ahh99 Casino Privacy Policy

1. Who We Are (Data Controller)

ahh99 Casino, operating under the domain ahh99.club, is the Data Controller responsible for the personal information collected from players and visitors on this platform. ahh99 is an online casino and sports betting operator authorized by PAGCOR (Philippine Amusement and Gaming Corporation) to provide gaming services to players in the Republic of the Philippines.

As a PAGCOR-authorized operator, ahh99 is subject to both PAGCOR's data handling requirements and the National Privacy Commission (NPC)'s regulations under the Data Privacy Act of 2012. This Policy applies to all personal data processed by ahh99 in connection with the operation of its platform, including registration, account management, gameplay, payment processing, marketing communications, and customer support interactions.

2. Personal Data We Collect

ahh99 collects personal data that is necessary for the lawful operation of a PAGCOR-regulated online casino platform. The categories of personal data we collect include:

2.1 Identity & Registration Data

• Full legal name (as appearing on government-issued ID)
• Date of birth (for 21+ age verification)
• Philippine mobile number and/or email address
• Username chosen at registration
• Government-issued ID type and ID number (e.g., PhilSys, Passport, Driver's License, UMID, SSS ID, PRC ID)
• Selfie or liveness verification image where required by KYC protocols
• Residential address (province, city, barangay)

2.2 Financial & Transaction Data

• GCash mobile number linked to the account
• PayMaya account details
• Bank account name, number, and branch (for BPI, BDO, Metrobank transfers)
• Deposit and withdrawal transaction history
• Source-of-funds declarations where required by PAGCOR's AML compliance framework

2.3 Gameplay & Behavioural Data

• Bet history, game session logs, win/loss records
• Game preferences and activity patterns
• Responsible gaming settings and limit history (deposit limits, session limits, self-exclusion records)
• Login timestamps, session duration, and device identifiers

2.4 Technical & Device Data

• IP address and geolocation data (country/region level)
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Referral source and page visit data

2.5 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with ahh99
• Marketing preference records (opt-in/opt-out)

3. How We Collect Your Data

ahh99 collects personal data through the following means:

• Direct collection: Information you provide at registration, during KYC verification, via deposit/withdrawal forms, or in communications with our support team
• Automated collection: Technical data collected automatically when you access or use the ahh99 platform, including through cookies, server logs, and session tracking technology
• Third-party sources: Identity verification data from government ID validation services; payment confirmation data from GCash, PayMaya, and banking partners; fraud and AML screening data from compliance service providers operating under their own privacy policies
• PAGCOR compliance: Regulatory reporting data may be shared with or collected in coordination with PAGCOR as part of ahh99's licensing obligations

4. How We Use Your Personal Data

ahh99 uses the personal data it collects for the following purposes:

• Account registration and management: Creating and maintaining your ahh99 account, verifying your identity, and managing your account settings
• Age verification: Confirming that you meet the 21+ requirement mandated by PAGCOR for all online casino players
• Payment processing: Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, and Metrobank
• Gaming services: Providing access to all ahh99 game categories and maintaining accurate bet and win/loss records
• Regulatory compliance: Fulfilling ahh99's obligations under PAGCOR's licensing conditions, including AML/CTF reporting, KYC verification, and responsible gaming requirements
• Fraud prevention and security: Detecting and preventing unauthorized account access, fraudulent transactions, money laundering, and bonus abuse
• Responsible gaming: Managing player-set limits, implementing self-exclusion periods, and monitoring for indicators of problem gambling
• Customer support: Responding to inquiries, resolving disputes, and providing assistance through the ahh99 live chat and email channels
• Platform improvement: Analyzing usage patterns and technical performance to improve the platform experience
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications

5. Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, ahh99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions contract between ahh99 and the Player — including account creation, identity verification, gameplay, and payment processing
• Legal obligation: Processing required to comply with PAGCOR's licensing conditions, AML/CTF regulations, NPC data processing requirements, and other applicable Philippine law
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform performance analysis, where such processing does not override the data subject's rights and freedoms
• Consent: Processing for marketing communications, where the Player has given explicit opt-in consent at registration or through account settings. Consent may be withdrawn at any time through the account settings or by contacting support

6. Data Sharing & Disclosure

ahh99 does not sell, rent, or trade personal data to third parties for commercial purposes. ahh99 shares personal data only in the following circumstances:

• PAGCOR and regulatory authorities: ahh99 is required to share player data with PAGCOR and other Philippine regulatory or law enforcement authorities where mandated by law or by PAGCOR's licensing conditions, including for AML/CTF investigations
• Payment service providers: GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), BPI, BDO, and Metrobank receive the minimum payment data necessary to process deposit and withdrawal transactions. These institutions process data under their own privacy policies and relevant Philippine financial regulations
• KYC verification providers: Identity verification data may be shared with third-party KYC service providers engaged by ahh99 to validate government ID documents and perform liveness checks, under data processing agreements that comply with the DPA
• Game content providers: Technical session data (player ID, bet amounts, game results) is shared with ahh99's game content providers to enable gameplay. These providers are contractually bound to process such data only for the purpose of game delivery and not to use it for independent profiling or marketing
• Legal proceedings: ahh99 may disclose personal data where required by a valid court order, subpoena, or other legal process under Philippine law

ahh99 does not transfer personal data outside the Republic of the Philippines except where necessary for the operation of licensed game content platforms and only under appropriate contractual safeguards.

