Privacy Policy

1 Who We Are

aa455 is an online casino and sports betting platform operating under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR), serving Filipino players across the Philippines. aa455 is accessible at aa455.net and offers live dealer games, video slots, bingo, crash games, and sports betting markets to registered members aged 21 years and above.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, aa455 acts as the Personal Information Controller (PIC) in respect of the personal data of its registered members. This means aa455 determines the purposes for which and the means by which your personal data is processed.

aa455 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. The DPO can be contacted as described in Section 13 of this policy.

2 Data We Collect

aa455 collects personal data through several channels, including your account registration form, KYC verification submissions, payment transactions, gameplay activity, and your interactions with our customer support team. The categories of personal data we collect are as follows:

2.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth and age
• Residential address in the Philippines (barangay, city, province)
• Philippine mobile number
• Email address
• Username and account credentials (password stored in hashed form — never in plain text)

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine photo identification (e.g., SSS, GSIS, PhilHealth, Postal ID, Driver's License, Passport, UMID)
• Proof of address documents (e.g., utility bills, bank statements, barangay certificates)
• Selfie photographs taken for liveness verification purposes
• Source of funds declarations for high-value accounts, as required by Philippine AML law

2.3 Financial Data

• GCash or Maya wallet reference numbers associated with your deposits and withdrawals
• Bank account numbers (BPI, BDO, UnionBank, Metrobank) used for bank transfer transactions
• Cryptocurrency wallet addresses for USDT TRC20 transactions
• Transaction history, deposit and withdrawal amounts, and timestamps

2.4 Technical & Usage Data

• IP address and approximate geolocation at the time of login and account activity
• Device type, operating system, and browser type and version
• Session timestamps, login and logout times, and session duration
• Pages visited, games played, bets placed, and in-game behavior logs
• Cookie identifiers and similar tracking technology data (see Section 6)

2.5 Communications Data

• Records of your interactions with aa455 customer support via Live Chat, Messenger, Viber, or email
• Feedback, complaints, and dispute submissions
• Responses to aa455 surveys or promotional communications (where you have opted in)

3 How We Use Your Data

aa455 uses the personal data it collects for the following defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your separate consent:

• Account creation and management: To register your account, verify your identity, and manage your ongoing relationship with aa455.
• KYC and regulatory compliance: To fulfill PAGCOR's licensing requirements and comply with Republic Act No. 9160 (Anti-Money Laundering Act), as amended, including the obligation to conduct customer due diligence and report covered and suspicious transactions to the AMLC.
• Payment processing: To process your deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, USDT TRC20, Coins.ph, and other accepted payment methods.
• Game delivery and platform operation: To provide live dealer games, slots, bingo, crash games, and sports betting markets, and to maintain the technical integrity of the aa455 platform.
• Fraud prevention and security: To detect and prevent unauthorized access, account takeovers, bonus abuse, multi-accounting, money laundering, and other prohibited activities described in the aa455 Terms & Conditions.
• Responsible gaming: To identify players who may be exhibiting signs of problem gambling and to apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion in compliance with PAGCOR's responsible gaming framework.
• Customer support: To respond to your inquiries, resolve disputes, and improve our support services based on feedback and interaction history.
• Marketing and promotions: To send you information about aa455 bonuses, promotions, and new game launches — but only where you have provided your consent to receive marketing communications and have not subsequently opted out.
• Legal and regulatory obligations: To comply with lawful requests from PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government authorities.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, aa455 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing necessary for the performance of the contract between you and aa455 — including account registration, KYC verification, payment processing, and game delivery — is carried out on the basis that it is required to fulfil our obligations to you as a member.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act itself, and other applicable Philippine laws is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of aa455's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and the use of non-essential cookies is carried out on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Sharing Your Data

aa455 does not sell, rent, or otherwise commercially exploit your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

5.1 Service Providers

aa455 engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the Data Privacy Act. These include KYC verification technology providers, payment processing partners, cloud hosting and infrastructure providers, live dealer game studios, customer support platform operators, and fraud detection service providers. All PIPs are bound by data processing agreements that require them to process personal data only on aa455's documented instructions and to implement appropriate technical and organizational security measures.

5.2 Regulatory and Law Enforcement Authorities

aa455 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made on a strictly need-to-know basis and in compliance with applicable legal requirements.

5.3 Business Transfers

In the event that aa455 undergoes a business reorganization, merger, acquisition, or asset sale, your personal data may be transferred to the relevant successor entity as part of that transaction. In such circumstances, aa455 will notify affected members and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

6 Cookies & Tracking Technologies

aa455 uses cookies and similar tracking technologies on aa455.net to ensure the platform functions correctly, to secure your session, and to improve your overall experience. The types of cookies used by aa455 are as follows:

• Strictly necessary cookies: These cookies are essential for the aa455 platform to function. They maintain your logged-in session, remember your game preferences, and enable core security features. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: These cookies remember your language preferences, display settings, and other personalization options to improve your experience on return visits.
• Analytics cookies: With your consent, aa455 uses analytics cookies to understand how members navigate the platform — which pages are most visited, where members encounter difficulties, and how the overall user journey can be improved. Analytics data is aggregated and does not identify you individually.
• Fraud prevention cookies: These cookies help aa455 identify suspicious activity patterns, such as multiple account creation attempts from a single device, and form part of aa455's fraud detection and responsible gaming systems.

