ah66 Privacy Policy

1. Introduction

ah66 is an online casino and sports betting platform primarily serving Filipino players at ah66.asia. In the course of providing gaming, payment processing, and customer support services, ah66 collects and processes personal data about the individuals who register accounts and use the Platform.

We take the privacy of our players seriously. This Privacy Policy has been prepared in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC) of the Philippines. It sets out what personal data we collect, why we collect it, how we use and protect it, with whom we share it, and what rights you have in relation to your data.

We encourage all ah66 players — whether accessing the platform from Metro Manila, Cebu, Davao, or elsewhere in the Philippines — to read this Policy carefully. If anything in this document is unclear, please contact our Data Protection Officer (DPO) using the contact details in Section 15.

2. Scope & Applicability

This Privacy Policy applies to:

• All registered players and account holders on the ah66 Platform
• Visitors to the ah66.asia website who have not registered an account
• Individuals who contact ah66 customer support via live chat or email
• Any person whose personal data is processed by ah66 in connection with its services

This Policy does not apply to third-party websites, applications, or services that may be linked to or from the ah66 Platform. ah66 is not responsible for the privacy practices of third parties, including game providers whose content is accessible through the Platform.

3. Personal Data We Collect

ah66 collects the following categories of personal data about players and users:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — must be 21 or older)
• Philippine mobile number (primary identifier)
• Username chosen at registration
• Account password (stored in hashed/encrypted form — never in plaintext)

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., Philippine passport, SSS card, PhilSys ID, driver's licence)
• Proof of address documents where required
• Selfie or live photograph for identity confirmation where requested
• Payment method ownership documentation (e.g., screenshot of GCash or Maya account in your name)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, method used)
• Betting history (games played, amounts staked, outcomes)
• Wallet balance history
• Bonus and promotion redemption history
• Payment method details (e-wallet account references, partial bank account numbers)

3.4 Technical & Device Data

• IP address at the time of login and during sessions
• Device type, operating system, and browser version
• Session duration and activity logs
• Geolocation data (country/region level, derived from IP address)
• Cookie identifiers and similar tracking data (see Section 10)

3.5 Communications Data

• Customer support chat transcripts and email correspondence
• Complaint and dispute records
• Feedback and survey responses where voluntarily submitted
• SMS OTP delivery records (mobile number and timestamp only)

3.6 Responsible Gaming Data

• Self-imposed deposit limits and session time preferences
• Self-exclusion requests and status
• Responsible gaming tool usage history

4. How We Collect Your Data

ah66 collects personal data through the following means:

4.1 Directly from You

The majority of your personal data is provided directly by you when you: register an account on the ah66 Platform; complete the KYC identity verification process; make a deposit or request a withdrawal; contact customer support; set responsible gaming preferences; or respond to any platform communication.

4.2 Automatically Through Platform Use

Technical and usage data is collected automatically when you access and interact with the ah66 Platform. This includes IP address logging, session activity tracking, device and browser fingerprinting, and cookie data. This automated collection is necessary for platform security, fraud detection, and service quality monitoring.

4.3 From Payment Processors

When you deposit or withdraw funds via GCash, Maya, BPI, BDO, UnionBank, or other supported payment channels, ah66 receives transaction confirmation data from the payment processor, including transaction reference numbers, timestamps, and account identifiers sufficient to match the payment to your ah66 account.

4.4 From Third-Party Game Providers

Licensed game providers whose titles are accessible through the ah66 Platform may transmit session data, including game round results and RNG outputs, to ah66 for settlement, dispute resolution, and regulatory compliance purposes.

5. Purposes of Data Processing

ah66 processes your personal data for the following defined purposes:

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ah66 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to register your account, verify your identity, process your deposits and withdrawals, and settle your bets — without which ah66 cannot provide the Platform services to you.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR regulatory requirements, and the Data Privacy Act itself.
• Legitimate Interest: Processing carried out in ah66's legitimate interests — including fraud prevention, platform security, abuse detection, and service analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — such as sending promotional communications or personalized bonus notifications — where you have provided freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time by updating your communication preferences in your account settings.

7. Data Sharing & Third Parties

ah66 does not sell your personal data. We share personal data only in the following limited circumstances:

7.1 Licensed Game Providers

Player session identifiers and account references are shared with third-party game providers (such as PG Soft, Pragmatic Play, Jili, JDB, and others) solely to initiate, monitor, and settle game sessions. Game providers receive the minimum data necessary and are contractually prohibited from using it for any purpose other than game delivery and technical operations.

