Privacy Policy — How ahh99 Handles Your Personal Data
Your privacy matters to ahh99. This Privacy Policy explains what personal data we collect when you use the ahh99 platform, why we collect it, how we use and protect it, who we share it with, and what rights you have under Philippine law.
Scope and Acceptance: This Privacy Policy applies to all personal data collected by ahh99 through the ahh99.app website, any related subdomains, customer support channels, and communications with ahh99 staff. By registering an account on the ahh99 platform or otherwise providing personal data to ahh99, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not consent, you must not use the ahh99 platform.
1 Data Controller Identity
ahh99, operating at ahh99.app, is the Data Controller responsible for the personal data collected through the platform. As Data Controller, ahh99 determines the purposes for which and the means by which personal data is processed. ahh99 is committed to complying with the Republic Act 10173, also known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC).
For privacy-related inquiries, concerns, or requests to exercise your data subject rights, you may contact the ahh99 Data Protection Officer at the following address: [email protected] (plain text — not a clickable link). ahh99 aims to acknowledge privacy-related communications within five (5) business days of receipt.
2 Personal Data We Collect
ahh99 collects personal data through multiple channels during the course of your registration, use of the platform, and interaction with ahh99's services. The categories of personal data collected are described below.
2.1 Registration Data
When you register an account on ahh99, we collect:
- Full legal name (as it appears on your Philippine government-issued identification)
- Date of birth (to verify compliance with the 21+ age requirement)
- Philippine mobile number (used as your primary account identifier and for OTP authentication)
- Username chosen by you
- Password (stored in hashed, non-reversible form — ahh99 staff cannot access your actual password)
- Email address (where provided voluntarily)
2.2 Identity Verification (KYC) Data
To comply with PAGCOR regulations and anti-money laundering (AML) requirements, ahh99 requires identity verification before processing withdrawals. KYC data collected includes:
- Scanned or photographed copy of a valid Philippine government-issued identification document (such as PhilSys National ID, UMID, LTO Driver's License, or Philippine passport)
- A selfie photograph of the Member holding the identification document
- The identification document number and expiry date
- Residential address as stated on the identification document
2.3 Transaction and Financial Data
ahh99 collects data related to all financial transactions conducted through the platform, including:
- Deposit amounts, timestamps, payment methods, and transaction reference numbers
- Withdrawal amounts, destinations (GCash number, bank account details, Maya account), timestamps, and processing status
- Wallet balance history
- Bonus claims, wagering history, and promotional activity
2.4 Gaming and Activity Data
- Game session logs — games played, bet amounts, outcomes, session durations, and timestamps
- Sports betting history — markets wagered on, odds accepted, bet amounts, and settlement results
- Login history — timestamps, device types, browser types, and IP addresses associated with each login session
2.5 Technical and Device Data
- IP address at the time of login or platform access
- Device type and operating system (Android version, iOS version, device model)
- Browser type and version (Chrome on Android, Safari on iOS, etc.)
- Screen resolution and display settings
- Session cookies and local storage tokens used for authentication and session management
- Referral source (where you accessed ahh99.app from, if trackable)
2.6 Communications Data
- Contents of live chat conversations with ahh99 customer support staff
- Email correspondence sent to and received from ahh99
- Feedback submitted through platform feedback channels
- Records of complaints submitted and their resolution outcomes
3 Purposes and Legal Bases for Processing
ahh99 processes personal data only for lawful purposes and on the basis of one or more legal grounds recognized under the Data Privacy Act of 2012. The table below summarizes the primary processing purposes and their corresponding legal bases.
| Processing Purpose | Legal Basis | Data Categories Used |
|---|---|---|
| Account creation and platform access | Contract performance | Registration data, technical data |
| Age verification (21+ compliance) | Legal obligation (PAGCOR) | Date of birth, KYC documents |
| Identity verification (KYC) | Legal obligation (AML, PAGCOR) | KYC data, transaction data |
| Processing deposits and withdrawals | Contract performance | Transaction data, registration data |
| Fraud prevention and security monitoring | Legitimate interest / legal obligation | Technical data, transaction data, activity data |
| Anti-money laundering compliance | Legal obligation | KYC data, transaction data |
| Customer support and complaint resolution | Contract performance / legitimate interest | Communications data, account data |
| Responsible gaming monitoring | Legal obligation / legitimate interest | Activity data, transaction data |
| Promotional communications (opt-in) | Consent | Registration data, activity data |
| Platform improvement and analytics | Legitimate interest | Technical data, activity data (anonymized) |
4 Data Retention
ahh99 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The retention periods applicable to different categories of personal data are as follows:
- Account and registration data: Retained for the duration of your active account, plus five (5) years following account closure, as required by PAGCOR regulations and AML obligations.
- KYC and identity documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later, as required by the Anti-Money Laundering Act (AMLA) of the Philippines and its amendments.
- Transaction records: Retained for five (5) years from the date of each transaction in compliance with AMLA record-keeping obligations.
