ahh8 Privacy Policy

This Privacy Policy ("Policy") is issued by ahh8 ("ahh8," "we," "us," or "our"), the operator of the online gaming platform accessible at ahh8.app. This Policy describes how ahh8 collects, processes, stores, discloses, and protects personal data relating to users of its services ("you" or "Player") in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable guidelines issued by the National Privacy Commission ("NPC").

By accessing or using any part of the ahh8 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1. Introduction

1.1 ahh8 is committed to protecting the privacy and security of your personal information. As a gaming operator serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao and beyond — we recognise that the data you share with us is sensitive and must be handled with care, integrity, and full compliance with Philippine data protection law.

1.2 This Policy applies to all personal data collected through the ahh8 website, mobile-optimised platform, customer support communications, and any other interaction you have with ahh8 as a registered or prospective player.

1.3 This Policy should be read in conjunction with ahh8's Terms & Conditions, which govern your use of the ahh8 platform.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, ahh8 acts as the Personal Information Controller (PIC) with respect to your personal data collected via the ahh8 platform. ahh8 determines the purposes and means by which personal data is processed.

2.2 Certain third-party service providers engaged by ahh8 — including payment processors such as GCash and PayMaya, game content providers, and fraud prevention vendors — may act as Personal Information Processors (PIPs) and process data strictly on ahh8's instructions.

3. Personal Data We Collect

ahh8 collects personal data from you directly (through registration and account activity), automatically (through your use of the platform), and from third parties (such as payment providers and identity verification services). The categories of data we collect include:

3.1 Identity and Registration Data

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Government-issued identification number (e.g., Philippine National ID, UMID, Passport, Driver's Licence);
• Registered mobile number (Philippine format, +63);
• Email address;
• Username and encrypted password.

3.2 Financial and Transaction Data

• GCash account number, PayMaya account number, or bank account details linked to your ahh8 wallet;
• Deposit and withdrawal transaction records, including amounts in Philippine Peso (₱), timestamps, and transaction reference numbers;
• Bonus and promotional credit history.

3.3 Gaming Activity Data

• Game session logs (games played, bets placed, outcomes, wagering amounts);
• Sports betting activity (markets selected, odds accepted, bet settlements);
• Responsible gaming tool usage (deposit limits set, self-exclusion history).

3.4 Technical and Usage Data

• IP address and geolocation data (used to verify Philippine residency and detect suspicious access);
• Device type, operating system, browser version;
• Login timestamps and session duration;
• Cookies and similar tracking technologies (see Section 7).

3.5 Communications Data

• Records of customer support interactions via live chat, email, or other channels;
• Voluntary feedback, survey responses, and complaint records.

4. How We Use Your Personal Data

ahh8 processes your personal data for the following purposes:

Purpose	Data Used
Account registration and identity verification (KYC)	Identity data, government ID, date of birth
Processing deposits and withdrawals via GCash, PayMaya, and banks	Financial data, transaction records
Delivering gaming services and personalising your ahh8 experience	Gaming activity, usage data
Fraud prevention, AML compliance, and responsible gaming monitoring	All categories above
Customer support and dispute resolution	Identity, communications, transaction data
Regulatory reporting to PAGCOR and other competent authorities	Identity, financial, gaming activity data
Marketing communications (where consent has been given)	Contact data, gaming preferences

5. Legal Bases for Processing

5.1 Contractual Necessity. Processing of identity, financial, and gaming activity data is necessary for the performance of the contract between you and ahh8, as established by the ahh8 Terms & Conditions.

5.2 Legal Obligation. ahh8 is required by PAGCOR regulations and Philippine AML laws to collect and retain certain personal data, including KYC documents and transaction records, for prescribed periods.

5.3 Legitimate Interests. ahh8 processes certain technical and usage data to detect fraud, protect platform security, and improve the quality of its services — where these interests are not overridden by your data protection rights.

