aaajiji Privacy Policy

1.1  This Privacy Policy applies to all personal data processed by aaajiji in connection with the operation of its online casino and gaming platform at aaajiji.one. It covers data collected from players located in the Philippines and any other jurisdiction in which aaajiji operates.

1.2  aaajiji is the data controller for personal data collected through the aaajiji platform. As data controller, aaajiji determines the purposes for which and the means by which personal data is processed, in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations as administered by the National Privacy Commission ("NPC") of the Philippines.

1.3  This Policy applies to all personal data we hold about registered players, prospective players who have initiated but not completed registration, and visitors to aaajiji.one whose data is collected through cookies or analytics. It does not cover data practices of third-party services linked from or integrated into the aaajiji platform, including game providers, payment processors, and analytics vendors, which maintain their own independent privacy policies.

1.4  This Privacy Policy is incorporated into and should be read alongside aaajiji's Terms and Conditions and Responsible Gaming Policy, all of which are accessible through the footer navigation of aaajiji.one.

2.1  aaajiji collects the following categories of personal data in the course of providing its services to players:

• Full legal name as it appears on a government-issued Philippine identification document;
• Date of birth (used to verify the 21+ age requirement under PAGCOR regulations);
• Residential address, including barangay, city or municipality, province, and postal code;
• Email address used for account communication and verification;
• Mobile phone number registered to the account for OTP verification and support contact;
• Government-issued identification document type and number (e.g., PhilSys ID, passport, driver's license, UMID) submitted during KYC verification.

• GCash or PayMaya mobile wallet number used for deposits and withdrawals;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where a bank transfer withdrawal method is selected;
• Deposit and withdrawal transaction records including amounts, timestamps, and transaction reference numbers;
• Wagering history, game session records, and account balance information.

• IP address and approximate geolocation derived from network data;
• Device type, operating system, and browser or application version used to access aaajiji;
• Session logs including login timestamps, session duration, and pages or games accessed;
• Cookie identifiers and similar tracking technologies as described in Section 9.

• Records of live chat sessions, email correspondence, and other communications between you and aaajiji's support team;
• Feedback, complaints, and dispute records submitted through any channel.

3.1  aaajiji collects personal data through the following means:

• Directly from you — information you provide during account registration, KYC document submission, deposit and withdrawal requests, and support interactions;
• Automatically through platform use — technical and usage data collected via cookies, log files, and session monitoring as you navigate and use aaajiji.one;
• From third-party payment providers — transaction confirmation data received from GCash, PayMaya, and banking partners when processing your deposits or withdrawals;
• From identity verification services — where aaajiji uses a third-party KYC or identity verification provider to validate documents you submit, data is received from that provider in connection with the verification result;
• From fraud and risk detection services — automated risk signals and device fingerprinting data received from anti-fraud technology partners used to protect the platform and its players.

3.2  aaajiji does not purchase personal data from data brokers or third-party marketing list providers for the purpose of contacting individuals who have not registered on the platform.

4.1  Under the Data Privacy Act of 2012, aaajiji processes your personal data on the following legal bases:

5.1  aaajiji uses your personal data strictly for the purposes for which it was collected and as described in Section 4. Specifically, your data is used for:

• Creating, verifying, and managing your aaajiji player account;
• Processing GCash, PayMaya, and bank transfer deposits and withdrawals accurately and securely;
• Verifying that you meet the 21+ age requirement and completing required KYC identity checks before withdrawals are processed;
• Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, and money laundering;
• Fulfilling aaajiji's legal reporting obligations under PAGCOR regulations and the Anti-Money Laundering Act, including filing suspicious transaction reports with the AMLC where required;
• Administering responsible gaming tools including deposit limit settings, self-exclusion requests, and session monitoring;
• Responding to player support requests submitted via live chat, email, or other channels;
• Sending you account-related transactional notifications (deposit confirmations, withdrawal updates, security alerts) — these are not marketing communications and cannot be opted out of while your account remains active;
• Sending promotional communications, bonus offers, and marketing materials where you have provided explicit consent and have not subsequently opted out;
• Conducting internal analytics to understand platform usage patterns and improve game selection, performance, and user experience.

5.2  aaajiji will not use your personal data for any purpose incompatible with those listed above without first obtaining your consent or establishing a separate legal basis for the new purpose.

6.1  aaajiji does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. Your data is shared with third parties only in the following circumstances:

• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay receive the minimum necessary transaction data to process your deposits and withdrawals;
• Identity verification and KYC providers — third-party services used to verify government-issued IDs received the document images and personal details you submit for identity verification;
• Game content providers — JILI, Pragmatic Play, Evolution Gaming, and other licensed game developers may receive technical session data necessary to operate their games within the aaajiji platform;
• Anti-fraud and security services — risk detection providers may receive device and behavioral data for the purpose of identifying fraudulent activity;
• Regulatory and law enforcement authorities — PAGCOR, the AMLC, the NPC, and other Philippine government bodies as required by applicable law, court order, or regulatory direction;
• Legal and professional advisors — lawyers and accountants engaged by aaajiji in connection with legal proceedings or regulatory compliance, subject to professional confidentiality obligations;
• Business successors — in the event of a merger, acquisition, or sale of aaajiji's business, personal data may be transferred to the acquiring entity, which will be required to honor this Privacy Policy.