- Customer support communications: Retained for two (2) years from the date of the interaction, unless the communication relates to an unresolved complaint or legal matter, in which case it is retained until final resolution plus one (1) year.
- Technical and device data (login logs): Retained for ninety (90) days under a rolling retention policy for security and fraud investigation purposes.
- Marketing consent records: Retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements.
Where ahh99 is legally required to retain data for a longer period — for example, pursuant to a court order, regulatory investigation, or law enforcement request — data will be retained for the required period regardless of the standard retention schedule above.
5 Data Sharing and Third Parties
5.1 Service Providers and Technology Partners
ahh99 works with carefully selected third-party service providers to operate the platform and deliver services to Members. Personal data is shared with these providers only to the extent necessary for them to perform their services on ahh99's behalf and subject to data processing agreements that require them to maintain appropriate security standards. Categories of third-party service providers who may receive personal data include:
- Payment processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, UnionBank, and other licensed Philippine financial institutions and payment intermediaries — for the purpose of processing deposits and withdrawals.
- KYC verification providers: Third-party identity verification services that assist ahh99 in verifying government-issued identification documents.
- Game providers: Licensed game studios (such as JILI, Pragmatic Play, PG Soft, and others) receive session data necessary to operate games — typically limited to a session token and bet/outcome data, without your full personal identity.
- Cloud infrastructure and hosting providers: Providers hosting the ahh99 platform infrastructure, who process technical data in the course of operating servers and databases.
- Fraud prevention and AML screening services: Third-party tools that assist ahh99 in detecting suspicious activity and meeting AML obligations.
5.2 Regulatory and Law Enforcement Disclosure
ahh99 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the National Bureau of Investigation (NBI), the Philippine National Police (PNP), courts of competent jurisdiction, and other governmental authorities where such disclosure is required by applicable law, regulation, or valid legal process. ahh99 will notify affected Members of such disclosures where legally permitted to do so.
5.3 International Data Transfers
Some of ahh99's third-party service providers — including game providers and certain cloud infrastructure partners — may be located outside the Philippines. Where personal data is transferred outside the Philippines, ahh99 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012, including contractual data protection obligations equivalent to Philippine data protection standards. ahh99 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.
6 Data Security Measures
ahh99 implements organizational, technical, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key security measures in place include:
- Encryption in transit: All data transmitted between your browser and the ahh99 platform is encrypted using Transport Layer Security (TLS) version 1.2 or higher (HTTPS). The padlock icon in your browser's address bar confirms this encryption is active during your session.
- Encryption at rest: Sensitive data fields, including password hashes and KYC document references, are stored in encrypted form within ahh99's database infrastructure.
- Password hashing: Member passwords are never stored in plain text. Passwords are processed using a one-way cryptographic hashing algorithm. Neither ahh99 staff nor any system log can retrieve your actual password.
- Two-factor authentication (2FA): ahh99 offers optional 2FA via mobile OTP for all Member accounts, providing an additional authentication layer beyond the password. ahh99 strongly recommends all Members enable 2FA.
- Access controls: Access to systems containing personal data is restricted to ahh99 staff and authorized third parties who require it to perform their functions. All access is governed by the principle of least privilege and is subject to regular access review.
- Security monitoring: ahh99's platform infrastructure is monitored continuously for unauthorized access attempts, anomalous activity, and security threats. Automated alerting systems notify the security team of suspicious events in real time.
- Regular security assessments: ahh99 conducts periodic security assessments of its platform and third-party integrations to identify and remediate vulnerabilities before they can be exploited.
7 Cookies and Tracking Technologies
7.1 Types of Cookies Used
ahh99 uses cookies and similar browser-based storage technologies to operate the platform and improve your experience. Cookies are small data files placed in your browser by the ahh99 website. The categories of cookies used are:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in to your ahh99 Account during a session and security cookies that detect unauthorized access attempts. These cookies cannot be disabled without preventing core platform functions.
- Functional Cookies: Used to remember your preferences — such as your chosen language, preferred game lobby view, and "Remember me" login preference. These cookies improve your experience but are not strictly necessary for platform operation.
- Analytics Cookies: Used to collect anonymized data about how Members navigate the ahh99 platform — which pages are visited most frequently, how long sessions last, and which game categories are most popular. This data helps ahh99 improve the platform. Analytics data is processed in aggregated, anonymized form and is not linked back to individual Member accounts.
7.2 Managing Cookies
You can control non-essential cookies through your browser's settings. Most modern browsers (Chrome on Android, Safari on iOS, and major desktop browsers) allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging in to or using the ahh99 platform. On iOS, ensure that Safari is not set to "Block All Cookies" — this setting will prevent your ahh99 session from being maintained across page navigations.
8 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ahh99. To exercise any of these rights, contact ahh99's Data Protection Officer at [email protected]. ahh99 will respond to verifiable requests within thirty (30) calendar days of receipt, or within such longer period as permitted by applicable law where the complexity of the request requires additional time.
Right to Be Informed
You have the right to be informed that your personal data is being collected and processed. This Privacy Policy fulfils ahh99's obligation to inform you. You may request a current copy of this Privacy Policy at any time.
