At aha777, your personal data is treated with the same seriousness as your financial security. This Privacy Policy explains exactly what we collect, why we collect it, how we use it, and what rights you hold over your information as a player on our platform.
This Privacy Policy ("Policy") describes how aha777 ("we", "us", "our", "Company") collects, processes, stores, shares, and protects personal data in connection with your use of the aha777 online gaming platform available at https://aha777.win (the "Platform").
This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It applies to all personal data collected from players, visitors, and any individual who interacts with the aha777 Platform, regardless of their location within the Philippines — whether in Metro Manila, Cebu, Davao, or elsewhere in the archipelago.
Plain Language Summary: We collect your information so that we can operate your account, process your GCash and Maya transactions, verify your identity as required by PAGCOR and Philippine anti-money laundering rules, and keep the aha777 platform secure and compliant. We do not sell your personal data. You have rights over your data and can contact us to exercise them at any time.
1.1 This Policy applies to all personal data that aha777 processes in the course of operating the Platform, including data collected at account registration, during ongoing gameplay and transactions, through customer support interactions, and via the aha777 website's technical infrastructure.
1.2 This Policy should be read in conjunction with the aha777 Terms and Conditions, which govern the contractual relationship between aha777 and its Members. By registering an account on aha777, you acknowledge that you have read, understood, and accepted this Privacy Policy.
1.3 This Policy does not apply to third-party websites, payment processors, or game providers that you may interact with through links or integrations on the aha777 Platform. Those parties operate under their own privacy policies.
2.1 Data Controller Identity. For the purposes of the Data Privacy Act of 2012, aha777 is the data controller responsible for the personal data collected through the Platform. As data controller, aha777 determines the purposes for which your personal data is processed and the means by which that processing takes place.
2.2 Data Protection Officer (DPO). aha777 has appointed a Data Protection Officer in accordance with NPC requirements. The DPO is responsible for ensuring aha777's ongoing compliance with the Data Privacy Act and this Policy. Contact details for the DPO are provided in Section 15 of this Policy.
2.3 Registration with the NPC. aha777 complies with applicable NPC registration requirements for personal information controllers processing personal data of Philippine data subjects.
aha777 collects personal data across the following categories:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID number, nationality | Registration form; KYC submission |
| Contact Data | Philippine mobile number (+63), email address | Registration form; account settings |
| Financial Data | GCash account number, Maya account, BPI/BDO account details, transaction history, wallet balance | Deposit and withdrawal processing |
| Gaming Data | Game session records, bet amounts, win/loss history, bonus activity | Platform activity logging |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Automatic server-side collection |
| Communications Data | Live chat transcripts, support email correspondence, SMS records | Customer support interactions |
| KYC Documents | Uploaded copies of national ID, passport, driver's license, proof of billing address | KYC verification process |
3.1 Sensitive Personal Information. Certain categories of personal data are classified as "sensitive" under the Data Privacy Act, including data relating to health and government identification numbers. Where aha777 collects such data — for example, a PhilSys ID number during KYC verification — it is processed under heightened security controls and with a specific lawful basis.
3.2 Voluntary Disclosure. Some information you provide to aha777 is voluntary — for example, setting a self-exclusion preference or contacting support with a gaming-related query. Voluntary information is processed only for the purpose for which it was provided.
Under the Data Privacy Act of 2012, aha777 processes your personal data on the following lawful bases:
Note: Where aha777 relies on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
aha777 uses your personal data for the following specific purposes:
6.1 We do not sell your personal data. aha777 does not sell, rent, or commercially trade your personal data to any third party under any circumstances.
6.2 aha777 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:
Important: aha777 will never voluntarily disclose your personal data to foreign governments, foreign law enforcement, or international data brokers without a valid legal basis under Philippine law and the Data Privacy Act of 2012.
7.1 The aha777 Platform uses cookies and similar tracking technologies to deliver and improve the Platform experience. Cookies are small data files stored on your device by your browser when you visit aha777.win.
7.2 aha777 uses the following categories of cookies:
7.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your aha777 account. aha777 does not use third-party advertising or cross-site tracking cookies.
8.1 aha777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable Philippine law or PAGCOR regulations.
8.2 The following retention periods apply as a general guide:
8.3 Upon expiry of the applicable retention period, aha777 will securely delete or anonymise personal data in accordance with NPC guidelines.
9.1 aha777 implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:
9.2 Data Breach Notification. In the event of a personal data breach that is likely to result in significant harm to affected individuals, aha777 will notify the National Privacy Commission and affected data subjects within the timeframes required by the Data Privacy Act and NPC Circular No. 16-03.
Your Role in Security: While aha777 maintains robust security infrastructure, the security of your account also depends on you. Use a strong, unique password for your aha777 account, enable two-factor authentication, and never share your OTPs with anyone — including anyone claiming to be aha777 staff.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aha777:
Request a copy of the personal data aha777 holds about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data where no legal basis for retention applies.
Object to processing based on legitimate interests or for direct marketing.
