Privacy Policy

1.1 ahh99 ("we," "us," or "our") is the operator of the online gaming platform accessible at ahh99.org. ahh99 is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in accordance with applicable Philippine law, including the Data Privacy Act of 2012 (RA 10173).

1.2 ahh99 is the data controller responsible for the personal data collected through the Platform. Our designated Data Protection Officer (DPO) can be reached at the contact details provided in Section 13 of this Policy.

1.3 This Privacy Policy applies to all registered players, prospective registrants, and visitors to the ahh99 Platform. It covers data collected through the website, mobile browser access, live chat, customer support interactions, and any other channel through which you engage with ahh99.

2.1 ahh99 collects personal data only to the extent necessary to provide the Platform, comply with legal obligations, and protect the integrity of the gaming environment. The categories of personal data we collect are described below.

2.2 ahh99 does not collect sensitive personal information as defined under RA 10173 (such as health information, political affiliations, or biometric data) except where expressly required by PAGCOR regulations or anti-money laundering obligations and with your explicit consent where required.

2.3 We do not collect data from individuals we know to be under 21 years of age. If we discover that data has been collected from a minor, we will delete it immediately and close the associated account.

3.1 ahh99 processes personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your ahh99 account, including identity verification and two-factor authentication.
• Service Delivery: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard; providing access to all games and betting markets on the Platform.
• Regulatory Compliance: Fulfilling PAGCOR licensing requirements, complying with the Anti-Money Laundering Act (RA 9160, as amended), reporting obligations to the Anti-Money Laundering Council (AMLC), and cooperating with lawful requests from Philippine government authorities.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, collusion, and other prohibited conduct described in the Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and applying responsible gaming tools, including self-exclusion, as described in the Responsible Gaming Policy.
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance via live chat, email, and other support channels.
• Marketing: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest. You may opt out of marketing communications at any time through your account settings.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game performance, user experience, and Platform functionality.

3.2 ahh99 will not use your personal data for purposes incompatible with those stated in this Policy without first providing notice and, where required by law, obtaining your consent.

4.1 ahh99 processes your personal data on the following legal bases under RA 10173:

• Contractual Necessity: Processing required to perform our contract with you (the Terms & Conditions), including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AML obligations under RA 9160, tax laws, and other applicable Philippine legal requirements.
• Legitimate Interest: Processing for fraud prevention, security monitoring, and improving the Platform, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain cookie-based tracking, where consent is the appropriate basis. You may withdraw consent at any time.

5.1 ahh99 does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment Processors: GCash (GXI), PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard receive the minimum financial data necessary to process your transactions. These providers are bound by their own privacy policies and Philippine BSP regulations.
• Game Providers: Third-party game studios and live casino operators receive pseudonymised session data to deliver game content and calculate results. They do not receive your full identity or financial data.
• KYC & Identity Verification Partners: Where required for AML compliance, we may share identity documents with accredited verification service providers who process data solely for verification purposes under strict confidentiality obligations.
• Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government authorities may receive data as required by law, court order, or regulatory directive.
• IT & Infrastructure Providers: Cloud hosting, security, and analytics providers who process data solely as data processors acting under our documented instructions and contractual data processing agreements.

5.2 In the event of a merger, acquisition, or sale of substantially all assets of ahh99, personal data may be transferred as part of that transaction, subject to the same protections described in this Policy.

6.1 ahh99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse aggregate Platform usage.

6.2 Essential Cookies are necessary for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for essential cookies.

6.3 Analytics Cookies collect aggregated, anonymised data about how players use the Platform. This helps us improve performance and game delivery. These cookies require your consent on first visit.

6.4 Preference Cookies remember your settings (e.g., language preference, notification preferences). These are set based on your account settings choices.

6.5 You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies may impair Platform functionality, including the ability to log in to your ahh99 account.

7.1 ahh99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law:

• Account and Identity Data: Retained for five (5) years from account closure, as required by PAGCOR regulations and AML law.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, in compliance with RA 9160 (AMLA) and BSP reporting requirements.
• Gaming Activity Records: Retained for three (3) years from the date of each gaming session.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, or longer if related to an unresolved dispute.
• Marketing Consent Records: Retained until consent is withdrawn plus one (1) year for compliance audit purposes.

7.2 At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8.1 Under RA 10173 (Data Privacy Act), you have the following rights with respect to your personal data held by ahh99:

• Right to be Informed: The right to know what personal data we hold about you, why we hold it, and how we use it — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of your personal data held by ahh99.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. Most identity and contact data can be updated directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations (e.g., AML retention requirements).
• Right to Object: The right to object to processing based on legitimate interest, including direct marketing. Marketing opt-outs take effect within 48 hours of the request.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

8.2 To exercise any of the above rights, please contact the ahh99 Data Protection Officer using the contact details in Section 13. We will respond to verified requests within fifteen (15) business days, as required by the NPC.

9.1 ahh99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• Encryption of sensitive data at rest, including financial data and government ID numbers.
• Industry-standard password hashing (bcrypt) — plaintext passwords are never stored.
• Two-factor authentication (SMS OTP) on new device logins to your ahh99 account.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability patching.
• Automatic session timeout after a period of inactivity.

9.2 In the event of a personal data breach that is likely to adversely affect your rights and freedoms, ahh99 will notify the National Privacy Commission within 72 hours of becoming aware and will notify affected individuals without undue delay, as required by the NPC's Breach Notification Guidelines.

10.1 The ahh99 Platform is strictly intended for individuals aged 21 and over, as required by PAGCOR. We do not knowingly collect personal data from anyone under the age of 21.

10.2 Registration requires confirmation of age and may require submission of a government-issued Philippine ID. Accounts confirmed to belong to individuals under 21 will be immediately closed, and any personal data associated with such accounts will be deleted or anonymised in accordance with our data disposal procedures.

10.3 If you are a parent or guardian and believe your child has registered on the Platform, please contact us immediately at [email protected] (plain text — not a clickable link). We will act promptly to close the account and delete the data.

11.1 The primary processing of your personal data takes place within the Philippines. Where data is transferred to service providers located outside the Philippines (for example, cloud infrastructure or game provider servers), ahh99 ensures that such transfers are subject to appropriate safeguards, including contractual clauses that meet or exceed the standards required by the National Privacy Commission.

11.2 ahh99 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing the safeguards required under RA 10173 and NPC guidance.

12.1 ahh99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes will be communicated to registered players via email or a prominent notice on the Platform at least seven (7) days before taking effect.

12.2 The "Last Updated" date at the top of this Policy indicates the effective date of the current version. We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any update constitutes your acknowledgement of the revised Policy.

12.3 The most current version of this Privacy Policy is always accessible at ahh99.org/privacy-policy.

For data privacy queries, requests to exercise your rights, or to contact the ahh99 Data Protection Officer: