Privacy Policy – aaopen Casino

1. Data Controller

aaopen Casino (referred to in this Policy as "aaopen", "we", "us", or "our") is the data controller responsible for the personal information collected through the aaopen.club platform and all associated services.

aaopen Casino operates in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC). We are also subject to applicable PAGCOR data governance requirements.

By creating an account with aaopen Casino, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

aaopen Casino collects personal data that is necessary, adequate, and not excessive for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (to verify the 21+ age requirement under Philippine law)
• Philippine mobile number (Globe or Smart)
• Email address
• Username and encrypted password
• Residential address in the Philippines

2.2 Identity Verification (KYC) Data

• Scanned copies or photographs of valid Philippine government-issued identification (e.g., PhilSys ID, UMID, Passport, Driver's License)
• Proof of address documents (e.g., utility bill, bank statement addressed to your Philippine residence)
• Source of funds documentation when required under PAGCOR AML guidelines

2.3 Financial Transaction Data

• GCash or PayMaya account number used for deposits and withdrawals
• BPI, BDO, or Metrobank account details for bank transfer transactions
• Transaction history: deposit amounts, withdrawal amounts, timestamps, and reference numbers

2.4 Gameplay & Platform Activity Data

• Game session data: games played, bets placed, outcomes, win/loss records
• Login timestamps and IP address at the time of each login
• Device type, operating system, and browser information
• Bonus and promotion usage records

2.5 Communications Data

• Records of customer support interactions via live chat, email, or other supported channels
• Complaint submissions and formal dispute records
• Survey responses and voluntary feedback submitted by players

3. How We Use Your Personal Data

aaopen Casino uses the personal data collected for the following purposes:

• Account Management: To create, maintain, and administer your aaopen account, verify your identity, and process deposits and withdrawals in Philippine Peso through GCash, PayMaya, or Philippine bank accounts.
• Regulatory Compliance: To fulfill aaopen's obligations under PAGCOR licensing requirements, Anti-Money Laundering (AML) regulations, and the Data Privacy Act of 2012. This includes identity verification (KYC), transaction monitoring, and suspicious activity reporting where legally required.
• Responsible Gaming: To identify and act upon indicators of problem gambling behavior, enforce self-exclusion requests, apply deposit and loss limits set by players, and fulfill aaopen's duty of care obligations to vulnerable players.
• Platform Improvement: To analyze gameplay patterns, platform usage data, and player feedback to improve the aaopen Casino experience, resolve technical issues, and develop new features.
• Marketing Communications: To send promotional offers, bonus announcements, and platform updates to players who have opted in to receive such communications. Players may opt out of marketing communications at any time through their account settings or by contacting support.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct on the aaopen platform.
• Customer Support: To respond to inquiries, process complaints, and provide technical assistance to players contacting aaopen Casino's support team.

4. Legal Basis for Processing

aaopen Casino processes personal data under the following legal bases as recognized by the Data Privacy Act of 2012 (RA 10173):

• Consent: Processing based on your explicit consent at the time of account registration, including consent to receive optional marketing communications.
• Contractual Necessity: Processing required to perform the contract between you and aaopen Casino — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing obligations, AML regulations, and court orders or regulatory directives from the NPC or other competent authorities.
• Legitimate Interest: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override the player's fundamental rights and freedoms.

5. Data Sharing & Third-Party Disclosure

aaopen Casino does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and proportionate:

• Payment Service Providers: GCash (GXI), PayMaya, BPI, BDO, Metrobank, and Visa/Mastercard processors — solely to process your deposits and withdrawals.
• Game Content Providers: Licensed game suppliers such as JILI Games — limited to session data required to render game content and record outcomes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission, where disclosure is required by Philippine law or a valid regulatory request.
• Technical Service Providers: Cloud hosting, cybersecurity, and analytics service providers operating under binding data processing agreements with aaopen Casino.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required by court order, subpoena, or applicable law.

All third-party service providers who process data on aaopen's behalf are required to maintain appropriate technical and organizational measures to protect that data and are prohibited from using it for any purpose other than the specific service they are contracted to provide.

