aroonplay Privacy Policy

1. Introduction

1.1 aroonplay is committed to protecting the privacy and personal data of its members and website visitors. As an online gaming platform serving the Philippine market, aroonplay handles personal data in strict compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

1.2 This Privacy Policy describes: (a) the categories of personal data aroonplay collects; (b) the purposes for which that data is processed; (c) the legal bases for processing; (d) how long aroonplay retains your data; (e) with whom aroonplay may share your data; and (f) the rights available to you as a data subject under Philippine law.

1.3 If you do not agree with this Privacy Policy, you should not register an aroonplay account or use the Platform. If you have existing concerns about how aroonplay handles your personal data, please contact our Data Protection Officer using the contact details in Section 15.

2. Who We Are

2.1 For the purposes of this Privacy Policy, the data controller responsible for your personal data is aroonplay, the operator of the online gaming platform accessible at aroonplay.app and its associated mobile interfaces.

2.2 aroonplay operates as an online casino and gaming platform targeting the Philippine market. aroonplay operates in compliance with applicable Philippine gaming regulations and the data privacy requirements imposed on regulated gaming operators in the Philippines.

2.3 For all data privacy inquiries, data subject access requests, or complaints regarding aroonplay's handling of your personal data, please contact our Data Protection Officer at: [email protected]

3. Personal Data We Collect

3.1 aroonplay collects personal data across several categories depending on how you interact with the Platform. The table below summarises the main categories of personal data collected:

3.2 aroonplay does not collect or process sensitive personal information — as defined under Section 3(l) of the Data Privacy Act of 2012 — beyond what is strictly necessary for KYC identity verification and regulatory compliance purposes.

4. How We Collect Your Personal Data

aroonplay collects personal data through the following channels:

• Directly from you — when you register an aroonplay account, complete KYC verification, make deposits or withdrawals, contact support, or update your account settings;
• Automatically — when you use the Platform, aroonplay's systems automatically collect technical data including IP address, device identifiers, session timestamps, and game activity logs;
• Via cookies and similar technologies — as described in Section 8 of this Policy;
• From third-party service providers — including KYC verification platforms, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud detection services, which may share data with aroonplay as part of their service delivery;
• From regulatory authorities — aroonplay may receive data from Philippine gaming regulatory bodies in connection with compliance checks or investigations.

5. How aroonplay Uses Your Personal Data

aroonplay processes your personal data for the following purposes:

• Account management — creating, maintaining, and administering your aroonplay account, including processing login requests and account security verifications;
• KYC and age verification — verifying your identity and confirming that you meet the minimum age requirement of 21 years in compliance with Philippine gaming laws;
• Payment processing — processing deposits, withdrawals, and refunds via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels;
• Regulatory compliance — fulfilling aroonplay's obligations under applicable Philippine gaming regulations, anti-money laundering laws (Republic Act No. 9160 as amended), and the Data Privacy Act of 2012;
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, account breaches, unauthorised access, and money laundering;
• Customer support — responding to your inquiries, resolving disputes, and providing technical assistance;
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling behaviour and administering responsible gaming tools including deposit limits and self-exclusion;
• Platform improvement — analysing aggregated, anonymised usage data to improve the aroonplay platform, user experience, and game selection;
• Marketing communications — sending promotional offers, bonus notifications, and platform updates to members who have opted in to receive such communications. Members may opt out at any time via their account settings or by contacting support.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, aroonplay processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract with you (the aroonplay Terms & Conditions), including account management, payments, and game delivery;
• Legal obligation — processing required for aroonplay to comply with applicable Philippine law, including KYC, anti-money laundering reporting, gaming regulation compliance, and tax obligations;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where aroonplay's legitimate interests in maintaining a safe and compliant platform are not overridden by your privacy rights;
• Consent — processing for marketing communications and non-essential cookies, where aroonplay has obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

7.1 aroonplay does not sell your personal data to third parties. aroonplay may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment providers) — for deposit and withdrawal processing;
• KYC and identity verification providers — third-party services that assist aroonplay in verifying government-issued Philippine ID documents and performing liveness checks;
• Gaming software providers — to the extent required for game delivery and RNG certification. Game providers do not receive personally identifiable data beyond what is technically necessary for session management;
• Fraud detection and security services — third-party platforms that assist aroonplay in detecting suspicious activity and preventing financial crime;
• Philippine regulatory authorities — including PAGCOR and the Anti-Money Laundering Council (AMLC), where disclosure is required by applicable law or regulatory directive;
• Philippine law enforcement agencies — in response to lawful requests, court orders, or where aroonplay has a good-faith belief that disclosure is necessary to protect the rights, property, or safety of aroonplay, its members, or the public;
• Professional advisors — including lawyers, auditors, and accountants, under obligations of confidentiality, to the extent required for legal, financial, or compliance purposes.

