aaajl1 Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") is published by aaajl1 (hereinafter "aaajl1", "we", "us", or "our"), a PAGCOR-regulated online gaming platform accessible at https://aaajl1.net, and is intended for all registered players, site visitors, and prospective users (hereinafter "you" or "Data Subject") who interact with the aaajl1 website and its associated services.

aaajl1 is committed to protecting your personal data and to processing it responsibly, transparently, and in strict compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the guidelines issued by the National Privacy Commission (NPC) of the Philippines, and all other applicable Philippine data protection and consumer protection laws.

This Policy explains in plain terms: what personal information we collect about you, the purposes for which we process it, the legal grounds on which we rely, how long we keep it, who we share it with, and what rights you can exercise in relation to your personal data. Please read this Policy carefully alongside our Terms & Conditions and Responsible Gaming Policy, which together form the full legal framework governing your use of the aaajl1 platform.

Personal Data We Collect

aaajl1 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your interactions with our website, and — in limited circumstances — from third-party sources such as payment providers and identity verification services. The categories of personal data we collect are as follows:

We do not intentionally collect sensitive personal information (as defined under the Data Privacy Act) such as health data, religious beliefs, or political opinions unless specifically required by law or regulation, in which case we will obtain your explicit consent before doing so.

How We Use Your Personal Data

aaajl1 processes your personal data for specific, legitimate, and clearly defined purposes. We do not use your data for purposes incompatible with those listed below. The primary purposes for which we process your personal data are:

• Account Management: Creating and maintaining your aaajl1 player account, verifying your identity, and enabling you to log in securely.
• Identity Verification (KYC): Confirming your age (21+ requirement), verifying your identity documents, and meeting PAGCOR and Anti-Money Laundering Council (AMLC) obligations.
• Payment Processing: Facilitating deposits via GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other supported payment channels, and processing withdrawal requests to your verified payment accounts.
• Service Delivery: Providing access to slots, live casino, sports betting, bingo, sabong, and all other games and features on the aaajl1 Platform.
• Regulatory Compliance: Meeting our legal obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and any other applicable Philippine law or regulatory directive.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account duplication, money laundering, collusion, and other prohibited conduct.
• Customer Support: Responding to your queries, complaints, and support requests via live chat and email.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators, enforcing deposit limits, and processing self-exclusion requests in accordance with our Responsible Gaming Policy.
• Marketing & Promotions: Sending you promotional offers, bonus notifications, and updates about new games or features — but only where you have opted in to receive such communications. You may withdraw this consent at any time through your account settings.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve game performance, website design, and user experience.

Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, aaajl1 is required to have a lawful basis for processing your personal data. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform the contract between you and aaajl1 — i.e., our Terms & Conditions. This covers account creation, payment processing, KYC, game access, and customer support.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and tax reporting obligations. We cannot opt out of these processing activities regardless of your preferences.
• Legitimate Interests: Processing for purposes that serve aaajl1's legitimate business interests, provided these interests are not overridden by your rights and freedoms. This covers fraud detection, network security, responsible gaming monitoring, and Platform analytics.
• Consent: Processing for which we have obtained your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

aaajl1 does not sell, rent, or trade your personal data. We may, however, share your data with carefully selected third parties where necessary for the following purposes, always subject to appropriate contractual data protection safeguards:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers receive your financial and identity data solely for the purpose of processing your deposit and withdrawal transactions.
• Game Content Providers: Third-party game studios and live casino operators who supply game content on the aaajl1 Platform may receive your Player ID and gameplay session data for game delivery, RTP auditing, and dispute resolution purposes. These providers operate under strict confidentiality agreements.
• Identity Verification (KYC) Providers: Specialist third-party eKYC service providers may process copies of your government-issued ID and selfie for the purpose of automated identity and age verification, in accordance with PAGCOR requirements.
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities may receive your data where required by law, regulatory directive, court order, or lawful investigation.
• Analytics & Technology Providers: Website analytics and fraud detection technology providers may process aggregated or pseudonymized technical data to help us understand Platform usage and protect against security threats.
• Professional Advisers: Our legal, compliance, and audit advisers may access your data on a need-to-know basis under professional confidentiality obligations.

All third-party data processors engaged by aaajl1 are contractually required to process your data only on our documented instructions, to maintain appropriate security measures, and to comply with applicable Philippine data protection law.

Cookies & Tracking Technologies

aaajl1 uses cookies and similar tracking technologies (such as web beacons and local storage) on our website. Cookies are small text files stored on your device that help us recognize you between visits, remember your preferences, and understand how you use our Platform.

The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — for example, session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without preventing your use of the Platform.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options, so you do not have to reset them on every visit.
• Analytics Cookies: Help us understand how players navigate the Platform — which pages are most visited, where users encounter difficulties, and how long sessions last. This data is aggregated and anonymized. We use this information solely to improve the aaajl1 experience.
• Security Cookies: Support our fraud detection and account security systems by helping us identify unusual access patterns and flagging potentially compromised sessions.

aaajl1 does not use third-party advertising cookies or allow advertising networks to place tracking cookies on our Platform. We do not run behaviorally targeted advertising campaigns based on your personal data.