You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the aa455 platform. For strictly necessary and fraud prevention cookies, disabling them may prevent you from accessing your account or using certain features.

7 Data Retention

aa455 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following retention periods apply:

• Active account data: Retained for the duration of your membership with aa455 and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of the last transaction on your account, as required by the Anti-Money Laundering Act (R.A. 9160, as amended by R.A. 10365).
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and PAGCOR regulatory requirements.
• Customer support communications: Retained for two (2) years from the date of the last interaction, to support dispute resolution and service quality improvement.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of compliance with the Data Privacy Act.
• Technical and usage logs: Retained for up to twelve (12) months from the date of generation, after which they are deleted or anonymized.

When the applicable retention period expires, aa455 will securely delete or anonymize your personal data using industry-standard data destruction methods that prevent re-identification.

8 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by aa455. You may exercise any of these rights at any time by contacting aa455's Data Protection Officer as described in Section 13:

aa455 will respond to all valid data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case aa455 will notify you of the extension and the reasons for it within the initial 30-day period.

9 Data Security

aa455 implements a comprehensive set of technical, organizational, and procedural security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and aa455's servers is encrypted using Transport Layer Security (TLS) 1.3, the current industry standard for secure web communications.
• Encryption at rest: Sensitive data stored on aa455's servers — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Access controls: Access to personal data within aa455 is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, and all access to sensitive data is logged and audited.
• Two-factor authentication (2FA): aa455 supports and encourages members to enable 2FA on their accounts. All aa455 internal systems with access to member data require 2FA for staff login.
• Regular security testing: aa455 conducts periodic vulnerability assessments and penetration tests conducted by independent security professionals to identify and remediate security weaknesses before they can be exploited.
• Staff training: All aa455 personnel who handle personal data receive mandatory data privacy and security training upon onboarding and on an annual basis thereafter.
• Incident response plan: aa455 maintains a documented data breach incident response plan that defines the steps to be taken in the event of a security incident, including internal escalation, containment, and NPC notification procedures.

While aa455 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You also play an important role in keeping your account secure — use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

10 Children & Minors

aa455's registration process includes an age declaration step, and all accounts are subject to KYC verification that confirms the member's date of birth against a valid government-issued Philippine ID. Any account found to be held by a person under 21 years of age will be immediately closed, all associated data will be deleted (subject to any applicable legal retention obligations), and any deposits will be returned to the source payment method.

If you are a parent or guardian and believe that your child under the age of 21 has registered an aa455 account or submitted personal data to aa455 without your knowledge or consent, please contact our Data Protection Officer immediately at [email protected]. aa455 will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.

11 Cross-Border Data Transfers

Some of aa455's third-party service providers — including cloud infrastructure providers, KYC technology partners, and live dealer game studio operators — may be located outside the Philippines and may process personal data in other jurisdictions. Where such cross-border transfers occur, aa455 ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to that required under the Philippine Data Privacy Act.

Such safeguards may include contractual data transfer agreements incorporating the standard data protection clauses recognized by the National Privacy Commission, or reliance on the adequacy determinations of the NPC where applicable. aa455 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards.

If you would like further information about the specific safeguards in place for any particular cross-border data transfer, please contact aa455's Data Protection Officer at the contact details provided in Section 13.

12 Updates to This Privacy Policy

aa455 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law or PAGCOR regulations, or improvements to the aa455 platform. When material changes are made to this Privacy Policy, aa455 will notify registered members through a prominent notice on aa455.net, by email to the address associated with your account, or through an in-platform notification.

The effective date at the top of this Privacy Policy will be updated whenever changes are made. We encourage you to review this Privacy Policy periodically to stay informed about how aa455 protects your personal data. Your continued use of the aa455 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes.

Where changes to this Privacy Policy require your fresh consent — for example, where aa455 begins processing your data for a new purpose not covered by your original consent — aa455 will seek your explicit consent before the new processing begins.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or aa455's handling of your personal data, you may contact aa455's Data Protection Officer through the following channels:

• Email: [email protected] — use the subject line "Data Privacy Request — [Your Username]" for faster routing to the DPO team.
• Live Chat: Available 24/7 on aa455.net — ask to be connected to the Data Privacy team.
• Messenger / Viber: Contact aa455's official support channels and specify that your inquiry relates to data privacy.

aa455 will acknowledge your privacy inquiry within 48 hours and provide a substantive response within 30 calendar days, as required by the Data Privacy Act.

If you are not satisfied with aa455's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act. Information about how to contact and file a complaint with the NPC is available on the NPC's official government website.