okokbet Privacy
Policy

Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by okokbet ("okokbet", "we", "us", "our") in connection with your use of the okokbet Platform, accessible at okokbet.club ("Platform"), including all games, betting services, payment features, and customer support interactions.

This Policy applies to all registered players, prospective players who visit the Platform without registering, and any person who communicates with okokbet via live chat, email, or any other channel. It applies regardless of the device you use to access the Platform — desktop computer, Android mobile phone, iPhone, or tablet.

By registering an account with okokbet, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. Consent is given freely, specifically, and informedly in accordance with Section 3(b) of the Data Privacy Act of 2012.

Data Controller

okokbet is the personal information controller in respect of the personal data of its players and Platform users, as that term is defined under Section 3(h) of Republic Act No. 10173 (Data Privacy Act of 2012).

okokbet determines the purposes and means of processing personal data collected through the Platform. All data processing activities conducted by okokbet's service partners and technology providers are governed by data processing agreements that require those parties to handle player data only in accordance with okokbet's documented instructions and this Policy.

Contact details for okokbet's Data Protection Officer (DPO) are set out in Section 17 of this Policy.

Personal Data We Collect

okokbet collects personal data in the following categories:

3.1 Identity & Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for 21+ age verification)
• Nationality and country of residence
• Username and account password (stored in hashed, non-recoverable form)
• Profile photo (where voluntarily provided)

3.2 Contact Data

• Philippine mobile number (used for account verification, 2FA, and communications)
• Email address (used for account communications, password reset, and regulatory notices)
• Residential address (required for full KYC verification)

3.3 Identity Verification (KYC) Data

• Copies of government-issued ID documents (passport, UMID, driver's license, SSS ID, PhilHealth ID, Voter's ID)
• Proof of address documents
• Selfie photographs taken during KYC verification
• Source of funds documentation (where required by PAGCOR or AMLC regulations)

3.4 Financial & Payment Data

• GCash account number and registered name
• PayMaya account number and registered name
• Bank account name, number, and branch (BPI, BDO, Metrobank) where used for transactions
• Deposit and withdrawal transaction records, including amounts and timestamps
• Gaming activity records (game played, bet amounts, win/loss outcomes) — retained for regulatory compliance

3.5 Technical & Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser type
• Session data, including login timestamps and session duration
• Cookie identifiers and similar tracking technology data (see Section 9)

3.6 Communications Data

• Live chat transcripts
• Email correspondence with okokbet support
• Records of complaints, disputes, and their resolutions

How We Collect Your Data

okokbet collects personal data through the following mechanisms:

• Direct provision by you: During account registration, KYC submission, deposit and withdrawal requests, live chat conversations, and any other interaction where you voluntarily supply information.
• Automated collection: Through cookies, server logs, and analytics tools when you access and use the Platform (see Section 9).
• Payment processors: Transaction confirmation data received from GCash, PayMaya, and partner banks when you make deposits or withdrawals.
• Identity verification providers: Where okokbet uses third-party KYC verification services to validate identity documents, those providers return verification results to okokbet.
• Regulatory sources: PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government agencies may share information with okokbet in connection with regulatory compliance requirements.

Legal Basis for Processing

okokbet processes your personal data on the following legal bases under the Data Privacy Act of 2012:

How We Use Your Personal Data

okokbet uses your personal data for the following purposes:

• Account creation and maintenance: Creating and administering your okokbet player account, verifying your identity, and managing your account settings;
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and maintaining accurate transaction records;
• Legal and regulatory compliance: Meeting okokbet's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act;
• Customer support: Responding to your inquiries, resolving complaints, and providing assistance with your account;
• Responsible gaming: Monitoring gaming activity patterns to identify potential problem gambling behaviours and applying responsible gaming measures where appropriate;
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, and other security threats;
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use okokbet and to improve the Platform experience;
• Marketing (consent-based): Sending you promotions, bonus offers, and platform updates where you have opted in to receive such communications.

okokbet will not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected without first obtaining your consent or establishing a new legal basis for processing.

GCash & Payment Data Handling

Given that the overwhelming majority of okokbet's Filipino players use GCash as their primary deposit and withdrawal method, okokbet recognises the particular sensitivity of GCash account data. The following specific principles apply to the handling of payment data on okokbet:

• GCash number storage: Your registered GCash number is stored in encrypted form and used solely for processing deposits and withdrawals to/from your verified okokbet account.
• Name matching requirement: okokbet verifies that the name on your GCash account matches your okokbet account name at first withdrawal. This is a security measure to prevent unauthorised withdrawals.
• No GCash PIN or password collected: okokbet never requests, collects, or stores your GCash PIN, GCash password, or any other authentication credentials for your GCash account. Any communication claiming to be from okokbet that requests your GCash PIN should be treated as fraudulent.
• Transaction records: Records of all GCash transactions to and from your okokbet account are retained for the period specified in Section 11, in compliance with PAGCOR record-keeping and AMLC obligations.
• Payment processor data sharing: When you initiate a GCash transaction, transaction data is shared between okokbet and GCash's payment processing infrastructure. GCash's handling of that transaction data is governed by GCash's own privacy policy.

KYC & Identity Document Handling

okokbet is required by PAGCOR licensing conditions and the Anti-Money Laundering Act to collect and verify identity documents for all players who make deposits or withdrawals. The following principles apply to KYC data:

• Secure document storage: Uploaded identity documents (scanned IDs, selfies) are stored on encrypted servers with strict access controls. Access is limited to authorised okokbet compliance personnel and, where applicable, contracted KYC verification service providers.
• Purpose limitation: Identity documents are used exclusively for the purposes of age verification (21+ requirement), identity verification, and compliance with anti-money laundering obligations. They are not used for marketing or shared with third parties outside of regulatory and compliance obligations.
• Verification provider confidentiality: Where okokbet uses third-party identity verification technology, those providers are bound by data processing agreements prohibiting independent use of the document data.
• Retention: KYC documents are retained for the period described in Section 11 in compliance with PAGCOR and AMLC record-keeping requirements.