6. Cookies & Tracking Technologies

aaopen Casino uses cookies and similar tracking technologies on the aaopen.club website to provide a functional and secure player experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the aaopen platform to function — including session authentication cookies that keep you logged in to your aaopen account, security tokens, and load balancing cookies. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings, responsible gaming limit displays, and lobby layout preferences to improve your aaopen experience.
• Analytics Cookies: Collect anonymized data about how players use the aaopen platform — such as which pages are visited most frequently and how long players spend in different game categories. This data is used exclusively to improve the platform.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the aaopen Casino platform. aaopen does not use third-party advertising cookies or tracking pixels for cross-site advertising purposes.

7. Data Retention

aaopen Casino retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and PAGCOR-mandated retention obligations.

• Active accounts: Personal data is retained for the duration of the account's active status.
• Closed accounts: Following account closure, aaopen retains transaction records, KYC documentation, and gameplay data for a minimum of five (5) years, as required by Philippine AML and gaming regulations.
• Marketing data: Retained only while you are opted in. Upon opting out, marketing-related data is removed from active mailing lists within thirty (30) calendar days.
• Support records: Customer support interaction records are retained for three (3) years from the date of each interaction.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with any identifiable individual.

8. Data Security

aaopen Casino implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and aaopen's servers
• Encrypted storage of sensitive data including passwords (hashed using bcrypt or equivalent) and KYC documents
• Multi-factor authentication requirements for administrative access to systems containing personal data
• Regular security audits and penetration testing of the aaopen platform infrastructure
• Access controls limiting employee access to personal data on a strict need-to-know basis
• Incident response procedures for detecting, containing, and notifying the NPC of any personal data breach within the 72-hour window prescribed by RA 10173

While aaopen takes every reasonable precaution, no online system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their aaopen accounts and to enable two-factor authentication where available.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), registered players in the Philippines have the following rights with respect to their personal data held by aaopen Casino:

• Right to be Informed: You have the right to know what personal data aaopen collects about you, how it is used, and to whom it may be disclosed.
• Right to Access: You may request a copy of the personal data aaopen holds about you. Requests will be fulfilled within fifteen (15) business days.
• Right to Rectification: If any personal data aaopen holds about you is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to aaopen's legal retention obligations under Philippine law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request your personal data in a commonly used, structured, machine-readable format.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe aaopen Casino has violated your data privacy rights.

To exercise any of the above rights, please contact aaopen Casino's Data Protection Officer at [email protected] (plain text — not a clickable link), clearly stating your request, your registered account username, and a description of the right you wish to exercise. Identity verification will be required before any request is processed.

10. Children's Privacy

The aaopen Casino platform is strictly intended for individuals who are at least twenty-one (21) years of age, as required under Philippine gambling law. aaopen Casino does not knowingly collect personal data from individuals below this age threshold.

If aaopen Casino discovers that a registered account belongs to an individual below the age of 21, the account will be immediately suspended, all balances forfeited, and the personal data associated with the account deleted or anonymized in accordance with this Privacy Policy and applicable Philippine law. Parents or guardians who believe a minor has registered on the aaopen platform are urged to contact aaopen Casino's support team immediately at [email protected].

11. Cross-Border Data Transfers

In the course of providing gaming services, aaopen Casino may transfer certain personal data to service providers and game content partners located outside the Philippines — including in jurisdictions within Southeast Asia, Europe, or other regions where our technology partners operate data centers.

Any such cross-border transfer of personal data will be conducted only where:

• The recipient country has been deemed by the NPC to provide an adequate level of data protection; or
• Appropriate contractual safeguards, such as Standard Contractual Clauses approved by the NPC, are in place between aaopen Casino and the recipient party; or
• The transfer is necessary for the performance of the contract between aaopen Casino and the player (e.g., processing a game session with a licensed content provider).

12. Changes to This Privacy Policy

aaopen Casino reserves the right to update this Privacy Policy at any time to reflect changes in applicable Philippine privacy law, PAGCOR requirements, or our data processing practices. Material changes will be communicated to registered players via email to their registered address or via a prominent notice on the aaopen.club platform, no less than seven (7) days before the revised Policy takes effect.

Continued use of the aaopen platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the platform and request account closure.

13. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or aaopen Casino's data processing practices, please contact:

• Data Protection Officer, aaopen Casino
• Email: [email protected] (plain text — not a clickable link)
• Platform: Live chat available 24/7 through aaopen.club

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information about the NPC complaints process is available through the NPC's official government channels.