okokbet Privacy Policy

1 Introduction

okokbet ("okokbet," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy ("Policy") applies to all players, prospective players, and visitors who access okokbet's website, games, casino services, sports betting features, and any related tools or communications.

This Policy is issued in compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It is also informed by applicable guidelines from the Philippine Amusement and Gaming Corporation (PAGCOR) regarding the handling of player data on licensed gaming platforms.

By registering a player account or continuing to use the okokbet platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not register or continue to use the okokbet platform.

2 Data Controller

For the purposes of the Philippine Data Privacy Act and this Policy, okokbet is the personal information controller in respect of the personal data it processes about you. okokbet determines the purposes and means of processing personal data collected through the okokbet platform.

okokbet has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations. The contact details of the DPO are provided in Section 16 of this Policy. Players may direct data subject rights requests, privacy complaints, and data protection enquiries to the DPO through the contact methods described in that section.

3 Personal Data We Collect

okokbet collects the following categories of personal data in connection with the operation of the platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, government ID type and number	Registration and KYC
Contact Data	Philippine mobile number (+63), email address	Registration
Financial Data	GCash or Maya account details, bank account number (for withdrawals), transaction history	Deposits and withdrawals
KYC Documents	Copies of government-issued ID, proof of address, source of funds declaration	KYC verification
Technical Data	IP address, device type, operating system, browser type, session data	Automated — on platform use
Gaming Data	Game history, betting records, win/loss records, session duration, bonus usage	Automated — during gameplay
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions
Responsible Gaming Data	Deposit limits, self-exclusion status, session reminder settings	When tools are activated

okokbet does not process special categories of personal data (e.g., health data, biometric data, political opinions) except where you voluntarily provide information relevant to a responsible gaming request — for example, disclosing a gambling-related health concern when requesting self-exclusion support. Such information is processed only to the extent necessary to fulfil your request and is handled with heightened confidentiality.

4 How We Collect Your Personal Data

okokbet collects personal data through the following channels:

• Directly from you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or subscribing to promotional communications.
• Automatically from your device: Technical data including your IP address, device identifiers, browser type, and session activity is collected automatically when you access the okokbet platform through standard web technologies including cookies, log files, and session tracking.
• From third-party service providers: Identity verification data returned by our KYC service provider following document verification; fraud risk signals from payment processing partners; and, where relevant, information from regulatory databases accessed for compliance purposes.

5 Legal Basis and Purposes of Processing

okokbet processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act:

• Performance of contract: Processing necessary to create and maintain your okokbet account, verify your identity, process payments, settle bets, and provide customer support.
• Compliance with a legal obligation: Processing required to comply with anti-money laundering obligations, tax reporting requirements, PAGCOR regulatory requirements, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing for fraud detection and prevention, platform security, system maintenance, and internal analytics to improve the okokbet service — where such processing does not override your rights and interests.
• Consent: Where we send promotional emails, push notifications, or SMS marketing communications, we rely on your explicit consent, which you may withdraw at any time.

6 Sharing Your Personal Data

okokbet shares personal data with third parties only where necessary and on a strict need-to-know basis. The categories of recipients are as follows:

• Payment service providers: GCash (GXI / G-Xchange Inc.), Maya (Voyager Innovations Inc.), GrabPay, BPI, BDO, Metrobank, and other payment processors required to execute deposit and withdrawal transactions on your behalf.
• KYC and identity verification providers: Third-party providers engaged to verify identity documents submitted during the KYC process. These providers process identity data under contractual obligations consistent with this Policy and applicable law.
• Technology infrastructure providers: Cloud hosting, content delivery, and platform security service providers who process technical data as data processors acting on okokbet's documented instructions.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government authorities where disclosure is required by law, court order, or regulatory instruction.
• Professional advisors: Legal counsel, auditors, and compliance consultants, where such disclosure is necessary for the provision of professional services to okokbet and is subject to professional confidentiality obligations.

okokbet does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances.

7 International Data Transfers

Some of okokbet's technology service providers — including cloud infrastructure and content delivery network providers — may store or process data on servers located outside the Philippines. Where such international transfers occur, okokbet ensures that adequate safeguards are in place as required by the Data Privacy Act, including contractual clauses that require recipient entities to apply data protection standards equivalent to those required under Philippine law.

okokbet does not transfer KYC documentation or financial data to jurisdictions that do not offer adequate data protection, except where required to comply with a specific legal obligation.

8 Data Retention

okokbet retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction records: A minimum of five (5) years from the date of the last transaction, as required under the Revised Implementing Rules and Regulations of the Anti-Money Laundering Act of 2001 (as amended).
• KYC documentation: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Customer support communications: Retained for a period of up to three (3) years from the date of the interaction, or longer where relevant to an ongoing dispute or regulatory inquiry.
• Marketing data: Retained until you withdraw consent or for a maximum of two (2) years from your last engagement with okokbet marketing communications, whichever is earlier.
• Responsible gaming data: Self-exclusion records are retained for a minimum of five (5) years to prevent re-registration during an active exclusion period and to fulfil regulatory obligations.

Where personal data is no longer required for any lawful retention purpose, okokbet will securely delete or anonymise it in accordance with its data disposal procedures.

9 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by okokbet:

To exercise any of the above rights, submit a written request to the okokbet Data Protection Officer using the contact details in Section 16. okokbet will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days, except where the complexity of the request requires an extended period, in which case you will be notified of the delay and the expected response timeframe.

Identity verification may be required before okokbet processes a data subject rights request, to prevent unauthorized access to another person's data.

10 Cookies and Tracking Technologies

okokbet uses cookies and similar web technologies to operate and improve the platform. A cookie is a small data file placed on your browser when you visit a website. okokbet uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Remember your preferences (such as language and display settings) to provide a consistent experience across sessions.
• Performance and analytics cookies: Collect aggregated, anonymised data about how players use the platform — including which pages are most visited and where errors occur — to help okokbet improve the service.
• Marketing cookies: Used, with your consent, to track engagement with okokbet promotional content. These are not activated unless you have provided explicit consent.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect your experience on the okokbet platform. For more detailed cookie management information, please contact the okokbet support team.

11 Children and Minors Under 21

okokbet is strictly an adult gaming platform. In compliance with PAGCOR regulations and the applicable Philippine gaming age requirement, okokbet does not permit any person under the age of 21 to register, access, or use any part of the platform.

okokbet does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately take steps to delete that data and close the associated account, and any winnings generated will be voided in accordance with the okokbet Terms & Conditions.

If you believe that okokbet may have inadvertently collected data from a person under 21, please contact the Data Protection Officer immediately using the contact details in Section 16.

12 Security Measures

okokbet implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the okokbet platform is protected using TLS (Transport Layer Security) encryption. Sensitive data including KYC documents and payment information is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to okokbet personnel and authorised third parties who have a documented need to access the data for the performance of their role. Access is governed by role-based permissions and reviewed periodically.
• Security monitoring: okokbet maintains security monitoring systems to detect anomalous account activity, unauthorized access attempts, and potential fraud indicators in real time.
• Vulnerability management: The platform undergoes regular security assessments and penetration testing to identify and remediate security vulnerabilities.
• Incident response: okokbet maintains a data breach response procedure. In the event of a data breach that poses a risk to your rights and interests, okokbet will notify the National Privacy Commission and affected players in accordance with NPC Circular No. 16-03 (Personal Data Breach Management) and its subsequent amendments.

Whilst okokbet employs substantial security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your okokbet login credentials and for notifying okokbet immediately if you suspect unauthorized access to your account.

13 Responsible Gaming Data

Personal data processed in connection with okokbet's responsible gaming tools — including deposit limits, session reminders, and self-exclusion applications — is treated with heightened confidentiality. This data is used exclusively to implement and enforce the responsible gaming measures you have requested and to meet related regulatory obligations.

Self-exclusion records, in particular, are retained for a minimum of five (5) years to prevent reregistration during an active exclusion period and to comply with applicable regulatory requirements. If you request information about a self-exclusion on your account, identity verification will be required before any such information is disclosed.

okokbet may share self-exclusion data with PAGCOR where required to participate in any industry-wide self-exclusion register that PAGCOR may establish or maintain. This sharing is carried out for the sole purpose of protecting players and is subject to appropriate data processing safeguards.

14 Links to Third-Party Services

The okokbet platform may reference or integrate with third-party payment services (such as the GCash or Maya payment interfaces). When you interact with a third-party payment provider's interface — even if accessed from within the okokbet platform — you are interacting with that provider's own systems, which are governed by that provider's own privacy policy.

okokbet is not responsible for the privacy practices of third-party payment providers or any other external services. We encourage you to review the privacy policies of any third-party services you use in connection with your okokbet account.

15 Changes to This Privacy Policy

okokbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made, okokbet will publish the updated Policy on the platform and, where practicable, notify registered players via their registered email address or through an in-platform notification.

The Effective Date at the top of this Policy indicates the version currently in force. Your continued use of the okokbet platform following the effective date of any update constitutes your acknowledgment of and agreement to the revised Policy.

We encourage you to review this Policy periodically to stay informed about how okokbet processes your personal data. The most current version is always available at okokbet.app/privacy-policy.

16 Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okokbet, please contact the Data Protection Officer using the details below. The DPO is also the appropriate point of contact for data subject rights requests submitted under Section 9 of this Policy.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe okokbet has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012. Information on how to contact the NPC and submit a complaint is available through the NPC's official government channels.