Privacy Policy — ah33 Casino

ah33 ("we," "us," "our," "the Platform") takes the privacy of our players seriously. This Privacy Policy sets out in clear terms how ah33 collects, processes, stores, and protects the personal data of individuals who use the ah33 platform available at ah33.cam.

ah33 is committed to compliance with applicable data protection legislation, including the Philippines' Republic Act No. 10173 — Data Privacy Act of 2012 ("DPA") and its Implementing Rules and Regulations. Where ah33 serves players from other jurisdictions, we additionally endeavour to comply with the data protection standards applicable in those locations.

This Policy should be read together with the ah33 Terms & Conditions and the Responsible Gaming Policy. In the event of a conflict between this Policy and those documents on matters of personal data processing, this Privacy Policy shall prevail.

For the purposes of applicable data protection law, ah33 is the data controller responsible for the personal data collected through ah33.cam. As data controller, ah33 determines the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data subject rights, you may contact ah33's Data Privacy contact point at: [email protected]. Please include "Data Privacy" in the subject line of your enquiry to ensure it is routed to the appropriate team.

ah33 collects personal data in three primary ways: information you provide directly, data generated automatically by your use of the Platform, and information received from third parties as part of verification and compliance processes.

• Registration data: Full legal name, date of birth, email address, Philippine mobile number, and chosen username and password.
• KYC / identity verification data: Government-issued photo ID (e.g., PhilSys National ID, Passport, SSS/GSIS ID, Driver's Licence, PRC ID, Voter's ID), selfie photographs, and proof of payment method ownership.
• Financial data: Payment method details including GCash account reference, PayMaya account reference, bank account name and number (where applicable for bank transfer processing). Full payment card numbers are never stored directly by ah33.
• Communications: Records of your interactions with ah33 customer support, including live chat logs and email correspondence.
• Responsible gaming declarations: Any self-imposed limit settings, cool-off requests, and self-exclusion requests you submit through your account or via support.

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet amounts, session duration, login times, and navigation patterns within the Platform.
• Transaction data: Complete records of all deposits, withdrawals, wagers placed, game outcomes, and bonus activity on your ah33 account.
• Cookies and tracking technologies: See Section 7 (Cookies & Tracking) for full details.

• Identity verification providers: Confirmation of identity document authenticity and biometric facial match results used to complete KYC checks.
• Payment processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners.
• Fraud and AML screening services: Risk signals and screening results used to fulfil anti-money laundering obligations.

ah33 processes your personal data for the following purposes:

Under the Philippines Data Privacy Act of 2012 and its Implementing Rules, ah33 processes your personal data under the following lawful bases depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the ah33 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required for ah33 to comply with applicable laws, including KYC verification, anti-money laundering screening, and age verification requirements under Philippine online gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional communications and marketing where you have provided your explicit consent. You may withdraw consent at any time by contacting support or updating your communication preferences in your ah33 account settings.

ah33 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only as described below and only to the extent necessary for each purpose:

• Payment processors: GCash (GXI), PayMaya (Voyager Innovations), and Philippine banking partners (BPI, BDO, Metrobank) receive transaction-specific data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and biometric verification services receive your identity document images and facial data for the sole purpose of completing age and identity verification required for your ah33 account.
• Game providers: Licensed game studios whose titles are available on ah33 receive anonymised session tokens and, where technically necessary, gameplay-relevant data. They do not receive your full identity or financial data.
• Fraud and AML screening services: Transaction monitoring and screening providers receive payment and account activity data to identify and flag potentially suspicious activity in fulfilment of AML obligations.
• IT and hosting providers: Infrastructure and cloud service providers who host the ah33 platform and database systems are subject to contractual data processing agreements that require them to handle data only as instructed by ah33.
• Regulatory authorities: Where required by law, by a court order, or by direction of a competent regulatory authority (including PAGCOR or the National Privacy Commission of the Philippines), ah33 will disclose personal data as legally obligated.

All third-party service providers engaged by ah33 are required to implement appropriate technical and organisational measures to protect your personal data and to process it only for the purposes specified in their agreements with ah33.

ah33 uses cookies and similar tracking technologies on ah33.cam to operate the platform effectively, remember your preferences, and analyse how the platform is used. By using ah33.cam, you consent to the use of cookies as described in this section.

