ah678 Privacy Policy

ah678 is an online gaming platform operating the website at ah678.cam, offering casino games, live dealer games, sports betting, bingo, and related gaming services to eligible players in the Philippines. As part of delivering these services, ah678 processes certain personal data about registered players and visitors to the Platform.

We take your privacy seriously. This Privacy Policy sets out in plain and transparent terms exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law. We encourage you to read this Policy in full. If you have any questions, our Data Privacy Officer is available to assist you.

This Policy applies to all personal data processed by ah678 in connection with the Platform, including data collected through the website, our customer support channels, and our payment processing integrations. It does not apply to the data practices of third-party game providers, payment processors, or other external services accessed via the Platform, which are governed by their own privacy policies.

ah678 collects the following categories of personal data, collected only to the extent necessary for the purposes described in this Policy:

We do not intentionally collect sensitive personal information (as defined under RA 10173) such as health, religious, or political data. If any such information is incidentally received, it will be deleted promptly.

ah678 collects your personal data through the following means:

• Direct Interactions: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technologies: When you access and use the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies.
• Payment Providers: When you transact via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, or GrabPay, the relevant payment processor shares transaction-related data with us to facilitate payment processing and confirm successful fund transfers.
• Identity Verification Partners: Third-party identity verification services used in our KYC process may provide us with verification outcomes and supporting data in compliance with Philippine AML requirements.
• Third-Party Game Providers: Our game providers may share aggregated or individual gaming activity data with us for the purpose of dispute resolution, RTP auditing, and fraud monitoring.

ah678 processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012 (RA 10173). The applicable legal bases are:

• Contractual Necessity: Processing required to fulfill our contractual obligations to you under the ah678 Terms & Conditions, including account management, game delivery, payment processing, and dispute resolution.
• Legal Obligation: Processing necessary to comply with our obligations under Philippine law, including Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulations, and NPC data privacy requirements.
• Legitimate Interests: Processing for purposes such as platform security, fraud detection, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent for processing, such as sending promotional communications, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ah678 uses your personal data for the following purposes, in all cases consistent with the legal basis identified in Section 4:

• Creating and managing your ah678 account, including processing deposits, withdrawals, and game participation.
• Verifying your identity and age (21+) in compliance with applicable Philippine gambling and anti-money laundering regulations.
• Detecting, investigating, and preventing fraud, unauthorized account access, money laundering, and other prohibited activities on the Platform.
• Monitoring gaming activity to identify signs of problem gambling and to enforce responsible gaming interventions, including self-exclusion requests.
• Communicating with you about your account, transactions, policy changes, and material service updates.
• Sending you promotional offers, bonuses, and marketing communications where you have not opted out.
• Personalizing your Platform experience based on your gaming preferences and usage history.
• Improving the performance, reliability, and features of the Platform through analytics and user feedback.
• Complying with audit, reporting, and record-keeping obligations imposed by Philippine regulatory authorities.
• Resolving disputes, enforcing our Terms & Conditions, and defending against legal claims.

We do not use your personal data for automated decision-making that produces significant legal effects on you without human review.

ah678 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Service Providers: Third-party vendors who assist us in operating the Platform, including payment processors (GCash, Maya, GrabPay, BPI, BDO, Metrobank), KYC/AML verification providers, cloud hosting services, customer support platforms, and analytics providers. These parties are contractually bound to process your data only on our instructions and in accordance with applicable privacy law.
• Game Providers: Licensed game developers (such as Microgaming and Pragmatic Play) whose games are offered on the Platform. These providers may receive gaming session data necessary to deliver the game service and resolve disputes.
• Regulatory Authorities: Disclosure to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law, court order, or regulatory directive.
• Fraud Prevention: Where necessary, sharing of data with law enforcement agencies or fraud prevention organizations in response to suspected criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ah678's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

In all cases of third-party disclosure, ah678 implements appropriate contractual safeguards and limits sharing to the minimum data necessary for the stated purpose.

ah678 uses cookies and similar technologies on the Platform to enhance your user experience, ensure security, and analyze how the Platform is used. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function, including maintaining your login session, processing transactions, and implementing security measures. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and preferred games to provide a more personalized experience.
• Analytics Cookies: Collect aggregated information about how visitors interact with the Platform, including pages visited and error messages, to help us improve performance and usability.
• Security Cookies: Used to detect fraud, unauthorized access attempts, and bot activity to protect the Platform and your account.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Most modern browsers allow you to refuse or delete cookies through their privacy or security settings.

