aha88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes the personal data practices of aha88 ("aha88," "we," "us," "our"), the operator of the online gaming platform accessible at https://aha88.asia. It applies to all personal data collected from individuals ("Data Subjects," "you," "players") who interact with the aha88 Platform, whether through account registration, gameplay, customer support, payment processing, or any other means.

aha88 takes your privacy seriously. We handle your personal data only for the purposes described in this Policy, only for as long as necessary, and with appropriate safeguards in place. This Policy should be read in conjunction with aha88's Terms & Conditions, which are available at /terms-conditions.

This Policy was last reviewed and updated in June 2026. We encourage you to review it periodically for any changes.

2. Data Controller

aha88 acts as the Data Controller in respect of the personal data collected from players and visitors to the Platform. As Data Controller, aha88 determines the purposes for which and the means by which personal data is processed, in accordance with the Data Privacy Act of 2012 and the directives of the National Privacy Commission of the Philippines.

aha88 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable Philippine data privacy law. For data-related enquiries, please contact us at the details listed in Section 15 of this Policy.

3. Personal Data We Collect

aha88 collects personal data from you in the following categories, depending on how you interact with the Platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine Passport, UMID, PhilSys National ID, SSS ID). This data is collected during account registration and KYC verification.
• Contact Data: Philippine mobile phone number, email address, and residential address. These are used for account communication, OTP delivery, and withdrawal processing.
• Financial Data: GCash wallet number, Maya account details, BPI or BDO bank account number, and USDT wallet address (for cryptocurrency transactions). aha88 does not store full payment card numbers.
• Transaction Data: Records of all deposits, withdrawals, bonus claims, bets placed, game results, and associated amounts in Philippine Peso (PHP).
• Technical Data: IP address, device type, operating system, browser type, screen resolution, and session duration. This data is collected automatically when you access the Platform.
• Usage Data: Information about how you navigate and use the Platform, including game history, session frequency, login timestamps, and feature interactions.
• Communications Data: Records of your interactions with aha88's customer support team, including live chat transcripts and email correspondence.
• Verification Data: Photographs of government-issued identification documents and selfie images submitted during the KYC verification process.

4. How We Use Your Personal Data

aha88 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your aha88 player account, including authentication and identity verification.
• Service Delivery: Enabling access to games, processing deposits and withdrawals, and administering bonuses and promotional offers.
• Regulatory Compliance: Meeting aha88's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws — including filing Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) where required.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling and administering self-exclusion, deposit limit, and cooling-off requests.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account compromise, collusion, and other prohibited conduct.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates via SMS or email — only where you have given your consent or where permitted by applicable law. You may opt out at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game selection.

5. Legal Basis for Processing

aha88 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable lawful bases for aha88's processing activities are:

• Consent: Where you have provided clear and informed consent, such as for marketing communications or optional features.
• Contractual Necessity: Where processing is necessary to perform the contract between you and aha88, including account creation, payment processing, and service delivery.
• Legal Obligation: Where processing is required to comply with aha88's obligations under Philippine law, including PAGCOR regulations, the AMLA, and NPC directives.
• Legitimate Interests: Where processing is necessary for aha88's legitimate interests, including fraud prevention, security monitoring, and platform improvement — provided those interests are not overridden by your data protection rights.

6. Cookies & Tracking Technologies

The aha88 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyse Platform usage. The types of cookies used on aha88 include:

• Essential Cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without impacting Platform functionality.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This helps aha88 identify performance issues and improve the user experience.
• Preference Cookies: Store your Platform preferences, such as language settings and game lobby view configurations.

aha88 does not use third-party advertising cookies or share cookie data with advertising networks. You may manage your cookie preferences through your browser settings; however, disabling essential cookies may affect your ability to use certain Platform features.

7. Sharing Your Personal Data

aha88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly as necessary and subject to appropriate data protection agreements:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory directive.
• Payment Processors: GCash (GXI/Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Game Providers: Licensed game providers whose content is available on the aha88 Platform (including Evolution Gaming, Pragmatic Play, PG Soft, and others), to the extent necessary to deliver game services and resolve disputes.
• Technology Service Providers: Cloud hosting, Platform infrastructure, fraud detection, and customer support technology providers engaged by aha88 under data processing agreements. These providers process personal data only on aha88's documented instructions.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where disclosure is necessary for professional advisory purposes and is subject to confidentiality obligations.

8. International Data Transfers

Where aha88 transfers your personal data to service providers or game providers located outside the Philippines, aha88 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC guidelines. Such safeguards may include data processing agreements that impose obligations equivalent to those under Philippine data privacy law, or transfers to countries recognised by the NPC as providing an adequate level of data protection.

aha88 will not transfer personal data outside the Philippines where doing so would conflict with PAGCOR regulatory requirements or applicable Philippine law.

9. Data Retention

aha88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a period of five (5) years after account closure, as required by PAGCOR regulations and the AMLA.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, as required by the AMLA and PAGCOR record-keeping requirements.
• Customer Support Records: Retained for two (2) years from the date of the relevant interaction.
• Technical and Usage Data: Retained for up to twelve (12) months, after which it is aggregated and anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with aha88's data disposal procedures.

10. Security Measures

aha88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the aha88 Platform;
• Encrypted storage of sensitive personal data, including identification documents and financial data;
• Multi-factor authentication for player accounts and internal administrative access;
• Regular security vulnerability assessments and penetration testing of the Platform;
• Strict access controls ensuring that employee access to personal data is limited to what is necessary for their role;
• Staff training on data privacy obligations and security best practices;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While aha88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your aha88 account and to enable two-factor authentication.

11. Your Data Protection Rights

As a Data Subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by aha88:

• Right to Be Informed: You have the right to be informed of how your personal data is being processed before it is collected.
• Right of Access: You may request a copy of all personal data that aha88 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. Certain corrections may be subject to identity verification.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to aha88's legal retention obligations under the AMLA and PAGCOR regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities where aha88 relies on legitimate interests as the legal basis.
• Right to Data Portability: You may request that aha88 provide your personal data in a structured, machine-readable format for transfer to another controller.
• Right to Complain: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that aha88 has violated your data protection rights.

To exercise any of these rights, please contact aha88's Data Protection Officer using the details provided in Section 15. aha88 will respond to verified requests within fifteen (15) business days.

12. Children's Privacy

The aha88 Platform is strictly intended for adults aged twenty-one (21) years and above. aha88 does not knowingly collect or process personal data from individuals under 21 years of age. If aha88 becomes aware that personal data has been collected from a person under the age of 21, we will promptly take steps to delete that data and close the associated account. If you believe that a minor has registered an aha88 account, please contact our support team immediately.

13. Third-Party Platforms

The aha88 Platform may contain references to third-party services such as payment gateway interfaces (GCash, Maya) and game provider platforms. aha88 does not control the data practices of these third parties and is not responsible for their privacy policies. Where you interact with third-party services through the aha88 Platform, you are subject to those parties' own privacy terms in addition to this Policy. aha88 encourages you to review the privacy policies of any third-party service you access.

14. Policy Updates

aha88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, PAGCOR requirements, or NPC directives. When material changes are made, aha88 will update the "Last Updated" date at the top of this page. Where required by law or where changes materially affect your rights, aha88 will notify you by email or via an in-platform notification. Your continued use of the aha88 Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data protection rights, please contact aha88's Data Protection Officer:

• Email: [email protected] — include "Privacy Request" in your subject line for faster routing.
• Live Chat: Available 24/7 on the aha88 Platform — state that your query relates to a data privacy matter.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you are not satisfied with aha88's response to your data privacy concern.