aha77 Privacy
Policy

aha77 is an online casino and sports betting platform serving Filipino players across the Philippines. As an operator handling significant personal and financial data, aha77 takes its privacy obligations seriously and is committed to processing personal data lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("DPA"), as administered by the National Privacy Commission ("NPC").

This Policy applies to:

• All registered members of the aha77 platform;
• All visitors to the aha77 website at aha77.vip, whether or not they hold a registered account;
• Persons who contact aha77 customer support via Live Chat, email, or any other communication channel.

This Policy does not apply to third-party websites or services linked from the aha77 platform, each of which is governed by its own privacy policy.

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, including name, contact details, government ID numbers, financial data, and digital identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Sensitive Personal Information" means Personal Data about a person's race, ethnic origin, marital status, age, color, religious or philosophical beliefs, health, education, genetic or sexual life, prior legal proceedings, government-issued identification numbers, or financial information where a reasonable expectation of confidentiality applies.
• "Data Subject" means any natural person whose Personal Data is processed by aha77, including registered members and website visitors.
• "Third Party" means any person or entity other than aha77 and the Data Subject.

aha77 collects the following categories of Personal Data from members and platform users:

aha77 collects Personal Data through the following means:

• Direct provision by you — when you create an aha77 account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions;
• Automated technical collection — when you visit or use the aha77 platform, our systems automatically record Technical Data including your IP address, device information, browser type, and session activity;
• Cookies and similar technologies — as described in Section 8 of this Policy;
• Third-party sources — where permitted by law, we may receive identity verification confirmations or fraud screening results from regulated third-party KYC service providers and payment processors operating in the Philippines;
• Gaming activity — all game sessions, wagers, outcomes, and responsible gaming tool interactions generate data records that are stored as part of your aha77 account history.

aha77 processes your Personal Data for the following specific purposes:

• Account management — to create, maintain, and administer your aha77 account, including login authentication and security;
• Service provision — to enable your access to and use of all gaming products, betting markets, and platform features;
• Payment processing — to process deposits and withdrawals via GCash, Maya, BPI, BDO, and other approved payment channels;
• Identity and age verification (KYC) — to comply with legal obligations to verify that all Members are at least 21 years of age and are who they claim to be;
• Anti-money laundering (AML) compliance — to screen transactions and identify suspicious activity as required by Philippine AML legislation and PAGCOR directives;
• Fraud prevention and security — to detect, investigate, and prevent fraud, account compromise, cheating, and other prohibited conduct;
• Customer support — to respond to your inquiries, process complaints, and provide technical assistance;
• Responsible gaming — to monitor gaming patterns, enforce self-imposed deposit limits, and identify members who may require responsible gaming interventions;
• Marketing and communications — to send promotional offers, bonus notifications, and platform updates where you have consented to receive such communications;
• Platform improvement — to analyse usage patterns and optimise the aha77 platform experience for Filipino players;
• Legal and regulatory compliance — to comply with orders, directives, and reporting requirements from Philippine regulatory authorities including the NPC and PAGCOR.

Under the Philippine Data Privacy Act, aha77 processes your Personal Data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and aha77 (your Member account and the associated gaming services);
• Legal obligation — processing is required to comply with applicable Philippine law, including AML/CTF obligations, age verification requirements, PAGCOR regulatory directives, and NPC data protection requirements;
• Legitimate interests — processing for fraud prevention, security, and platform improvement serves aha77's legitimate interests and those of its Members, provided such interests do not override your fundamental rights;
• Consent — where processing is not required by contract or law (e.g., direct marketing communications), aha77 relies on your freely given, specific, and informed consent, which you may withdraw at any time.

aha77 may share your Personal Data with the following categories of recipients:

• Payment processors and e-wallet providers — including GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and GrabPay, solely to process your deposit and withdrawal transactions;
• KYC and identity verification service providers — third-party providers engaged to verify your identity documents as required for regulatory compliance;
• Game software providers — certified game studios supplying content to the aha77 platform may receive limited technical data (e.g., session tokens, game round IDs) to facilitate game delivery and dispute resolution;
• Fraud and security service providers — third-party fraud detection and cybersecurity providers engaged to protect aha77 and its Members;
• Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any Philippine court of competent jurisdiction, where disclosure is required by law;
• Professional advisers — lawyers, auditors, and accountants engaged by aha77 in connection with legal, compliance, or audit functions, subject to professional confidentiality obligations.