Data Retention

aaajl1 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with our legal retention obligations under Philippine law. The general retention periods we apply are:

• Account & Identity Data: Retained for the duration of your account relationship with aaajl1, and for a minimum of five (5) years following account closure, as required by PAGCOR and Anti-Money Laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with the Anti-Money Laundering Act (RA 9160) and PAGCOR record-keeping requirements.
• Gaming Session Data: Retained for a minimum of three (3) years for dispute resolution, regulatory audit, and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for two (2) years from the date of last interaction, to support quality assurance and dispute resolution.
• Marketing Consent Records: Retained for the duration of the consent, plus one (1) year after withdrawal, to demonstrate regulatory compliance.
• Technical & Security Logs: Retained for twelve (12) months, after which they are securely deleted or anonymized.

Once a retention period expires, personal data is securely deleted or irreversibly anonymized in accordance with our data destruction procedures. Where deletion is not immediately possible (for example, because data exists in backup archives), we will isolate the data from active processing until deletion can be completed.

Data Security

aaajl1 takes the security of your personal data seriously. We implement a multi-layered security framework that includes both technical and organizational measures designed to protect your data from unauthorized access, accidental loss, disclosure, alteration, or destruction.

Our key security measures include:

• Transport Layer Security (TLS): All data transmitted between your browser and our servers is encrypted using industry-standard TLS protocols. Look for the padlock icon in your browser's address bar.
• Data Encryption at Rest: Sensitive personal data — including financial information and identity documents — is encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Access Controls: Role-based access control (RBAC) ensures that only authorized aaajl1 personnel can access personal data, and only to the extent required by their specific job function.
• Multi-Factor Authentication: Internal systems containing player data are protected by multi-factor authentication for all staff, reducing the risk of credential-based breaches.
• Vulnerability Management: We conduct regular security assessments, penetration tests, and vulnerability scans on our Platform infrastructure.
• Incident Response: aaajl1 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours of becoming aware, and will notify affected players without undue delay as required by the Data Privacy Act.

Your Data Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you — as a Data Subject — have the following rights in relation to your personal data held by aaajl1:

• Right to be Informed: You have the right to be informed about how your personal data is collected and processed, which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data aaajl1 holds about you, including information on how it is being processed and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate, outdated, or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis), or where processing is unlawful. Please note that this right is subject to our legal retention obligations — we cannot erase data we are required by PAGCOR or AMLC regulations to retain.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, subject to our demonstrating compelling legitimate grounds.
• Right to Data Portability: Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Lodge a Complaint: If you believe aaajl1 has breached your data privacy rights, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines.

Minors & Age Restriction

The aaajl1 platform is strictly for individuals who are 21 years of age or older, as mandated by PAGCOR regulations governing online gaming in the Philippines. aaajl1 does not knowingly collect, process, or store personal data from individuals below this age.

We implement the following measures to prevent underage access:

• A mandatory date-of-birth declaration at the point of registration, with a hard block on registration attempts by individuals declaring an age below 21.
• Identity verification (KYC) procedures that require submission of a government-issued ID confirming the player's date of birth.
• Ongoing monitoring for account activity patterns inconsistent with adult players, which may trigger an additional age verification request.

If aaajl1 discovers or is notified that a player account has been registered by an individual under the age of 21, we will immediately suspend the account, refund any real-money deposits made (after deducting any withdrawals already processed), and permanently delete the personal data of the minor in accordance with applicable law.

Cross-Border Data Transfers

aaajl1 primarily processes and stores your personal data within the Philippines. However, certain operational functions — particularly those involving third-party game content providers, technology infrastructure providers, and fraud detection services — may result in your personal data being transferred to, processed in, or stored within countries outside the Philippines.

Where such cross-border transfers occur, aaajl1 ensures that appropriate safeguards are in place to protect your personal data, in accordance with Section 21 of the Data Privacy Act and relevant NPC guidelines. These safeguards may include:

• Data transfer agreements incorporating the NPC's standard contractual clauses or equivalent data protection provisions.
• Transfers to countries or organizations that have been recognized as providing an adequate level of data protection equivalent to that afforded by Philippine law.
• Obtaining your explicit consent for the transfer where no other lawful transfer mechanism is available.

aaajl1 will not transfer your personal data to a foreign country or international organization unless the privacy rights of the Data Subject are guaranteed and equivalent to those provided under Philippine law.

Policy Amendments

aaajl1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, to comply with new or updated Philippine laws and regulations, or to respond to changes in our business operations. We are committed to keeping you informed of any material changes.

Where we make material changes to this Policy — meaning changes that meaningfully affect your privacy rights or how we handle your personal data — we will provide prominent notice via:

• A notification banner on the aaajl1 website for a period of not less than fourteen (14) days following the update.
• A direct notification to your registered email address or mobile number, where the change is significant enough to warrant individual notice in our assessment.

The "Effective Date" at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed of how aaajl1 protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

For non-material amendments — such as typographical corrections, clarifications that do not alter the substance of any provision, or formatting updates — we may update the Policy without advance notice, though the Effective Date will still be updated.

Contact Us & Data Protection Officer

aaajl1 has designated a Data Protection Officer (DPO) responsible for overseeing our compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please do not hesitate to contact us:

• Live Chat: Available 24 hours a day, 7 days a week through the chat widget on the aaajl1 website. Our support agents are trained to handle data privacy inquiries and will escalate to the DPO where necessary.
• Email: [email protected] — Please include "Privacy Request" in the subject line, along with your registered username and a clear description of your query or request. We aim to respond to all privacy-related emails within one (1) business day.

For formal data subject rights requests (access, rectification, erasure, portability, objection), please submit your request in writing via email to the address above. We may need to verify your identity before processing your request to ensure that personal data is not disclosed to unauthorized parties.

If you are not satisfied with aaajl1's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines through the official NPC channels.