aaagl Privacy Policy

aaagl ("aaagl", "we", "us", "our") operates the online gaming platform accessible at aaagl.net and any associated applications and services (collectively, the "Platform"). We are committed to protecting the privacy and personal data of every Filipino player who uses our Platform.

This Privacy Policy ("Policy") describes how aaagl collects, uses, stores, shares, and protects your personal information when you access or use the Platform. It applies to all registered and unregistered visitors of aaagl.net, and is written in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines.

By registering an account on aaagl, making a deposit, or continuing to browse the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

aaagl collects personal data that is necessary, adequate, and relevant to the purposes described in this Policy. We do not collect data beyond what is required to operate the Platform, comply with legal obligations, and deliver a quality gaming experience to Filipino players.

We do not collect sensitive personal information beyond what is strictly necessary for identity verification and AML compliance. We do not collect information about your race, religion, health status, political affiliations, or sexual orientation.

aaagl collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session logs, and cookie data.
• Third-party verification providers: Identity and address verification data returned by our KYC partners when you submit identity documents for verification.
• Payment processors: Transaction reference data returned by GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other payment partners when processing deposits and withdrawals. aaagl does not receive or store raw payment credentials such as full card numbers or e-wallet PINs.
• Game providers: Aggregated game session data from third-party game providers whose titles are hosted on the Platform, used for dispute resolution and responsible gaming monitoring.

Under the Data Privacy Act of 2012 (RA 10173), aaagl processes your personal data based on one or more of the following lawful bases:

• Consent: You have given clear, informed consent to the processing of your personal data for one or more specific purposes, including receiving marketing communications from aaagl.
• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your aaagl account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required for aaagl to comply with applicable Philippine laws, including anti-money laundering obligations under RA 9160 (as amended), PAGCOR regulatory requirements, and NPC directives.
• Legitimate interests: Processing is necessary for aaagl's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the quality of services provided to Filipino players, provided that these interests are not overridden by your rights and freedoms.

aaagl uses your personal data strictly for the following purposes. We do not use your data for any purpose that is incompatible with the reasons it was originally collected.

• Account management: Creating, maintaining, and securing your aaagl account, including authentication, password resets, and account preference management.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with PAGCOR regulations and KYC standards.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method (GCash, Maya, BPI, BDO, etc.) and maintaining accurate transaction records.
• Anti-money laundering compliance: Monitoring transactions for suspicious activity as required under RA 9160 and related AMLC regulations. This includes filing Suspicious Transaction Reports (STRs) where legally required.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance via live chat and email.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and enforcing deposit limits, cooling-off periods, and self-exclusion requests.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, cheating, bot usage, and security breaches on the Platform.
• Platform improvement: Analysing aggregated usage data to improve game offerings, platform performance, and the overall user experience for Filipino players.
• Marketing (with consent): Sending promotional offers, bonus notifications, and news about new games or features — only where you have provided explicit consent and not opted out.
• Legal compliance: Meeting our obligations under applicable Philippine laws and responding to lawful requests from regulatory authorities including PAGCOR, the NPC, and the AMLC.

aaagl does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only where necessary and only with the categories of recipients described below, each of whom is bound by confidentiality obligations and data protection agreements.

• KYC and identity verification partners: Third-party providers who assist with document verification and identity authentication during the account registration and withdrawal processes.
• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and other payment partners who process your financial transactions. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Game providers: Third-party software developers whose games are hosted on the aaagl Platform. Only the minimum data required for game operation and dispute resolution is shared.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where disclosure is required by law, court order, or regulatory direction.
• IT and security service providers: Trusted technology partners who provide cloud hosting, data storage, cybersecurity, and platform infrastructure services. All such providers are bound by data processing agreements that restrict their use of your data.
• Professional advisors: Legal counsel, auditors, and compliance consultants who require access to certain data in connection with their professional services to aaagl, subject to strict confidentiality obligations.

