aaaji Privacy Policy – How We Protect Your Data

01 Introduction

aaaji ("aaaji", "we", "us", "our") operates the online gaming platform available at aaaji.click. We are committed to protecting the privacy and personal data of every player who registers and plays on our platform. This Privacy Policy describes how aaaji collects, processes, stores, and — where applicable — shares your personal information.

This policy applies to all players based in the Philippines and is designed to align with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), along with its Implementing Rules and Regulations. Whether you're signing up for the first time, placing a baccarat bet on your lunch break, or checking your GCash withdrawal status — whenever you interact with aaaji, this policy governs how your data is handled.

By registering an account at aaaji and using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your personal data as described herein. If you have questions about how aaaji handles your data, you can reach our support team at support@aaaji.click at any time.

02 Personal Data We Collect

aaaji collects personal data in several ways — directly from you during registration and gameplay, automatically through your interaction with our platform, and from third parties involved in payment processing and identity verification.

2.1 Data You Provide Directly

• Registration data — full legal name, date of birth, gender, residential address, email address, and mobile number (as registered with your GCash or Maya account)
• Identity verification documents — government-issued photo ID (Philippine passport, UMID/SSS card, PhilSys National ID, driver's licence, or PRC ID), proof of address, and selfie with ID upon request during KYC
• Financial data — payment method details required to process deposits and withdrawals (GCash-registered mobile number, Maya account name, bank account name and number for bank transfers)
• Communications data — records of messages you send to aaaji customer support via live chat or email, including the content and timestamps of those exchanges
• Responsible gaming data — any limits, exclusion requests, or support requests you submit through the aaaji responsible gaming tools

2.2 Data Collected Automatically

• IP address and approximate geographic location at the time of login or gameplay
• Device type, operating system, browser type and version
• Session logs — pages visited, games played, bets placed, time and duration of sessions
• Transaction logs — all deposits, withdrawals, bonus credits, and wager records
• Cookie and tracking pixel data as described in Section 6

2.3 Data from Third Parties

aaaji may receive personal data from third parties in the following circumstances: identity verification services that cross-check your submitted documents against official databases; payment processors who confirm transaction status and account ownership; and fraud prevention services that provide risk scoring based on device and behavioural patterns.

03 How We Use Your Personal Data

aaaji uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with those listed without first obtaining your consent or establishing another lawful basis.

04 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, aaaji must have a lawful basis for processing your personal data. The following bases apply to aaaji's processing activities:

• Contractual necessity — processing your registration data, financial data, and KYC documents is necessary to fulfil our contractual obligations to you as a registered player.
• Legal obligation — processing for AML compliance, identity verification, age verification, and regulatory reporting is required by applicable Philippine law and our operating licence conditions.
• Legitimate interests — processing for fraud prevention, platform security, and improving the aaaji experience is conducted where aaaji's legitimate business interests do not override your rights and freedoms.
• Consent — processing for direct marketing communications is conducted only where you have explicitly opted in. You may withdraw this consent at any time through your account settings or by contacting support.

05 Data Sharing and Third Parties

aaaji does not sell your personal data to third parties for their own marketing purposes. Full stop. However, we do share certain data with trusted third-party service providers who assist us in operating the aaaji platform. In each case, data sharing is limited to what is strictly necessary for the purpose involved.

5.1 Third Parties We Share Data With

• Payment processors — GCash (GXI), Maya, and other payment partners receive the minimum data required to process your transaction. Their own privacy policies govern how they handle this data.
• Identity verification providers — third-party KYC platforms that verify your submitted identity documents against authoritative databases to confirm authenticity.
• Fraud prevention services — platforms that analyse device fingerprints, IP patterns, and behavioural signals to detect and prevent fraudulent account activity.
• Game software providers — where a game is provided by a third-party studio (such as JILI), that provider may receive anonymised gameplay data for product analytics purposes. No personally identifiable data is shared beyond what is necessary for the gaming session.
• Regulatory and law enforcement authorities — aaaji is legally obligated to report suspicious transactions and to respond to lawful requests from Philippine regulatory bodies and law enforcement agencies. This sharing overrides player confidentiality only to the minimum extent required by law.
• Professional advisers — legal, accounting, and compliance advisers who are bound by professional confidentiality obligations.

