okybet Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes how okybet ("we," "us," or "our") collects, uses, stores, and discloses personal data relating to individuals ("you," "the Player," or "the User") who access or use the okybet platform and its associated services.

okybet is committed to protecting the privacy and personal data of all its players, particularly those based in the Philippines. This Policy is drafted in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

This Policy should be read alongside okybet's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this Policy and those documents on matters of data privacy, this Policy shall prevail.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, okybet acts as the Personal Information Controller in respect of the personal data it collects from players and website visitors. This means okybet determines the purposes and means by which your personal data is processed.

Where okybet engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or analytics platforms — those parties act as Personal Information Processors and are contractually bound to process your data only on okybet's instructions and in accordance with this Policy.

If you have any questions about how okybet handles your personal data, or wish to exercise any of your rights under this Policy, please contact our Data Protection Officer using the details provided in Section 14.

3 Data We Collect

okybet collects the following categories of personal data from players and website visitors:

okybet does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for regulatory compliance, such as government-issued ID details for KYC verification. Where such data is collected, it is handled with heightened security measures.

4 How We Collect Your Data

okybet collects personal data through the following means:

• Direct interactions: Data you provide when registering an okybet account, completing KYC verification, making deposits or withdrawals, contacting Support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the okybet platform, including through cookies, web beacons, and server logs. See Section 9 for more detail on cookies.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors (such as GCash and PayMaya), and fraud prevention services, where you have authorised those parties to share your data with us.
• Regulatory sources: Data received from PAGCOR or other regulatory bodies in connection with licensing, compliance, or investigation requirements.

5 How We Use Your Data

okybet uses your personal data for the following purposes:

• Account management: To register and maintain your okybet account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Service delivery: To process your deposits and withdrawals, provide access to games, and deliver the core okybet gaming experience.
• Legal and regulatory compliance: To meet our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including filing required reports with regulatory authorities.
• Responsible gaming: To monitor gaming behaviour, identify signs of problem gambling, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other illegal or prohibited activities on the okybet platform.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of okybet.

okybet will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6 ⚖ Legal Basis for Processing

Under the Data Privacy Act of 2012, okybet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your okybet account and deliver gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AMLA reporting obligations, and tax regulations.
• Legitimate interests: Processing necessary for okybet's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Data

okybet does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist okybet in verifying your identity and age in compliance with regulatory requirements.
• Fraud prevention and security services: Providers that help okybet detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or court order.
• IT and platform service providers: Cloud hosting, data analytics, and customer support technology providers who process data on okybet's behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for okybet's legal and compliance obligations, subject to professional confidentiality obligations.

All third parties with whom okybet shares personal data are required to maintain appropriate security measures and to process your data only for the specified purpose and in accordance with applicable law.

8 Data Retention

okybet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation.

• Account data: Retained for the duration of your okybet account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLA record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• KYC and identity verification documents: Retained for the period required by PAGCOR regulations and applicable AML law.
• Support and communications records: Retained for up to three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required, okybet will securely delete or anonymise it in accordance with our data disposal procedures.

9 Cookies & Tracking Technologies

okybet uses cookies and similar tracking technologies on its platform to enhance your experience, maintain session security, and gather analytics data. The types of cookies used by okybet include:

• Strictly necessary cookies: Essential for the operation of the okybet platform, including maintaining your login session and ensuring platform security. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to personalise your okybet experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the okybet platform, helping us identify areas for improvement. This data does not identify you personally.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of okybet's marketing campaigns, where you have consented to such use.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the okybet platform. For more information on managing cookies, refer to your browser's help documentation.

10 Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okybet:

To exercise any of these rights, please contact okybet's Data Protection Officer using the details in Section 14. okybet will respond to all verified requests within thirty (30) calendar days. We may need to verify your identity before processing your request.

11 Data Security

okybet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the okybet platform is encrypted using TLS (Transport Layer Security). Sensitive data at rest is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted to authorised okybet personnel on a strict need-to-know basis. All access is logged and audited.
• Penetration testing: okybet's systems are subject to regular security assessments and penetration testing by qualified security professionals.
• Incident response: okybet maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, okybet will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act.
• Staff training: All okybet personnel who handle personal data receive regular training on data protection obligations and security best practices.

12 Children's Privacy

okybet's services are strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. okybet does not knowingly collect personal data from individuals under the age of 21.

If okybet becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed. Any winnings accrued by an underage player will be forfeited.

If you are a parent or guardian and believe that a minor has registered on okybet or provided personal data to us, please contact okybet Support immediately so that we can take appropriate action.

13 Changes to This Policy

okybet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, okybet will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of okybet following notification of changes constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how okybet protects your personal data. If you have any concerns about changes to this Policy, please contact our Data Protection Officer before continuing to use the platform.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or okybet's data practices, please contact our Data Protection Officer through the following channels:

• Support Page: okybet Support
• Email: [email protected]

okybet's Data Protection Officer is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. All privacy-related enquiries will be handled confidentially and responded to within thirty (30) calendar days.

If you are not satisfied with okybet's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy was last reviewed and updated in May 2026.