aaaajl Privacy Policy

1.1   aaaajl ("we", "us", "our") is an online gambling platform serving players in the Philippines. We recognise that the personal data you share with us when you register and play is a matter of trust, and we take that responsibility seriously.

1.2   This Privacy Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and applicable PAGCOR online gaming regulations. Where applicable, we also observe internationally recognised privacy principles including those under the General Data Protection Regulation (GDPR) to the extent they apply to our operations.

1.3   This Policy should be read alongside our Terms and Conditions, which also contain provisions relevant to the handling of your personal information.

2.1   For the purposes of the Data Privacy Act of 2012, aaaajl is the Personal Information Controller in respect of the personal data collected through the aaaajl platform. aaaajl is responsible for determining the purposes and means by which your personal data is processed.

2.2   Our designated Data Protection Officer (DPO) can be reached by email at [email protected]. All privacy-related inquiries, access requests, and complaints should be directed to this address with the subject line "Privacy – [nature of inquiry]".

3.1   aaaajl collects personal data in the following categories:

3.2   aaaajl does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, health data, or political affiliation unless specifically required for regulatory compliance purposes, in which case we will obtain your explicit consent at the time of collection.

3.3   Providing certain personal data is a contractual necessity for operating your aaaajl account. If you decline to provide information required for identity verification or AML compliance, aaaajl may be unable to process withdrawals or maintain your account in line with regulatory requirements.

aaaajl processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your aaaajl player account, including authentication and access control.
• Transaction Processing: Processing deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay.
• Identity & Age Verification: Verifying that you are 21 years of age or older and that the account and payment methods belong to you, in compliance with PAGCOR and AML regulations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and other unlawful conduct.
• Customer Support: Responding to your support requests, resolving disputes, and improving our service based on feedback.
• Regulatory Compliance: Fulfilling our obligations under Philippine law and PAGCOR regulations, including transaction reporting, record-keeping, and responding to lawful government or regulatory inquiries.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game performance, user interface design, and overall platform quality.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gaming tools where appropriate.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about aaaajl games and events — only where you have provided explicit consent or where a legitimate interest applies.

aaaajl processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to enter into and perform the aaaajl player account agreement, including account creation, gameplay, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine law, PAGCOR regulations, and AML/KYC requirements.
• Legitimate Interests: Processing conducted for the legitimate interests of aaaajl, such as fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional analytics cookies, which is conducted only with your freely given, specific, and informed consent. You may withdraw consent at any time.

6.1   aaaajl does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes.

6.2   aaaajl may share your personal data with the following categories of third parties:

• Payment Processors: GCash (Mynt — Globe Fintech Innovations, Inc.), Maya (Voyager Innovations, Inc.), and partner banks (BPI, BDO, Metrobank) — solely for the purpose of processing deposits and withdrawals.
• Game Content Providers: Licensed third-party game developers and live dealer studios whose games are accessible through aaaajl. These providers receive game outcome and wagering data under strict data processing agreements.
• Identity Verification Partners: KYC and AML compliance service providers engaged to assist with identity document verification.
• Regulatory Authorities: PAGCOR and other applicable Philippine government agencies, where aaaajl is required by law to disclose player information.
• Law Enforcement: Law enforcement agencies in the Philippines, where aaaajl receives a lawful court order, subpoena, or equivalent legal demand.
• IT & Security Service Providers: Third-party cloud hosting, security monitoring, and technical infrastructure providers operating under contractual confidentiality obligations.

6.3   All third parties with whom aaaajl shares personal data are required to handle that data in accordance with applicable data protection law and are prohibited from using your data for any purpose beyond the specific purpose for which it was shared.

7.1   aaaajl retains your personal data for as long as your account is active and for a minimum period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and applicable Philippine AML regulations.

7.2   Transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of each transaction in compliance with the Anti-Money Laundering Act of 2001 (as amended) and its implementing regulations.

7.3   Identity verification documents (government-issued ID copies, selfie images) are retained for the duration of the account relationship and for five (5) years thereafter.

7.4   Customer support communications are retained for three (3) years from the date of the interaction.

7.5   Where you request deletion of your personal data and no legal retention obligation applies, aaaajl will delete or anonymise your data within 30 calendar days of receiving a valid deletion request.