5.2 International Data Transfers

Some of the third-party service providers used by aaaji may process data in jurisdictions outside the Philippines. Where this occurs, aaaji takes reasonable steps to ensure that appropriate data protection measures are in place, consistent with the requirements of the Philippine DPA and National Privacy Commission (NPC) guidance on cross-border data transfers.

06 Cookies and Tracking Technologies

aaaji uses cookies and similar tracking technologies on aaaji.click to provide a functional and personalised experience. When you visit aaaji for the first time, you will be presented with a cookie notice. Continued use of the platform after this notice constitutes consent to the use of cookies as described below.

6.1 Types of Cookies Used by aaaji

• Strictly necessary cookies — these are required for the aaaji platform to function. They maintain your login session, remember your in-progress game state, and ensure that the correct account is served when you return. These cannot be disabled without breaking core platform functionality.
• Performance cookies — anonymous analytics data collected to help aaaji understand how the platform is used — which pages are most visited, how long sessions last, and where players encounter friction. This data is aggregated and does not identify individual players.
• Functional cookies — remember your preferences, such as language settings, display options, and previously used payment methods, to provide a more personalised experience.
• Security cookies — help detect and prevent fraudulent login attempts, bot activity, and CSRF attacks by verifying the authenticity of requests made to the aaaji platform.

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect the functionality of aaaji and may prevent you from logging in or playing games. Disabling performance and functional cookies will not affect your ability to play but will reduce the personalisation of your experience.

07 Data Storage and Security

aaaji takes the security of your personal data seriously and applies technical and organisational measures appropriate to the sensitivity of the information held.

7.1 Technical Measures

• All data transmitted between your device and aaaji.click is encrypted using TLS (Transport Layer Security), commonly represented by the HTTPS protocol and the padlock icon in your browser.
• Personal data at rest is stored in encrypted databases accessible only to authorised aaaji personnel and systems.
• Identity documents submitted for KYC are stored in a restricted-access document management system with audit logging of all access events.
• Payment data is handled in compliance with applicable payment card and e-wallet security standards. aaaji does not store full card numbers or GCash PINs.
• Two-factor authentication is available for all aaaji player accounts and is strongly encouraged.

7.2 Organisational Measures

• Access to personal data is restricted to aaaji staff and contractors who have a genuine operational need and who are bound by confidentiality obligations.
• aaaji conducts regular internal reviews of data handling practices and access controls.
• In the event of a data breach that affects your personal data, aaaji will notify you and the National Privacy Commission as required under the Philippine DPA and applicable NPC Circular requirements.

08 Data Retention

aaaji retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and KYC documents — retained for the duration of your active account and for a minimum of five (5) years after account closure, in compliance with AML and regulatory requirements.
• Transaction records — retained for a minimum of five (5) years after the transaction date for financial audit and AML compliance purposes.
• Customer support communications — retained for two (2) years from the date of the communication, or longer if the communication relates to an unresolved dispute or regulatory matter.
• Session and gameplay logs — retained for two (2) years for responsible gaming monitoring and platform improvement purposes.
• Marketing consent records — retained for as long as your account is active or until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

When retention periods expire and there is no longer a legal or legitimate basis for retaining your data, aaaji will securely delete or anonymise the relevant information. Anonymised data — from which you cannot be identified — may be retained for statistical and analytical purposes indefinitely.

09 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have a number of important rights with respect to your personal data held by aaaji. These rights are set out below. To exercise any of these rights, contact aaaji at support@aaaji.click with your registered email address and a clear description of your request.