ah188 Privacy Policy

1. Scope & Data Controller

This Privacy Policy applies to all personal data collected and processed by ah188 in connection with the ah188 online gaming platform accessible at ah188.club ("Platform"). It applies to all registered players, website visitors, and individuals who interact with ah188 through any channel including live chat and email.

ah188 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, ah188 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Policy should be read in conjunction with ah188's Terms and Conditions. Capitalized terms not defined here carry the meanings given to them in the ah188 Terms and Conditions.

2. Personal Data We Collect

ah188 collects the following categories of personal data from players:

ah188 does not knowingly collect special categories of personal data (such as health data, biometric data, or political opinions) unless specifically required for responsible gaming program administration with your explicit consent.

3. How We Use Your Personal Data

ah188 uses personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your ah188 account, including authentication and identity verification.
• Payment Processing: Processing deposits and withdrawals to and from your ah188 wallet via GCash, PayMaya, and Philippine bank transfers.
• Regulatory Compliance: Fulfilling ah188's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, and other prohibited activities.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviors and administering responsible gaming tools including deposit limits, session timers, and self-exclusion programs.
• Customer Support: Responding to inquiries, resolving disputes, and providing assistance through live chat and email.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the ah188 Platform, optimize game selection, and enhance user experience.
• Promotional Communications: Sending information about ah188 promotions, bonuses, and platform updates to players who have opted in to marketing communications. You may opt out at any time.

4. Legal Basis for Processing

ah188 processes personal data under the following legal bases as recognized by the Data Privacy Act of 2012:

• Contract Performance: Processing necessary to fulfill ah188's obligations under the account agreement — including account management, payment processing, and game operation.
• Legal Obligation: Processing required to comply with PAGCOR regulatory requirements, AMLA obligations, and tax reporting duties.
• Legitimate Interests: Processing for fraud prevention, platform security, and improving the ah188 service, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional responsible gaming program enrollment, where you have provided explicit consent. Consent may be withdrawn at any time.

5. Data Sharing & Third-Party Disclosure

ah188 does not sell personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: GCash, PayMaya, and Philippine banking partners receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations and applicable Philippine financial regulations.
• Game Providers: Third-party game software providers may receive anonymized session data for technical operation of their games on the ah188 Platform. Personally identifiable information is not shared with game providers beyond what is technically necessary.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement may receive personal data as required by applicable law or lawful order.
• Identity Verification Services: KYC and identity verification service providers process identity documents on ah188's behalf under data processing agreements that impose equivalent data protection obligations.
• Professional Advisers: Legal, audit, and compliance professionals may access personal data where strictly necessary for the provision of their professional services to ah188, under confidentiality obligations.

All third parties with whom ah188 shares personal data are required to maintain appropriate technical and organizational security measures and to process personal data only for specified, lawful purposes.

6. Cookies & Tracking Technologies

ah188 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for core Platform functionality including session management, authentication state, and security features. These cannot be disabled without affecting Platform operation.
• Performance Cookies: Collect anonymized data about how players use the Platform, helping ah188 identify and fix technical issues and optimize page performance.
• Functional Cookies: Store preferences such as language settings and game display options to improve your Platform experience.

ah188 does not use third-party advertising cookies or tracking pixels for cross-site behavioral advertising. Your browser settings can be used to manage cookie preferences; however, disabling essential cookies may impair your ability to use the ah188 Platform.

7. Data Retention

ah188 retains personal data for the following periods:

• Account & KYC Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations.
• Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and Bureau of Internal Revenue requirements.
• Gaming History: Retained for three (3) years from the date of each gaming session for regulatory audit and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of the interaction, or longer if the subject matter relates to an unresolved dispute or regulatory investigation.
• Marketing Consent Records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual.

8. Security Measures

ah188 implements comprehensive technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS encryption for all data transmitted between your device and ah188 servers.
• Encryption at rest for all personal data stored on ah188 systems.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting employee access to personal data to only what is required for their function.
• Regular penetration testing and vulnerability assessments of ah188 systems.
• Comprehensive employee data protection training and confidentiality obligations.
• Incident response procedures compliant with the Data Privacy Act's breach notification requirements.

While ah188 takes all reasonable security precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ah188 login credentials and for ensuring the security of the devices from which you access the Platform.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ah188:

• Right to be Informed: To be told what personal data ah188 holds about you and how it is being processed. This Policy fulfills ah188's primary obligation under this right.
• Right of Access: To request a copy of the personal data ah188 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data. Some corrections require supporting documentation.
• Right to Erasure: To request deletion of personal data where ah188 no longer has a legitimate basis for retaining it. Note that regulatory retention obligations may limit the exercise of this right.
• Right to Object: To object to processing based on legitimate interests, including direct marketing. Objection to marketing will be honored immediately upon request.
• Right to Data Portability: To receive a copy of data you have provided to ah188 in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact ah188 support via live chat or email. ah188 will respond to data subject requests within fifteen (15) business days. Identity verification may be required before ah188 can process your request.

10. Children & Minors

The ah188 Platform is strictly for adults aged 21 and above in compliance with PAGCOR regulations. ah188 does not knowingly collect personal data from individuals under the age of 21. If ah188 discovers that personal data has been collected from a person under 21, the account will be immediately terminated, the data will be securely deleted, and any transactions will be reversed to the extent required by applicable law.

If you have reason to believe that a minor has created an ah188 account, please report this immediately to ah188 support. We take this matter with the utmost seriousness.

11. Policy Changes

ah188 reserves the right to update this Privacy Policy at any time. Material changes — meaning changes that significantly affect how your personal data is used or your rights in relation to it — will be communicated to registered players via the email address on file and/or via a prominent notice on the ah188 Platform at least fourteen (14) days before the changes take effect.

Your continued use of the ah188 Platform following the effective date of any updated Policy constitutes your acceptance of the changes. If you do not accept the changes, you should close your ah188 account before the effective date by contacting ah188 support.

The "Last Updated" date at the top of this Policy reflects the most recent revision date. We recommend reviewing this Policy periodically.

12. Contact & Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or to the processing of your personal data by ah188, please contact:

• Live Chat: Available 24/7 on the ah188 Platform. For privacy-related inquiries, state "Data Privacy Request" at the start of your chat. Average response under five (5) minutes.
• Email: [email protected] — for formal written data subject requests, please include "Data Privacy" in your subject line.

ah188 has appointed a Data Protection Officer (DPO) as required by the Data Privacy Act of 2012. The DPO is responsible for overseeing ah188's data protection compliance program and may be contacted through the support channels above.

If you are not satisfied with ah188's handling of your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.