aaajil Privacy Policy – How We Protect Your Personal Information

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal information by aaajil (the "Company," "we," "us," or "our") through our website, mobile applications, and related gaming services (collectively, the "Platform"). This policy applies to all users who access or register for aaajil services within the Republic of the Philippines.

By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any provision of this policy, you must immediately discontinue use of the Platform and contact us to request account deletion.

aaajil is committed to compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as international data protection standards including the General Data Protection Regulation (GDPR) where applicable.

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational needs. Material changes will be communicated to registered users via email or prominent notice on the Platform at least thirty (30) days prior to the effective date. Your continued use of aaajil services following any modification constitutes acceptance of the updated policy.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for an aaajil account or use our services, we collect personal information that you voluntarily provide, including but not limited to:

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and account password.
• Identity Verification Documents: Government-issued identification (passport, driver's license, UMID, postal ID, voter's ID), proof of address (utility bills, bank statements), and selfie photographs for identity confirmation.
• Financial Information: Payment method details including GCash account numbers, bank account information, credit/debit card details (last four digits only), cryptocurrency wallet addresses, and transaction history.
• Communication Data: Content of messages sent through our customer support channels, live chat transcripts, email correspondence, and feedback submissions.
• Profile Preferences: Language preferences, notification settings, gaming preferences, responsible gaming limits, and VIP tier status.

2.2 Automatically Collected Information

When you access the aaajil Platform, we automatically collect certain technical and behavioral data through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile carrier information.
• Connection Data: IP address, geolocation data (derived from IP address or GPS with your consent), internet service provider, connection speed, and network status.
• Usage Analytics: Pages visited, features accessed, time spent on pages, click patterns, navigation paths, referral sources, search queries, and session duration.
• Gaming Activity: Games played, bet amounts, win/loss history, bonus usage, withdrawal patterns, and responsible gaming tool activation.
• Performance Monitoring: Error logs, crash reports, loading times, and technical diagnostics to improve platform stability and user experience.

2.3 Information from Third Parties

We may receive information about you from third-party sources including payment processors (GCash, PayMaya, banking partners), identity verification services, fraud prevention agencies, marketing partners, and publicly available databases. This information is used to verify your identity, prevent fraud, and comply with legal obligations.

3. How We Use Your Information

3.1 Primary Purposes

aaajil processes your personal information for the following legitimate business purposes:

• Account Management: Creating and maintaining your user account, authenticating your identity, processing registration requests, and managing account settings and preferences.
• Service Delivery: Providing access to gaming services, processing bets and wagers, calculating payouts, managing account balances, and enabling deposits and withdrawals.
• Transaction Processing: Facilitating financial transactions, verifying payment methods, preventing duplicate transactions, processing refunds, and maintaining transaction records.
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, providing technical assistance, and improving customer service quality.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, unauthorized access, money laundering, underage gambling, account takeovers, and other security threats.
• Regulatory Compliance: Fulfilling legal obligations under Philippine law, responding to government requests, conducting know-your-customer (KYC) and anti-money laundering (AML) procedures, and reporting suspicious activity to authorities.

3.2 Marketing and Communications

With your consent, we may use your contact information to send promotional materials, bonus offers, VIP program updates, new game announcements, and other marketing communications. You may opt out of marketing emails at any time by clicking the unsubscribe link in any promotional message or adjusting your notification preferences in your account settings.

3.3 Analytics and Improvement

We analyze aggregated and anonymized usage data to understand user behavior, improve platform performance, develop new features, optimize game offerings, personalize user experience, and conduct market research. This data is processed in a manner that does not identify individual users.

3.4 Responsible Gaming

We monitor gaming patterns to identify potential problem gambling behavior and proactively reach out to users who may benefit from responsible gaming tools such as deposit limits, loss limits, session time restrictions, cooling-off periods, or self-exclusion programs.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and GDPR (where applicable), aaajil processes your personal information based on the following legal grounds:

4.1 Contractual Necessity

Processing is necessary to perform our contractual obligations under the Terms and Conditions, including account creation, service delivery, transaction processing, and customer support.

4.2 Legal Obligation

Processing is required to comply with applicable laws and regulations, including age verification requirements, anti-money laundering laws, counter-terrorism financing obligations, tax reporting, and regulatory oversight.

4.3 Legitimate Interest

Processing is necessary for our legitimate business interests in fraud prevention, security monitoring, platform improvement, analytics, and direct marketing, provided such interests do not override your fundamental rights and freedoms.

4.4 Consent

For certain processing activities such as marketing communications, non-essential cookies, and location tracking, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. Information Sharing and Disclosure

5.1 Service Providers

We share personal information with trusted third-party service providers who perform functions on our behalf, including:

• Payment processors (GCash, PayMaya, banking institutions) to facilitate deposits and withdrawals
• Identity verification services to confirm user identities and prevent fraud
• Cloud hosting providers to store data securely
• Customer relationship management platforms to manage support inquiries
• Analytics providers to generate usage insights
• Marketing platforms to deliver promotional communications
• Cybersecurity firms to monitor threats and protect the Platform

All service providers are contractually obligated to protect your information, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure service providers maintain adequate security measures.