7.2 Where aroonplay engages third-party processors to handle personal data on its behalf, aroonplay enters into data processing agreements with those processors requiring them to maintain appropriate security measures and process the data only on aroonplay's documented instructions and in compliance with applicable Philippine data privacy law.

8. Cookies & Tracking Technologies

8.1 aroonplay uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and maintain session security.

8.1 Types of Cookies Used

• Strictly Necessary Cookies — required for the Platform to function. These include session authentication cookies that keep you logged in to your aroonplay account and security cookies that detect suspicious login attempts. These cookies cannot be disabled without disrupting core Platform functionality.
• Functional Cookies — remember your preferences such as language settings, preferred game categories, and responsible gaming configurations so they persist across sessions.
• Analytics Cookies — aggregate, anonymised data about how members use the Platform, which pages are visited most frequently, and where technical errors occur. This data helps aroonplay improve the Platform. aroonplay uses only privacy-respecting analytics with no cross-site tracking.
• Marketing Cookies — used only where you have provided explicit consent, to serve relevant promotional content within the aroonplay Platform.

8.2 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair core Platform functions including login and payment processing. Disabling other cookie categories will not affect your ability to access the Platform but may reduce personalisation features.

9. Data Retention

9.1 aroonplay retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable Philippine law.

9.2 The following retention periods apply:

• Account and KYC data — retained for a minimum of five (5) years from the date of account closure, as required by Philippine anti-money laundering regulations;
• Financial transaction records — retained for a minimum of five (5) years from the transaction date in compliance with Republic Act No. 9160 (Anti-Money Laundering Act) as amended;
• Gaming activity logs — retained for three (3) years from the date of each session for responsible gaming monitoring and dispute resolution purposes;
• Customer support communications — retained for two (2) years from the date of the last interaction;
• Technical and security logs — retained for twelve (12) months for fraud detection and security audit purposes;
• Self-exclusion records — retained indefinitely to prevent re-registration in breach of a self-exclusion order.

9.3 When personal data is no longer required and its retention period has expired, aroonplay will securely delete or anonymise it in accordance with NPC guidelines.

10. Data Security

10.1 aroonplay implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and aroonplay's servers;
• Encryption of sensitive data at rest, including financial information and KYC documents;
• Strict access controls — aroonplay staff access personal data on a need-to-know basis only, with access logged and regularly reviewed;
• Multi-factor authentication requirements for internal systems access;
• Regular security assessments and vulnerability testing;
• Incident response procedures for data breaches, including notification obligations under the Data Privacy Act.

10.2 In the event of a personal data breach that is likely to result in serious harm to your rights and freedoms, aroonplay will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, as required under the Data Privacy Act of 2012 and NPC Circular No. 16-03.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aroonplay:

12. Children's Privacy

12.1 aroonplay's Platform is strictly for individuals aged 21 years and older. aroonplay does not knowingly collect personal data from individuals under 21. If aroonplay discovers that personal data has been collected from an individual under 21, that data will be deleted immediately and the associated account will be closed.

12.2 If you are a parent or guardian and you believe that your child or ward under the age of 21 has registered an aroonplay account, please contact aroonplay's support team at [email protected] immediately.

13. International Data Transfers

13.1 aroonplay primarily processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud hosting services or KYC verification platforms with international infrastructure.

13.2 Where personal data is transferred outside the Philippines, aroonplay ensures that adequate safeguards are in place as required under Section 21 of the Data Privacy Act of 2012 and applicable NPC guidelines. These safeguards include contractual clauses requiring the recipient to maintain data protection standards consistent with Philippine law.

13.3 aroonplay does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without the explicit consent of the data subject or without appropriate contractual safeguards.

14. Changes to This Privacy Policy

14.1 aroonplay reserves the right to update this Privacy Policy at any time. The most current version of the Policy will always be accessible on this page, with the effective date updated at the top accordingly.

14.2 Where changes to this Privacy Policy are material — meaning they significantly affect how aroonplay processes your personal data or the rights available to you — aroonplay will notify registered members via the contact details on record at least seven (7) days before the changes take effect.

14.3 Your continued use of the aroonplay Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact support to request account closure.

15. Contact & Complaints

15.1 For all data privacy inquiries, data subject access requests, corrections, erasure requests, objections, or complaints regarding aroonplay's handling of your personal data, please contact aroonplay's Data Protection Officer:

• Email: [email protected]
• Subject Line: "Data Privacy Request — [Your Full Name]"
• Response Time: aroonplay will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days of receipt.

15.2 If you are not satisfied with aroonplay's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC's contact details and complaints procedure are available on the NPC's official website.

This Privacy Policy was last updated on 1 January 2026. aroonplay recommends reviewing this Policy periodically.