6.2  All third-party data processors engaged by aaajiji are required to process personal data only on aaajiji's instructions and in accordance with data protection obligations consistent with the DPA. aaajiji conducts due diligence on third-party processors and maintains written data processing agreements where applicable.

7.1  aaajiji implements technical, organizational, and administrative security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and aaajiji's servers;
• Encryption of sensitive data fields (including payment method details and ID document data) at rest in aaajiji's database systems;
• Role-based access controls limiting employee and contractor access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for administrative access to systems holding player data;
• Regular security assessments and penetration testing of the aaajiji platform and supporting infrastructure;
• Automated monitoring for anomalous access patterns, unusual login activity, and potential data breach indicators.

7.2  Notwithstanding the above measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. aaajiji cannot warrant the absolute security of information transmitted to or stored on its systems. Players are encouraged to maintain strong, unique passwords and to enable two-factor authentication on their aaajiji accounts.

8.1  aaajiji retains personal data for as long as is necessary to fulfill the purposes described in this Privacy Policy, subject to applicable legal and regulatory minimum retention requirements:

8.2  Upon expiry of the applicable retention period, aaajiji will securely delete or anonymize personal data in accordance with its internal data lifecycle management procedures. Where anonymization is technically feasible, anonymized data may be retained indefinitely for statistical and analytical purposes.

9.1  aaajiji uses cookies and similar tracking technologies on aaajiji.one to support platform functionality, remember your preferences, maintain your session, and analyze platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a gaming session, and security tokens that protect form submissions. These cannot be disabled without breaking platform functionality;
• Functional cookies: Remember your preferences such as language settings, game display preferences, and responsible gaming limit settings across sessions;
• Performance and analytics cookies: Collect anonymized or pseudonymized data about how players navigate and use aaajiji.one, which pages are visited most frequently, and where technical errors occur. This data is used to improve the platform;
• Security and fraud prevention cookies: Device identifiers and behavioral tracking cookies used by aaajiji's anti-fraud systems to detect unauthorized access and suspicious activity patterns.

9.2  aaajiji does not use third-party advertising cookies or permit external advertising networks to place cookies on aaajiji.one for behavioral advertising targeting purposes.

9.3  You may configure your browser to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use the aaajiji platform. Most modern browsers (Chrome on Android, Safari on iPhone) allow cookie preferences to be managed through the browser's Settings menu.

10.1  Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in relation to personal data aaajiji holds about you. To exercise any of these rights, contact aaajiji's Data Protection Officer as described in Section 14.

11.1  aaajiji's platform is strictly for individuals aged 21 years and above. The collection of personal data from persons under the age of 21 is not permitted under aaajiji's terms of service or these privacy policies, and aaajiji takes active steps to prevent such collection through age verification controls during registration and KYC procedures.

11.2  If aaajiji becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted promptly and the associated account will be suspended. If you believe that a minor's personal data has been submitted to aaajiji, please notify aaajiji's Data Protection Officer immediately using the contact details in Section 14.

11.3  aaajiji does not knowingly process the personal data of minors for any purpose and does not direct any marketing communications at individuals under 21 years of age.

12.1  Some of aaajiji's third-party service providers, including cloud infrastructure providers, game content platforms, and analytics services, may process personal data on servers located outside the Philippines. Where such international transfers occur, aaajiji ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or territories deemed to provide an adequate level of data protection by the NPC;
• Implementing standard contractual clauses or data transfer agreements that impose data protection obligations on the recipient consistent with Philippine data privacy requirements;
• Conducting due diligence on international data processors to verify that their data protection practices meet aaajiji's standards before engagement.

12.2  Where international transfers are necessary for the performance of your account contract — for example, to process a GCash transaction through an international payment gateway — aaajiji relies on contractual necessity as the basis for the transfer.

13.1  aaajiji reserves the right to update or amend this Privacy Policy at any time. The most current version will always be published at aaajiji.one/privacy-policy. The effective date of the current version is stated at the top of this Policy.

13.2  For material changes — those that significantly affect how aaajiji uses your personal data or your data rights — aaajiji will provide advance notice through email notification to registered players and a prominent notice on the aaajiji platform, at least seven (7) days before the amended Policy takes effect.

13.3  Continued use of the aaajiji platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree to the amended Policy, you may request account closure as described in aaajiji's Terms and Conditions.

14.1  aaajiji has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO is the primary point of contact for data rights requests, privacy complaints, and questions about this Policy.

14.2  To contact aaajiji's Data Protection Officer or to exercise any of the rights described in Section 10, please reach out through the following channels:

• Live Chat: Available 24/7 through the chat widget on aaajiji.one — the fastest channel for most privacy enquiries;
• Email: support @ aaajiji.one — mark the subject line "DATA PRIVACY REQUEST" to ensure your message is routed directly to the DPO team. Note: this email address is displayed as plain text only and is not a clickable link;
• Response Commitment: Acknowledgement of privacy requests within 48 hours, with substantive response within 30 calendar days as required by the DPA.

14.3  If you are not satisfied with aaajiji's response to a privacy complaint or data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.