ah188 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ah188 ("ah188", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of users ("you", "your", "Player") who access or use the ah188 online gaming platform available at ah188.org and any associated services, features, or content ("Platform").

ah188 is committed to protecting the privacy and security of every Filipino player who trusts us with their personal information. This Policy has been prepared in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (the "DPA"), and its implementing rules and regulations as administered by the National Privacy Commission (NPC) of the Philippines.

By registering an account, logging in, or otherwise using the ah188 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the Platform.

2 Who We Are / Data Controller

For the purposes of the Data Privacy Act of 2012, ah188 acts as the Personal Information Controller (PIC) in respect of the personal data of registered players and website visitors. This means ah188 determines the purposes and means of processing your personal data.

ah188 operates the online gaming platform at ah188.org, serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and nationwide. Our platform offers live casino games, online slots, bingo, keno, crash games, and sports betting in Philippine Peso via local payment channels including GCash, PayMaya, BPI, BDO, and Metrobank.

For all data privacy inquiries, requests to exercise your rights, or complaints, please contact our designated Data Protection Officer (DPO) at the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

ah188 collects personal data that is necessary, adequate, relevant, and not excessive for the purposes for which it is collected, consistent with the principle of proportionality under the Data Privacy Act. The following categories of personal data may be collected:

• Full legal name as it appears on government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Gender
• Email address and Philippine mobile number (Globe or Smart)
• Residential address in the Philippines
• Username and encrypted password

• Government-issued photo identification (e.g., Philippine passport, driver's license, UMID, SSS ID, PhilHealth ID)
• Proof of residential address (e.g., utility bill, barangay certification)
• Selfie or facial verification image for identity matching
• Source of funds documentation where required by compliance procedures

• GCash account number or PayMaya number linked to your ah188 account
• Bank account details (BPI, BDO, or Metrobank) for verified withdrawal purposes
• Transaction history including all deposits, withdrawals, wagers, wins, and losses
• Bonus credits received, wagering activity related to promotions

• IP address and approximate geographic location
• Device type, browser type and version, operating system
• Login timestamps, session duration, and session frequency
• Pages visited on the Platform, game sessions accessed, and click interactions
• Cookie identifiers and similar tracking technologies (see Section 8)

• Records of communications with ah188 support via Live Chat, email, or any other channel
• Feedback, survey responses, and complaints submitted to ah188
• Marketing communication preferences and consent records

4 How We Collect Your Data

ah188 collects personal data through the following means:

• Directly from you: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, respond to a survey, or opt in to marketing communications.
• Automatically through the Platform: Technical and usage data is collected automatically when you access or interact with the Platform through cookies, web beacons, and server logs.
• From payment service providers: When you transact via GCash, PayMaya, or your bank, the payment provider may share transaction confirmation data with ah188 for the purpose of crediting your account or verifying withdrawals.
• From identity verification services: Third-party KYC and document verification services may provide identity confirmation data to ah188 as part of the mandatory verification process.
• From fraud prevention services: ah188 may receive risk signals or flagging data from fraud detection providers used to protect the integrity of the Platform.

5 How We Use Your Personal Data

The table below summarizes the primary purposes for which ah188 processes your personal data and the corresponding legal basis for each processing activity:

6 Legal Basis for Processing

ah188 processes personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The legal bases applicable to ah188's processing activities are:

• Contract Performance: Processing is necessary for the performance of the contract between you and ah188 — specifically, to create and manage your account, process your transactions, and provide the gaming services you have requested.
• Legal Obligation: Processing is necessary for ah188 to comply with applicable Philippine legal and regulatory requirements, including the Anti-Money Laundering Act (AMLA), PAGCOR regulatory obligations, and tax reporting requirements.
• Legitimate Interest: Processing is necessary for the purposes of ah188's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your rights and interests.
• Consent: For processing activities not covered by the above grounds (primarily direct marketing communications), ah188 will seek your prior, freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing Your Personal Data

ah188 does not sell your personal data to third parties. We do not share your personal data for third-party advertising or data brokerage purposes. Personal data may be shared only in the following limited circumstances:

ah188 engages carefully selected third-party service providers who process personal data on our behalf, strictly for the purposes described in this Policy. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, fraud detection services, game software providers (who may process technical data within game sessions), and customer support platform providers. All service providers are contractually bound to process personal data only on ah188's instructions and to implement appropriate security measures.

ah188 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or legitimate regulatory request. ah188 will take reasonable steps to notify affected players of such disclosures unless prohibited by law from doing so.

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, personal data held by ah188 may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer and of any material change in how their data will be processed.

8 Cookies and Tracking Technologies

ah188 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device when you visit a website. They serve several functions on the ah188 Platform:

• Essential Cookies: Required for the Platform to function correctly — including maintaining your login session, remembering your language and currency preferences, and ensuring secure navigation. These cannot be disabled without affecting core Platform functionality.
• Performance Cookies: Used to collect anonymized analytics data about how players use the Platform — which pages are visited most, how long sessions last, and where errors occur. This data is used to improve Platform performance and user experience.
• Functional Cookies: Used to remember your preferences and personalization settings, such as your preferred game categories or notification settings.
• Marketing Cookies: Used with your consent to deliver relevant promotional communications about ah188 features and offers. You may decline marketing cookies without affecting your access to the Platform.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the Platform. ah188 does not use cookies to track your activity across third-party websites for advertising network purposes.

9 Data Retention

ah188 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ah188's data disposal procedures. Where anonymization is used, the resulting data is no longer personal data and may be retained for statistical and analytical purposes without limitation.

10 Data Security

ah188 implements appropriate technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and ah188's servers is encrypted using 256-bit Transport Layer Security (TLS). The padlock icon visible in your browser confirms this is active during every session.
• Encryption at rest: Sensitive data, including passwords and financial information, is stored in encrypted form. Passwords are stored using a one-way cryptographic hash — they cannot be read or recovered by anyone, including ah188 staff.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorized personnel with a legitimate operational need may access player personal data, and all such access is logged and audited.
• Regular security assessments: The Platform undergoes periodic security testing, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
• Two-Factor Authentication: Optional 2FA via SMS to your registered Philippine mobile number is available to all players to strengthen account access security.
• Data breach response: ah188 maintains a documented incident response procedure. In the event of a personal data breach that poses a real risk to affected players, ah188 will notify the National Privacy Commission and affected players in accordance with the DPA's notification requirements.

11 Children's Privacy and Age Restrictions

The ah188 Platform is strictly intended for individuals who are at least 21 years of age. ah188 does not knowingly collect, process, or retain personal data of individuals under the age of 21. This is both a legal requirement under the PAGCOR regulatory framework and a firm commitment of ah188's responsible gaming policy.

Age verification is conducted as part of the account registration and KYC process. Where ah188 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under 21 years of age, that account will be immediately suspended, all funds will be handled in accordance with applicable law, and the matter may be referred to the appropriate regulatory authorities.

Parents and guardians are responsible for monitoring their children's online activity and for ensuring that minors do not access online gaming platforms. If you believe a minor has registered on or accessed ah188, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

12 Exercising Your Data Rights

Under the Data Privacy Act of 2012, you have the rights described in the summary cards at the top of this page. To exercise any of these rights, please submit a written request to ah188's Data Protection Officer at the contact details listed in Section 15. Your request must include:

• Your full name and registered ah188 username or email address.
• The specific right you wish to exercise and, where relevant, the personal data to which your request relates.
• A copy of government-issued photo identification to verify your identity (to prevent unauthorized access to personal data by third parties claiming to be you).

ah188 will acknowledge receipt of your request within five (5) business days and will respond substantively within fifteen (15) business days from the date of acknowledgment. Where a request is complex or involves a large volume of data, this period may be extended by a further fifteen (15) business days, with prior notice to you.

Requests to exercise your rights are free of charge. However, where requests are manifestly unfounded or excessive — particularly where they are repetitive — ah188 reserves the right to charge a reasonable administrative fee or to decline the request.

If you are dissatisfied with ah188's response to your data privacy request, or if you believe ah188 has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

13 International Data Transfers

Some of ah188's service providers — including certain game software providers and technology infrastructure suppliers — may be located outside of the Philippines. Where personal data is transferred to recipients in other countries, ah188 ensures that such transfers comply with the requirements of the Data Privacy Act of 2012 by implementing appropriate safeguards, which may include:

• Data processing agreements incorporating the standard contractual clauses or equivalent data protection obligations recognized under Philippine law.
• Transfers to countries or entities that the National Privacy Commission has determined provide an adequate level of data protection.
• Binding corporate rules where applicable for intra-group transfers.

ah188's primary data infrastructure is located within Asia-Pacific regions. Where personal data is processed outside the Philippines, ah188 takes commercially reasonable steps to ensure it is subject to equivalent protections to those required under the DPA.

14 Changes to This Privacy Policy

ah188 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date at the top of this Policy will be updated whenever changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights under this Policy — ah188 will provide advance notice to registered players via email to your registered address and/or a prominent notice on the Platform. We will provide reasonable notice of at least fourteen (14) days before material changes take effect.

Your continued use of the ah188 Platform following the effective date of any revised Policy constitutes your acknowledgment of the changes. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure.

15 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ah188, please contact our Data Protection Officer using the information below. All data privacy communications should clearly state "Data Privacy Request" in the subject line:

ah188's Live Chat support is available 24/7 for general queries, with an average response time of 3–5 minutes. For formal data privacy requests that require written response and identity verification, please use the email channels above. ah188 is committed to responding to all privacy-related communications in a timely, transparent, and respectful manner.