okabet Privacy Policy

1. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), the data controller responsible for your personal information is okabet, operating the Platform at okabet.co under a PAGCOR license ("okabet," "we," "us," or "our").

okabet is registered with the National Privacy Commission (NPC) as required under the DPA. All data processing activities described in this Privacy Policy are conducted in accordance with the principles of transparency, legitimate purpose, and proportionality mandated by Philippine data privacy law.

2. Personal Data We Collect

okabet collects the following categories of personal data:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, nationality, gender	Mandatory (KYC)
Contact Data	Philippine mobile number (+63 format), email address, residential address	Mandatory
Verification Documents	Government-issued photo ID (passport, PhilSys ID, SSS ID, driver's licence), proof of address	Mandatory (KYC)
Financial Data	GCash number, Maya wallet ID, bank account details, transaction history, deposit/withdrawal records	Mandatory
Account Activity Data	Login timestamps, IP addresses, device identifiers, game history, betting records, session duration	Automatic
Communications Data	Support chat transcripts, email correspondence, feedback submitted to okabet	When applicable
Technical Data	Browser type and version, operating system, screen resolution, referral URL	Automatic

okabet does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as racial or ethnic origin, political opinions, religious beliefs, health data, or genetic data) except where strictly necessary for responsible gaming assessments or where you voluntarily provide such information.

3. How We Collect Your Data

okabet collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through server logs, cookies, and tracking technologies as you interact with the okabet Platform. See Section 8 (Cookies & Tracking) for details.
• From third-party identity verification providers — when we conduct KYC checks using government database lookups or document verification services.
• From payment processors — GCash, Maya, and partner banks may share transaction confirmation data with okabet to reconcile deposits and withdrawals.
• From regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), or law enforcement may share data with okabet as part of their statutory oversight functions.

4. Legal Basis for Processing

okabet processes your personal data on the following legal bases under the DPA and its IRR:

• Contractual necessity — processing is required to perform the contract between you and okabet, including operating your account, processing transactions, and delivering gaming services.
• Legal obligation — processing is required to comply with Philippine laws including the DPA, the Anti-Money Laundering Act (RA 9160 as amended), the PAGCOR licensing conditions, and the Responsible Gaming framework.
• Legitimate interest — processing is necessary for the legitimate interests of okabet, including fraud prevention, platform security, improving services, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent — for direct marketing communications and optional data processing activities where consent is the appropriate basis. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5. How We Use Your Personal Data

okabet uses your personal data for the following purposes:

• Creating and managing your player account on the okabet Platform.
• Processing PHP deposits and withdrawals via GCash, Maya, local banks, and other supported payment channels.
• Conducting identity verification (KYC) as required under PAGCOR licensing conditions and Philippine AML regulations.
• Detecting, investigating, and preventing fraudulent transactions, money laundering, and other illegal activity.
• Monitoring for responsible gaming indicators and applying player protection tools (deposit limits, session limits, self-exclusion) in accordance with PAGCOR requirements.
• Providing customer support through live chat and email.
• Administering bonuses, promotions, and loyalty programs.
• Sending transactional communications (deposit confirmations, withdrawal updates, security alerts).
• Sending promotional communications where you have opted in to receive them.
• Complying with legal reporting obligations to PAGCOR, AMLC, and other Philippine regulatory bodies.
• Improving the okabet Platform and personalizing your experience.

6. Disclosure to Third Parties

okabet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose personal data only in the following circumstances:

• Payment processors — GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc./PayMaya Philippines), BPI, BDO, Metrobank, GrabPay, and other payment service providers, solely to process your transactions.
• KYC and identity verification partners — third-party providers who assist in verifying your identity and documents against government databases, to the extent required for PAGCOR KYC compliance.
• Game software providers — JILI, Pragmatic Play, PG Soft, and other licensed game developers may receive technical session data necessary to deliver game content. These providers are contractually bound to data protection standards equivalent to those required under the DPA.
• Cloud and hosting infrastructure providers — data storage and server providers engaged by okabet to host the Platform. These providers process data solely on okabet's instructions under data processing agreements.
• Regulatory and law enforcement authorities — PAGCOR, AMLC, the National Privacy Commission, Philippine courts, or law enforcement agencies, where disclosure is required by law, court order, or regulatory directive.
• Professional advisors — legal counsel, auditors, and compliance advisors engaged by okabet in their professional capacity, subject to confidentiality obligations.

