aha88 is committed to handling your personal information with transparency, care, and full respect for your rights under Philippine data privacy law. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, who we share it with, and the controls available to you as a Player.
These six principles summarise aha88's approach to your personal data. They do not replace the full Privacy Policy below — please read all sections for the complete picture.
aha88 only processes your personal data where a lawful basis exists under the Data Privacy Act of 2012 (Republic Act 10173) — including contractual necessity, legal obligation, legitimate interest, and your explicit consent where required. We do not process data beyond the purposes for which it was collected.
All personal data transmitted between your device and aha88's servers is protected by TLS/SSL encryption. Sensitive data at rest — including financial information and identity documents submitted for KYC — is stored in encrypted form. Access to personal data is restricted on a strict need-to-know basis.
As a Philippine data subject, you have enforceable rights under RA 10173 — including the right to access, correct, delete, and object to processing of your personal data. aha88 has processes in place to respond to data subject requests promptly and within the timeframes required by law.
aha88 does not sell your personal data to third parties. Data is shared only with trusted service providers necessary to operate the Platform — payment gateways, KYC verification partners, game providers, and analytics services — all of whom are contractually bound to process your data in accordance with our standards.
aha88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law — including anti-money laundering record-keeping obligations. When data is no longer required, it is securely deleted or anonymised.
Automated profiling and behavioural data collected on aha88 is used solely to personalise your in-platform experience, improve responsible gaming tools, and detect fraud. This data is never packaged, sold, or licensed to advertising networks, data brokers, or any third party for commercial profiling purposes.
This Privacy Policy ("Policy") is issued by aha88 ("aha88", "we", "us", "our") and applies to all personal information collected from individuals ("you", "Player", "data subject") who register for, access, or use the aha88 online gaming platform available at aha88.bio and its associated mobile applications (collectively, the "Platform").
aha88 is committed to complying with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. This Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of your personal data.
By registering an Account on aha88, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must refrain from registering or using the Platform.
This Policy applies to personal data collected through the Platform, including via the web interface, mobile application, customer support channels, and any other touchpoints through which aha88 interacts with Players.
For the purposes of the Data Privacy Act of 2012, aha88 acts as the personal information controller in respect of the personal data of Players collected through the Platform. As the personal information controller, aha88 determines the purposes and means of processing personal data collected in connection with the operation of the Platform and the provision of online gaming services.
Where aha88 engages third-party service providers to process personal data on its behalf — including payment processors, KYC verification partners, and analytics providers — those parties act as personal information processors under written data processing agreements that impose obligations consistent with the DPA and this Policy.
aha88 collects the following categories of personal data in connection with the operation of the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number | KYC verification process |
| Contact Data | Philippine mobile number, email address (if provided) | Account registration |
| Financial Data | GCash number, Maya number, bank account number (masked), transaction history | Deposits and withdrawals |
| Identity Documents | Scanned or photographed Philippine government-issued ID, selfie image | KYC verification |
| Gaming Data | Wager history, game sessions, win/loss records, bonus usage, loyalty points | During active gameplay |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Platform access |
| Behavioural Data | Navigation patterns, feature usage, game preferences, session duration | Platform usage |
| Communications Data | Support chat transcripts, SMS records, complaint correspondence | Customer support interactions |
Note: aha88 does not collect or store full payment card numbers. All e-wallet and banking transactions are processed through certified third-party payment gateways. aha88 receives only transaction confirmation references and masked account identifiers.
aha88 collects personal data through the following means:
You provide data directly to aha88 when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or respond to a survey or communication from aha88.
When you access and use the Platform, aha88 automatically collects Technical Data and Behavioural Data through server logs, cookies, web beacons, and similar tracking technologies embedded in the Platform interface and mobile application.
aha88 may receive data about you from third parties in specific circumstances, including:
aha88 processes your personal data for the following specific purposes:
Under the Data Privacy Act of 2012, aha88 relies on the following legal bases for processing your personal data:
Note: Where aha88 processes sensitive personal information — including government-issued ID data and facial biometric data submitted during KYC — we rely on your explicit consent, which you provide at the point of KYC document submission.
aha88 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances and with the following categories of recipients:
Transaction data necessary to process your deposits and withdrawals is shared with your chosen payment provider (GCash, Maya, BDO, BPI, Metrobank, or UnionBank). These providers operate under their own privacy policies and are regulated financial entities subject to Bangko Sentral ng Pilipinas (BSP) oversight.
