aah77 Privacy Policy

1.1 Controller. The data controller responsible for the personal data described in this Privacy Policy is aah77 (hereinafter "aah77," "we," "us," or "our"), operating the online gaming platform accessible at https://aah77.vip.

1.2 Scope. This Privacy Policy applies to all personal data collected, stored, used, disclosed, or otherwise processed by aah77 in relation to: (a) registered Members of the aah77 platform; (b) individuals who visit aah77.vip without registering; (c) individuals who communicate with aah77 via live chat, email, or other channels; and (d) former Members whose data aah77 retains for legal or regulatory purposes.

1.3 Philippine Jurisdiction. aah77 operates as a platform primarily serving users in the Republic of the Philippines. Accordingly, this Policy is drafted in accordance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as enforced by the National Privacy Commission (NPC) of the Philippines.

1.4 Third-Party Sites. aah77.vip may contain links to third-party platforms including, but not limited to, game providers' information pages. aah77 is not responsible for the privacy practices of those third-party sites. You should review the privacy policies of any third-party site you visit separately.

2.1 Registration Data. When you create an aah77 account, we collect the information you provide during the registration process, which may include:

• Full legal name;
• Date of birth (for age verification — you must be 21+);
• Philippine mobile number;
• Email address (where provided);
• Username and encrypted password;
• Residential address (where required for verification).

2.2 Identity Verification Data. To comply with anti-money laundering (AML), know-your-customer (KYC), and PAGCOR regulatory requirements, aah77 may request and process:

• Government-issued identification documents (e.g., passport, Philippine national ID, driver's license, SSS/GSIS card);
• Proof of address documents;
• Source of funds declarations;
• Selfie photographs for liveness verification, where applicable.

2.3 Financial Data. We collect data necessary to process your deposits and withdrawals, including GCash account identifiers, PayMaya account identifiers, bank account details (where used), and transaction records. We do not store full card numbers — payment card data is tokenized by our payment processor.

2.4 Usage and Gameplay Data. aah77 automatically collects data about your interaction with the platform, including game session logs, bet histories, login timestamps, IP addresses, device identifiers, browser type, and operating system. This data is used for operational, security, and responsible gaming purposes.

2.5 Communications Data. If you contact aah77 support via live chat or email, we retain records of those communications including the content of your messages, timestamps, and the support agent's responses.

2.6 Preference Data. Where you opt in to marketing communications, we track your interactions with those communications (e.g., email opens, link clicks) to improve relevance and personalization.

aah77 collects personal data through the following means:

• Directly from you: through account registration forms, identity verification submissions, payment forms, and support communications;
• Automatically: through cookies, web beacons, server logs, and similar tracking technologies when you use the aah77 platform (see Section 10);
• From third parties: including identity verification service providers, payment processors, fraud detection services, and, where permitted, credit reference agencies — solely for the purposes of verifying your identity and detecting fraud;
• From public sources: where legally permissible and where necessary for AML or sanctions screening compliance.

aah77 processes your personal data for the following specific purposes:

Under the Data Privacy Act of 2012, aah77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations to you under the Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with Philippine law, including AML obligations, KYC requirements, PAGCOR licensing conditions, and tax reporting;
• Legitimate interests: Processing for fraud detection, security monitoring, responsible gaming oversight, and platform improvement — where such interests do not override your fundamental privacy rights;
• Consent: Processing for marketing communications and certain optional analytics features, where you have given clear and specific consent that you may withdraw at any time.

6.1 Service Providers. aah77 shares personal data with third-party service providers who assist us in operating the platform. These include:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa network processors);
• Game content providers (e.g., JILI, PG Soft, Evolution, Pragmatic Play) — limited to session tokens and game result data necessary to deliver gameplay;
• Identity verification and KYC service providers;
• Fraud detection and anti-money laundering screening services;
• Customer support platform providers;
• Cloud hosting and infrastructure providers operating under appropriate data processing agreements.

All third-party service providers are required by contract to process your data only for the specified purpose and in accordance with aah77's data protection requirements.

6.2 Regulatory Disclosures. aah77 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts as required or permitted by applicable Philippine law. We will, where legally permitted to do so, notify you of such disclosures.

6.3 No Sale of Data. aah77 does not sell, rent, or lease your personal data to any third party for their independent marketing or commercial purposes. We do not participate in data broker arrangements.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of aah77's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any material change in the Privacy Policy applicable to your data.

7.1 Cross-Border Transfers. Some of aah77's third-party service providers — including certain game providers and cloud infrastructure services — may process data in jurisdictions outside the Philippines. Where such transfers occur, aah77 ensures that appropriate safeguards are in place to provide a comparable level of protection to that afforded under the Data Privacy Act of 2012.

7.2 Safeguards. Such safeguards may include standard contractual clauses approved by the National Privacy Commission, adequacy determinations, or binding corporate rules — as applicable to the specific transfer.

7.3 Player Rights. If you have concerns about the cross-border transfer of your personal data, you may contact our Data Protection Officer using the details in Section 15. We will provide further information about the specific safeguards applicable to your data upon request.