8.1   aaaajl implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and aaaajl servers is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are never stored in plain text. They are cryptographically salted and hashed using a secure algorithm before storage.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. aaaajl staff who require access to player data for their role are subject to confidentiality obligations and access logging.
• OTP Authentication: Sensitive account actions — including password changes, large withdrawals, and new device logins — require one-time passcode verification to your registered Philippine mobile number.
• Automatic Session Timeout: Inactive sessions are automatically logged out after a defined period to protect accounts accessed on shared devices.
• Security Monitoring: aaaajl employs automated monitoring tools to detect and alert on suspicious login patterns, unusual transaction activity, and potential security incidents.
• Regular Security Reviews: Our security practices and infrastructure are reviewed regularly to identify and address emerging vulnerabilities.

8.2   In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, aaaajl will notify the National Privacy Commission of the Philippines as required by the Data Privacy Act of 2012 and will inform affected players without undue delay.

9.1   aaaajl uses cookies and similar tracking technologies on the aaaajl platform. Cookies are small text files stored on your device that help the platform function correctly and improve your experience.

9.2   aaaajl uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without preventing core platform functionality. No consent is required for these cookies.
• Functional Cookies: Store your preferences such as language settings, game lobby filters, and responsible gaming tool configurations. These are set with your implied consent upon account creation.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the platform — page visit frequency, session duration, and navigation paths — to help us improve performance. These are set only with your explicit consent.

9.3   aaaajl does not place third-party advertising cookies or cross-site tracking pixels. We do not share cookie-derived data with advertising networks.

9.4   You may manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your aaaajl account.

10.1   aaaajl services are restricted to individuals who are 21 years of age or older, in compliance with PAGCOR online gaming regulations applicable in the Philippines. aaaajl does not knowingly collect personal data from individuals under the age of 21.

10.2   If aaaajl becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended and all associated personal data will be securely deleted, with the exception of records required to be retained under applicable AML regulations.

10.3   If you are a parent or guardian and believe that a minor under your care has registered an aaaajl account, please contact us immediately at [email protected]. We will investigate and act promptly.

11.1   Some of aaaajl's third-party service providers — particularly game content providers and cloud infrastructure partners — may process personal data outside the Philippines. Where such transfers occur, aaaajl ensures that adequate safeguards are in place to protect your data, including:

• Contractual data processing agreements incorporating data protection obligations equivalent to those under the Data Privacy Act of 2012.
• Transfers only to jurisdictions or organisations that provide an adequate level of data protection as assessed by aaaajl.
• Technical safeguards including end-to-end encryption for all data in transit.

11.2   aaaajl will not transfer your personal data to a foreign jurisdiction in response to a foreign government request unless lawfully required to do so under applicable Philippine law or a mutual legal assistance treaty.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aaaajl. These rights may be exercised by contacting us at [email protected]:

• Right to be Informed: The right to be told what personal data aaaajl collects about you, the purposes for which it is processed, and the legal basis for that processing. This Policy fulfils that obligation.
• Right of Access: The right to request a copy of the personal data aaaajl holds about you. We will respond to verified access requests within 15 business days.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held in your aaaajl account. You may update most account details directly through account settings.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR and AML regulations. Where deletion is not possible due to legal requirements, we will restrict further processing instead.
• Right to Data Portability: The right to receive a copy of certain personal data you have provided to aaaajl in a structured, machine-readable format.
• Right to Object: The right to object to processing of your personal data based on legitimate interests, including profiling for responsible gaming purposes. aaaajl will assess objections on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe aaaajl has not handled your personal data in accordance with applicable law.

13.1   aaaajl may send you promotional communications about bonuses, new games, seasonal offers, and platform features. We will only do so where you have provided explicit consent during account registration or account settings, or where aaaajl has a legitimate interest in communicating with existing players about directly related services.

13.2   You may opt out of marketing communications at any time by updating your notification preferences in your aaaajl account settings or by contacting our support team at [email protected]. Opt-out requests will be processed within 5 business days.

13.3   Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or regulatory correspondence, which aaaajl must send as part of account management.

14.1   aaaajl may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or operational structure. Material changes will be communicated to registered players via their registered email address or through a notice on the aaaajl platform prior to the change taking effect.

14.2   The version of this Policy published on this page with the "Last Updated" date shown at the top of the page is the current governing version. Continued use of aaaajl following the effective date of a revised Policy constitutes acceptance of the revised terms.

14.3   Prior versions of this Privacy Policy are available upon request from our support team.

For any privacy-related inquiries, data subject rights requests, or complaints, please contact the aaaajl Data Protection Officer:

• Email: [email protected] (subject line: "Privacy – [nature of inquiry]")
• Response Time: We aim to acknowledge all privacy inquiries within 2 business days and resolve them within 15 business days.
• Regulator: If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).