okbaet Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") describes how okbaet ("we," "us," "our," or the "Company"), a gaming operator licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) under License No. PH-2020-ONLINE-0842, collects, uses, discloses, stores, and protects personal information obtained from users ("you," "your," or "User") of our online gaming platform located at okbaet.cam (the "Platform").

By creating an account, accessing the Platform, or using okbaet services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any provision of this Policy, you must discontinue use of the Platform immediately.

This Policy applies to all personal data collected through:

• The okbaet website and mobile-optimized platform;
• Customer support channels (live chat, email, phone);
• Account registration, verification, and management processes;
• Deposits, withdrawals, and financial transactions;
• Promotional campaigns, newsletters, and marketing communications;
• Gaming activity, including bets, gameplay, and winnings.

2. Legal Basis for Data Processing

okbaet processes personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations (IRR), and guidelines issued by the National Privacy Commission (NPC). We also adhere to PAGCOR's regulatory requirements concerning player data protection, anti-money laundering (AML), and responsible gaming.

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions, including account creation, transaction processing, and service delivery;
• Legal Obligation: Processing is required to comply with Philippine laws, PAGCOR regulations, AML/CTF (Counter-Terrorism Financing) requirements, tax obligations, and court orders;
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, service improvement, and marketing (where you have not opted out);
• Consent: Processing is based on your explicit, informed, and freely given consent, such as when you opt-in to receive promotional communications.

3. Categories of Personal Data We Collect

3.1 Information You Provide Directly

When you register for an okbaet account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., passport, driver's license, or national ID number);
• Contact Information: Email address, mobile phone number, residential address, and postal code;
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers;
• Financial Information: Bank account details, e-wallet account information (GCash, PayMaya), credit/debit card details (processed by third-party payment processors; we do not store full card numbers), cryptocurrency wallet addresses, and transaction history;
• Verification Documents: Copies of government-issued IDs, proof of address (utility bills, bank statements), and proof of payment method (bank statements, screenshots of e-wallet accounts);
• Communication Records: Correspondence with customer support (chat logs, emails, phone call recordings), feedback, and complaints.

3.2 Information Collected Automatically

When you access and use the Platform, we automatically collect technical and behavioral data through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers (IP address, MAC address);
• Usage Data: Pages visited, features accessed, time spent on pages, clickstream data, referral URLs, search queries, and navigation paths;
• Geolocation Data: IP-based geolocation to verify that you are accessing the Platform from within the Philippines, as required by PAGCOR regulations;
• Gaming Activity: Bet history, game selections, wager amounts, winnings and losses, session duration, and gameplay patterns;
• Cookies and Tracking Technologies: Session cookies, persistent cookies, advertising cookies, and analytics cookies (see Section 10 for details).

3.3 Information from Third Parties

We may receive personal data about you from third-party sources, including:

• Identity Verification Providers: Third-party KYC (Know Your Customer) and identity verification services that confirm your identity, age, and address;
• Payment Processors: Financial institutions, banks, e-wallet providers, and cryptocurrency exchanges that process your deposits and withdrawals;
• Fraud Prevention Services: Third-party fraud detection and risk management platforms that assess transaction legitimacy and detect suspicious activity;
• Marketing Partners: Affiliate networks and marketing platforms that refer players to okbaet (we receive referral data but not your personal information unless you provide it directly to us);
• Social Media Platforms: If you interact with okbaet on social media or use social login features (currently not implemented, but reserved for future use), we may collect publicly available profile information.

4. How We Use Your Personal Data

okbaet uses your personal information for the following purposes:

4.1 Account Management and Service Delivery

• Create, maintain, and manage your okbaet account;
• Authenticate your identity and verify your eligibility to use the Platform (age 21+, Philippine residency);
• Process deposits, withdrawals, and financial transactions;
• Provide customer support and respond to inquiries;
• Facilitate gameplay, record bets, settle wagers, and credit winnings;
• Manage bonuses, promotions, and loyalty rewards.

4.2 Legal and Regulatory Compliance

• Comply with PAGCOR licensing requirements, including record-keeping, reporting, and audit obligations;
• Conduct KYC (Know Your Customer) verification to prevent underage gambling and identity fraud;
• Perform AML (Anti-Money Laundering) and CTF (Counter-Terrorism Financing) checks as required by the Anti-Money Laundering Act of 2001 (RA 9160, as amended);
• Detect and prevent fraud, money laundering, collusion, and other illegal activities;
• Respond to legal requests, subpoenas, court orders, and law enforcement inquiries;
• Enforce our Terms & Conditions and other policies.

4.3 Security and Fraud Prevention

• Monitor account activity for suspicious behavior, unauthorized access, and fraudulent transactions;
• Identify and block duplicate accounts, bonus abuse, and collusion;
• Protect the integrity of games and betting markets;
• Conduct risk assessments and implement security measures to safeguard your data and funds.

4.4 Marketing and Communications

• Send promotional offers, bonus notifications, and newsletters (with your consent or as permitted by law);
• Personalize marketing communications based on your preferences and gaming activity;
• Notify you of new games, features, and platform updates;
• Invite you to participate in tournaments, competitions, and special events.

4.5 Analytics and Service Improvement

• Analyze user behavior, preferences, and trends to improve the Platform and gaming experience;
• Conduct research, surveys, and data analysis to enhance product offerings;
• Test new features, optimize website performance, and troubleshoot technical issues;
• Generate aggregated, anonymized reports for internal business purposes.

