ah678 Privacy Policy

1. Who We Are – Data Controller

ah678 is the data controller responsible for the personal information collected through the ah678 Platform. As data controller, ah678 determines the purposes and means by which personal data is processed. Inquiries regarding data privacy and this Policy may be directed to the ah678 Data Protection Officer (DPO) using the contact details provided in Section 14 of this document.

ah678 operates in accordance with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and applicable National Privacy Commission (NPC) issuances. Players located outside the Philippines may be subject to additional applicable data protection laws in their respective jurisdictions.

2. Personal Data We Collect

ah678 collects the following categories of personal data from players and Platform visitors:

ah678 does not intentionally collect sensitive personal information beyond what is necessary for KYC compliance and responsible gaming obligations (such as self-exclusion requests, which may involve disclosure of personal circumstances).

3. How We Collect Personal Data

ah678 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically through cookies, web server logs, and similar tracking technologies when you visit or interact with the ah678 Platform.
• Third-Party Sources: Identity and address verification data received from licensed KYC/AML service providers; transaction data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) in connection with your deposits and withdrawals; fraud prevention data from security intelligence providers.

4. How We Use Your Personal Data

ah678 uses the personal data collected for the following purposes:

• To create, manage, and maintain your ah678 player account.
• To verify your identity and age (21+ requirement) in compliance with PAGCOR-recognized standards and AML obligations.
• To process deposits and withdrawals, including GCash and bank transfers.
• To provide customer support, respond to inquiries, and resolve disputes.
• To personalize your gaming experience — recommending games based on your play history, tailoring promotional offers, and displaying relevant content.
• To monitor your gaming activity for responsible gaming purposes, including detecting signs of problem gambling and applying self-imposed limits.
• To detect, prevent, and investigate fraud, money laundering, and other prohibited conduct.
• To comply with legal obligations under Philippine law, including reporting obligations to the AMLC (Anti-Money Laundering Council) and PAGCOR.
• To send you account-related communications including withdrawal confirmations, security alerts, and bonus notifications. With your consent, to send promotional communications.
• To analyze Platform usage, improve user experience, and conduct internal analytics.

ah678 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, ah678 processes personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between you and ah678 — specifically, to operate your player account and deliver the gaming services you have registered for.
• Legal Obligation: Processing required to comply with ah678's obligations under Philippine law — including KYC/AML requirements, PAGCOR-recognized standards, and age verification mandates.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your data protection rights.
• Consent: Where you have expressly consented to processing — such as receiving promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

ah678 does not sell your personal data to third parties. Personal data may be shared with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other licensed payment service providers, to process your deposits and withdrawals. These providers are bound by their own privacy obligations.
• Game Providers: JILI Games, Pragmatic Play, PG Soft, and other licensed game studios, where technically necessary for delivering gameplay sessions. Data shared is limited to what is required for the game session (e.g., player ID, bet amount).
• KYC / AML Service Providers: Licensed identity verification and anti-money laundering screening providers used to fulfill regulatory obligations.
• Regulatory Authorities: PAGCOR, the AMLC, the NPC, and other Philippine regulatory bodies, where disclosure is required by law, court order, or regulatory directive.
• IT & Security Providers: Cloud hosting, cybersecurity, and fraud prevention service providers who process data on ah678's behalf under strict data processing agreements.
• Professional Advisors: Legal, audit, and accounting professionals bound by professional confidentiality obligations, where disclosure is necessary for business operations.

7. Cookies & Tracking Technologies

ah678 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, login authentication, and security. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and last-played games, to personalize your experience on return visits.
• Analytics Cookies: Collect anonymized usage data — such as page views, session duration, and navigation paths — to help ah678 understand how the Platform is used and identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ah678 Platform. ah678 does not use third-party advertising cookies to serve behaviorally targeted advertisements on other websites.

8. Data Retention

ah678 retains personal data for as long as necessary to fulfill the purposes for which it was collected, including:

• Active Accounts: Data is retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years as required by the AMLA and applicable tax regulations.
• KYC Documents: Identity verification documents are retained for five (5) years following the end of the customer relationship, unless a longer retention period is required by law.
• Support Communications: Customer support records are retained for three (3) years for dispute resolution and quality assurance purposes.
• Technical Logs: Server logs and security event data are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ah678's data disposal procedures.

9. Data Security

ah678 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and ah678's servers.
• Encryption of sensitive data at rest in ah678's databases.
• Strict access controls — employees access personal data only on a need-to-know basis, with role-based permissions and audit logging.
• Regular security assessments and vulnerability testing of the Platform.
• Multi-factor authentication for internal systems that process personal data.
• Employee data privacy training and confidentiality obligations for all staff.

In the event of a personal data breach that poses a risk to your rights and freedoms, ah678 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals where required by law.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 and applicable regulations, you have the following rights with respect to your personal data held by ah678:

To exercise any of the above rights, submit a written request to the ah678 Data Protection Officer at [email protected]. ah678 will respond within 30 days of receiving a verified request. Identity verification may be required before processing any data subject request. If you are not satisfied with ah678's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Minors

The ah678 Platform is strictly for persons 21 years of age or older. ah678 does not knowingly collect personal data from individuals under 21. All accounts are subject to age verification during KYC review. If ah678 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, any deposits returned, and the associated personal data deleted except where retention is required by law.

Parents and guardians are encouraged to use parental control tools on devices accessible to minors to prevent access to online gaming platforms including ah678.

12. International Data Transfers

ah678 primarily processes personal data within the Philippines. Where personal data is transferred to third-party service providers located outside the Philippines — such as international cloud infrastructure providers or game studios — ah678 ensures that such transfers are subject to appropriate safeguards, including data processing agreements that require recipients to apply equivalent data protection standards.

By using the ah678 Platform, you acknowledge that your personal data may be processed in countries outside the Philippines where data protection laws may differ from those of your country of residence. ah678 takes reasonable steps to ensure that international data transfers comply with the Philippine Data Privacy Act.

13. Updates to This Privacy Policy

ah678 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. The most recent version of this Policy is always available at ah678.vip/privacy-policy. The "Last updated" date at the top of this page indicates when the Policy was last revised.

Where changes are material, ah678 will provide prior notice to registered players via email or an in-Platform notification before the revised Policy takes effect. Your continued use of the ah678 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you may close your account by contacting ah678 support.

14. Contact Us & Data Protection Officer

For all privacy-related inquiries, data subject access requests, complaints, or questions about this Privacy Policy, please contact the ah678 Data Protection Officer:

• Email: [email protected] — please include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 on the ah678 Platform. Identify your query as a privacy matter at the start of the chat session.

ah678 aims to respond to all privacy inquiries within 30 days. Complex requests may require additional time, in which case we will notify you of the expected timeline. You also have the right to raise a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.