Receive your personal data in a structured, machine-readable format.
Withdraw consent for marketing or other consent-based processing at any time.
File a complaint with the National Privacy Commission of the Philippines.
Seek compensation for damages sustained due to unlawful processing of your data.
10.1 To exercise any of the above rights, please submit a written request to aha777 via live chat or email. aha777 will respond to all data subject rights requests within thirty (30) days of receipt, in accordance with NPC guidelines. Some requests may require identity verification before aha777 can process them.
10.2 Please note that certain rights are subject to limitations under the Data Privacy Act — for example, the right to erasure does not apply where aha777 is required to retain your data under the Anti-Money Laundering Act or other applicable law.
11.1 The aha777 Platform is strictly restricted to individuals who are twenty-one (21) years of age or older. aha777 does not knowingly collect, process, or retain personal data from any person under the age of 21.
11.2 If aha777 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will immediately suspend the relevant account, delete the collected data to the extent permitted by law, and notify the individual's registered contact number.
11.3 Account holders are responsible for ensuring that minors do not access their aha777 account or submit personal data through devices under the account holder's control.
⚠ Age Restriction Notice: aha777 maintains a zero-tolerance policy for underage gaming. Any attempt to register using a false age will result in permanent account termination and referral to appropriate authorities. We actively employ age verification controls in compliance with PAGCOR requirements.
12.1 The aha777 Platform integrates game content from third-party providers — including JILI Technology, PG Soft, Pragmatic Play, and others. When you play a game on the aha777 Platform powered by a third-party provider, certain technical session data — such as your player session token, game results, and bet history for that session — is transmitted to the relevant game provider's servers to deliver the game. This data transmission is necessary to operate the game and is governed by the game provider's own data processing agreements with aha777.
12.2 aha777 requires all game providers and third-party data processors to process your data only for the purposes for which it was shared, under appropriate data protection agreements, and in compliance with applicable Philippine and international data protection standards.
12.3 aha777's Privacy Policy does not extend to any third-party websites, applications, or services that are not operated by aha777. If you navigate to any such service, its own privacy policy applies.
13.1 In the course of delivering gaming services, your personal data may be transferred to and processed in countries outside the Philippines — for example, where a game provider's servers are hosted in a foreign jurisdiction.
13.2 Where personal data is transferred outside the Philippines, aha777 ensures that such transfers are subject to appropriate safeguards, including: (a) data processing agreements incorporating standard contractual clauses; (b) confirmation that the recipient country provides an adequate level of data protection; or (c) where required, explicit consent from you as the data subject.
13.3 aha777 will not transfer your personal data to a foreign jurisdiction solely for the purpose of circumventing the protections afforded by the Data Privacy Act of 2012.
14.1 aha777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements.
14.2 Material changes to this Policy will be communicated to registered Members via SMS notification to their registered Philippine mobile number and/or a prominent notice displayed on the aha777 Platform upon login, at least seven (7) days before the revised Policy takes effect.
14.3 Your continued use of the aha777 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should cease using the Platform and submit an account closure request.
15.1 For all privacy-related inquiries, data subject rights requests, or complaints relating to aha777's processing of your personal data, please contact the aha777 Data Protection Officer through the following channels:
15.2 aha777 acknowledges all privacy-related requests within three (3) business days and aims to provide a substantive response within thirty (30) calendar days, in accordance with NPC requirements.
15.3 If you are not satisfied with aha777's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which can be contacted through the NPC's official channels. aha777 cooperates fully with NPC investigations.
Regulatory Body: The National Privacy Commission (NPC) is the government authority responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines. The NPC also provides resources and guidance for Filipino data subjects seeking to understand or exercise their privacy rights.
aha777 operates in full compliance with the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules. Our Data Protection Officer monitors ongoing compliance and manages all data subject rights requests on behalf of Filipino players.
aha777 does not sell, rent, or commercially trade your personal data to any third party under any circumstances. Your data is used solely to operate your account, process your GCash and Maya transactions, and keep the platform secure and compliant.
Every page, login, and transaction on the aha777 platform is protected by 256-bit TLS encryption. Sensitive data — including KYC documents and financial account details — is encrypted at rest using industry-standard protocols.
As a Filipino data subject, you have the right to access, correct, delete, and port your personal data held by aha777. Data rights requests are acknowledged within 3 business days and resolved within 30 days, in line with NPC requirements.
aha777 collects only the personal data necessary to operate your account and comply with PAGCOR and AMLA requirements. We don't collect data "just in case" — every data point we hold has a specific, lawful purpose attached to it.
aha777 maintains a personal data breach response plan aligned with NPC Circular No. 16-03. In the event of a significant data breach, we will notify the NPC and affected players within the legally required timeframes — no silent breaches, no cover-ups.
Hundreds of thousands of Filipino players across Manila, Cebu, Davao, and beyond trust aha777 with their personal data and real-money accounts. Join them today. 21+ only.
For players 21 years of age and above only. PAGCOR regulated. Play responsibly.