aaaopen Privacy Policy

1 Who We Are

aaaopen ("we," "us," "our," or "the Operator") operates the online gaming platform accessible at aaaopen.ws, offering casino games, slots, live dealer tables, sports betting, bingo, and related gaming products to eligible players in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), aaaopen acts as the Personal Information Controller (PIC) in respect of personal data collected through the platform. Where aaaopen engages third-party service providers to process data on its behalf, those parties act as Personal Information Processors (PIPs) under binding data processing agreements.

This Privacy Policy applies to all personal data collected by aaaopen through the aaaopen.ws website, mobile-optimized platform, customer support channels, and any associated services. By creating an account and using the aaaopen platform, you acknowledge that you have read and understood this Privacy Policy in its entirety.

2 Personal Data We Collect

aaaopen collects personal data in the following categories, depending on how you interact with the platform:

2.1 Identity & Contact Information

• Full legal name as appearing on a government-issued Philippine ID
• Date of birth and gender
• Residential address (province, city/municipality, barangay, ZIP code)
• Mobile number and email address
• Government-issued ID type and number (PhilSys, SSS, UMID, passport, or driver's license)

2.2 Financial & Transaction Data

• GCash or Maya mobile wallet number
• Bank account name, number, and branch (BPI, BDO, Metrobank, or other participating banks)
• Deposit amounts, withdrawal requests, and transaction history
• Cryptocurrency wallet addresses (for USDT transactions)
• Bonus and promotional offer redemption records

2.3 Gaming & Behavioral Data

• Game play history, bet amounts, win/loss records, and session durations
• Sports betting selections and wager history
• Responsible gaming tool usage (deposit limits, self-exclusion elections)
• Customer support interaction records and chat transcripts

2.4 Technical & Device Data

• IP address and approximate geolocation (province/city level)
• Device type, operating system, and browser version
• Session timestamps and duration logs
• Cookie identifiers and analytics tracking data (see Section 9)

3 How We Collect Your Data

aaaopen collects personal data through the following channels and methods:

• Account Registration: When you create an aaaopen account, you directly provide your name, contact details, date of birth, and preferred payment method.
• KYC Verification: When you submit identity documents for account verification, our compliance team processes your ID details, selfie photographs, and proof-of-address documents.
• Deposits & Withdrawals: Payment processing requires collection of your payment method details to facilitate transactions via GCash, Maya, BPI, BDO, Metrobank, GrabPay, CLiQQ, or USDT.
• Platform Usage: As you navigate and play on aaaopen, our systems automatically record game activity, session logs, device identifiers, and IP addresses for security and analytics purposes.
• Customer Support: When you contact aaaopen support via live chat or email, we collect and retain records of your inquiry and any information you provide in the course of seeking assistance.
• Cookies & Tracking Technologies: Our platform uses cookies and similar technologies to maintain session state, recognize returning players, and analyze platform performance. See Section 9 for full details.
• Third-Party Sources: In certain cases, aaaopen may receive data from third-party identity verification providers, fraud prevention services, or payment processors to supplement or verify information you have provided directly.

4 Why We Use Your Personal Data

aaaopen uses the personal data it collects for the following specific purposes:

aaaopen does not use your personal data for automated decision-making or profiling that produces significant legal effects without human review, except where such processing is required by applicable Philippine law or regulatory obligation.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, aaaopen processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and aaaopen — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal Obligation: aaaopen is required by Philippine law, PAGCOR regulatory requirements, and Anti-Money Laundering Act (AMLA) obligations to collect, verify, and retain certain categories of personal data.
• Legitimate Interests: aaaopen processes certain data to pursue its legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided those interests do not override your fundamental rights and freedoms.
• Consent: Where processing is not otherwise justified by the above bases — for example, sending you promotional offers and marketing communications — aaaopen relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

aaaopen does not sell your personal data. We may share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Payment Processors

To process deposits and withdrawals, aaaopen shares relevant financial data with licensed payment service providers including GCash, Maya, GrabPay, BPI, BDO, Metrobank, and CLiQQ. These providers operate under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.

6.2 Identity Verification Providers

aaaopen engages third-party KYC and identity verification services to validate government-issued IDs and assess fraud risk. These providers process your identity documents solely for verification purposes under binding data processing agreements.

6.3 Game Content Providers

Third-party game providers whose content is available on the aaaopen platform may receive anonymized or pseudonymized session data necessary to deliver game functionality. No directly identifiable personal data (such as your full name or ID number) is shared with game providers.

6.4 Regulatory & Law Enforcement Authorities

aaaopen is legally obligated to disclose personal data to competent Philippine authorities — including the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and law enforcement agencies — when required by a valid legal order, court order, or regulatory directive.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of assets involving aaaopen, your personal data may be transferred to the successor entity, subject to the same level of data protection as described in this Privacy Policy. You will be notified of any such change via email or in-platform notice prior to your data being transferred.

7 International Data Transfers

Some of aaaopen's service providers and technology infrastructure partners may be located outside the Philippines. Where personal data is transferred internationally, aaaopen ensures that appropriate safeguards are in place, consistent with Section 21 of the Philippine Data Privacy Act of 2012 and relevant NPC circulars.

Safeguards employed by aaaopen for cross-border data transfers include:

• Binding contractual clauses that require recipient parties to apply data protection standards equivalent to those required under RA 10173.
• Transfers only to countries or organizations that provide an adequate level of data protection as assessed by the National Privacy Commission or through internationally recognized frameworks.
• Regular audits of third-party data processors to confirm ongoing compliance with agreed data protection obligations.

8 Data Retention

aaaopen retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or pseudonymized using industry-standard data destruction methods. Anonymized data that can no longer identify you as an individual may be retained indefinitely for aggregated analytical purposes.

9 Cookies & Tracking Technologies

aaaopen uses cookies and similar tracking technologies on the aaaopen.ws platform. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalized gaming experience.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential to the operation of the platform. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without disrupting platform functionality.
• Functional Cookies: Enable personalized platform features such as remembering your preferred language, lobby layout, and recently played games.
• Analytics Cookies: Allow aaaopen to understand how players navigate the platform, which games are most popular, and where technical errors occur. This data is used in aggregated, anonymized form only.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and account takeover attacks.

9.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or settings menus. Please note that disabling functional or analytics cookies may affect your experience on the aaaopen platform. Strictly necessary cookies cannot be disabled through browser settings while you remain logged in.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, every aaaopen player has the following rights with respect to their personal data. You may exercise any of these rights at no cost by contacting our Data Protection Officer as described in Section 14.

aaaopen will respond to all verified data subject requests within fifteen (15) business days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) business days with prior written notice to you.

11 Children & Minors

The aaaopen platform is strictly for adults who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. aaaopen does not knowingly collect personal data from any individual under the age of 21.

All new accounts are subject to mandatory age verification during the KYC process. If aaaopen discovers that personal data has been collected from a person under 21 years of age — whether through fraudulent registration or otherwise — the account will be immediately suspended, all associated personal data will be deleted, and any funds held in the account will be handled in accordance with applicable regulatory requirements.

12 Security Measures

aaaopen implements a layered security framework to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Security: All data transmitted between your device and aaaopen servers is encrypted using TLS 1.3 / 256-bit SSL certificates.
• Access Controls: Personal data is accessible only to aaaopen staff and authorized service providers who have a documented, role-specific need to access it. Access is governed by the principle of least privilege.
• Data Encryption at Rest: Sensitive data fields — including identity document references, payment account details, and KYC records — are encrypted in storage using AES-256 encryption.
• Two-Factor Authentication: All administrative access to aaaopen's back-end systems requires multi-factor authentication. Player-facing 2FA via SMS OTP is available and strongly recommended for all accounts.
• Penetration Testing: aaaopen conducts regular third-party security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed personal data breach, aaaopen will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

While aaaopen employs robust technical and organizational security measures, no system can guarantee absolute security. You are encouraged to use a strong, unique password for your aaaopen account and to enable two-factor authentication to further protect your data.

13 Updates to This Privacy Policy

aaaopen may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or platform features. The effective date displayed at the top of this page will be updated whenever a material change is made.

Where changes are significant — for example, a new category of data being collected or a new sharing arrangement with a third party — aaaopen will provide advance notice to registered players via email or a prominent in-platform notification before the changes take effect. For non-material updates (such as clarifications or corrections), the revised policy will take effect immediately upon publication.

Your continued use of the aaaopen platform after any update to this Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any changes, you have the right to close your account and request deletion of your data as described in Section 10.

14 Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise any of your data rights under the Philippine Data Privacy Act, or need to report a potential data protection concern, please contact the aaaopen Data Protection Officer through the following channels:

• Email: [email protected] — include "Data Privacy Request" in the subject line for prioritized routing to our DPO.
• Live Chat: Available 24/7 on the aaaopen platform. Request to speak with our Data Protection team when initiating the chat.

aaaopen is committed to resolving all data privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

For general platform information, you may also visit our About Us page, review our Terms & Conditions, or consult our FAQ for common questions.