Privacy Policy

This Privacy Policy ("Policy") describes how ah777 ("ah777," "we," "us," or "our"), the operator of the online gaming and sports betting platform accessible at ah777.bio ("the Platform"), collects, processes, uses, stores, and protects the personal information of individuals who access or use the Platform ("you" or "Player").

ah777 is committed to upholding the privacy rights of Filipino players and operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"). ah777's operations are also subject to the oversight of the Philippine Amusement and Gaming Corporation ("PAGCOR"), whose regulatory requirements inform certain aspects of our data collection and retention practices.

By registering for an account, accessing the Platform, or using any of our gaming or betting services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Data Privacy Act of 2012, ah777 acts as the personal information controller in respect of the personal data it processes about Players. As personal information controller, ah777 is responsible for determining the purposes and means of processing your personal data and for ensuring that processing is carried out lawfully and in accordance with this Policy.

ah777 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and for handling data subject requests and complaints. Contact details for the DPO are provided in Section 14 of this Policy.

ah777 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (used for age verification — players must be 21 or above);
• Residential address, including barangay, city or municipality, and province;
• Philippine mobile number (used as login credential and for OTP verification);
• Email address;
• Copies of government-issued identification documents submitted for KYC (e.g., PhilSys ID, UMID, Passport, Driver's License);
• Selfie or facial image submitted for identity matching during KYC.

3.2 Financial and Transaction Data

• GCash or PayMaya account number associated with your Platform account;
• Bank account details (BPI, BDO, Metrobank) used for deposits or withdrawals;
• Records of all deposits, withdrawals, wagers, and winnings processed through your Account;
• Source of funds documentation submitted in connection with anti-money laundering checks.

3.3 Technical and Usage Data

• IP address and approximate geolocation derived from IP data;
• Device type, operating system, and browser type used to access the Platform;
• Session duration, pages visited, and features accessed within the Platform;
• Cookie and tracking data as described in Section 9.

3.4 Communications Data

• Records of live chat conversations with ah777 support agents;
• Email correspondence between you and ah777;
• Records of responsible gaming requests, including self-exclusion and limit-setting activities.

ah777 collects personal data through the following channels:

• Directly from you — during account registration, KYC submission, deposit and withdrawal processes, support interactions, and responsible gaming tool requests;
• Automatically — through cookies, session tracking, and server logs when you access or use the Platform (see Section 9);
• From third-party payment providers — GCash, PayMaya, and Philippine banking partners provide transaction confirmation data necessary to process deposits and withdrawals;
• From identity verification providers — ah777 may use third-party KYC service providers to assist with document authenticity checks and facial matching. These providers process data on ah777's behalf under contractual data processing agreements;
• From regulatory authorities — PAGCOR and the Anti-Money Laundering Council (AMLC) may provide information relevant to compliance obligations.

ah777 processes your personal data for the following purposes, each of which rests on a lawful basis under the Data Privacy Act of 2012:

ah777 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• PAGCOR and regulatory authorities: ah777 is required to share player data with PAGCOR and, where applicable, the AMLC, the National Privacy Commission (NPC), or other Philippine government agencies in fulfilment of regulatory and legal obligations;
• Payment processing partners: GCash (Mynt — Globe Fintech Innovations, Inc.), PayMaya (Voyager Innovations, Inc.), and Philippine banks receive the minimum data necessary to process your transactions. These entities operate under their own privacy policies and are independently regulated;
• KYC and identity verification providers: Third-party providers engaged by ah777 to assist with document verification and facial matching. All such providers are engaged under data processing agreements requiring them to maintain appropriate data security standards;
• IT infrastructure and cloud service providers: Hosting and operational IT services may be provided by third-party vendors operating under strict confidentiality and data protection obligations;
• Legal and professional advisors: In connection with legal proceedings, regulatory investigations, or formal dispute resolution processes;
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets of ah777, player data may be transferred to the acquiring entity, subject to continued compliance with this Policy and applicable law.