5.4 Consent. Where ahh8 sends promotional communications, processes data for marketing analytics, or uses non-essential cookies, such processing is based on your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

6.1 ahh8 does not sell your personal data to third parties. We disclose personal data only in the following circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers receive transaction data necessary to process deposits and withdrawals;
• Game Providers: Software providers such as JILI Games, PG Soft, and Pragmatic Play receive gaming session data necessary to deliver game content and resolve disputes;
• Identity Verification Services: Third-party KYC vendors may process identity documents for age and identity verification;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities may receive data where required by law or court order;
• Fraud Prevention & Security: Vendors providing fraud detection, cybersecurity, and platform integrity services;
• Group Companies: Where ahh8 operates within a group of companies, data may be shared intra-group for operational purposes under equivalent data protection standards.

6.2 All third-party processors engaged by ahh8 are bound by data processing agreements that require them to process personal data only on ahh8's instructions and to implement appropriate technical and organisational security measures.

7. Cookies and Tracking Technologies

7.1 ahh8 uses cookies and similar technologies (including web beacons and local storage) to operate the platform, remember your preferences, maintain your login session, and collect usage analytics.

7.2 Essential Cookies are required for the platform to function (e.g., session management, security tokens). These cannot be disabled without affecting your ability to use ahh8.

7.3 Analytics Cookies help ahh8 understand how players navigate the platform so we can improve performance and usability. These are activated only with your consent.

7.4 Marketing Cookies may be used to deliver relevant promotional content to returning players. These are activated only with your explicit consent.

7.5 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core ahh8 gaming services.

8. Data Retention

8.1 ahh8 retains your personal data for as long as your account remains active and for a period thereafter as required by law or legitimate business necessity:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR and AMLC requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of two (2) years for dispute resolution and responsible gaming monitoring;
• Customer support communications: Retained for a minimum of three (3) years;
• Marketing consent records: Retained until consent is withdrawn and for a period of two (2) years thereafter.

8.2 When personal data is no longer required, ahh8 will securely delete or anonymise it in accordance with NPC guidelines.

9. Data Security

9.1 ahh8 implements technical and organisational security measures appropriate to the risk level of the personal data processed. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ahh8 platform;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the ahh8 platform;
• Two-Factor Authentication (2FA) available to all registered players;
• Automated monitoring for unusual login patterns and suspicious account activity.

9.2 In the event of a personal data breach that is likely to pose a risk to your rights and freedoms, ahh8 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ahh8:

• Right to be Informed: The right to know how your data is collected and used — as set out in this Policy;
• Right to Access: The right to obtain a copy of your personal data held by ahh8;
• Right to Rectification: The right to correct inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of personal data where retention is no longer legally required or justified;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time.

To exercise any of these rights, contact ahh8's Data Protection Officer at the details in Section 13. ahh8 will respond to all data subject requests within thirty (30) calendar days. Requests may be subject to identity verification before we can action them.

11. Minors and Age Restriction

11.1 The ahh8 platform is strictly for persons aged 21 years and older. ahh8 does not knowingly collect personal data from individuals under the age of 21. If ahh8 discovers that personal data has been provided by a person under 21, such data will be deleted immediately and the relevant account suspended.

11.2 Parents and guardians who believe a minor has submitted personal data to ahh8 should contact our support team immediately at the contact details in Section 13.

12. Changes to This Privacy Policy

12.1 ahh8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the ahh8 platform at least fourteen (14) days before the changes take effect.

12.2 The date of the most recent revision is indicated at the top of this Policy. Continued use of the ahh8 platform after the effective date of any revised Policy constitutes your acceptance of the changes.

13. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ahh8, please contact us through the following channels:

• Email (Data Protection): [email protected]
• Live Chat: 24/7 via the ahh8 website widget
• Support Hours: 6:00 AM – 12:00 MN Philippine Standard Time (PHT)

If you are not satisfied with ahh8's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.