aabplay Privacy Policy

Welcome to the aabplay Privacy Policy. aabplay ("we," "us," "our") operates the online casino platform accessible at aabplay.app, offering a wide range of gaming products including slots, bingo, live casino games, and other entertainment services to players across the Philippines.

We understand that entrusting us with your personal information is a significant act of confidence. This Privacy Policy is designed to give you complete transparency about our data practices — written in plain, accessible language so that every Filipino player can understand exactly how their information is handled.

This Privacy Policy applies to all personal data collected through the aabplay website, mobile platform, customer support channels, and any other touchpoints through which you interact with aabplay. It should be read alongside our Terms & Conditions, which govern your overall use of the platform.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, aabplay is the personal information controller responsible for your personal data collected through the aabplay platform.

As the personal information controller, aabplay determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in accordance with applicable data protection laws and the principles of transparency, legitimate purpose, and proportionality.

If you have any questions about how aabplay processes your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Privacy Policy.

aabplay collects the following categories of personal data from players and prospective players:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Residential address (including barangay, city/municipality, province)
• Email address and mobile phone number
• Government-issued ID type and number (e.g., PhilSys National ID, passport, driver's licence, UMID, SSS ID, voter's ID)

3.2 Financial Data

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) for withdrawal processing
• Debit or credit card details (card number, expiry, cardholder name — stored in tokenised form only)
• Transaction history including deposits, withdrawals, wagers, and bonus credits

3.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Game history, betting patterns, and session logs
• Login timestamps and authentication records

3.4 Communications Data

• Records of your communications with aabplay customer support via live chat, email, or other channels
• Survey responses, feedback submissions, and promotional opt-in preferences

aabplay collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the aabplay platform, including through cookies, web beacons, and similar tracking technologies (see Section 10).
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment verification data from payment processors such as GCash, PayMaya, and banking partners.
• Publicly available sources: Publicly accessible information used to verify your identity or detect fraudulent activity, where permitted by applicable law.

aabplay uses your personal data for the following purposes:

Under the Philippine Data Privacy Act of 2012, aabplay processes your personal data on the following legal bases:

• Consent: Where you have given us clear, informed, and freely given consent to process your data for a specific purpose, such as receiving marketing communications or promotional offers from aabplay. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contract Performance: Where processing is necessary to perform our contract with you — that is, to provide you with the aabplay gaming services, process your transactions, and manage your account.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to aabplay, including anti-money laundering (AML) regulations, PAGCOR licensing requirements, and the Philippine DPA itself.
• Legitimate Interest: Where processing is necessary for the purposes of the legitimate interests pursued by aabplay, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your fundamental rights and freedoms.

aabplay does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services used to verify your age and identity in compliance with our regulatory obligations.
• Fraud prevention and security partners: Service providers that assist aabplay in detecting and preventing fraudulent activity, money laundering, and other illegal conduct.
• Game software providers: Third-party game developers and content providers whose games are available on the aabplay platform, to the extent necessary to deliver the gaming service.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by aabplay, subject to strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of aabplay's business, your personal data may be transferred to the relevant third party, subject to equivalent data protection obligations.

All third parties with whom aabplay shares personal data are required to process that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

aabplay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, aabplay will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

aabplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the aabplay platform;
• Encryption of sensitive data at rest, including financial data and government ID information;
• Tokenisation of payment card data — aabplay never stores raw card numbers;
• Multi-factor authentication options for player accounts;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits conducted by independent third-party security firms;
• 24/7 intrusion detection and security monitoring systems;
• Regular staff training on data protection and information security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, aabplay will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine DPA and its implementing rules.

aabplay uses cookies and similar tracking technologies to enhance your experience on the platform, analyse usage patterns, and support security functions. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the aabplay platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the aabplay platform. aabplay does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aabplay. You may exercise any of these rights free of charge by contacting our Data Protection Officer using the details in Section 15.

aabplay will respond to all data subject rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The aabplay platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. aabplay does not knowingly collect personal data from individuals under the age of 21.

During the registration process, all applicants are required to confirm that they are at least 21 years of age and to provide documentary proof of age as part of the KYC verification process. Where aabplay discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will:

• Immediately suspend the relevant account;
• Delete all personal data associated with the underage account as soon as practicable;
• Return any deposits made, less any applicable processing fees, to the payment method used;
• Forfeit any winnings generated through the underage account.

If you are a parent or guardian and believe that your child has registered on the aabplay platform, please contact us immediately at the details provided in Section 15 so that we can take prompt action.

aabplay primarily processes and stores your personal data within the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines — for example, where we use cloud infrastructure providers or third-party service providers whose servers are located abroad.

Where such international transfers occur, aabplay ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine DPA and the regulations of the National Privacy Commission. These safeguards may include:

• Contractual clauses requiring the recipient to apply equivalent data protection standards;
• Transfers to countries recognised by the NPC as providing an adequate level of data protection;
• Binding corporate rules where the recipient is part of the same corporate group as aabplay.

By using the aabplay platform, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

aabplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Privacy Policy, we will notify registered players by email and/or by posting a prominent notice on the aabplay platform prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how aabplay protects your personal data.

Your continued use of the aabplay platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you must cease using the platform and may request closure of your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aabplay processes your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the aabplay platform
• FAQ: Visit our FAQ page for answers to common questions

aabplay will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

If you are not satisfied with aabplay's response to your data protection concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 3rd Floor, Core G, DICT Building, C.P. Garcia Ave., UP Campus, Diliman, Quezon City
• Website: privacy.gov.ph