Where ah777 engages third-party service providers whose infrastructure or operations are located outside the Philippines, personal data may be transferred internationally. In all such cases, ah777 ensures that appropriate safeguards are in place to protect the transferred data, including:

• Contractual clauses that impose data protection obligations equivalent to those required under the Philippine DPA;
• Transfer to jurisdictions recognised by the National Privacy Commission as providing an adequate level of protection;
• Certification or compliance frameworks applicable to the recipient entity.

Players who have questions about the safeguards applicable to specific international transfers may contact ah777's Data Protection Officer using the details in Section 14.

ah777 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal and regulatory retention obligations. The following retention periods apply:

• Account and identity data (KYC documents): Retained for a minimum of 5 years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with AMLC requirements;
• Support communications: Retained for 2 years from the date of the last communication, unless longer retention is required in connection with an ongoing dispute or legal proceeding;
• Technical and usage logs: Retained for 12 months from the date of generation, unless required for longer periods in connection with fraud investigations or security incidents;
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent.

Upon expiry of the applicable retention period, ah777 will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original data.

ah777 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Store your preferences such as language settings, game lobby layout, and responsible gaming notification settings to personalise your experience;
• Analytical cookies: Collect aggregated, anonymised data about how players navigate the Platform, enabling ah777 to identify usability issues and improve the service. Data collected by analytical cookies does not identify you individually;
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

ah777 does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent some Platform features from functioning correctly.

ah777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS 256-bit encryption for all data in transit between your device and ah777's servers;
• Encryption of sensitive data at rest on ah777's servers, including identity documents and financial records;
• Role-based access controls ensuring that only authorised personnel can access identifiable player data;
• Regular security audits and vulnerability assessments of the Platform infrastructure;
• Two-factor authentication available for Player accounts and mandatory for internal administrative access;
• Incident response procedures that comply with NPC breach notification requirements under the DPA.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ah777:

To exercise any of these rights, contact ah777's Data Protection Officer using the details in Section 14. ah777 will respond to data subject requests within 15 business days of receipt. For complex requests, this period may be extended by a further 15 business days with notification to you.

ah777 may ask you to verify your identity before processing a data subject request to ensure that personal data is not disclosed to an unauthorised party.

The ah777 Platform is strictly restricted to persons aged 21 years and above, as required under PAGCOR regulations governing online casino gaming in the Philippines. ah777 does not knowingly collect or process the personal data of individuals under 21 years of age.

If ah777 becomes aware that personal data has been collected from a person under the age of 21 — including through a false declaration of age during registration — the account will be immediately suspended, all associated data will be reviewed in accordance with legal obligations, and the matter may be reported to PAGCOR as required.

If you are a parent or guardian and believe that a minor has registered for an account at ah777 using false information, please contact our Data Protection Officer immediately so that the matter can be addressed without delay.

ah777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes will be communicated to registered Players via email to their registered address and/or a prominent notice on the Platform.

The effective date of the current version of this Policy is stated at the top of this document. We encourage Players to review this Policy periodically. Your continued use of the Platform following notification of an updated Policy constitutes acceptance of the revised terms.

Where changes materially affect how ah777 processes your personal data in a way that requires your consent under the DPA, ah777 will seek your consent before the change takes effect.

For questions, requests, or concerns relating to this Privacy Policy or ah777's handling of your personal data, please contact:

• Data Protection Officer, ah777
• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 at ah777.bio — request to speak with the Data Privacy team

If you are not satisfied with ah777's response to your data subject request or complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 3F Core G Marajo Tower, 26th Street corner 4th Avenue, Bonifacio Global City, Taguig City, Metro Manila

This Privacy Policy was last reviewed and updated on 1 January 2026. Version 2.4. This Policy supersedes all previous privacy notices issued by ah777. ah777 is a registered brand operating under PAGCOR oversight in the Republic of the Philippines, subject to the Data Privacy Act of 2012 (Republic Act No. 10173).