7. Cookies & Tracking Technologies

ahh99 uses cookies and similar tracking technologies on the platform to provide and improve the service. The types of cookies used include:

• Strictly necessary cookies: Session tokens, authentication cookies, and security cookies required for the platform to function. These cannot be disabled without affecting platform functionality
• Functional cookies: Cookies that remember your preferences, such as language settings and responsible gaming limit configurations
• Analytics cookies: Cookies that help ahh99 understand how the platform is used — which pages are visited most, where errors occur, and how the registration flow performs — to improve the overall experience
• Marketing cookies: Cookies used to track referral sources and measure the effectiveness of promotional campaigns. These are only set where the Player has consented

Players may manage cookie preferences through their browser settings. Disabling certain cookies may limit platform functionality. ahh99 does not use cookies to build profiles for sale to third parties.

8. Data Retention

ahh99 retains personal data for the following periods, after which data is securely deleted or anonymized:

• Active account data: Retained for the duration of the Player's active account relationship with ahh99
• KYC and identity documents: Retained for a minimum of five (5) years after account closure, in compliance with PAGCOR's AML record-keeping requirements
• Transaction records: Retained for a minimum of five (5) years in accordance with PAGCOR and BSP anti-money laundering regulations
• Support communications: Retained for two (2) years from the date of the last communication
• Marketing opt-out records: Retained indefinitely to ensure compliance with the Player's withdrawal of consent
• Self-exclusion records: Retained for the duration of the self-exclusion period plus two (2) years, to prevent re-registration during the exclusion period

Where retention beyond these periods is required by law or a pending regulatory or legal proceeding, data will be retained until the relevant obligation is discharged.

9. Data Security

ahh99 implements technical and organizational security measures appropriate to the sensitivity of the personal data it processes. These measures include:

• HTTPS encryption for all data transmitted between the Player's device and the ahh99 platform
• Encryption at rest for personally identifiable information and financial data stored in ahh99's database systems
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need
• Multi-factor authentication for administrative access to systems that process personal data
• Regular security assessments and penetration testing of platform infrastructure
• Incident response procedures aligned with the NPC's data breach notification requirements under the DPA

In the event of a personal data breach that is likely to result in harm to data subjects, ahh99 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with NPC Circular 16-03.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), registered Players have the following rights with respect to their personal data held by ahh99:

• Right to be informed: The right to know what personal data ahh99 collects, the purposes for which it is processed, and to whom it may be disclosed — as set out in this Privacy Policy
• Right of access: The right to request a copy of the personal data ahh99 holds about you, including the categories of data, its source, and its processing history
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held in your ahh99 account
• Right to erasure / right to be forgotten: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ahh99's legal retention obligations under PAGCOR and AML regulations
• Right to object: The right to object to the processing of your personal data for marketing purposes. Withdrawal of consent for marketing can be made through account settings or via live chat support
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated

To exercise any of these rights, contact the ahh99 Data Privacy Officer (DPO) through the live chat support or via the email address listed in Section 14 of this Policy. ahh99 will respond to data subject requests within fifteen (15) business days of receipt.

11. Children's Privacy

The ahh99 platform is strictly for adults aged twenty-one (21) years and over, as required by PAGCOR's licensing conditions applicable to online casino operations in the Philippines. ahh99 does not knowingly collect personal data from persons under the age of 21. Where ahh99 discovers that personal data has been collected from a person below the minimum age, the relevant account will be closed immediately, any funds held in the account will be processed in accordance with applicable regulations, and the data collected will be deleted except where retention is required by law.

ahh99 uses date-of-birth verification and government ID KYC checks at registration specifically to prevent underage access. These measures are a PAGCOR licensing requirement and are enforced unconditionally.

12. Third-Party Services

The ahh99 platform integrates with third-party services to deliver its gaming and payment features. These include game content providers (such as Vivo Gaming for live dealer streams), payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and KYC verification service providers. Each of these third-party service providers operates under its own privacy policy and applicable Philippine data protection regulations.

ahh99 enters into data processing agreements with all third-party processors to ensure that personal data shared for operational purposes is processed only for the stated purpose, is protected by appropriate technical and organizational security measures, and is not retained beyond the period necessary for the service delivery.

The ahh99 website does not embed social media tracking pixels or third-party advertising networks that profile users across other websites without consent.

13. Amendments to This Privacy Policy

ahh99 reserves the right to amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, or the platform's data processing practices. Material changes will be communicated to registered Players via their registered email address or mobile number with a minimum of seven (7) days' advance notice before the revised Policy takes effect. The updated Policy will also be published on this page with a revised "Last Updated" date. Continued use of the ahh99 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

14. Contact & Data Privacy Officer

For data privacy inquiries, requests to exercise your DPA rights, or to report a concern about how ahh99 handles your personal data, please contact the ahh99 Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 on the ahh99 platform. Average response time under 5 minutes. For formal data subject requests, please state "Data Privacy Request" at the start of the chat.
• Email (DPO): [email protected] (plain text — not a clickable link). Use the subject line "Data Privacy Request" for prioritized handling.

ahh99 will acknowledge all formal data subject requests within three (3) business days and will provide a full response within fifteen (15) business days. Where a request requires additional time due to its complexity, ahh99 will notify the requestor of the extended timeline.

If you are not satisfied with ahh99's response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines.