oki bet Privacy Policy

This Privacy Policy ("Policy") describes how oki bet ("Company", "Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("Data Subjects", "Players", "Users", "you") who access or use the oki bet online gaming platform at okibet.lat and all related services.

This Policy is issued in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC) of the Philippines, and all other applicable Philippine data protection regulations.

1 Introduction and Scope

1.1 This Policy applies to all personal data processed by oki bet in connection with the registration, operation, support, and termination of player accounts on the oki bet platform, including data collected through the website at okibet.lat, any progressive web application (PWA) associated with oki bet, customer support communications, and all other touchpoints through which oki bet interacts with players.

1.2 This Policy applies to all individuals who interact with the oki bet platform, including registered players, prospective players who begin but do not complete registration, and individuals who contact oki bet support without having a registered account.

1.3 This Policy should be read in conjunction with the oki bet Terms & Conditions, which form part of the overall framework governing your relationship with the platform. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail.

2 Who We Are — Data Controller

2.1 For the purposes of the Data Privacy Act of 2012 and this Policy, oki bet is the Personal Information Controller (PIC) with respect to the personal data of its players and users. As PIC, oki bet determines the purpose and means of processing your personal data.

2.2 oki bet has designated a Data Protection Officer (DPO) who is responsible for overseeing the Company's data protection practices and compliance with RA 10173. Contact details for the DPO are provided in Section 15.

2.3 Third-party service providers who process data on behalf of oki bet — such as payment processors, game providers, and identity verification services — act as Personal Information Processors (PIPs) under agreements that impose obligations consistent with RA 10173 and this Policy.

3 Personal Data We Collect

3.1 oki bet collects the following categories of personal data in connection with the operation of the platform:

3.2 oki bet may also collect sensitive personal information as defined under RA 10173 — such as government-issued identification documents — where specifically required for identity verification and compliance purposes. Such data is handled with heightened security measures and accessed only by authorized personnel.

4 How We Collect Your Data

4.1 Directly from you: During account registration, identity verification, deposit and withdrawal transactions, customer support interactions, and when you voluntarily update your account profile.

4.2 Automatically: When you use the oki bet platform, technical data such as your IP address, device identifiers, session duration, browser fingerprint, and in-app navigation patterns are automatically recorded through cookies, server logs, and similar technologies (see Section 10).

4.3 From third parties: oki bet may receive data about you from third-party identity verification services, payment processors (such as GCash and Maya), fraud detection providers, and public databases used for AML and sanctions screening.

5 How We Use Your Personal Data

5.1 oki bet processes your personal data for the following purposes:

• Account Registration and Management: Creating, maintaining, and securing your oki bet account;
• Identity and Age Verification: Confirming your identity and verifying that you meet the 21+ age requirement for gaming on the oki bet platform;
• Payment Processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported payment channels;
• AML and Fraud Prevention: Monitoring transactions for suspicious activity as required under the Anti-Money Laundering Act (AMLA) and PAGCOR regulations;
• Service Delivery: Operating the gaming platform and ensuring all game features function as intended;
• Customer Support: Responding to inquiries, complaints, and disputes submitted to the oki bet support team;
• Responsible Gaming: Monitoring gaming behavior to identify indicators of problem gambling and applying responsible gaming tools where appropriate;
• Legal Compliance: Meeting oki bet's obligations under Philippine law, PAGCOR regulations, tax laws, and court or regulatory orders;
• Platform Security: Detecting unauthorized access, account takeover attempts, bot activity, and other security threats;
• Service Improvement: Analyzing aggregate usage data to improve platform features, performance, and user experience.

6 Legal Bases for Processing

6.1 oki bet processes your personal data on the following legal bases under RA 10173:

• Consent — Where you have given explicit consent for a specific processing activity, such as receiving promotional communications;
• Contract — Where processing is necessary to perform the oki bet Terms & Conditions to which you are a party;
• Legal Obligation — Where processing is required to comply with Philippine law, including AMLA, PAGCOR regulations, and NPC orders;
• Legitimate Interest — Where processing is necessary for oki bet's legitimate interests, such as fraud prevention and platform security, provided such interests do not override your fundamental rights and freedoms;
• Vital Interest — In limited circumstances where processing is necessary to protect your safety or that of another person.

7 Sharing of Personal Data

7.1 oki bet does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard, and cryptocurrency processors — solely to facilitate transactions you initiate;
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and conduct regulatory checks;
• Game Software Providers: Licensed game providers such as Pragmatic Play, PG Soft, Evolution Gaming, Jili, and SA Gaming — who receive necessary session data to deliver game services;
• Technology and Infrastructure Providers: Cloud hosting providers, CDN services, and security vendors who process data under binding data processing agreements;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and law enforcement agencies — where required by law or valid legal process;
• Professional Advisors: Legal counsel, auditors, and compliance consultants under confidentiality obligations.