ah678 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing data with independent advertising networks.

ah678 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account and KYC Records: Retained for a minimum of five (5) years after account closure, as required under the Anti-Money Laundering Act of the Philippines.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML and tax reporting obligations.
• Gaming History: Retained for three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years from the date of the interaction, unless the matter involves an ongoing dispute or legal claim.
• Marketing Preferences: Retained until you opt out, or for two (2) years of inactivity, whichever is earlier.
• Technical and Usage Logs: Retained for up to twelve (12) months for security monitoring and performance analysis purposes.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymized in accordance with industry-standard data disposal procedures.

ah678 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• AES-256 encryption for data at rest and TLS 1.3 encryption for all data transmitted between your device and our servers.
• Multi-factor authentication options for player accounts and mandatory multi-factor authentication for all administrative access to systems containing personal data.
• Continuous monitoring for suspicious access patterns, intrusion attempts, and anomalous activity through automated security information and event management (SIEM) systems.
• Strict role-based access controls ensuring that staff can only access personal data necessary for their specific job functions.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Incident response procedures with defined notification timelines for reporting personal data breaches to the NPC and affected individuals as required by RA 10173.

While ah678 employs robust security measures, no online platform can guarantee absolute security. You play a role in protecting your account by using a strong, unique password, enabling two-factor authentication, and notifying us immediately if you suspect unauthorized access to your ah678 account.

Some of ah678's service providers and game platform partners operate from locations outside the Philippines. Where your personal data is transferred to, stored in, or processed in a country outside the Philippines, ah678 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under RA 10173.

These safeguards may include: contractual data processing agreements incorporating standard data protection clauses; transfers only to jurisdictions recognized as providing adequate data protection; or binding corporate rules where applicable to affiliated entities.

By using the ah678 Platform, you acknowledge that your data may be processed in jurisdictions outside the Philippines in accordance with the safeguards described above. You may contact our Data Privacy Officer for more information about the specific safeguards applicable to any international transfer of your data.

The ah678 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. ah678 does not knowingly collect or process personal data from individuals under the age of 21.

As part of our account registration and KYC verification process, we implement age verification measures to prevent underage access to the Platform. If ah678 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed.

If you have reason to believe that a minor has registered an ah678 account or that ah678 has inadvertently collected personal data from a minor, please notify us immediately through our live chat support or via email.

You may exercise any of your data subject rights outlined earlier in this Policy (and as summarized in our Rights section above) by submitting a request to ah678 through any of the following channels:

• Live Chat: Available 24/7 directly through the ah678 Platform
• Email: [email protected]

To protect your privacy, we will require you to verify your identity before processing any data subject request. Once your identity is confirmed, ah678 will respond to your request within fifteen (15) working days from receipt, as required under NPC regulations. Complex requests may take up to thirty (30) working days, in which case we will notify you of the extended timeline.

Exercising your data subject rights is free of charge. However, ah678 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive in nature.

If you are not satisfied with our response to a data subject request, or if you believe that ah678 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The ah678 Platform may contain links or integrations to third-party services, including game providers, payment gateways, and support tools. These third-party services operate under their own privacy policies, which are independent of ah678's Privacy Policy.

ah678 is not responsible for the privacy practices, content, or data handling of any third-party service. We strongly encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform. Your interactions with third-party services are solely between you and the relevant third party.

ah678 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Where amendments are material, we will provide reasonable advance notice to registered players through the Platform, by email, or by on-site notification.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the ah678 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms.

If you do not agree with any material change to this Privacy Policy, you should discontinue your use of the Platform and may request account closure. Closing your account does not affect data retained for legal compliance purposes under applicable Philippine law.

In compliance with the Data Privacy Act of 2012, ah678 has appointed a Data Privacy Officer (DPO) responsible for overseeing data protection compliance and acting as the point of contact for data subject inquiries and regulatory correspondence.

For any privacy-related inquiries, requests to exercise your data subject rights, or concerns about this Privacy Policy, please contact:

• Data Privacy Officer — ah678
• Live Chat: Available 24/7 via the ah678 Platform
• Email: [email protected]

Our DPO and customer support team serve players from across the Philippines including Manila, Cebu, Davao, Quezon City, and Makati. We aim to respond to all privacy-related correspondence within five (5) business days of receipt. For formal data subject access requests, the fifteen (15) working day response timeline applies as described in Section 12.

For complaints that remain unresolved after engaging with our DPO, you may escalate to the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority responsible for enforcing RA 10173.