ah678 Privacy Policy

1. Who We Are (Data Controller)

ah678 is the data controller responsible for personal data processed in connection with the online gaming platform available at https://ah678.org ("Platform"). ah678 determines the purposes and means of processing personal data collected through the Platform and is accountable for that processing under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

For all privacy-related inquiries, requests, and complaints, our Data Protection Officer ("DPO") can be contacted at: support at ah678.org (plain text — not a clickable link). Our registered contact address is in the Philippines and is available upon verified written request.

2. Personal Data We Collect

ah678 collects personal data through the following means: directly from you when you register, deposit, play, or contact support; automatically through your use of the Platform via cookies and server logs; and from third-party identity verification, payment processing, and fraud prevention providers where required.

Registration and account data:

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations);
• Philippine mobile number (Globe, Smart, or DITO) used as the primary account identifier;
• Email address, if provided;
• Username and encrypted password hash;
• Referral code, if used during registration.

Identity verification data (KYC):

• Copy of a government-issued Philippine ID (e.g., PhilSys ID, UMID, passport, driver's licence, PRC ID, voter's ID);
• Selfie or liveness-check image for biometric matching, where required;
• Proof of address (e.g., utility bill, bank statement addressed to a Philippine address), where required for enhanced due diligence.

Financial and transaction data:

• GCash mobile number, Maya account reference, or other payment method identifiers linked to your ah678 account;
• Deposit amounts, withdrawal amounts, dates, and transaction reference numbers;
• Bank account details where bank transfers (BPI, BDO, Metrobank) are used;
• Source-of-funds documentation where required under Philippine AMLA obligations.

Gameplay and behavioural data:

• Game sessions, bet amounts, win/loss outcomes, and game history;
• Responsible gaming settings you configure (deposit limits, session timers, self-exclusion status);
• Promotional offer eligibility, bonus redemption history, and wagering progress.

Technical and device data:

• IP address, approximate geolocation (country/region level), and ISP;
• Device type, operating system, browser type and version;
• Session timestamps, login history, and access logs;
• Cookie identifiers and similar tracking technologies (see Section 5).

Communications data:

• Content of support chat conversations, emails, and any other communications you send to ah678;
• Records of promotional communications you have opted into or out of.

3. How We Use Your Personal Data

ah678 processes personal data for the following purposes:

• Account provision and management: Creating, maintaining, and operating your ah678 account; processing deposits, wagers, and withdrawals; authenticating your identity at login; and managing your responsible gaming settings.
• Identity verification and age verification: Confirming that you meet the 21+ minimum age requirement and verifying your identity in compliance with PAGCOR licensing conditions and Philippine AMLA obligations.
• Anti-money laundering and fraud prevention: Screening transactions against applicable watchlists; monitoring for unusual patterns indicative of fraud, money laundering, or terrorist financing; and reporting to AMLC where legally required.
• Customer support: Responding to your queries, complaints, and requests; investigating disputes; and improving our support processes.
• Service improvement and analytics: Understanding how Filipino players use the Platform; identifying and fixing technical issues; improving game selection and user experience; and conducting internal research.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — where you have provided your consent or where permitted by applicable law. You may opt out at any time.
• Legal and regulatory compliance: Meeting our obligations under Philippine law, PAGCOR regulations, the DPA, and applicable AMLA requirements; responding to lawful requests from regulators, courts, or law enforcement.

4. Legal Bases for Processing

ah678 processes your personal data under the following legal bases as recognised by the Philippine Data Privacy Act:

• Performance of a contract: Processing necessary to provide the gaming services you have contracted with ah678 to receive — account management, deposits, withdrawals, and game access.
• Legal obligation: Processing required by PAGCOR regulations, Philippine AMLA obligations, tax reporting requirements, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service quality improvement, where our interests do not override your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where your prior informed consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