Identity documents and facial images submitted during KYC verification are transmitted to our certified third-party KYC provider, which processes this data solely for identity and age verification purposes under a data processing agreement with aha88.
Game providers whose titles are hosted on the aha88 Platform receive a Player session token necessary to authenticate and log gameplay. Game providers do not receive your contact details, financial data, or identity documents.
aha88 may disclose personal data to the relevant Philippine regulatory authority, law enforcement agencies, or the Anti-Money Laundering Council (AMLC) where required by applicable law, a court order, or a regulatory directive. aha88 will notify affected Players of such disclosure where legally permitted to do so.
Technical and behavioural data may be shared with cybersecurity and fraud prevention service providers for the purpose of detecting and preventing fraud, account takeover, and money laundering. These providers process data under strict contractual data protection obligations.
aha88 uses cookies, web beacons, and similar tracking technologies on the Platform for the following purposes:
aha88 does not use third-party advertising cookies or permit advertising networks to place cookies on the Platform. Your browsing behaviour on aha88 is not shared with or sold to advertising networks.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform. Disabling functional or analytics cookies will not prevent you from accessing games or account features.
aha88 implements technical and organisational security measures proportionate to the sensitivity of the personal data processed. These measures include:
No internet-based platform can guarantee absolute security. While aha88 applies robust security measures, you are responsible for maintaining the confidentiality of your login credentials. If you suspect that your Account has been accessed without your authorisation, contact aha88 support immediately.
aha88 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:
Where aha88 is subject to a legal hold, regulatory investigation, or active dispute, data relevant to those proceedings will be retained until the matter is resolved, regardless of the standard retention periods above.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by aha88:
Request a copy of the personal data aha88 holds about you and information on how it is being processed.
Request correction of inaccurate or incomplete personal data held in your Account.
Request deletion of personal data no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
Object to processing based on legitimate interest, including marketing communications and certain analytical processing.
Request a structured, machine-readable copy of personal data you have provided to aha88, where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
To exercise any of the above rights, contact aha88's Data Protection Officer by sending a written request to [email protected] with the subject line "Data Subject Request". aha88 will acknowledge receipt within three (3) business days and respond substantively within fifteen (15) business days, consistent with NPC guidelines.
The aha88 Platform is strictly intended for individuals who are twenty-one (21) years of age or older, consistent with Philippine online gambling age requirements. aha88 does not knowingly collect personal data from individuals under the age of 21.
🔞 If aha88 becomes aware that personal data has been collected from an individual under 21 years of age, the associated Account will be immediately suspended, the personal data will be deleted, and the matter will be handled in accordance with applicable law. If you believe an underage individual has registered on aha88, please notify us immediately at [email protected].
aha88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Where a material change is made to this Policy, aha88 will make reasonable efforts to notify registered Players via their registered mobile number or through a prominent notice on the Platform.
The most current version of this Privacy Policy will always be available at aha88.bio/privacy-policy. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by aha88, please contact us through the following channel. All privacy-related correspondence should clearly state "Privacy" or "Data Request" in your message for efficient routing.
aha88 Data Protection Contact
Email (plain text — not a clickable link):
[email protected]Acknowledgement within: 3 business days
Substantive response within: 15 business days (NPC-compliant)
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. Details of the NPC's complaint process are available through the NPC's official channels.
Your personal data is protected under Philippine law, handled with transparency, and never sold to third parties. Sign in to your aha88 account or download the app and enjoy the Philippines' most trusted online casino — knowing your privacy is taken seriously. 21+ only.
🔞 Strictly for players aged 21 and above. Please play responsibly.