aha777 Privacy Policy

aha777 takes the privacy and security of your personal information seriously. We understand that when you register an account, make a deposit, or simply browse our platform, you are trusting us with data that matters to you. That trust is something we work hard to earn and maintain every day.

This Privacy Policy applies to all personal data collected through the aha777 website at aha777.vip, our mobile-optimized platform, customer support communications, and any other service we provide. It applies to all registered players, prospective players, and visitors to our platform.

Please read this policy carefully. By using the aha777 platform, you acknowledge that you have read and understood how we handle your personal data as described here. If you have questions at any point, our support team is available 24/7 and happy to help.

For the purposes of the Philippine Data Privacy Act of 2012, aha777 is the Personal Information Controller responsible for your personal data. This means we determine the purposes and means by which your personal information is processed.

Our designated Data Protection Officer (DPO) oversees compliance with this policy and applicable data protection laws. You may contact our DPO directly at [email protected] for any privacy-related enquiries, data access requests, or complaints.

aha777 is registered and operates under the regulatory oversight of PAGCOR (Philippine Amusement and Gaming Corporation), which also imposes its own data handling and player protection requirements that we comply with in full.

We collect the following categories of personal data, depending on how you interact with the aha777 platform:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or PAGCOR regulation (for example, responsible gaming welfare assessments).

aha777 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, and server logs (see Section 8 for full cookie details);
• Third-party payment providers: Transaction confirmation data received from GCash, PayMaya/Maya, and Philippine banking partners when you make deposits or request withdrawals;
• Identity verification services: Data returned by our KYC verification partners when processing your identity documents;
• Fraud prevention services: Risk signals and device fingerprint data from our fraud detection partners to protect the integrity of the platform.

Under the Philippine Data Privacy Act of 2012, aha777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, and deliver the gaming services you have requested;
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering (AML) laws, KYC requirements, and other applicable Philippine legislation;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services — where these interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have opted in. You may withdraw this consent at any time through your account settings or by contacting support.

aha777 uses your personal data for the following purposes:

• Creating and managing your player account, including identity verification and age confirmation (21+ requirement);
• Processing deposits and withdrawals through your chosen payment method;
• Providing customer support and responding to your enquiries;
• Complying with PAGCOR licensing conditions, AML obligations, and other regulatory requirements;
• Detecting, investigating, and preventing fraud, cheating, money laundering, and other prohibited conduct;
• Monitoring gameplay for responsible gaming purposes, including identifying signs of problem gambling and applying protective measures where appropriate;
• Sending you transactional communications such as deposit confirmations, withdrawal notifications, and security alerts;
• Sending promotional offers, bonuses, and marketing communications where you have opted in to receive them;
• Analysing platform usage to improve game offerings, user experience, and technical performance;
• Enforcing our Terms & Conditions and other platform policies.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

aha777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: GCash, PayMaya/Maya, and Philippine banking partners receive the minimum data necessary to process your transactions;
• KYC and identity verification providers: Specialist third-party services that assist us in verifying your identity and age in compliance with PAGCOR requirements;
• Fraud prevention and security partners: Services that help us detect and prevent fraudulent activity, account takeovers, and money laundering;
• IT and platform infrastructure providers: Cloud hosting, database, and technical service providers who process data on our behalf under strict data processing agreements;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where we are legally required to disclose information;
• Law enforcement: Philippine law enforcement agencies, where we receive a valid legal order or where disclosure is necessary to prevent serious harm.

All third-party service providers who process personal data on our behalf are bound by contractual data processing agreements that require them to handle your data securely, use it only for the specified purpose, and comply with applicable Philippine data protection law.

aha777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. A cookie is a small text file placed on your device when you visit our website.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your experience.
• Analytics cookies: Help us understand how players use the platform — which games are most popular, where players encounter difficulties, and how we can improve. Data collected is aggregated and anonymised where possible.
• Responsible gaming cookies: Track session duration and activity patterns to support our responsible gaming tools, including session time reminders and cooling-off period enforcement.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the aha777 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

We do not use third-party advertising cookies or allow external ad networks to place tracking cookies on the aha777 platform.

aha777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and PAGCOR regulations.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

aha777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption at rest for sensitive personal and financial data stored in our databases;
• Multi-factor authentication (MFA) for all internal staff access to systems containing personal data;
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access specific categories of personal data;
• Regular penetration testing and security audits conducted by independent cybersecurity specialists;
• Intrusion detection and prevention systems monitoring for suspicious activity 24/7;
• Secure data backup procedures with encrypted off-site storage to ensure data availability and integrity.

Despite these measures, no system is completely immune to security threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, aha777 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the Data Privacy Act of 2012.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aha777:

• Right to be Informed: You have the right to know what personal data we collect, why we collect it, and how it is used — which is the purpose of this Privacy Policy;
• Right to Access: You may request a copy of the personal data we hold about you at any time. We will respond within 15 business days;
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update basic account details directly in your account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations under PAGCOR regulations and AML law;
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may be able to demonstrate compelling grounds to continue;
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider;
• Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request." We may need to verify your identity before processing your request. There is no charge for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

aha777 employs age verification measures during the registration process and KYC verification to prevent minors from accessing the platform. If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the matter to PAGCOR as required.

If you are a parent or guardian and believe that your child under 21 has registered an account with aha777, please contact us immediately at [email protected] so we can take prompt action.

aha777 primarily stores and processes your personal data within the Philippines. In some cases, data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or specialist KYC verification services.

Where such transfers occur, aha777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses in data processing agreements that impose equivalent data protection obligations on the recipient;
• Transfers only to countries or organisations that the National Privacy Commission has determined provide an adequate level of data protection;
• Binding corporate rules where applicable.

You may request information about the specific safeguards in place for any international transfer of your personal data by contacting our Data Protection Officer.

aha777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email and display a prominent notice on the platform at least seven (7) days before the changes take effect.

The effective date at the top of this page indicates when the current version came into force. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The most current version is always available at aha777.vip/privacy-policy.

Your continued use of the aha777 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should cease using the platform and contact support to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way aha777 handles your personal data, please contact our Data Protection Officer through any of the following channels:

• Privacy Enquiries Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the platform — mention "Privacy Request" to be routed to the correct team
• Mailing Address: Data Protection Officer, aha777, Makati City, Metro Manila, Philippines

We aim to respond to all privacy-related enquiries within 15 business days. For complex requests, we may extend this period by a further 15 business days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response, or if you believe that aha777 has violated your data protection rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC can be reached through their official government channels. Filing a complaint with the NPC does not affect your right to seek other legal remedies.