The ah678 Platform uses cookies and similar tracking technologies to enable essential functionality, understand how players use the site, and deliver relevant promotional content. The categories of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function — session management, security tokens, login state. These cannot be disabled without rendering the Platform non-functional.
• Analytics cookies: Used to understand aggregate Platform usage patterns — pages visited, session duration, device types. Data is anonymised at the aggregate level.
• Preference cookies: Store your language, responsible gaming settings, and display preferences between sessions.
• Marketing cookies: Used to identify you as an ah678 player when you interact with ah678 promotions — only placed with your consent.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

6. Sharing Your Personal Data

ah678 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with the following categories of recipients only to the extent necessary:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and other payment partners — solely to facilitate deposit and withdrawal transactions;
• Identity verification providers: Third-party KYC and AML screening services operating under contractual data processing agreements that prohibit onward disclosure;
• Game providers: Game studios and live dealer operators whose games are offered on the Platform — game session data shared only to the extent necessary to provide the game and resolve disputes;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection providers operating under contractual data processing agreements;
• Regulatory authorities: PAGCOR, AMLC, the National Privacy Commission ("NPC"), and Philippine law enforcement — where ah678 is under a legal obligation to disclose, or pursuant to a lawful order.

7. International Data Transfers

Some of ah678's service providers and game studio partners are located outside the Philippines. Where personal data is transferred to recipients in other countries, ah678 ensures that appropriate safeguards are in place as required by the DPA, including contractual clauses requiring equivalent data protection standards. Transfers are made only to countries or organisations providing an adequate level of protection or subject to binding contractual obligations.

8. Data Retention

ah678 retains personal data for the following periods:

• Account and transaction data: For the duration of your active account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and Philippine AMLA obligations;
• KYC documentation: For a minimum of five (5) years from the date of the last transaction, in accordance with AMLA requirements;
• Support communications: For three (3) years from the date of the interaction, unless subject to an ongoing dispute or legal hold;
• Marketing consent records: For the period during which consent is active and for three (3) years thereafter as evidence of consent.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9. Your Data Protection Rights

Under the Philippine Data Privacy Act, registered players and data subjects have the following rights in relation to personal data held by ah678:

• Right to be informed: The right to know that your personal data is being collected, used, and retained, and the basis for doing so — fulfilled by this Privacy Policy;
• Right of access: The right to request a copy of the personal data ah678 holds about you;
• Right to rectification: The right to correct inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to object: The right to object to processing of your data for direct marketing purposes at any time;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe ah678 has violated your data protection rights.

To exercise any of these rights, contact our Data Protection Officer at support at ah678.org. We will respond to verified requests within thirty (30) days.

10. Children's Privacy and the 21+ Requirement

The ah678 Platform is strictly for individuals aged 21 years and above, in compliance with PAGCOR's minimum age requirement for online gaming in the Philippines. ah678 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately suspend the account, delete or isolate the data, and report the matter as required by applicable regulations.

If you are a parent or guardian and believe your child has registered with ah678, please contact our support team immediately via live chat or by email at support at ah678.org.

11. Security Measures

ah678 implements technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• AES-256 encryption of personal data at rest;
• TLS 1.3 encryption of all data transmitted between your device and ah678 servers;
• Multi-factor authentication for all administrative access to systems holding personal data;
• Role-based access controls ensuring ah678 staff access only the data necessary for their specific function;
• Regular security audits and penetration testing by independent cybersecurity firms;
• Intrusion detection and continuous security monitoring of Platform infrastructure.

While ah678 takes all reasonable steps to secure your personal data, no system is completely immune to attack. You are encouraged to use a strong, unique password and to enable two-factor authentication on your ah678 account.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ah678 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the DPA. Where the breach is likely to result in a high risk to affected data subjects, ah678 will also notify affected players directly via their registered mobile number or email address without undue delay.

13. Changes to This Privacy Policy

ah678 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, or changes to the Platform's functionality. When material changes are made, we will notify registered players via the mobile number or email address associated with their account, or by a prominent notice on the Platform, at least fourteen (14) days before the changes take effect. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Policy.

14. Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, and complaints, please contact:

• Data Protection Officer, ah678
• Email: support at ah678.org (plain text — not a clickable link)
• Live Chat: Available 24/7 through the ah678 Platform

If you are not satisfied with our response to your privacy inquiry, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official government website.