Cookies & Tracking Technologies

9.1 What Cookies We Use

okokbet uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that allow the Platform to function properly and to recognise returning visitors. The types of cookies used by okokbet include:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in status during a gaming session. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences (such as preferred language and display settings) to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how visitors use the Platform — which pages are visited, how long sessions last, and where traffic originates — to help okokbet improve the Platform. This data is not linked to individual player identities.
• Security cookies: Used to detect and prevent fraudulent activity, including account takeover attempts and bot traffic.

9.2 Cookie Management

You may configure your browser to refuse cookies or to notify you when a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in to your okokbet account and using the Platform's real-money features. Instructions for managing cookies are available in the settings menu of your browser.

9.3 No Third-Party Advertising Cookies

okokbet does not use third-party advertising cookies or behavioural targeting technologies that track your activity across other websites for the purpose of displaying targeted advertising.

Data Sharing & Disclosure

okokbet does not sell, rent, or trade your personal data. okokbet may disclose your personal data to the following categories of recipients, only to the extent necessary:

• PAGCOR and regulatory authorities: okokbet is required to provide player account and transaction information to PAGCOR upon request in connection with its licensing obligations;
• Anti-Money Laundering Council (AMLC): okokbet is a covered person under the Anti-Money Laundering Act and is required to report covered and suspicious transactions to AMLC;
• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum transaction data necessary to process your deposits and withdrawals;
• KYC verification service providers: Where okokbet uses third-party technology to verify identity documents, those providers receive the document data required for the verification process only;
• IT and platform service providers: Cloud hosting, security, and platform maintenance providers may process data on okokbet's behalf under strict data processing agreements;
• Law enforcement and courts: Where required by Philippine law, court order, or legal process, okokbet may disclose personal data to law enforcement authorities or judicial bodies;
• Business transfers: In the event of a merger, acquisition, or sale of okokbet's business, player data may be transferred to the acquiring entity, subject to that entity's obligation to honour this Privacy Policy.

Data Retention

okokbet retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to minimum retention periods required by Philippine law:

Upon expiry of the applicable retention period, okokbet will securely delete or anonymise your personal data in accordance with its data destruction procedures.

Data Security

okokbet implements technical and organisational security measures appropriate to the sensitivity of the personal data it holds, including:

• Transport Layer Security (TLS/HTTPS): All data transmitted between your device and okokbet servers is encrypted in transit;
• Encryption at rest: Sensitive personal data — including identity documents, payment details, and authentication credentials — is encrypted in storage;
• Access controls: Access to personal data is restricted to authorised okokbet personnel on a need-to-know basis, with role-based access controls and audit logging;
• Regular security assessments: okokbet conducts regular internal and external security assessments of its Platform infrastructure;
• Incident response: okokbet maintains a documented data breach response procedure, including notification protocols for the National Privacy Commission and affected players where required.

While okokbet takes its data security obligations seriously, no digital platform can guarantee absolute security. Players are advised to maintain strong, unique passwords for their okokbet accounts and to enable two-factor authentication as an additional layer of protection.

Your Data Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okokbet. These rights are exercisable by contacting okokbet's Data Protection Officer via the channels set out in Section 17.

Children & Minors

The okokbet Platform is strictly intended for adults aged 21 years and over, as required by PAGCOR regulations. okokbet does not knowingly collect personal data from individuals under the age of 21.

If okokbet discovers that personal data has been collected from a person under 21 years of age, it will immediately delete that data and close the associated account. Parents and guardians who believe their minor child has registered on okokbet are urged to contact support immediately for prompt account closure.

Account holders are reminded that they are responsible for ensuring that minors in their household cannot access their okokbet account or any device on which the account is stored or accessed. Use of parental control software is strongly recommended in households with children.

Cross-Border Data Transfers

In providing the okokbet Platform, certain personal data may be processed by service providers or technology partners whose infrastructure is located outside of the Philippines — for example, cloud hosting providers or international game studios.

Where personal data is transferred outside the Philippines, okokbet ensures that appropriate safeguards are in place, including:

• Data processing agreements that require the receiving party to apply data protection standards equivalent to those required under RA 10173;
• Transfer only to jurisdictions with adequately protective legal frameworks, or on the basis of contractual safeguards;
• Limitation of transferred data to the minimum necessary for the specific processing purpose.

okokbet does not transfer player financial data (GCash numbers, bank details) to jurisdictions outside of the Philippine payment processing infrastructure without express player consent.

Changes to This Privacy Policy

okokbet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in its data practices, legal obligations, or Platform features. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice displayed upon login, no less than fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure as described in okokbet's Terms and Conditions.

Prior versions of this Privacy Policy are available upon request from okokbet's Data Protection Officer.

Contact & Complaints

Data Protection Officer

okokbet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO can be contacted as follows:

• Live Chat: 24/7 — accessible on the okokbet Platform — average response under 3 minutes
• Email: [email protected] — subject line: "Data Privacy Request / Attention DPO"

National Privacy Commission

If you are not satisfied with okokbet's response to a data rights request or privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for personal data protection in the Philippines. NPC contact details and complaint procedures are published on the NPC's official website.

This Privacy Policy was last reviewed and updated in January 2026. All prior versions of the okokbet Privacy Policy are superseded by this version effective from the date published herein.