In the event of a merger, acquisition, or sale of substantially all of aaagl's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the applicable terms before your data is subject to a different privacy policy.

aaagl uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytical data. A cookie is a small text file stored on your device when you visit a website. aaagl uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, game display settings, and responsible gaming configurations — to personalise your experience on return visits.
• Analytical cookies: These cookies collect aggregated, anonymised information about how players use the Platform, including pages visited, time spent, and error reports. This data helps aaagl improve performance and the overall user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts. These cookies are tied to your session and device fingerprint for authentication validation.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the performance or availability of some features on the Platform. aaagl does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertisements on other websites.

aaagl retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active account data: Retained for the duration of your account's existence and for five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under RA 9160 (Anti-Money Laundering Act) and applicable AMLC regulations.
• KYC and identity documents: Retained for five (5) years following account closure or the date of your last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and usage logs: Retained for a maximum of twelve (12) months unless a longer period is required for active security investigations or legal proceedings.

Upon expiry of the applicable retention period, aaagl will securely delete or anonymise your personal data in accordance with our data disposal procedures. Anonymised data from which you cannot be identified may be retained indefinitely for statistical and analytical purposes.

aaagl implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the aaagl Platform.
• Encryption at rest for sensitive stored data, including identity documents and financial records.
• Hashed and salted password storage — aaagl never stores your account password in plain text.
• Role-based access controls ensuring that aaagl staff can only access personal data necessary for their specific job function.
• Regular security vulnerability assessments and penetration testing of the Platform infrastructure.
• 24/7 security monitoring for anomalous access patterns, data exfiltration attempts, and account takeover activity.
• Multi-factor authentication (MFA) available for player accounts to add an additional layer of login security.

While aaagl takes all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, aaagl will notify the National Privacy Commission (NPC) within 72 hours and inform affected players without undue delay, in accordance with the DPA and its IRR.

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by aaagl. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. aaagl will respond to all verified requests within thirty (30) calendar days.

The aaagl Platform is strictly intended for persons aged 21 years and above. aaagl does not knowingly collect personal data from anyone under the age of 21. The collection of personal data from minors is not permitted under any circumstances, and any account found to be operated by a person under 21 will be immediately suspended and all associated data securely deleted.

aaagl enforces this restriction through mandatory age verification during the registration process and KYC procedures prior to the processing of any withdrawal. If a parent or guardian becomes aware that a minor has provided personal data to aaagl without authorisation, they should contact our Data Protection Officer immediately using the details in Section 14.

Some of aaagl's third-party service providers — including cloud infrastructure providers, KYC partners, and game software developers — may process or store personal data outside the Philippines. Where such cross-border data transfers occur, aaagl ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173.

Safeguards for cross-border transfers include contractual clauses in data processing agreements that impose data protection obligations on the recipient party, and where applicable, transfers only to countries or organisations that have been assessed as providing adequate levels of data protection.

aaagl does not transfer your financial data, KYC documents, or sensitive personal information to any country that does not maintain adequate data protection standards. If you have questions about the specific safeguards applicable to a transfer of your data, contact our Data Protection Officer.

aaagl may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable Philippine law. When material changes are made, we will notify registered players via email or an in-platform notification at least fourteen (14) days before the changes take effect.

The most current version of this Privacy Policy will always be available on this page, with the effective date clearly displayed at the top. Your continued use of the Platform following the publication of any revised Policy constitutes acceptance of those changes. If you do not agree with the revised Policy, you must stop using the Platform and contact our support team to close your account.

aaagl has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you wish to exercise any of your data rights, raise a privacy concern, or make a formal complaint, please contact the aaagl DPO through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 within the aaagl Platform — request to speak with the Data Protection team.

All privacy-related requests and complaints will be acknowledged within five (5) business days and resolved within thirty (30) calendar days, or such extended period as may be required for complex requests, in which case you will be notified of the expected timeline.