1. Introduction
This Privacy Policy ("Policy") is issued by ah888 ("ah888," "we," "us," or "our") and applies to all personal data collected through the ah888 online gaming platform at ah888.asia and any associated mobile interfaces, applications, customer support channels, and promotional communications (collectively, the "Platform").
ah888 is committed to protecting the privacy and personal data of every Filipino player who uses our services. This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.
By registering an account on ah888 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not create an account or continue using the Platform.
2. Personal Data We Collect
ah888 collects the following categories of personal data in connection with the registration, verification, and operation of your account:
2.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identification
- Date of birth (for age verification — players must be 21 or above)
- Philippine mobile number and email address
- Residential address and city (e.g., Manila, Cebu, Davao, Quezon City, Makati)
- Government-issued ID number (PhilSys ID, passport, driver's license, or UMID)
2.2 Financial Data
- GCash or Maya account number linked to your ah888 wallet
- Bank account details for BPI, BDO, or UnionBank withdrawals
- Deposit and withdrawal transaction history in Philippine Pesos (PHP)
- Source of funds declarations where required by AML compliance procedures
2.3 Gaming Activity Data
- Game session logs, wager amounts, game selections, and outcome history
- Bonus and promotional activity records
- Responsible gaming tool usage (deposit limits, self-exclusion requests)
2.4 Technical and Usage Data
- IP address, device type, operating system, and browser information
- Login timestamps, session duration, and navigation behaviour on the Platform
- Geolocation data (city/region level, not precise GPS) where permitted by your device settings
- Cookies, session tokens, and similar tracking technologies (see Section 10)
2.5 Communications Data
- Records of live chat conversations, support tickets, and email correspondence with ah888
- Responses to surveys, promotions, or feedback requests
3. How We Collect Your Data
ah888 collects personal data through the following means:
- Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
- Automated collection: Technical data collected automatically as you use the Platform, including cookies, server logs, device fingerprinting, and analytics tools.
- Third-party sources: Identity verification data from KYC/AML service providers; payment confirmation data from GCash, Maya, BPI, BDO, and other payment processors; fraud prevention data from licensed screening services.
- Regulatory sources: Where required by applicable Philippine law, information received from PAGCOR, the NPC, or law enforcement agencies.
4. How We Use Your Personal Data
ah888 uses your personal data for the following purposes:
- Account creation and management: To register your ah888 account, verify your identity, and maintain your account records.
- Service delivery: To provide access to casino games, sports betting, live dealer tables, sabong, bingo, keno, and all other Platform features.
- Payment processing: To facilitate deposits and process GCash, Maya, and bank withdrawals in PHP.
- Legal compliance: To fulfil our obligations under the Data Privacy Act of 2012, PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA), and other applicable Philippine legislation.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, and unauthorized access.
- Responsible gaming: To monitor gaming patterns, identify at-risk players, and enforce self-exclusion and deposit limit requests.
- Customer support: To respond to your inquiries and resolve account-related issues through our 24/7 live chat and email support channels.
- Marketing communications: To send you relevant promotions, bonus offers, and platform updates — only with your prior consent, and only through channels you have opted into. You may unsubscribe at any time.
- Platform improvement: To analyse usage data and improve the ah888 platform, game selection, and user experience.
ah888 does not use your data for automated decision-making that produces legal or similarly significant effects without human review, except for fraud scoring systems which are subject to manual oversight.
5. Legal Basis for Processing
Under the Data Privacy Act of 2012, ah888 processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to perform our obligations to you under the ah888 Terms & Conditions, including account management and payment processing.
- Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, NPC directives, and other applicable Philippine law.
- Legitimate interests: Processing for fraud prevention, platform security, and improvement of our services, where these interests do not override your fundamental privacy rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, freely-given, specific, and informed consent.
6. Data Sharing and Disclosure
ah888 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:
- Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment partners — solely to process your financial transactions.
- KYC and AML service providers: Licensed identity verification and compliance screening providers operating under binding confidentiality obligations.
- Game software providers: Licensed game developers whose platforms power ah888's slot, live casino, and sports betting products — limited to session and outcome data required for game operation.
- IT and infrastructure providers: Cloud hosting, cybersecurity, and technical service providers operating under strict data processing contracts.
- Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the AMLC (Anti-Money Laundering Council), and other Philippine government agencies where required by law.
All third-party service providers engaged by ah888 are contractually bound to process personal data only for the specified purpose and in compliance with the Data Privacy Act of 2012.
7. Data Retention
ah888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:
- Active account data: Retained for the duration of your account's active status plus five (5) years following account closure, in compliance with AMLA record-keeping requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
- KYC documents: Retained for five (5) years following the end of the business relationship, or longer if required by law.
- Support communications: Retained for two (2) years from the date of the last correspondence.
- Marketing consent records: Retained until consent is withdrawn, plus one (1) year for audit purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.
8. Data Security
ah888 implements industry-standard technical and organisational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and ah888 servers
- Encryption of sensitive data fields (passwords, payment details) at rest using AES-256
- Role-based access controls limiting employee access to personal data on a strict need-to-know basis
- Regular third-party penetration testing and vulnerability assessments
- Intrusion detection and real-time security monitoring systems
- Data breach response procedures with mandatory NPC notification within 72 hours of discovery of a breach affecting your rights
While ah888 takes all reasonable precautions, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your ah888 account credentials.
9. Your Data Rights Under Philippine Law
As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ah888:
- Right to be informed: The right to know what personal data ah888 collects about you and how it is used.
- Right of access: The right to request a copy of the personal data we hold about you.
- Right to rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to erasure: The right to request deletion of your personal data, subject to applicable legal retention obligations.
- Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to object: The right to object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent: The right to withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of prior processing.
- Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.
To exercise any of the above rights, please contact the ah888 Data Protection Officer via the support channels listed in Section 14. We will respond to verified requests within fifteen (15) business days.
10. Cookies and Tracking Technologies
ah888 uses cookies, web beacons, and similar technologies to operate the Platform and improve your experience. The categories of cookies we use include:
- Strictly necessary cookies: Required for the Platform to function — session authentication, security tokens, and load balancing. These cannot be disabled.
- Performance and analytics cookies: Used to analyse how players navigate the Platform, identify technical errors, and measure the effectiveness of features — using anonymised aggregate data.
- Functional cookies: Store your preferences such as language settings, preferred game categories, and display options.
- Marketing cookies: Used only with your explicit consent to deliver relevant promotional content within the ah888 Platform.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair Platform functionality.
11. Children's Privacy
The ah888 Platform is strictly intended for adults aged 21 years and above, in compliance with applicable Philippine gambling laws and PAGCOR regulations. ah888 does not knowingly collect personal data from individuals under the age of 21. If we discover that a minor has created an account or submitted personal data, we will immediately close the account, forfeit any associated balance in accordance with our Terms & Conditions, and delete the personal data in question. If you believe a minor has registered on ah888, please contact our support team immediately.
12. Third-Party Services and External Links
The ah888 Platform may reference or integrate third-party services, including payment gateways, game providers, and analytics platforms. These third parties operate under their own privacy policies, and ah888 is not responsible for the data practices of external providers. We contractually require all third-party service providers to maintain data protection standards consistent with the Data Privacy Act of 2012.
13. Amendments to This Policy
ah888 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email or prominent on-Platform notification at least seven (7) days before taking effect. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.
14. Contact and Data Protection Officer
For questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by ah888, please contact us through the following channels:
- Live Chat: Available 24/7 via the ah888 Platform
- Email (Data Privacy): [email protected]
Please mark data privacy inquiries clearly in your message subject line. Identity verification will be required before any account-specific data is disclosed or actions are taken. We aim to respond to all privacy-related requests within fifteen (15) business days.