 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of promotional communications by clicking unsubscribe links in emails or adjusting preferences in your Account settings.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal but may impact our ability to provide certain Services.

7.7 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with subject line "Privacy Rights Request." We will respond within fifteen (15) business days and provide requested information within thirty (30) days. Identity verification is required for all privacy rights requests.

8Cookies and Tracking Technologies

aha88 uses cookies and similar tracking technologies to enhance user experience, maintain security, and analyze Platform performance.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality, session management, and security. These cannot be disabled without affecting Service availability;
• Performance Cookies: Collect anonymous usage statistics to help us improve Platform performance and identify technical issues;
• Functional Cookies: Remember your preferences, language settings, and Account customizations;
• Analytics Cookies: Gather aggregated data about visitor behavior to understand how users interact with our Platform.

8.2 Managing Cookies

You can control cookie settings through your browser preferences. However, disabling essential cookies may prevent you from accessing certain Platform features. Most browsers allow you to refuse cookies, delete existing cookies, or receive warnings before cookies are stored.

8.3 Third-Party Cookies

Some cookies are placed by third-party service providers (game providers, analytics tools). These third parties are bound by their own privacy policies and our contractual data protection requirements.

9International Data Transfers

Your personal information is primarily stored on servers located within the Philippines. However, some service providers may process data outside the Philippines. When international transfers occur, aha88 ensures appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities;
• Adequacy determinations confirming recipient countries provide sufficient data protection;
• Binding corporate rules for transfers within corporate groups;
• Your explicit consent for specific international transfers.

All international data transfers comply with requirements of the Data Privacy Act of 2012 and regulations issued by the National Privacy Commission.

10Children's Privacy

aha88 Services are strictly prohibited for individuals under twenty-one (21) years of age. We do not knowingly collect personal information from minors. Our age verification processes are designed to prevent underage Account creation.

If we become aware that we have inadvertently collected personal data from a minor, we will immediately delete such information and permanently close the Account. Parents or guardians who believe their child has provided personal information to aha88 should contact us immediately at [email protected].

11Changes to This Privacy Policy

aha88 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated through:

• Email notification to your registered email address;
• Prominent notice on the aha88 Platform homepage;
• In-app notifications when you log into your Account;
• Updated "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically. Continued use of aha88 Services after policy modifications constitutes acceptance of the updated terms. If you disagree with changes, your remedy is to close your Account before the changes take effect.

12Contact Information and Complaints

12.1 Data Protection Officer

For privacy-related inquiries, requests to exercise your rights, or concerns about how aha88 handles your personal data, contact our Data Protection Officer:

aha88 Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Rights Request"

We will acknowledge receipt of your inquiry within three (3) business days and provide a substantive response within fifteen (15) business days.

12.2 National Privacy Commission

If you believe aha88 has not adequately addressed your privacy concerns, you have the right to file a complaint with the National Privacy Commission of the Philippines:

National Privacy Commission
5th Floor, Philippine International Convention Center
Vicente Sotto Street, Pasay City, Metro Manila, Philippines
Website: privacy.gov.ph
Email: [email protected]