8 Data Retention

8.1 oki bet retains personal data for as long as it is necessary to fulfill the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Account and Identity Data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA requirements;
• Support Communications: Retained for three (3) years following the resolution of each interaction, or longer if subject to an ongoing dispute or legal proceeding;
• Technical and Log Data: Retained for twelve (12) months from collection, subject to earlier deletion when no longer necessary for security purposes.

8.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents reconstruction of the original data.

9 Data Security Measures

9.1 oki bet implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and oki bet's servers is encrypted using 256-bit SSL/TLS;
• Encryption at Rest: Sensitive data stored in oki bet's systems is encrypted using AES-256;
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Security Monitoring: oki bet operates a 24/7 security monitoring capability that detects and responds to anomalous access patterns, account takeover attempts, and potential data breaches;
• Penetration Testing: oki bet's platform infrastructure undergoes regular security assessments and penetration testing by qualified third-party security professionals;
• Incident Response: oki bet maintains a documented data breach response plan and will notify affected data subjects and the NPC in accordance with the requirements of RA 10173 in the event of a qualifying personal data breach.

9.2 While oki bet takes all reasonable steps to protect your personal data, no system is entirely immune to security risks. You are also responsible for securing your oki bet account credentials and should report any suspected unauthorized access to oki bet support immediately.

10 Cookies and Tracking Technologies

10.1 oki bet uses the following types of cookies and similar technologies on the platform:

• Strictly Necessary Cookies: Essential for the platform to function — including session management, login state, and security tokens. These cannot be disabled without impairing core platform functionality;
• Functional Cookies: Remember your preferences such as language settings and game display options;
• Analytics Cookies: Collect anonymized, aggregate data about how players navigate the oki bet platform, used to identify usability improvements. oki bet uses analytics data at the aggregate level only — not for individual profiling;
• Security Cookies: Used for fraud detection, bot prevention, and session integrity verification.

10.2 oki bet does not use third-party behavioral advertising cookies or cookies that track your activity across unrelated websites. You can manage cookie settings through your browser preferences. Disabling strictly necessary cookies may affect the performance of the oki bet platform.

11 Your Rights as a Data Subject

11.1 As a data subject under Republic Act 10173, you have the following rights with respect to your personal data held by oki bet:

11.2 To exercise any of these rights, please submit a written request to oki bet's Data Protection Officer using the contact details in Section 15. oki bet will acknowledge your request within three (3) business days and respond substantively within fifteen (15) business days. In complex cases, the response period may be extended by a further thirty (30) days with prior notification to you.

11.3 Please note that certain rights — particularly erasure and the withdrawal of consent — may be subject to limitations where processing is required for legal compliance, regulatory reporting, or the fulfilment of contractual obligations under the oki bet Terms & Conditions.

12 Minors and Age Restriction

12.1 oki bet's platform and services are strictly intended for individuals aged 21 years and above. oki bet does not knowingly collect personal data from individuals under the age of 21.

12.2 Where oki bet becomes aware that personal data has been submitted by a person under the age of 21, such data will be immediately deleted and the associated account will be closed. Any balance associated with such an account will be forfeited in accordance with the oki bet Terms & Conditions.

13 Cross-Border Data Transfers

13.1 oki bet's primary operations are based in the Philippines. However, certain service providers and technology partners with whom oki bet shares data (as described in Section 7) may be located in other jurisdictions.

13.2 Where personal data is transferred outside the Philippines, oki bet ensures that such transfers are conducted in accordance with the requirements of RA 10173, including by implementing appropriate safeguards such as contractual data processing agreements that impose obligations equivalent to those applicable in the Philippines.

13.3 oki bet does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate compensating safeguards and, where required, obtaining NPC authorization.

14 Changes to This Privacy Policy

14.1 oki bet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. The "Effective Date" at the top of this Policy will be updated whenever a revision is made.

14.2 For material changes that significantly affect how we process your personal data, oki bet will notify registered players via platform notifications, registered email address, or other appropriate communication channels prior to the change taking effect.

14.3 Your continued use of the oki bet platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, please cease using the platform and contact us to close your account.

15 Contact Us — Data Protection Officer

15.1 For all data privacy matters — including rights requests, concerns, complaints, and inquiries about this Policy — please contact the oki bet Data Protection Officer:

• Email: [email protected] (subject line: DATA PRIVACY REQUEST)
• Live Chat: Available 24/7 via the oki bet platform — please request to be connected to the Data Privacy team

15.2 If you are not satisfied with oki bet's response to a data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).