aaaaopen Privacy Policy

1. Introduction

1.1 aaaaopen operates as a PAGCOR-regulated online gaming platform serving Filipino players. In the course of providing our services, we collect and process personal information. We are committed to handling this data responsibly, transparently, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable PAGCOR data governance directives.

1.2 This Privacy Policy applies to all personal data collected through the aaaaopen website, account registration process, deposits and withdrawals, customer support interactions, promotional participation, and any other interaction between you and aaaaopen.

1.3 For the purposes of RA 10173, aaaaopen acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and website visitors in the Philippines.

1.4 This Policy should be read alongside our Terms & Conditions. Capitalised terms not defined here carry the meanings given to them in the aaaaopen Terms & Conditions.

2. Information We Collect

2.1 Information You Provide Directly

When you register, verify your identity, make transactions, or contact support, aaaaopen collects:

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — you must be 21+);
• Philippine mobile number and email address;
• Residential address in the Philippines;
• Government-issued identification documents (e.g., PhilSys ID, passport, driver's licence, SSS/UMID card);
• Financial information including GCash number, Maya account, BPI or BDO account details used for deposits and withdrawals;
• Source of funds documentation where required by AML obligations;
• Communications with aaaaopen support (live chat transcripts, email correspondence).

2.2 Information Collected Automatically

When you access aaaaopen, we automatically collect certain technical information:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session data including login timestamps, pages visited, and actions taken;
• Game activity logs including bets placed, game outcomes, and wagering history;
• Cookie and tracking data (see Section 9).

2.3 Information from Third Parties

aaaaopen may receive personal data from third parties including payment processors (GCash, Maya, BPI, BDO), identity verification services, and fraud prevention providers, in order to fulfil our KYC, AML, and responsible gaming obligations.

3. How We Use Your Data

aaaaopen processes your personal data for the following purposes:

• Account registration and management: Creating, operating, and maintaining your aaaaopen account;
• Identity verification: Verifying your age (21+) and identity as required by PAGCOR and RA 10173;
• Payment processing: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, InstaPay, and other approved channels;
• Anti-Money Laundering (AML) compliance: Monitoring transactions and fulfilling reporting obligations under RA 9160;
• PAGCOR regulatory reporting: Submitting required gaming activity and player data reports to PAGCOR as mandated;
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviours and administering self-exclusion and limit tools;
• Customer support: Responding to your enquiries, resolving disputes, and administering your account;
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent, abusive, or illegal activity;
• Platform improvement: Analysing usage data to improve the aaaaopen platform, game selection, and user experience;
• Marketing communications: Sending promotional offers and platform updates, where you have not opted out (see Section 10).

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its IRR, aaaaopen processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and manage your account and deliver the gaming services you have registered for;
• Legal obligation: Processing required to comply with PAGCOR regulations, RA 9160 (AML), RA 10173, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, security, and platform improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have provided consent (which may be withdrawn at any time).

5. Sharing Your Data

5.1 aaaaopen does not sell your personal data. We share your data only in the following limited circumstances:

• PAGCOR: We are legally required to share certain player data and gaming activity reports with PAGCOR as our regulatory authority;
• Anti-Money Laundering Council (AMLC): aaaaopen reports suspicious transactions to the AMLC as required under RA 9160;
• Payment processors: Financial data is shared with GCash, Maya, BPI, BDO, and other payment partners solely for the purpose of processing your deposits and withdrawals;
• Identity verification and KYC providers: Identity documents may be shared with regulated third-party verification services to fulfil our KYC obligations;
• Fraud prevention and security partners: Technical and account data may be shared with cybersecurity and fraud detection partners;
• Legal authorities: aaaaopen will disclose personal data to Philippine courts, law enforcement agencies, or regulatory bodies where legally compelled to do so;
• Game software providers: Technical gameplay data may be shared with our licensed game providers for game operation and audit purposes.

5.2 All third-party service providers who process data on aaaaopen's behalf are contractually required to maintain adequate data protection standards consistent with RA 10173.

6. International Data Transfers

6.1 Some of aaaaopen's technology infrastructure and game software providers may be located outside the Philippines. Where personal data is transferred to entities in other jurisdictions, aaaaopen ensures that appropriate safeguards are in place in accordance with the NPC's guidelines on cross-border data transfers under RA 10173.

