Privacy Policy

01 Introduction

okibet ("we," "us," "our") takes the privacy of our players seriously. We operate an online casino and gaming platform at okibet.biz, primarily serving registered players in the Philippines. In the course of providing our services, we collect, process, and store personal information about our users. This Privacy Policy explains, in plain language, what that information is, why we need it, who we share it with, and what rights you have as a data subject under Philippine law.

This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It is also informed by our obligations under the Anti-Money Laundering Act (RA 9160, as amended), PAGCOR regulatory requirements, and other applicable Philippine statutes.

We believe that Filipino players deserve to know exactly how their data is used. No jargon, no buried fine print. If anything in this document is unclear, you are encouraged to contact our Data Protection Officer (DPO) using the details provided in Section 13 of this Policy.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller — the entity that determines the purposes and means of processing your personal data — is okibet, operating the Platform at okibet.biz.

okibet is a PAGCOR-regulated online gaming operator. All data processing activities conducted by okibet are subject to PAGCOR's data governance requirements in addition to the NPC's data privacy framework.

Where okibet engages third-party service providers to process data on its behalf (for example, payment processors, KYC verification vendors, or game software providers), those providers act as personal information processors under written data processing agreements that bind them to confidentiality and security obligations consistent with RA 10173.

03 Personal Data We Collect

okibet collects personal information through several channels: directly from you when you register or contact support, automatically through your use of the Platform, and from third parties in the course of identity verification and fraud prevention. The categories of data we collect are outlined below.

04 Purpose of Processing

okibet processes your personal data for the following specific purposes. For each purpose, we collect only the minimum data necessary — a principle known as data minimization under RA 10173.

• Account Registration and Management: To create and maintain your okibet player account, verify your eligibility, and manage your account lifecycle;
• Identity Verification (KYC): To comply with PAGCOR licensing requirements and Philippine AML laws — specifically to confirm that you are who you say you are and that you are at least 21 years of age;
• Financial Transactions: To process deposits and withdrawals via GCash, Maya, InstaPay, and bank transfer; to record and reconcile your transaction history in PHP;
• Gaming Services: To deliver the games you choose to play, record wager outcomes, calculate and credit winnings, and maintain your game history;
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized access, money laundering, and violations of our Terms & Conditions;
• Regulatory Compliance: To meet our reporting obligations under PAGCOR regulations and to comply with lawful orders from the AMLC or other competent Philippine authorities;
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of our support operations;
• Responsible Gaming: To monitor for indicators of problem gambling behavior and to administer self-exclusion, deposit limits, and cooling-off periods where applicable;
• Marketing and Promotions: To send you relevant promotional offers, bonus notifications, and platform updates — only where you have provided consent or where such communication is permitted under applicable law. You may opt out at any time;
• Platform Improvement: To analyze aggregate, anonymized usage data to improve the design, performance, and functionality of the okibet Platform.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, okibet processes your personal information on the following legal bases:

• Performance of a Contract: Processing necessary to perform our obligations under the okibet Terms & Conditions — including account management, gameplay, and financial transactions;
• Legal Obligation: Processing required to comply with Philippine law — including PAGCOR regulatory requirements, AML obligations under RA 9160 (as amended), and NPC data governance rules;
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, and platform improvement — where our legitimate interests are not overridden by your data protection rights;
• Consent: For marketing communications and any processing of sensitive personal information not otherwise covered above. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

06 Sharing Your Personal Data

okibet does not sell your personal information to third parties. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: GCash (GXI), Maya (PayMaya Philippines), BancNet, InstaPay networks, and correspondent banks — to process deposits and withdrawals in PHP;
• KYC and Identity Verification Vendors: Third-party providers that perform document authentication, liveness checks, and identity verification as part of our PAGCOR-mandated KYC process;
• Game Software Providers: Licensed game studios and aggregators whose platforms deliver the games available in the okibet lobby — limited to data necessary for game delivery and certification;
• PAGCOR: As our primary gaming regulator, PAGCOR has the right to access player account data and transaction records in the exercise of its regulatory functions;
• Anti-Money Laundering Council (AMLC): Covered transaction reports and suspicious transaction reports as required under RA 9160 and its amendments;
• Law Enforcement and Courts: Where required by a lawful order, warrant, or subpoena issued by a competent Philippine court or law enforcement authority;
• Technology and Infrastructure Providers: Cloud hosting providers and cybersecurity vendors operating under data processing agreements that bind them to the same security and confidentiality standards as okibet.

