aroonplay Privacy Policy

01 Introduction & Data Controller

aroonplay ("aroonplay," "we," "us," "our") is the data controller responsible for personal data collected through the aroonplay platform. aroonplay processes personal data of its users — predominantly Filipino players based across Metro Manila, Cebu, Davao, and other Philippine locations — in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), the Implementing Rules and Regulations of the DPA, and applicable PAGCOR regulatory requirements.

aroonplay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data privacy law. Players may contact the aroonplay DPO using the contact details in Section 12 of this Policy.

This Policy covers personal data processed through the aroonplay website, any mobile-optimised version of the aroonplay platform, and all customer support channels. It does not cover third-party game providers or external payment processors, whose own privacy policies govern their data processing activities.

02 Personal Data We Collect

aroonplay collects personal data through several channels: directly from you during registration and account use, automatically through your use of the platform, and in limited circumstances from third parties for verification purposes.

aroonplay does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for age verification, identity verification, and anti-money laundering compliance. aroonplay does not collect biometric data beyond what may be submitted voluntarily for selfie-based KYC verification.

03 How aroonplay Uses Your Personal Data

aroonplay processes personal data for the following purposes:

• Account registration and management — to create, maintain, and administer your aroonplay account, including authentication when you use the aroonplay login;
• Identity and age verification — to confirm you are at least 21 years of age and to comply with PAGCOR KYC requirements and anti-money laundering obligations under RA 9160;
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods; to detect and prevent payment fraud;
• Game delivery — to provide access to aroonplay's game library, record game outcomes, and settle wagers correctly;
• Regulatory compliance — to satisfy reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies;
• Responsible gaming — to enforce deposit limits, self-exclusion requests, and cooling-off periods; to monitor gaming behaviour for signs of problem gambling;
• Customer support — to respond to queries, resolve disputes, and improve the quality of support provided to aroonplay players;
• Security and fraud prevention — to detect, investigate, and prevent unauthorised account access, bonus abuse, collusion, and other prohibited activities;
• Marketing communications — where you have given explicit consent, to send promotional offers, bonus notifications, and updates about aroonplay games and features. You may withdraw consent at any time by adjusting your communication preferences in Account Settings.

04 Legal Basis for Processing

aroonplay processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to fulfil aroonplay's obligations to you under the Terms and Conditions, including account management, game delivery, and payment processing;
• Legal obligation — processing required to comply with Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act (RA 10173);
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring where these interests are not overridden by your privacy rights;
• Consent — processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing & Disclosure

aroonplay does not sell, rent, or trade your personal information to third parties. aroonplay shares personal data only in the following circumstances:

Service Providers

aroonplay engages trusted third-party service providers to operate the platform, including game software providers (e.g., Evolution Gaming, Pragmatic Play), payment processors (e.g., GCash/GXI, PayMaya/Maya Bank), fraud prevention services, and cloud infrastructure providers. These providers process data only on aroonplay's documented instructions and are bound by data processing agreements that require them to protect your data in accordance with RA 10173.

Regulatory Authorities

aroonplay is legally required to share certain player data with PAGCOR, the AMLC, the Bureau of Internal Revenue (BIR), and other Philippine government bodies upon lawful request or as required by applicable reporting obligations. aroonplay will always seek to verify the lawfulness of such requests before complying.

Law Enforcement

aroonplay will disclose personal data to Philippine law enforcement authorities where required by law, court order, or where aroonplay has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to aroonplay or its players.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of aroonplay's assets, personal data held by aroonplay may be transferred to the acquiring entity, subject to the same privacy protections established in this Policy.

06 Cookies & Tracking Technologies

aroonplay uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help aroonplay remember your preferences, maintain your login session, and understand how you use the platform.

aroonplay uses the following categories of cookies:

• Strictly necessary cookies: Required for the aroonplay platform to function. These include session cookies that maintain your login state after you use the aroonplay login. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your language preferences, game display settings, and other personalisation options.
• Analytics cookies: Help aroonplay understand how players navigate the platform — which pages are most visited, where users encounter errors, and how game features are used. This data is aggregated and anonymised wherever possible.
• Security cookies: Used to detect fraudulent activity, credential stuffing, and unusual login patterns that may indicate account takeover attempts.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the aroonplay platform, including your ability to maintain a login session.

07 Data Retention

aroonplay retains personal data for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable Philippine law:

• Account data: Retained for the duration of your aroonplay account and for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years after the transaction date, as required by RA 9160 (AMLA) and BIR regulations;
• KYC documents: Retained for five (5) years after account closure or the end of the business relationship;
• Customer support communications: Retained for three (3) years unless retention is required for an ongoing dispute or regulatory investigation;
• Gaming and session data: Retained for five (5) years for regulatory compliance and dispute resolution purposes;
• Marketing consent records: Retained until consent is withdrawn and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, aroonplay will securely delete or anonymise personal data in accordance with NPC-approved disposal procedures.

08 Data Security

aroonplay implements technical and organisational measures appropriate to the risk level of the personal data processed, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and aroonplay servers;
• Encryption of sensitive data at rest, including financial records and KYC documents;
• Role-based access controls ensuring aroonplay staff access only the data necessary for their specific function;
• Regular security audits and penetration testing of aroonplay's infrastructure;
• Two-factor authentication (OTP via SMS) for all aroonplay player logins and for internal staff accessing player data;
• Intrusion detection systems and 24/7 security monitoring.

In the event of a personal data breach that poses a real risk of serious harm to affected players, aroonplay will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will directly notify affected aroonplay players without undue delay, as required by RA 10173.

09 Your Data Subject Rights

Under the Data Privacy Act of 2012, aroonplay players have the following rights regarding their personal data:

To exercise any of the above rights, contact aroonplay's Data Protection Officer using the details in Section 12. aroonplay will respond to verified requests within thirty (30) days as required by RA 10173. Requests may require identity verification before processing.

10 Children & Minors

aroonplay does not knowingly collect personal data from individuals under the age of 21 years. The aroonplay platform is strictly for adults aged 21 and above in accordance with Philippine law and PAGCOR regulations. Underage gambling is illegal in the Philippines.

If aroonplay becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will immediately close the affected account, delete the associated personal data (subject to any mandatory legal retention obligations), and report the matter to PAGCOR as required.

If you believe a minor has registered or is using an aroonplay account, please contact aroonplay support immediately via the 24/7 live chat so the matter can be investigated promptly.

11 Changes to This Privacy Policy

aroonplay may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. Material changes — those that may affect your rights or obligations — will be communicated to registered aroonplay players via email to your registered address and/or via a notice on the aroonplay platform, at least fourteen (14) days before the changes take effect.

Non-material changes (such as typographical corrections or clarifications that do not alter your rights) may be made immediately without prior notice. The "Last Updated" date at the top of this Policy always reflects the most recent version. We encourage you to review this Policy periodically to stay informed about how aroonplay protects your personal data.

12 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by aroonplay, please contact the aroonplay Data Protection Officer:

If you are not satisfied with aroonplay's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority for data protection in the Philippines and can be contacted at their official website. aroonplay is committed to cooperating fully with any NPC investigation.