7.2 Payment Processors

Transaction-related data is shared with payment processors (GCash operator G-Xchange, PayMaya Philippines, BancNet, and other relevant processors) to the extent necessary to process your deposits and withdrawals. Payment processors operate under their own privacy policies and applicable financial regulations.

7.3 Fraud Prevention & AML Compliance

ah66 may share personal data with licensed fraud prevention service providers and, where legally required, with Philippine government agencies (including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission) to comply with regulatory obligations or lawful orders.

7.4 Professional Advisers

ah66 may disclose personal data to its lawyers, auditors, accountants, and other professional advisers where necessary in connection with the operation of the Platform, subject to applicable professional confidentiality obligations.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ah66's business, player personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained by the successor entity.

8. Data Retention

ah66 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, taking into account the following retention standards:

After the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized and aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

ah66 implements a multi-layered set of technical and organisational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and the ah66 servers is encrypted using TLS 1.2 or higher (256-bit). The padlock icon in your browser confirms this encryption is active during your session.
• Encryption at Rest: Sensitive personal data stored in ah66 databases — including KYC documents and financial records — is encrypted at rest using industry-standard algorithms.
• Password Security: Account passwords are never stored in plaintext. They are processed through a one-way cryptographic hashing algorithm with salting before storage, meaning ah66 staff cannot read your password.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff access is governed by role-based access controls and logged. Administrative access to production systems requires multi-factor authentication.
• Intrusion Detection: ah66 maintains automated intrusion detection and anomaly-monitoring systems on its infrastructure. Suspicious activity patterns trigger immediate alerts for investigation.
• Two-Factor Authentication: Players may enable 2FA on their ah66 accounts to add a second layer of security to account login, reducing the risk of unauthorized access even if credentials are compromised.
• Incident Response: ah66 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to player rights, affected individuals and the National Privacy Commission will be notified within the timeframes required under the Data Privacy Act.

10. Cookies & Tracking Technologies

The ah66 Platform uses cookies and similar technologies to provide a functional, secure, and personalised user experience. A cookie is a small text file placed on your device by a website you visit.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function — including session management, authentication tokens, and load balancing. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences (e.g., language selection, game lobby sorting preferences) to personalise your experience. These are session-level or set to expire within 30 days.
• Analytics Cookies: Used to understand how players navigate the Platform — which game categories are visited most, which pages have high exit rates — in aggregated, anonymized form. This data informs product improvements.
• Security Cookies: Used by fraud-prevention and bot-detection systems to distinguish genuine players from automated scripts or malicious actors.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and you will not be able to log in or place bets. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

ah66 does not use third-party advertising or retargeting cookies. We do not serve behavioural advertising based on your browsing history outside of the ah66 Platform.

11. Minors

Age is verified at the point of registration and may be re-verified at the KYC stage. If ah66 discovers that an account has been registered by a person under 21, the account will be immediately closed, all funds will be handled in accordance with applicable law, and the personal data associated with the account will be deleted or retained only to the extent legally required.

If you believe that a minor has registered an account on the ah66 Platform using false information, please contact our support team or Data Protection Officer immediately so the matter can be investigated and resolved without delay.

12. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data processed by ah66. You may exercise any of these rights by contacting our Data Protection Officer (see Section 15).

13. Cross-Border Data Transfers

In some cases, personal data processed by ah66 may be transferred to or accessed from locations outside the Philippines — primarily in connection with international game providers or cloud infrastructure providers whose servers are located in other jurisdictions in Asia.

Where such transfers occur, ah66 takes appropriate steps to ensure that your personal data is protected to a standard consistent with the Data Privacy Act of 2012. These steps include ensuring the recipient country has adequate data protection laws, or implementing contractual data processing agreements that impose equivalent obligations on the data recipient.

The primary international transfers involve: live dealer game studio operators located in licensed gaming jurisdictions; cloud computing infrastructure providers with regional data centres in Asia; and fraud prevention services operating at global scale. In each case, transfers are limited to the minimum data required for the stated purpose.

14. Changes to This Privacy Policy

ah66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform services. When we make material changes, we will notify registered players by SMS to their registered mobile number and/or by a prominent notification displayed upon next Platform login prior to the changes taking effect.

The effective date at the top of this document will be updated whenever the Policy is revised. We encourage players to review this Policy periodically. Continued use of the ah66 Platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms.

Previous versions of this Privacy Policy are available on request by contacting the ah66 Data Protection Officer.

15. Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a privacy concern, you may contact the ah66 Data Protection Officer (DPO) using the contact details below. Our DPO is responsible for overseeing ah66's compliance with the Data Privacy Act of 2012 and this Privacy Policy.