8.1 Retention Periods. aah77 retains personal data for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law:

• Account data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by Philippine AML legislation;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Anti-Money Laundering Act requirements;
• KYC documents: Retained for the duration of your account and for a minimum of five (5) years post-closure;
• Support communications: Retained for twelve (12) months from the date of the last interaction, unless retained longer for dispute resolution purposes;
• Marketing consent records: Retained for the duration of your active account and for a period sufficient to demonstrate compliance with consent requirements.

8.2 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with aah77's data disposal procedures. Anonymized data that can no longer be linked to an individual may be retained indefinitely for statistical and analytical purposes.

9.1 Technical Safeguards. aah77 implements a layered security architecture to protect your personal data, including:

• TLS 1.3 encryption for all data in transit between your device and aah77 servers;
• Encryption at rest for sensitive data fields including payment identifiers and identity document data;
• Role-based access controls limiting data access to personnel with a demonstrated operational need;
• Intrusion detection and anomaly monitoring systems;
• Regular penetration testing and vulnerability assessments;
• Multi-factor authentication requirements for administrative access to production systems.

9.2 Organisational Measures. aah77 maintains internal data protection policies, conducts staff training on data privacy obligations, and operates a Data Breach Response Plan. In the event of a personal data breach that poses a risk to your rights and freedoms, aah77 will notify the National Privacy Commission within the timeframe required by law, and will notify affected individuals without undue delay where required.

10.1 What Are Cookies. Cookies are small text files stored on your device when you visit aah77.vip. They allow the platform to recognize your browser, maintain your session state, and collect usage information. aah77 also uses similar technologies such as web beacons and local storage objects for equivalent purposes.

10.2 Types of Cookies Used.

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing you from using the platform.
• Functional cookies: Remembering your language preferences, login state ("Remember me"), and user interface settings.
• Analytics cookies: Collecting anonymized data on how visitors use the platform to help us improve performance, navigation, and game presentation.
• Marketing cookies: Where you have consented, tracking your engagement with promotional communications to personalize offers.

10.3 Cookie Management. You can manage cookie preferences through your browser settings. Disabling certain categories of cookies may limit the functionality of the aah77 platform. Instructions for managing cookies are available in your browser's help documentation.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aah77. Requests to exercise these rights may be submitted via live chat or by writing to our Data Protection Officer (see Section 15).

12.1 Opt-In Basis. aah77 will only send you promotional communications — including bonus offers, special events, and platform news — where you have given explicit consent during registration or at a later point through your account settings.

12.2 Withdrawal of Consent. You may withdraw your consent to receive marketing communications at any time by: (a) updating your communication preferences in your aah77 account settings; (b) clicking the unsubscribe link in any marketing email; or (c) contacting our support team via live chat. Withdrawal of marketing consent does not affect your ability to use the aah77 platform or receive service-related communications.

12.3 Transactional Communications. aah77 may send you non-promotional communications — including account activity alerts, security notifications, deposit and withdrawal confirmations, and responsible gaming reminders — regardless of your marketing communication preferences. These communications are essential to the service and cannot be opted out of while your account is active.

13.1 21+ Platform. aah77 is strictly an adult platform. No person under the age of twenty-one (21) years is permitted to register or use any aah77 service. We do not knowingly collect personal data from individuals under 21.

13.2 Discovery of Minor's Data. If aah77 becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will immediately suspend the relevant account, delete the data as quickly as practicable (subject to any legal reporting obligations), and, where appropriate, report the matter to PAGCOR.

13.3 Parental Responsibility. We encourage parents and guardians to take active steps to prevent minors from accessing gambling platforms. This includes using device-level parental controls and supervising online activity. If you believe a minor has created an aah77 account, please contact our support team immediately.

14.1 Right to Update. aah77 reserves the right to update or amend this Privacy Policy at any time. Updates will be posted on this page with a revised "Last Updated" date. Where changes are material — meaning they significantly affect how we use your data or your rights — we will notify you via your registered mobile number or email address before the changes take effect.

14.2 Continued Use. Your continued use of the aah77 platform following notification of a material change constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Policy, you should contact us to request account closure.

14.3 Historical Versions. Previous versions of this Privacy Policy are available upon written request to our Data Protection Officer. We retain prior versions for a minimum of three (3) years.

15.1 General Enquiries. For general questions about this Privacy Policy or your personal data, please contact the aah77 support team via live chat on aah77.vip (available 24/7, average response under 5 minutes) or by writing to:

aah77 Privacy Team
Email: [email protected]
(Email address shown as plain text only — not a clickable link)

15.2 Data Protection Officer. In accordance with the Data Privacy Act of 2012, aah77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. Privacy-specific requests, including requests to exercise data subject rights under Section 11, should be directed to the DPO via the email address above, clearly marked "Attention: Data Protection Officer."

15.3 Response Times. aah77 aims to acknowledge all privacy-related requests within three (3) business days and to provide a substantive response within thirty (30) calendar days. Complex requests may require up to sixty (60) calendar days, in which case we will notify you of the extension and the reason for it.