Right to Access
You have the right to access the personal data ahh99 holds about you, including the categories of data, the purposes for which it is processed, the third parties to whom it has been disclosed, and the retention period. You may request a copy of your personal data in a commonly used electronic format.
Right to Correction (Rectification)
You have the right to request correction of inaccurate or incomplete personal data held by ahh99. For Account data you can update yourself (such as email address or notification preferences), updates may be made directly in Account Settings. For KYC data or other data requiring re-verification, contact support.
Right to Erasure (Right to be Forgotten)
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to ahh99's legal retention obligations — data required for AMLA compliance, PAGCOR regulatory obligations, or pending legal proceedings cannot be deleted before the applicable retention period has elapsed.
Right to Object
You have the right to object to the processing of your personal data on grounds of legitimate interest where you believe your personal rights outweigh ahh99's legitimate interest. You also have the right to withdraw consent for marketing communications at any time, with effect from the date of withdrawal (without affecting the lawfulness of processing based on consent before its withdrawal).
Right to Data Portability
You have the right to receive a copy of your personal data that you have provided to ahh99 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another data controller where technically feasible. Contact ahh99 support to make a data portability request.
Right to Lodge a Complaint with the NPC
If you believe ahh99 has violated your data privacy rights or the provisions of the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through its official government website and its office in Manila. ahh99 encourages Members to contact us first to resolve concerns directly before escalating to the NPC.
9 Children's Privacy and Age Verification
10 Changes to This Privacy Policy
ahh99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, operational practices, or the data processing activities of the platform. Where changes are material, ahh99 will provide notice to registered Members via platform notification or SMS to the registered mobile number at least seven (7) calendar days before the updated Privacy Policy takes effect.
The date of the most recent revision to this Privacy Policy is indicated at the top of this document ("Effective Date"). Your continued use of the ahh99 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Privacy Policy, you must close your Account before the effective date by contacting ahh99 support and withdrawing any remaining funds.
ahh99 recommends that Members periodically review this Privacy Policy to stay informed of how their personal data is being handled. The current version of this Privacy Policy is always available at ahh99.app/privacy-policy.
11 Contact and Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or ahh99's data processing practices, please contact the ahh99 Data Protection Officer through the following channels:
- Email: [email protected] — mark the subject line "Privacy / Data Subject Request" for fastest routing to the DPO team
- Live Chat: Available 24/7 on the ahh99 platform — inform the support agent that you have a data privacy inquiry and it will be escalated to the DPO team
- Response time: ahh99 aims to acknowledge all DPO inquiries within five (5) business days and to resolve standard data subject requests within thirty (30) calendar days
Certain data subject requests — particularly those involving data portability, erasure, or rectification of KYC-related data — may require identity verification before ahh99 can process the request, to ensure that personal data is disclosed or modified only at the direction of the actual data subject.
Your Data. Our Responsibility.
Six ways ahh99 takes your data privacy seriously every day
SSL Encryption on Every Request
Every piece of data you send to or receive from ahh99.app travels through 256-bit TLS encryption — the same standard Philippine banks use for their online portals. The padlock in your browser confirms it's active every session. Your login credentials, payment details, and personal information are never transmitted in plain text.
Passwords Are Never Stored in Plain Text
When you set or change your ahh99 password, it is immediately processed through a one-way cryptographic hash function before storage. The stored value cannot be reversed back into your actual password. This means that even in the unlikely event of a data breach, your password cannot be extracted from ahh99's database.
RA 10173 Compliance — Philippine Law
ahh99's data practices are governed by the Data Privacy Act of 2012 (RA 10173) — the primary data protection law of the Philippines — and the implementing rules and regulations issued by the National Privacy Commission. Your rights as a Filipino data subject are recognized and protected under this framework, including your right to access, correct, and request deletion of your data.
We Do Not Sell Your Data
ahh99 does not sell, rent, or trade your personal data to advertising networks, data brokers, or marketing companies. Your information is used exclusively to operate and improve the ahh99 platform and to meet regulatory obligations. We share data with third parties only as explicitly described in this Privacy Policy and only under data processing agreements that require equivalent privacy protections.
Defined Retention — No Indefinite Storage
ahh99 does not hold your data forever. We apply defined retention periods — five years for financial records under AMLA requirements, 90 days for login logs, two years for support communications — and securely delete or anonymize data when it is no longer needed for the purpose it was collected. Your data is a tool for service delivery, not a permanent asset.
Dedicated Data Protection Officer
ahh99 has a designated Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act, handling data subject requests, and responding to NPC inquiries. If you have a privacy concern, you can reach the DPO via support channels and expect acknowledgment within five business days — a real person reviewing a real inquiry, not an automated response.
Play on a Platform That Respects Your Privacy
Now that you know exactly how ahh99 handles your data, explore 1,000+ games, instant GCash deposits, and 24/7 Filipino support — with the confidence that your information is in safe hands.
🔞 ahh99 is strictly for players aged 21 and above. Please gamble responsibly.