ah678 Privacy Policy

ah678 ("ah678," "we," "us," "our") is committed to protecting the privacy and personal data of every player who registers and uses the ah678 online casino and sports betting platform at ah678.club ("Platform"). This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, and the rights available to you as a data subject.

By registering an account on the ah678 Platform or by continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

ah678 serves Filipino players across the Philippines — from Metro Manila and Makati to Cebu City, Davao, and Quezon City — and we are mindful of the data protection expectations and legal context applicable to Philippine residents, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

For the purposes of this Privacy Policy, the Data Controller responsible for the personal data processed through the ah678 Platform is the operator of ah678.club. All data-related inquiries, access requests, and complaints should be directed to the ah678 Data Protection contact as specified in Section 13 of this Policy.

ah678 processes personal data for the purposes described in this Policy only. We do not sell, rent, or trade personal data to third-party marketing organisations. Data is shared only in the limited circumstances described in Section 6 below.

ah678 collects personal data in the following categories, depending on how you interact with the Platform:

ah678 does not collect sensitive personal data beyond what is strictly necessary for identity verification, legal compliance, and responsible gaming obligations. We do not collect biometric data beyond the selfie photograph used solely for identity document verification matching purposes.

ah678 processes personal data collected from Filipino players for the following specific purposes:

• Account creation and management: To register your ah678 account, verify your identity, manage your profile, and facilitate login and authentication.
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment methods, and to maintain accurate financial records.
• Game and betting services: To deliver casino games, live dealer tables, sports betting markets, and bingo services; to record game outcomes and betting results; and to calculate and credit winnings.
• Legal and regulatory compliance: To fulfill Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, to comply with PAGCOR regulatory requirements applicable to online gaming platforms serving the Philippines market, and to respond to lawful requests from Philippine law enforcement and regulatory authorities.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling; to enforce deposit limits, session limits, cooling-off periods, and self-exclusion requests; and to flag and refer accounts exhibiting patterns consistent with gambling disorder.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
• Customer support: To respond to your inquiries, complaints, and support requests via live chat or email.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games and features — but only where you have provided consent to receive such communications. You may withdraw this consent at any time via your account settings.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, security, and user experience of the ah678 Platform.

ah678 processes personal data on the following legal grounds:

• Contractual necessity: Processing of registration data, KYC data, financial data, and gaming activity data is necessary for the performance of the contract between ah678 and the player (i.e., the Terms & Conditions).
• Legal obligation: Processing for KYC, AML compliance, and regulatory reporting is required by applicable Philippine law and PAGCOR regulations.
• Legitimate interests: Processing for fraud detection, security monitoring, responsible gaming oversight, and Platform analytics serves the legitimate interests of ah678 and its player community, subject to appropriate safeguards.
• Consent: Processing for marketing communications is based on your explicit consent, which may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

ah678 does not sell personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment processors: We share necessary financial data with Philippine payment service providers (including GCash, PayMaya, and partner banks) to process your deposit and withdrawal transactions. These providers process data under their own privacy policies and are bound by their obligations under applicable Philippine financial regulations.
• Game providers: Platform game data is transmitted to game software providers (including JILI, Pragmatic Play, Evolution Gaming, Ezugi, and others) to deliver game content and record game results. These providers receive only the data necessary to operate their software.
• Identity verification services: KYC documentation is processed through certified identity verification service providers for document authenticity checking and facial matching. These providers operate under strict data processing agreements.
• Legal and regulatory authorities: ah678 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, or courts when required to do so by law, court order, or valid regulatory request.
• IT and security service providers: Technical service providers supporting Platform infrastructure, cybersecurity, and fraud detection may access personal data in the course of providing contracted services, subject to binding data processing agreements.

All third parties with whom ah678 shares personal data are required to handle it in accordance with applicable data protection laws and ah678's data security standards.

ah678 retains personal data for as long as necessary to fulfil the purposes for which it was collected, taking into account legal, regulatory, and operational requirements. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your active ah678 account, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements applicable to Philippine online gaming operators.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable Philippine financial record-keeping obligations.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of activity, or longer where required by regulatory inquiry or dispute resolution.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless longer retention is required in connection with an open complaint or legal proceeding.
• Marketing consent records: Retained for three (3) years from the date of last consent or withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ah678's data disposal procedures.

ah678 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and ah678's servers is protected using 256-bit SSL/TLS encryption — the same standard used by Philippine banks for online banking portals.
• Password security: Player passwords are stored using industry-standard one-way cryptographic hashing. ah678 employees cannot view your password in plain text.
• Access controls: Access to personal data within ah678's systems is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for internal systems.
• Intrusion detection: Real-time monitoring systems are in place to detect and respond to unauthorised access attempts, anomalous account behaviour, and potential data breaches.
• Data breach response: In the event of a personal data breach that poses a risk to affected players, ah678 will notify affected individuals and, where required, the National Privacy Commission (NPC) in accordance with the Data Privacy Act of 2012.

While ah678 takes all reasonable precautions to protect your data, no internet transmission is completely secure. Players are responsible for maintaining the security of their own devices and login credentials.

ah678 uses cookies and similar tracking technologies to operate the Platform and enhance the player experience. The following categories of cookies are used:

• Essential cookies: Required for Platform operation, including session management, login authentication, and security functions. These cannot be disabled without impairing core Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and game lobby display options.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps ah678 identify technical issues and optimise the user experience. No personally identifiable information is transmitted to analytics services.
• Security cookies: Used to detect and prevent fraudulent logins, bot activity, and suspicious usage patterns.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent normal Platform operation, including login to your ah678 account.

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights with respect to your personal data held by ah678:

• Right to be informed: The right to receive clear information about how your data is processed — provided by this Policy.
• Right of access: The right to request a copy of the personal data ah678 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of personal data, subject to ah678's legal retention obligations (see Section 7).
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time via your ah678 account settings.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ah678 has processed your personal data in breach of the Data Privacy Act.

To exercise any of the above rights, please contact ah678 via the details in Section 13. ah678 will respond to data subject requests within thirty (30) calendar days of receipt. Where a request is complex or multiple, this period may be extended by a further sixty (60) days, with prior notification to you.

The ah678 Platform is strictly for adults aged 21 years old and above in accordance with PAGCOR regulations on online gaming in the Philippines. ah678 does not knowingly collect personal data from any person under the age of 21.

If ah678 discovers that personal data has been collected from a person under 21 years of age, such data will be deleted immediately and the associated account will be closed. Parents or guardians who become aware that a minor may have registered on the ah678 Platform should contact our support team immediately via live chat so that appropriate action can be taken promptly.

ah678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, ah678 will notify registered players via the contact information on file (email or mobile number) or by displaying a prominent notice upon login to the Platform.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the ah678 Platform following publication of an amended Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.

For all data privacy inquiries, access requests, rectification requests, or complaints relating to the processing of your personal data by ah678, please contact us using the following details:

• Live Chat: Available 24/7 via the live chat icon on the ah678 Platform. Response time: under 2 minutes for general support; data rights requests are forwarded to the compliance team for processing within the statutory timeframes.
• Email: [email protected] (plain text only — not a clickable link)

Please mark the subject line of any data rights request as "Data Privacy Request" to ensure it is directed to the appropriate team. ah678 may request additional verification of your identity before processing a data access or erasure request to protect against unauthorised third-party requests.