07 Data Retention

okibet retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• Account and Identity Data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the AMLA;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AML record-keeping obligations under RA 9160;
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Customer Support Records: Retained for a minimum of three (3) years from the date of the support interaction;
• Marketing Consent Records: Retained until consent is withdrawn or for three (3) years after your last interaction with a marketing communication, whichever comes first;
• Technical Logs: Retained for a minimum of twelve (12) months for security and fraud investigation purposes.

Following the expiry of the applicable retention period, personal data is securely destroyed or anonymized in accordance with NPC-prescribed data disposal standards.

08 Security Measures

okibet implements a layered security architecture to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our technical and organizational security measures include:

• SSL/TLS Encryption: All data in transit between your device and the okibet Platform is encrypted using industry-standard 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive data stored in our databases — including KYC documents and financial details — is encrypted at rest using AES-256 encryption;
• Access Controls: Personal data is accessible only to okibet personnel who require it for their specific role. Access is governed by role-based permissions and subject to periodic access reviews;
• Two-Factor Authentication: Players can enable 2FA via SMS OTP to secure their login credentials. okibet's internal systems also require MFA for administrative access;
• Penetration Testing: The okibet Platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals;
• Data Breach Response: okibet maintains a documented data breach response plan. In the event of a security breach affecting your personal data, we will notify the National Privacy Commission and affected users within the timeframes prescribed by NPC regulations.

09 Cookies & Tracking Technologies

The okibet Platform uses cookies and similar tracking technologies to deliver essential functionality, analyze platform performance, and — where you have provided consent — personalize your experience. The categories of cookies used by okibet are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in, security tokens, and CSRF protection cookies. These cannot be disabled without impacting platform functionality;
• Analytics Cookies: Used to collect aggregate, anonymized data on how players navigate and interact with the Platform. This data is used solely to improve Platform design and performance;
• Preference Cookies: Store your language preferences, game lobby settings, and other personalization choices to improve your experience;
• Security Cookies: Used for fraud detection, bot identification, and login security purposes.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Platform. okibet does not use third-party advertising cookies or share cookie data with advertising networks.

10 Minors & Age Policy

The okibet Platform is strictly intended for individuals who are 21 years of age or older, as mandated by PAGCOR for all casino-type gaming in the Philippines. okibet does not knowingly collect personal information from individuals under the age of 21.

If okibet discovers or has reasonable grounds to believe that personal information has been collected from a minor, the relevant account will be suspended immediately, any winnings derived from underage play will be forfeited, and the minor's personal data will be deleted or returned to the relevant legal guardian in accordance with applicable NPC guidelines for processing personal information of minors.

11 Exercising Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the rights summarized in the highlights section above. To exercise any of these rights, you may submit a written request to our Data Protection Officer using the contact details in Section 13 of this Policy.

When submitting a data rights request, please include:

• Your full legal name and registered okibet username;
• Your registered Philippine mobile number;
• The specific right you wish to exercise (access, rectification, erasure, objection, etc.);
• A description of the personal data to which the request relates;
• A copy of a valid Philippine government-issued ID for identity verification purposes.

okibet will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days from receipt of a complete request. Where the request is complex or we receive a high volume of requests, we may extend the response period by a further fifteen (15) business days with written notice to you.

If you are not satisfied with okibet's response to your data privacy request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Changes to This Privacy Policy

okibet may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this Policy.

When we make material changes — those that significantly affect how your personal data is processed or your rights as a data subject — we will notify registered users by SMS to the mobile number on file, or by a prominent notice on the okibet Platform, at least fourteen (14) days before the changes take effect.

Continued use of the okibet Platform after a Privacy Policy update constitutes your acceptance of the revised terms, except where your explicit consent is required for new processing activities under RA 10173.

13 Contact Information & Data Protection Officer

okibet has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations. The DPO is responsible for overseeing okibet's data protection compliance, handling data rights requests, and serving as the primary contact for NPC inquiries.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions. Filipino players are encouraged to read it in full and contact the DPO with any questions.