5. Disclosure and Sharing of Personal Data

okbaet does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients:

5.1 Service Providers and Business Partners

We engage third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers (GCash, PayMaya), card payment gateways, and cryptocurrency exchanges that facilitate deposits and withdrawals;
• Identity Verification Services: KYC/AML verification providers that confirm your identity, age, and address;
• Cloud Hosting Providers: Secure cloud infrastructure providers that store and process data on our behalf;
• Customer Support Platforms: Live chat and helpdesk software providers that assist with customer service;
• Marketing and Analytics Tools: Email marketing platforms, analytics services (e.g., Google Analytics), and advertising networks;
• Game Providers: Third-party software providers (JILI, Pragmatic Play, Evolution Gaming, etc.) that deliver casino games and live dealer experiences.

All service providers are contractually obligated to protect your data, use it only for the purposes specified, and comply with applicable data protection laws.

5.2 Regulatory Authorities and Law Enforcement

We may disclose personal data to:

• PAGCOR and other Philippine regulatory authorities for licensing, compliance, and audit purposes;
• The National Privacy Commission (NPC) in response to data breach investigations or complaints;
• Law enforcement agencies, courts, and government bodies in response to lawful requests, subpoenas, or legal obligations;
• Anti-Money Laundering Council (AMLC) for AML/CTF compliance and suspicious activity reporting.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the new entity will be bound by this Privacy Policy or provide you with a comparable level of data protection.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that does not personally identify you with third parties for research, analytics, and business intelligence purposes. Such data cannot be used to re-identify you.

6. Data Security Measures

okbaet employs industry-standard technical, administrative, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS (Secure Sockets Layer/Transport Layer Security) technology;
• Secure Storage: Personal data is stored on secure servers with access controls, firewalls, and intrusion detection systems;
• Password Protection: User passwords are hashed and salted using bcrypt or similar cryptographic algorithms. okbaet staff cannot view your plaintext password;
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, and all access is logged and monitored;
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential risks;
• Employee Training: okbaet staff are trained on data protection principles, confidentiality obligations, and security best practices;
• Incident Response Plan: We maintain a data breach response plan to detect, contain, and remediate security incidents promptly.

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

7. Data Retention

okbaet retains personal data for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods:

• Active Accounts: Personal data is retained for the duration of your account's active status;
• Closed Accounts: After account closure, personal data is retained for a minimum of five (5) years as required by PAGCOR regulations and Philippine tax law;
• Transaction Records: Financial transaction records, including deposits, withdrawals, and bet history, are retained for seven (7) years in compliance with AML/CTF requirements;
• Marketing Data: If you opt-out of marketing communications, your contact information is retained in a suppression list to honor your opt-out preference;
• Legal Holds: Data may be retained longer if required for ongoing legal proceedings, regulatory investigations, or dispute resolution.

After the applicable retention period expires, personal data is securely deleted or anonymized in accordance with our data retention and destruction policy.

8. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. You can access most of your account information by logging into your okbaet account. For additional information, contact our Data Protection Officer (DPO) at [email protected].

8.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update your contact information, address, and payment details through your account settings. For changes to your name or date of birth, contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may retain data if required by law or for legitimate business purposes (e.g., AML compliance, legal defense).

8.4 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. You can opt-out of marketing communications by clicking the "unsubscribe" link in emails or by adjusting your communication preferences in your account settings.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) and to transmit that data to another service provider.

8.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

8.7 Right to Lodge a Complaint

If you believe that okbaet has violated your privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. You can contact the NPC at:

• Website: privacy.gov.ph
• Email: [email protected]
• Phone: (02) 8234-2228

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond to your request within thirty (30) days.

9. International Data Transfers

okbaet primarily processes personal data within the Philippines. However, some of our service providers (e.g., cloud hosting, payment processors, game providers) may be located outside the Philippines. When we transfer personal data internationally, we ensure that appropriate safeguards are in place, such as:

• Data processing agreements that comply with the Data Privacy Act of 2012;
• Standard contractual clauses approved by the National Privacy Commission;
• Certifications under recognized data protection frameworks (e.g., EU-U.S. Data Privacy Framework, APEC Cross-Border Privacy Rules).

By using okbaet, you consent to the transfer of your personal data to jurisdictions that may have different data protection laws than the Philippines.

10. Cookies and Tracking Technologies

okbaet uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. A cookie is a small text file stored on your device when you visit the Platform.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly (e.g., authentication, session management, security);
• Performance Cookies: Collect information about how you use the Platform (e.g., pages visited, errors encountered) to improve performance;
• Functionality Cookies: Remember your preferences and settings (e.g., language, currency, login credentials);
• Targeting/Advertising Cookies: Track your browsing activity to deliver personalized ads and measure ad effectiveness.

10.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. However, disabling essential cookies may affect the functionality of the Platform.

To opt-out of targeted advertising, you can visit:

• Digital Advertising Alliance: optout.aboutads.info
• Network Advertising Initiative: optout.networkadvertising.org

11. Children's Privacy

okbaet is intended for users aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will delete that data immediately and close the associated account. If you believe that a minor has provided personal information to okbaet, contact us at [email protected].

12. Third-Party Links

The Platform may contain links to third-party websites, services, or advertisements. okbaet is not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to information collected by okbaet.

13. Changes to This Privacy Policy

okbaet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated to you via email or through a prominent notice on the Platform. Your continued use of okbaet after such notification constitutes your acceptance of the revised Policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Customer Support (24/7): [email protected]
• Phone: +63 2 8123 4567 (Manila office)
• Mailing Address: okbaet Data Protection Officer, 5th Floor, Robinsons Summit Center, Ayala Avenue, Makati City, 1226 Metro Manila, Philippines