• Essential cookies: Required for the Platform to function. These cookies manage your login session, maintain your account authentication state, and support core security features. They cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and last-played game selections to personalise your ah33 experience.
• Analytical cookies: Used to collect aggregated, anonymised data about how visitors use ah33.cam — including pages visited, session duration, and navigation flow — to help us improve the platform. This data is not linked to individual player identities.
• Security cookies: Used to detect and prevent fraudulent login attempts, CSRF attacks, and other security threats.

ah33 does not use advertising or behavioural tracking cookies that profile your activity across third-party websites. You may manage cookie preferences through your browser settings, noting that disabling essential cookies will affect Platform functionality.

ah33 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data exchanged between your browser or app and ah33 servers is encrypted using TLS (Transport Layer Security). The padlock icon in your browser confirms this connection is active.
• Password security: Passwords are never stored in plain text. ah33 uses industry-standard hashing and salting algorithms. ah33 staff cannot retrieve your password — only a password reset is possible.
• Access controls: Access to player personal data is restricted to authorised staff on a strict need-to-know basis. All internal access to sensitive data systems is logged and audited.
• Two-factor authentication (2FA): SMS OTP-based 2FA is available for all ah33 accounts and is strongly recommended. 2FA significantly reduces the risk of account takeover even if your password is compromised.
• Incident response: ah33 maintains documented procedures for responding to personal data breaches. In the event of a breach that poses a risk to your rights and freedoms, ah33 will notify the relevant supervisory authority and affected individuals as required by applicable law.

ah33 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations. The following general retention periods apply:

• Active accounts: Personal data is retained for the duration of your ah33 account's active status, plus a minimum of five (5) years following account closure, as required by anti-money laundering legislation and applicable Philippine gaming regulations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction or investigation, whichever is later.
• Transaction records: Full records of all deposits, withdrawals, wagers, and winnings are retained for a minimum of five (5) years following the transaction date in compliance with AML obligations.
• Customer support records: Communication records including live chat logs and email correspondence are retained for three (3) years following the date of the last interaction, unless a longer retention period is required for an ongoing dispute or regulatory investigation.
• Marketing data: If you have opted in to marketing communications, your marketing preferences are retained until you opt out. Following opt-out, a record of your opt-out is retained to ensure your preference is honoured.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the data subject's identity.

Under the Philippines Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ah33. To exercise any of these rights, contact ah33 at [email protected] with the subject line "Data Privacy Request." We will respond within a reasonable timeframe and no later than as required by applicable law.

The ah33 platform is strictly prohibited for use by individuals under the age of 21 years in the Philippines, in accordance with applicable online gaming regulations administered by PAGCOR. ah33 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is performed as a mandatory step during the KYC process prior to the processing of any withdrawal. Where ah33 discovers or has reasonable grounds to believe that a registered user is under 21 years of age, the account will be immediately suspended, all pending transactions will be cancelled, and any deposited funds will be returned to the depositing payment method after appropriate compliance checks.

If you believe that ah33 has inadvertently collected personal data from an individual under the age of 21, please contact us immediately at [email protected] so that the data can be promptly deleted and the account closed.

Some of ah33's service providers — including game studios, cloud infrastructure providers, and KYC partners — may be located outside the Philippines and therefore process your personal data in jurisdictions other than the Philippines. Where such cross-border transfers occur, ah33 ensures that:

• The receiving party implements appropriate safeguards for the protection of personal data, such as contractual data processing agreements containing standard data protection clauses.
• The transfer is made only to the extent necessary for the specific service being provided (e.g., delivering a game session to a studio hosted in another country).
• The receiving jurisdiction provides an adequate level of data protection, or specific contractual or other safeguards are in place where adequacy has not been formally determined.

By using ah33, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines as described above.

ah33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform operations. Where changes are material — including changes that affect your rights or the scope of data we collect — ah33 will notify you by email to your registered address no less than seven (7) calendar days before the changes take effect.

For non-material changes (such as clarifications, corrections of typographical errors, or updates required by immediate regulatory instruction), changes may take effect upon publication of the updated Policy on ah33.cam. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how ah33 protects your data. Your continued use of the ah33 Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ah33, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy" or "Data Privacy Request" to ensure your enquiry reaches the correct team promptly.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on ah33.cam. Our agents can handle general privacy questions and escalate formal data subject access requests to the designated privacy team.
• Response Time: ah33 aims to acknowledge all data privacy requests within 72 hours and to resolve them within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the extended timeline.