aha88 Privacy
Policy

1 Introduction

This Privacy Policy ("Policy") describes how aha88 ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects the personal information of users ("you," "the Player") who access or use the aha88 online gaming platform at aha88.app and any associated mobile applications or services operated under the aha88 brand.

aha88 is committed to protecting the privacy and personal data of all its users, particularly Filipino players whose data is governed by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). We take our obligations under this law seriously and have designed our data practices to be fully compliant.

By registering an account on aha88, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the aha88 platform.

This Policy should be read alongside our Terms and Conditions, which govern your use of the aha88 platform as a whole.

2 Personal Data We Collect

aha88 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati)
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (Philippine passport, SSS ID, UMID, driver's license, PhilSys national ID)
• Proof of address documents (utility bills, bank statements dated within three months)
• Selfie or live photo for identity matching purposes
• Source of funds documentation where required by AML regulations

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records in Philippine Peso (PHP / ₱)
• Payment method details (GCash account reference, PayMaya reference, BPI, BDO, or Metrobank account details — stored in tokenized form only)
• Betting history, game activity logs, and account balance records
• Bonus and promotion redemption history

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps, login history, and platform activity logs
• Cookie identifiers and similar tracking technologies

2.5 Communications Data

• Records of your communications with our customer support team via live chat or email
• Responses to surveys, feedback forms, or promotional communications
• Responsible gaming tool settings and self-exclusion requests

3 How We Collect Your Data

aha88 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the aha88 platform.
• From third-party service providers — including identity verification services, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, and analytics providers, where necessary to deliver our services.
• From regulatory bodies — where we are required by PAGCOR or other competent authorities to obtain or verify information about you.

4 How We Use Your Personal Data

aha88 uses your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, identity data
Age and identity verification (21+ compliance)	KYC documents, date of birth
Processing deposits and withdrawals	Financial data, payment method details
Fraud prevention and AML compliance	Transaction data, IP address, KYC data
Delivering gaming services and bonuses	Account data, betting history, bonus records
Customer support	Communications data, account data
Responsible gaming tools	Betting history, session data, self-exclusion records
Platform improvement and analytics	Technical data, usage data (anonymized where possible)
Marketing communications (with consent)	Email address, preferences, promotional history
Legal and regulatory compliance	All categories as required by applicable law

aha88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, aha88 processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform our contract with you (i.e., to provide the gaming services you have registered for).
• Legal obligation — processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AML obligations, and NPC data privacy rules.
• Legitimate interests — processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent — for optional processing activities such as marketing communications, you have given your explicit consent, which you may withdraw at any time.

6 Data Sharing & Disclosure

aha88 does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

• Service providers: We share data with trusted third-party service providers who assist us in operating the platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, fraud detection services, cloud hosting providers, and customer support tools. These providers are contractually bound to process your data only on our instructions and in accordance with applicable privacy law.
• Regulatory authorities: We may disclose your data to PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities where required by law or in response to a lawful request.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
• With your consent: We may share your data with third parties in any other circumstances where you have given your explicit prior consent.

7 Cookies & Tracking Technologies

aha88 uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game history, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the aha88 platform so we can improve performance and user experience. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used only with your consent to deliver relevant promotional content about aha88 offers and features.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the aha88 platform. For full details on the cookies we use, please refer to our Cookie Notice, available within your account settings.

8 Data Retention

aha88 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Communications data: Retained for up to two (2) years from the date of the communication, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymized or deleted.

When your personal data is no longer required, aha88 will securely delete or anonymize it in accordance with our data disposal procedures.

9 Data Security

aha88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Two-factor authentication (2FA) available for all player accounts to prevent unauthorized access.
• Tokenization of payment method details so that full financial account numbers are never stored on our servers.
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

While aha88 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorized access to your account.

10 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aha88:

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy. We will respond to all verified requests within thirty (30) days, as required by the Data Privacy Act. We may need to verify your identity before processing your request.

11 Children & Minors

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to aha88, please contact us immediately at the details provided in Section 14. We will take prompt action to investigate and, where confirmed, delete the data and close the account.

12 International Data Transfers

aha88 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud hosting infrastructure and KYC verification services — may process data in other countries. Where such international transfers occur, aha88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012.

These safeguards may include contractual clauses that require the recipient to protect your data to the same standard as required in the Philippines, or reliance on the recipient's certification under a recognized data protection framework. You may request information about the specific safeguards in place for any international transfer by contacting our DPO.

13 Updates to This Privacy Policy

aha88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least seven (7) days before the changes take effect, where reasonably practicable.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how aha88 protects your personal data. Your continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the changes.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way aha88 handles your personal data, please contact our Data Protection Officer (DPO) directly. Our DPO is responsible for overseeing aha88's compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy.

You can reach our support and DPO team via live chat inside your aha88 account dashboard, available 24 hours a day, 7 days a week. Our Filipino and English-speaking agents are always ready to assist players from Manila, Cebu, Davao, Quezon City, Makati, and across the Philippines.

For written privacy-related inquiries, our contact email is: privacy@aha88.app

Please include your registered account username, a clear description of your request or concern, and any relevant supporting information. We aim to acknowledge all privacy-related inquiries within two (2) business days and to resolve them within thirty (30) days as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.