5.2 Legal and Regulatory Authorities

We may disclose personal information to government agencies, law enforcement, regulatory bodies, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal process, court orders, subpoenas, or government requests
• Enforce our Terms and Conditions and other policies
• Detect, prevent, or address fraud, security issues, or illegal activity
• Protect the rights, property, or safety of aaajil, our users, or the public
• Report suspicious transactions as required by anti-money laundering regulations

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, personal information may be transferred to the acquiring entity. We will provide notice of any such transfer and inform you of your options regarding your information.

5.4 No Sale of Personal Data

aaajil does not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with advertising networks or data brokers.

6. Data Security and Protection

6.1 Security Measures

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission is encrypted using TLS/SSL protocols. Sensitive data at rest is encrypted using AES-256 encryption standards.
• Access Controls: Personal information is accessible only to authorized personnel who require it for their job functions. Multi-factor authentication is required for administrative access.
• Network Security: Firewalls, intrusion detection systems, and regular security audits protect our infrastructure from external threats.
• Secure Data Centers: Data is stored in secure, geographically distributed data centers with physical access controls, environmental monitoring, and redundancy systems.
• Regular Testing: We conduct penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses.
• Employee Training: All personnel undergo data privacy and security training to ensure awareness of best practices and regulatory requirements.

6.2 Data Breach Response

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with the Data Privacy Act of 2012 within seventy-two (72) hours of discovery. Notification will include the nature of the breach, affected data categories, potential consequences, and measures taken to mitigate harm.

6.3 Your Security Responsibilities

You are responsible for maintaining the confidentiality of your account credentials. Use a strong, unique password and never share it with others. Enable two-factor authentication if available. Report any unauthorized access immediately.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods

• Active Accounts: Personal information is retained for the duration of your account relationship with aaajil.
• Closed Accounts: Following account closure, we retain personal information for five (5) years to comply with anti-money laundering regulations, tax requirements, and legal obligations.
• Transaction Records: Financial transaction data is retained for ten (10) years as required by Philippine banking and financial regulations.
• Marketing Communications: Contact information for marketing purposes is retained until you opt out or request deletion.
• Dispute Records: Information related to disputes, complaints, or legal proceedings is retained until resolution plus applicable statute of limitations periods.

7.2 Secure Deletion

Upon expiration of retention periods, personal information is securely deleted or anonymized using methods that prevent recovery. Backup copies are deleted within a reasonable timeframe consistent with our backup rotation policies.

8. Your Privacy Rights

8.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within thirty (30) days of your request.

8.2 Correction and Update

You may update your account information at any time through your account settings. If you are unable to update information yourself, contact customer support to request corrections.

8.3 Deletion

You may request deletion of your personal information by contacting customer support. Note that we may retain certain information as required by law or for legitimate business purposes such as fraud prevention and regulatory compliance.

8.4 Restriction and Objection

You may request restriction of processing or object to certain processing activities such as direct marketing. We will honor such requests unless we have overriding legitimate grounds or legal obligations.

8.5 Consent Withdrawal

Where processing is based on consent, you may withdraw consent at any time. This will not affect the lawfulness of processing conducted prior to withdrawal.

8.6 Complaint

If you believe your privacy rights have been violated, you may file a complaint with the National Privacy Commission of the Philippines or other relevant data protection authority.

8.7 Exercising Your Rights

To exercise any of these rights, contact us at the details provided in Section 11. We will respond within thirty (30) days and may require identity verification before processing your request.

9. Cookies and Tracking Technologies

9.1 Types of Cookies

aaajil uses cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files stored on your device that enable us to recognize you and remember your preferences.

• Essential Cookies: Required for platform functionality including authentication, session management, and security. These cannot be disabled without affecting service availability.
• Performance Cookies: Collect anonymous usage data to analyze platform performance, identify errors, and improve user experience.
• Functional Cookies: Remember your preferences such as language settings, game favorites, and layout preferences.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These require your consent.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling cookies may affect platform functionality. For marketing cookies, you can opt out through the cookie consent banner or your account privacy settings.

9.3 Third-Party Analytics

We use third-party analytics services including Google Analytics to understand usage patterns. These services collect anonymized data governed by their respective privacy policies. You may opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

10. International Data Transfers

aaajil primarily operates within the Philippines and stores data in Philippine-based data centers. However, some service providers and infrastructure components may be located outside the Philippines. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Transfers to jurisdictions with adequate data protection laws as recognized by the National Privacy Commission
• Implementation of additional security measures to protect data during transfer
• Obtaining your explicit consent where required by law

11. Children's Privacy

aaajil services are strictly restricted to individuals aged twenty-one (21) years or older. We do not knowingly collect personal information from minors. If we discover that a user is underage, we will immediately suspend the account, cease processing their data, and delete their personal information in accordance with applicable law.

Parents or guardians who believe a minor has provided information to aaajil should contact us immediately. We will take prompt action to investigate and remove any improperly collected data.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated via email to registered users or through prominent notice on the Platform at least thirty (30) days before the effective date.

Continued use of aaajil services following any modification constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Data Protection Officer:

• Email: [email protected]
• Customer Support Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• Response Time: We aim to respond to privacy inquiries within thirty (30) days

When contacting us regarding privacy matters, please provide your account details and a clear description of your request to expedite processing.