6.2 Such safeguards may include contractual clauses binding overseas recipients to data protection standards equivalent to those required under Philippine law, or reliance on the recipient's jurisdiction having an adequate level of data protection.

7. Data Retention

7.1 aaaaopen retains your personal data for as long as your account is active, or as long as necessary to provide our services and meet our legal obligations.

7.2 After account closure, aaaaopen retains personal data for a minimum of five (5) years as required by PAGCOR regulations and RA 9160 for AML record-keeping purposes. Specific retention periods vary by data category:

• KYC / identity documents: 5 years from account closure;
• Financial transaction records: 5 years from transaction date;
• Gaming activity logs: 3 years from account closure or as required by PAGCOR;
• Support communications: 2 years from resolution of the relevant matter;
• Marketing consent records: Until consent is withdrawn and for a further 1 year.

7.3 Upon expiry of the applicable retention period, aaaaopen will securely delete or anonymise your personal data unless further retention is required by law.

8. Security Measures

8.1 aaaaopen implements technical and organisational security measures appropriate to the nature of the data we process, including:

• Transport Layer Security (TLS) encryption for all data in transit between your device and aaaaopen's servers;
• Encrypted storage of sensitive data at rest, including passwords (stored as salted hashes) and financial account details;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for internal system access;
• Regular penetration testing and security audits conducted by independent security firms;
• Intrusion detection and monitoring systems;
• Staff training on data protection and information security practices.

8.2 While aaaaopen employs industry-standard security measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your aaaaopen Login credentials and for notifying us immediately if you suspect unauthorized access to your account.

9. Cookies & Tracking Technologies

9.1 aaaaopen uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the aaaaopen platform to function, including session management, aaaaopen Login authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language, currency display (PHP), and notification settings.
• Analytics Cookies: Help us understand how players navigate aaaaopen and identify areas for improvement. Data collected is aggregated and anonymised where possible.
• Security Cookies: Used for fraud detection, detecting suspicious login patterns, and protecting your aaaaopen account.

9.2 You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of your aaaaopen experience.

10. Your Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), Filipino data subjects have the following rights regarding personal data held by aaaaopen:

• Right to be Informed: To know what personal data we collect and how it is used — as set out in this Privacy Policy;
• Right of Access: To request a copy of the personal data aaaaopen holds about you;
• Right to Rectification: To have inaccurate or incomplete personal data corrected;
• Right to Erasure (Right to be Forgotten): To request deletion of your personal data where we no longer have a lawful basis for processing it, subject to our retention obligations under PAGCOR and AML regulations;
• Right to Object: To object to the processing of your data for marketing purposes at any time;
• Right to Data Portability: To receive a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to File a Complaint: To lodge a complaint with the National Privacy Commission (NPC) if you believe aaaaopen has violated your privacy rights under RA 10173.

To exercise any of these rights, contact aaaaopen's Data Protection Officer (see Section 13). We will respond within fifteen (15) business days of receiving a verified request.

11. Minors

11.1 aaaaopen strictly prohibits the use of our platform by persons under twenty-one (21) years of age, in accordance with PAGCOR regulations. We do not knowingly collect personal information from minors.

11.2 If aaaaopen becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account and delete the minor's personal information from our systems, and may report the matter to PAGCOR.

11.3 If you are a parent or guardian and believe your child has registered on aaaaopen, please contact our support team or Data Protection Officer immediately.

12. Changes to This Privacy Policy

12.1 aaaaopen may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or PAGCOR regulatory requirements. When material changes are made, we will notify registered players via email or in-platform notification at least seven (7) days before the revised policy takes effect.

12.2 The effective date of the current version of this Privacy Policy is displayed at the top of this page. We encourage you to review this Policy periodically. Continued use of aaaaopen after the effective date of a revised Policy constitutes your acceptance of the changes.

13. Contact & Data Protection Officer

13.1 aaaaopen has appointed a Data Protection Officer (DPO) as required under RA 10173. For any privacy-related enquiries, access requests, or complaints, please contact:

13.2 If you are not satisfied with aaaaopen's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines: