Privacy Policy for
okbe Casino

okbe ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy describes how okbe collects, uses, stores, shares, and protects personal information in connection with the operation of the okbe online casino and gaming platform, accessible at okbe.app (the "Platform").

This policy is written in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). It also reflects our commitment to internationally recognised data protection principles, including purpose limitation, data minimisation, and storage limitation.

Please read this Privacy Policy carefully alongside our Terms & Conditions and Responsible Gaming Policy. If you do not agree with the practices described herein, you should not use the okbe Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this policy.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, okbe is the personal information controller responsible for the personal data you provide when using the Platform. This means okbe determines the purposes and means by which your personal data is processed.

Where okbe engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or analytics platforms — those parties act as personal information processors and are contractually bound to process your data only in accordance with okbe's instructions and applicable Philippine law.

For all privacy-related enquiries, including requests to exercise your data subject rights, please contact our Data Protection Officer (DPO) using the details provided in Section 15 of this policy.

okbe collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence)
• Username and account credentials (password stored in hashed form only)

3.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (city, province, postal code)

3.3 Financial Data

• Payment method details (GCash number, PayMaya account, BPI/BDO/Metrobank account reference)
• Transaction history, including deposits, withdrawals, and wager records
• Account balance information

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Login timestamps and access logs

3.5 Communications Data

• Records of correspondence with our customer support team
• Feedback, survey responses, and promotional opt-in preferences

okbe collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 10 for more details on our cookie practices.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk signals from payment processors; and publicly available information used for compliance screening.

okbe uses your personal data for the following purposes:

okbe will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Data Privacy Act of 2012, okbe processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC, AML, and responsible gaming regulations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain optional features, where you have given your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

okbe does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment processors, for the purpose of processing your transactions.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.
• Game content providers: Software providers whose games are hosted on the okbe Platform, who may receive anonymised session data for game performance purposes.
• IT and infrastructure providers: Cloud hosting, security, and technical support providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission, PAGCOR, and law enforcement bodies, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

okbe retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer if required for ongoing dispute resolution.
• Marketing preferences and consent records: Retained until you withdraw consent or for three (3) years from the date of last engagement, whichever is earlier.
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with okbe's data disposal procedures.

okbe implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the okbe Platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Hashed storage of account passwords using industry-standard cryptographic algorithms
• Multi-factor authentication options for account access
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okbe will notify the National Privacy Commission and affected data subjects in accordance with the requirements of RA 10173 and NPC Circular 16-03.

okbe uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit the Platform.

10.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management, authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalise your experience.
• Analytics cookies: Collect anonymised data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

10.2 Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okbe:

• Right to be informed: The right to know whether okbe holds personal data about you and to receive clear information about how it is processed.
• Right of access: The right to request a copy of the personal data okbe holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. okbe will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.

The okbe Platform is strictly intended for persons who are 21 years of age or older, in accordance with Philippine gambling regulations. okbe does not knowingly collect personal data from individuals under the age of 21.

As part of our registration and KYC process, okbe verifies the age of all players using government-issued identification. If okbe becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned in accordance with applicable regulations.

If you believe that a minor has registered an account on the okbe Platform, please contact our support team immediately so that we can take appropriate action.

In some cases, personal data processed by okbe may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or game software suppliers operating internationally.

Where such transfers occur, okbe ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law. okbe will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

okbe reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will notify registered players via the email address associated with their account and by posting a prominent notice on the Platform.

The updated Privacy Policy will take effect on the date specified in the notice. Your continued use of the Platform after the effective date constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how okbe protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okbe, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing okbe's compliance with the Data Privacy Act of 2012 and for handling all data subject requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.