aajl Casino —
Privacy Policy &
Data Protection

1.1 aajl Casino is committed to protecting the privacy and personal data of all its players, visitors, and registered users. This Policy sets out how aajl fulfils its obligations as a personal information controller under Republic Act No. 10173, the Data Privacy Act of 2012 (DPA) of the Republic of the Philippines, and its Implementing Rules and Regulations.

1.2 aajl recognises that Filipino players entrust us with sensitive financial and identity information. That trust is not taken lightly. Every data handling practice at aajl is designed with the intent to collect the minimum data necessary, protect it to the highest practical standard, and use it only for purposes the player would reasonably expect.

1.3 This Policy applies to all personal data collected through aajl.lat, including through account registration, deposits, withdrawals, customer support interactions, bonus claims, and any other use of the Platform.

2.1 This Policy applies to:

• All registered aajl players, regardless of their location in the Philippines (whether in Metro Manila, Cebu, Davao, Quezon City, Makati, or any other region);
• Visitors to aajl.lat who have not registered but whose interaction data is collected through cookies and analytics;
• Former players whose data is retained as required by applicable Philippine law;
• Individuals who contact aajl through customer support channels without necessarily being registered players.

2.2 This Policy does not apply to third-party websites, platforms, or services that may be linked from aajl communications. aajl is not responsible for the privacy practices of third-party payment processors or game providers once you interact directly with their platforms.

3.1 aajl Casino collects personal data in several ways: directly from you during registration and KYC, automatically through your use of the Platform, and from third-party verification services where required for compliance.

Registration & Account Data

• Full legal name;
• Date of birth (for age verification — must be 21+ in the Philippines);
• Philippine mobile number or email address;
• Username and hashed password;
• Preferred currency and language settings.

Identity Verification (KYC) Data

• Government-issued photo ID (Philippine passport, driver's license, UMID, PhilSys National ID, SSS ID, or PRC ID);
• Proof of address (utility bill, bank statement, or official correspondence issued within 3 months);
• Selfie or facial verification image for document matching where required.

Financial & Transaction Data

• GCash number, Maya account, or bank account details registered for deposits and withdrawals;
• USDT wallet addresses used for cryptocurrency transactions;
• Transaction history (deposits, withdrawals, adjustments, bonus credits);
• Chargeback and dispute records.

Usage & Behavioural Data

• IP address, device type, operating system, and browser version;
• Session duration, login timestamps, and geographic location (country/city level);
• Games played, wager amounts, win/loss history, and session patterns;
• Responsible gaming settings, self-exclusion history, and limit preferences.

Communications Data

• Support chat transcripts and email correspondence;
• Feedback, complaints, and dispute submissions;
• Marketing preference and opt-in/opt-out records.

4.1 aajl Casino processes personal data on the following legal bases, as recognised under the Data Privacy Act of the Philippines:

4.2 Where aajl relies on consent as the legal basis for processing — primarily for marketing communications — you may withdraw that consent at any time by contacting aajl support or updating your communication preferences in account settings. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5.1 aajl may share personal data with the following categories of third parties:

• Payment Processors: GCash (Mynt), Maya (Voyager), GrabPay, BPI, BDO, Metrobank, and crypto network validators. Shared solely to process your transactions;
• KYC & Identity Verification Services: Third-party document verification providers used to complete age and identity verification during account registration or as required by AML compliance;
• Game Providers: JILI Games, Pragmatic Play, PG Soft, and other licensed game studios receive anonymised player session data necessary to operate their games within the aajl platform;
• Security & Fraud Prevention Services: Third-party services used to detect and prevent account fraud, bonus abuse, and payment fraud;
• Legal & Regulatory Authorities: The Anti-Money Laundering Council (AMLC), National Privacy Commission (NPC), and law enforcement agencies, where disclosure is required by applicable Philippine law or court order;
• Professional Advisors: Legal counsel, auditors, and compliance consultants under professional confidentiality obligations.

5.2 All third-party service providers with whom aajl shares personal data are required to process such data only for the specified purpose, maintain appropriate security measures, and comply with applicable data protection laws.

6.1 aajl Casino uses cookies and similar tracking technologies on aajl.lat to enable essential platform functionality, enhance user experience, and analyse platform performance. Cookies do not identify you personally unless you are logged into an aajl account.

6.2 Types of cookies used by aajl:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session management, login authentication, and security tokens. These cannot be disabled without affecting Platform functionality;
• Functional Cookies: Store your preferences such as language, game display settings, and responsible gaming configurations to enhance your experience across sessions;
• Analytics Cookies: Used to understand how players use the Platform — which pages are visited, how long sessions last, and where errors occur. Data collected is aggregated and anonymised where possible;
• Security Cookies: Help detect unusual access patterns and potential fraud by tracking login attempts and session anomalies.

6.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use the Platform. aajl respects browser-level Do Not Track (DNT) signals for analytics cookies.

7.1 aajl Casino implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and aajl's servers is encrypted using industry-standard TLS protocols;
• Data Encryption at Rest: Sensitive personal data, KYC documents, and financial records are stored in AES-256 encrypted databases with strict access controls;
• Two-Factor Authentication (2FA): Available and recommended for all aajl accounts. Adds an SMS-based OTP layer to your login process;
• Access Controls: Personal data is accessible only to aajl staff members who require it to perform their specific job functions, governed by role-based access permissions;
• Intrusion Detection & Monitoring: Automated systems monitor for unusual access patterns, data exfiltration attempts, and other security anomalies around the clock;
• Regular Security Audits: aajl conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.

7.2 In the event of a personal data breach that poses a risk to your rights and freedoms, aajl will notify affected players and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act. Notifications will include the nature of the breach, data affected, and steps taken to mitigate harm.

8.1 aajl Casino retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to applicable legal retention requirements.

8.2 Specific retention periods:

• Account Data: Retained for the duration of your active account plus 5 years following account closure, as required for AML compliance under the Philippine Anti-Money Laundering Act;
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later;
• Transaction Records: Retained for a minimum of 5 years in compliance with AMLC reporting requirements;
• Support Communications: Retained for 3 years from the date of the last interaction, or as required for dispute resolution;
• Analytics Data: Aggregated usage data is retained for 24 months; individual session data is anonymised after 90 days;
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

8.3 Upon expiry of retention periods, personal data is securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

9.1 As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by aajl Casino:

9.2 To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Request." Include your registered username and the specific right you wish to exercise. aajl will acknowledge your request within 72 hours and provide a substantive response within 15 business days.

9.3 aajl may need to verify your identity before processing a data subject request to prevent unauthorised disclosure. We may also decline requests that are manifestly unfounded, repetitive, or that would require disclosure of another individual's personal data.

10.1 Certain third-party service providers used by aajl Casino — including game providers, security services, and cloud infrastructure providers — may process data outside of the Philippines. Where such transfers occur, aajl takes steps to ensure that an adequate level of data protection is maintained, including through contractual clauses that require the recipient to handle your data in accordance with standards equivalent to Philippine law.

10.2 aajl does not transfer personal data to jurisdictions where applicable data protection standards cannot be reasonably ensured. Where required by the Data Privacy Act, aajl registers such transfers with the National Privacy Commission.

11.1 If aajl discovers that personal data has been collected from an individual under the age of 21, the following actions will be taken:

• The account will be immediately suspended pending review;
• All personal data collected from the minor will be securely deleted upon confirmation of their age, except where retention is required by law;
• Any deposited funds will be returned to the original payment source;
• Any winnings generated will be voided and forfeited.

11.2 If you are aware of or suspect that a minor has accessed the aajl Platform using false credentials, please notify aajl immediately at [email protected].

12.1 aajl Casino is subject to anti-money laundering obligations under the Philippines' Republic Act No. 9160, as amended (Anti-Money Laundering Act), and related AMLC issuances. These obligations require aajl to collect, retain, and in certain circumstances report personal and financial data to the Anti-Money Laundering Council (AMLC).

12.2 Specifically, aajl is required to:

• Verify and record the identity of all players through KYC procedures;
• Retain transaction records for a minimum of 5 years;
• Report covered transactions (transactions above the threshold defined by AMLC) and suspicious transactions to the AMLC without prior notification to the data subject, as required by law;
• Cooperate with AMLC investigations and freeze orders where applicable.

12.3 Importantly, aajl is legally prohibited from disclosing to you or any other party that a suspicious transaction report (STR) has been filed with the AMLC regarding your account. This non-disclosure obligation takes precedence over your right to access under the Data Privacy Act for the specific data contained in filed reports.

13.1 aajl Casino may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. Material changes will be communicated via email to registered players or by prominent notice on aajl.lat, with at least 14 days' advance notice where reasonably practicable.

13.2 The "Last Updated" date at the top of this Policy indicates when the most recent version became effective. Continued use of the Platform following any update constitutes acceptance of the revised Policy.

13.3 Previous versions of this Policy are available upon request from aajl's Data Privacy Officer.

14.1 aajl Casino has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of the Philippines and this Policy. The DPO serves as the primary point of contact for data subjects and the National Privacy Commission on all data protection matters.

14.2 You may contact aajl's Data Privacy Officer for any privacy-related concern, data subject request, or to report a suspected data breach:

15.1 For general questions about this Privacy Policy, to exercise a data subject right, or to report a privacy concern, please contact aajl Casino through the following channels:

15.2 If you believe that aajl Casino has not handled your personal data in accordance with this Policy or the Data Privacy Act of the Philippines, you have the right to file a complaint with the National Privacy Commission at privacy.gov.ph.