All third-party service providers engaged by aha77 are subject to written data processing agreements requiring them to process Personal Data only on aha77's instructions, maintain appropriate security measures, and comply with applicable data protection law.

aha77 uses cookies and similar technologies to operate the platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies — required for the aha77 platform to function, including session management, login authentication, and security tokens. These cannot be disabled without impacting platform functionality;
• Functional cookies — used to remember your preferences, such as language settings, display preferences, and responsible gaming configuration;
• Analytics cookies — used to collect aggregated, anonymised data about platform usage to help aha77 understand how Filipino players interact with the site and to improve the platform experience;
• Fraud prevention cookies — used to detect and prevent fraudulent login attempts, account sharing, and other security threats.

aha77 implements technical and organisational measures appropriate to the risks involved in processing your Personal Data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the aha77 platform;
• Encryption of sensitive Personal Data at rest in aha77 databases, including government ID documents and financial records;
• Role-based access controls limiting personnel access to Personal Data on a strict need-to-know basis;
• Regular third-party penetration testing and security audits of the aha77 platform infrastructure;
• Multi-factor authentication requirements for aha77 administrative systems;
• Formal data breach response procedures, including notification obligations to the NPC and affected Members in the event of a qualifying data breach.

aha77 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, as set out in this Policy, or as required by applicable Philippine law and regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with aha77's data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your Personal Data held by aha77:

• Right to be informed — to be notified about how your Personal Data is collected and used, as set out in this Policy;
• Right of access — to request a copy of the Personal Data aha77 holds about you, including information about how it is processed;
• Right to rectification — to request correction of inaccurate or incomplete Personal Data;
• Right to erasure — to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to data portability — to receive your Personal Data in a structured, commonly used format and to transmit it to another data controller;
• Right to object — to object to processing of your Personal Data for direct marketing or where processing is based on legitimate interests;
• Right to withdraw consent — to withdraw consent for any processing based on your consent (e.g., marketing communications) at any time, without affecting the lawfulness of prior processing;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe aha77 has violated your data privacy rights.

The aha77 platform is strictly intended for persons aged twenty-one (21) years and older, in accordance with Philippine gambling regulations. aha77 does not knowingly collect Personal Data from any person below the age of 21. Age verification is mandatory as part of the account registration and KYC process.

If aha77 discovers that Personal Data has been collected from a person below the legal minimum age, the associated account will be immediately closed, all Balance will be returned to the depositing payment method, and the data will be securely deleted as promptly as technically feasible. If you have reason to believe that a minor has registered on the aha77 platform, please notify us immediately via Live Chat or at the contact details in Section 15.

aha77 is primarily a Philippines-focused platform and processes the majority of Member Personal Data within the Philippines. However, certain service providers — including game studios, cloud infrastructure providers, and fraud detection partners — may be located in other jurisdictions, potentially including Singapore, Hong Kong, or European Economic Area countries.

Where Personal Data is transferred outside the Philippines, aha77 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved or recognised by the NPC;
• Transfers to jurisdictions with an NPC-recognised adequate level of data protection;
• Specific consent from the Data Subject where required by the DPA.

aha77 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to Members via email notification to the registered address associated with your aha77 account, and by publishing the updated Policy at aha77.vip/privacy-policy with a revised Effective Date.

Your continued use of the aha77 platform following publication of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated terms, you must discontinue use of the platform and may request account closure by contacting support.

aha77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the Philippine Data Privacy Act. For all privacy-related inquiries, data subject requests, or complaints, please contact:

If you are not satisfied with aha77's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC is the competent supervisory authority for data protection matters in the Philippines.