okbet.c Privacy Policy

1. Introduction

okbet.c ("the Platform," "we," "us," or "our") is committed to protecting the privacy and personal data of every Filipino player who uses our services. This Privacy Policy ("Policy") describes how okbet.c collects, uses, discloses, stores, and safeguards personal information obtained through the okbet.c website at okbetc.org and all associated mobile applications, services, and features.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines. It should be read together with the okbet.c Terms and Conditions, which govern your use of the Platform.

By registering an account or using any part of the okbet.c Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

2. Data Controller

For the purposes of the DPA 2012, okbet.c is the personal information controller in respect of all personal data collected through the Platform. okbet.c has appointed a Data Protection Officer ("DPO") who is responsible for ensuring compliance with applicable data privacy laws and for handling data subject requests and inquiries.

Contact details for the okbet.c Data Protection Officer are provided in Section 16 of this Policy. All data privacy-related inquiries, requests, and complaints should be directed to the DPO in the first instance.

3. Personal Data We Collect

okbet.c collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — you must be 21 or older)
• Residential address (including barangay, city/municipality, province)
• Email address and mobile phone number
• Government-issued ID type and number (e.g., Philippine passport, driver's license, SSS/UMID, PhilSys ID)
• Selfie or photograph submitted for identity verification

3.2 Financial Data

• GCash or Maya mobile wallet account details (account name and number)
• Bank account details for bank transfer transactions (account name, bank name, account number)
• Debit card details (card number, expiry date — CVV is never stored)
• Transaction history including deposits, withdrawals, wagers, and winnings

3.3 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session data including login timestamps, session duration, and pages visited
• Game activity logs including games played, bet amounts, and outcomes
• Cookies and similar tracking technology data (see Section 9)

3.4 Communications Data

• Records of communications with okbet.c customer support via live chat or email
• Feedback, complaints, and dispute records
• Marketing preference settings and communication opt-in/opt-out records

3.5 Sensitive Personal Information

okbet.c may collect sensitive personal information as defined under the DPA 2012 where required for regulatory compliance, including information about your financial transactions and, where required by PAGCOR or AMLC regulations, information relevant to anti-money laundering checks. Such sensitive data is processed only to the extent strictly necessary and is subject to enhanced security controls.

4. How We Collect Your Data

okbet.c collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar technologies when you access and use the Platform.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from fraud prevention partners; payment verification data from payment processors such as GCash, Maya, and partner banks.
• Regulatory sources: Information received from PAGCOR, AMLC, or other Philippine regulatory authorities in connection with our compliance obligations.

5. Purpose & Legal Basis for Processing

okbet.c processes your personal data only for specified, legitimate purposes and only where a valid legal basis exists under the DPA 2012. The table below summarizes our primary processing activities:

6. Data Sharing & Disclosure

okbet.c does not sell, rent, or trade your personal data. We may share your personal information with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Regulatory and Law Enforcement Authorities

okbet.c is required by Philippine law to share certain personal and financial data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent government authorities upon lawful request or as required by applicable regulations. This includes mandatory reporting of suspicious transactions under the Anti-Money Laundering Act (Republic Act No. 9160, as amended).

6.2 Service Providers and Data Processors

We engage trusted third-party service providers who process personal data on our behalf under strict data processing agreements that require them to maintain confidentiality and implement appropriate security measures. These include:

• KYC and identity verification service providers
• Payment processors (GCash, Maya, partner banks) for transaction processing
• Fraud detection and risk management technology providers
• Cloud infrastructure and data hosting providers operating within or with adequate safeguards for the Philippines
• Customer support platform providers
• Analytics service providers (using anonymized or pseudonymized data only)

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of okbet.c's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

6.4 With Your Consent

okbet.c may share your personal data with other parties where you have given your explicit prior consent to such sharing. You may withdraw consent at any time by contacting our DPO, though withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

7. International Data Transfers

Where okbet.c transfers personal data outside the Philippines — for example, to cloud infrastructure providers or technology partners with servers located abroad — we ensure that such transfers are carried out in compliance with the DPA 2012 and NPC guidelines on cross-border data transfers. This includes ensuring that the recipient country provides an adequate level of data protection, or that appropriate contractual safeguards (such as NPC-approved standard contractual clauses) are in place.

okbet.c will not transfer your personal data to jurisdictions that do not provide adequate data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

8. Data Retention

okbet.c retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC reporting requirements.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing preferences and consent records: Retained for the duration of your account and for three (3) years following account closure.
• Technical and usage logs: Retained for twelve (12) months from the date of collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines on data disposal.

9. Cookies & Tracking Technologies

okbet.c uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Used to collect anonymized data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is included in analytics data shared with analytics providers.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access.

okbet.c does not use third-party advertising or behavioral tracking cookies. You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

10. Your Rights as a Data Subject

Under the DPA 2012 and its IRR, you have the following rights with respect to your personal data held by okbet.c. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16.

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed, which this Policy fulfills.
• Right of access: You may request a copy of the personal data okbet.c holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to lodge a complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

okbet.c will respond to all data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing any request to protect against unauthorized access to your personal data.

11. Children's Privacy

The okbet.c Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. okbet.c does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If okbet.c becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, the relevant account will be immediately suspended, all data will be securely deleted, and any funds held in the account will be handled in accordance with PAGCOR's guidelines on underage gambling incidents.

If you believe a minor has registered on the Platform, please contact our Data Protection Officer immediately using the contact details in Section 16.

12. Security Measures

okbet.c implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for all personal data stored at rest
• TLS 1.3 encryption for all data transmitted between your device and our servers
• Multi-factor authentication (MFA) for all administrative access to systems containing personal data
• Role-based access controls limiting data access to authorized personnel only
• Comprehensive audit logging of all access to and processing of personal data
• Regular penetration testing and vulnerability assessments by independent security specialists
• 24/7 security monitoring and intrusion detection systems
• Regular staff training on data privacy and information security obligations
• Formal data processing agreements with all third-party service providers

While okbet.c takes all reasonable steps to protect your personal data, no system is completely immune to security risks. You are encouraged to use a strong, unique password for your okbet.c account and to enable any available account security features.

13. Personal Data Breach Protocol

okbet.c maintains a formal Personal Data Breach Response Plan in accordance with NPC Circular No. 16-03. In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, okbet.c will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, using the NPC's prescribed breach notification form.
• Notify affected data subjects without undue delay, providing clear information about the nature of the breach, the data affected, the likely consequences, and the measures taken or proposed to address the breach.
• Conduct a thorough internal investigation to determine the cause and scope of the breach and implement remediation measures to prevent recurrence.
• Maintain a breach register documenting all personal data breaches, regardless of whether NPC notification is required.

14. Third-Party Links

The okbet.c Platform may contain links to third-party websites or services for informational purposes. This Policy applies only to the okbet.c Platform and does not cover the privacy practices of any third-party websites. okbet.c is not responsible for the content or privacy practices of any linked third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

15. Updates to This Privacy Policy

okbet.c reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

Where changes are material, okbet.c will provide advance notice to registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may request account closure in accordance with the Terms and Conditions.

16. Contact & Data Protection Officer

For all data privacy-related inquiries, requests to exercise your data subject rights, or complaints regarding okbet.c's handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with okbet.c's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.