7. Data Retention

okabet retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum periods:

• Active account data — retained for the full duration of your active okabet account.
• KYC documents and identity records — retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act and PAGCOR licensing conditions.
• Transaction and financial records — retained for a minimum of five (5) years following each transaction, in compliance with Philippine AML record-keeping requirements.
• Support communications — retained for up to three (3) years from the date of the communication.
• Technical and log data — typically retained for twelve (12) months, unless required for longer periods for fraud investigation or regulatory compliance purposes.

Upon expiry of applicable retention periods and in the absence of any ongoing legal obligation, okabet will securely delete or anonymize your personal data in a manner that renders it irrecoverable.

8. Cookies and Tracking Technologies

The okabet Platform uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies — required for core Platform functionality including authentication, session management, and security. These cannot be disabled without breaking core Platform features.
• Functional cookies — store your preferences such as language settings and display options to improve your experience across sessions.
• Analytics cookies — collect aggregated, anonymized information about how users interact with okabet to help us improve the Platform. No personally identifiable information is shared with analytics providers.
• Performance cookies — measure Platform load times and identify technical issues, used solely for Platform optimization purposes.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. okabet does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

9. Security Measures

okabet implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction, including:

• SSL/TLS encryption for all data transmitted between your device and the okabet Platform (look for HTTPS in the address bar).
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication for all staff accessing internal systems containing player data.
• Role-based access controls ensuring staff access only the player data necessary for their specific function.
• Regular penetration testing and security audits of the Platform infrastructure.
• Incident response procedures aligned with the NPC's data breach notification requirements (72-hour notification obligation for qualifying breaches).

Notwithstanding these measures, no online platform can guarantee absolute security. If you have reason to believe that your okabet account has been compromised, please contact our support team immediately via live chat.

10. Cross-Border Data Transfers

Some of okabet's third-party service providers — including cloud infrastructure providers and game software developers — may be located outside the Philippines. Where personal data is transferred internationally, okabet ensures that such transfers are conducted in compliance with Section 21 of the DPA, which requires that the receiving jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards (such as standard contractual clauses) are in place. okabet does not transfer personal data to jurisdictions that do not meet adequate data protection standards without implementing compensating controls.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okabet:

• Right to be Informed — you have the right to be informed about how your personal data is being collected and processed, which this Privacy Policy fulfils.
• Right to Access — you may request a copy of the personal data okabet holds about you, along with information about how it is being used.
• Right to Rectification — you may request correction of inaccurate or incomplete personal data. You can update certain account details directly in your okabet account settings, or contact support for changes to KYC-verified data.
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention obligations that may prevent full deletion.
• Right to Object — you may object to processing of your personal data for direct marketing purposes. You may also object to other processing activities based on legitimate interest where your specific situation warrants it.
• Right to Data Portability — where technically feasible, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint — if you believe okabet has processed your personal data in breach of the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph (plain text — not a link).

To exercise any of these rights, please contact the okabet Data Protection Officer via the contact information in Section 15. okabet will respond to rights requests within thirty (30) calendar days as required under the DPA IRR, and may request proof of identity before processing a request.

12. Children's Privacy

The okabet Platform is strictly intended for individuals aged 21 years and older. okabet does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account and delete the data. If you believe a minor has registered on okabet, please notify us immediately via live chat or email.

13. Marketing Communications

With your consent at registration or through subsequent opt-in, okabet may send you promotional communications about okabet bonuses, new game releases, and platform features via email and SMS. You may withdraw your consent and opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any okabet marketing email; or
• Replying "STOP" to any marketing SMS; or
• Contacting okabet customer support via live chat and requesting removal from marketing lists.

Opt-out requests will be processed within five (5) business days. Withdrawing consent to marketing will not affect your ability to use the okabet Platform or receive essential transactional communications (such as deposit confirmations and security alerts).

14. Updates to This Privacy Policy

okabet may update this Privacy Policy periodically to reflect changes in our data processing practices, new regulatory requirements, or changes to the Platform. When material changes are made, okabet will notify registered players via the email address on file and/or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the okabet Platform following notification of material changes constitutes your acceptance of the updated Privacy Policy.

15. Contact and Data Protection Officer

For privacy-related inquiries, to exercise your data subject rights, or to contact okabet's designated Data Protection Officer (DPO), please use the following channels:

• Live Chat: Available 24/7 on the okabet Platform — fastest response channel for privacy queries.
• Email: [email protected] (plain text — not a clickable link). Include "Privacy Request" in your subject line.

okabet is committed to handling all privacy inquiries responsibly and within the timeframes mandated by the Philippine Data Privacy Act. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission.