okbeth Privacy Policy

This Privacy Policy ("Policy") describes how okbeth ("okbeth," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you," "your," or "User") who access or use the okbeth online casino and sports betting platform available at okbeth.org and any related services, features, or applications (collectively, the "Platform").

okbeth is committed to protecting the privacy and security of all personal data entrusted to it by Filipino players and other Users. This Policy is intended to fulfill okbeth's transparency obligations under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations, as well as any other applicable data protection legislation.

This Policy should be read in conjunction with the okbeth Terms and Conditions, which incorporate this Policy by reference. By registering an account on the okbeth Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2.1 For the purposes of the Data Privacy Act of 2012 and this Policy, okbeth is the personal information controller responsible for the personal data collected through the Platform. okbeth determines the purposes and means of processing personal data as described in this Policy.

2.2 Where okbeth engages third-party service providers — such as payment processors, KYC verification services, game providers, or cloud infrastructure operators — to process personal data on its behalf, those parties act as personal information processors under the direction of okbeth and are bound by contractual data processing obligations consistent with this Policy.

2.3 Contact details for data-related inquiries and the exercise of data subject rights are provided in Section 16 of this Policy.

okbeth collects the following categories of personal data from Users of the Platform:

3.1 Sensitive Personal Information. KYC documents submitted to okbeth may contain sensitive personal information as defined under the Data Privacy Act of 2012, including government-issued identification numbers. okbeth processes such information solely for identity verification purposes and applies enhanced security measures to its storage and handling.

okbeth collects personal data through the following means:

• Direct submission: Information you provide when creating an account, completing KYC, making deposits or withdrawal requests, contacting support, or participating in promotions;
• Automated collection: Technical and device data collected automatically through the Platform's server logs, session management systems, and analytics infrastructure when you access and use the Platform;
• Cookies and similar technologies: As described in Section 10 of this Policy;
• Payment processors: Transaction confirmation data and reference numbers provided by GCash, Maya, BPI, BDO, UnionBank, and other integrated payment channels in connection with deposits and withdrawals you initiate;
• Third-party verification services: Identity and document verification results returned by authorized KYC service providers engaged by okbeth to process submitted identity documents;
• Fraud prevention systems: Risk signals and device fingerprint data generated by okbeth's fraud detection infrastructure in connection with login events, payment activities, and account behavior patterns.

okbeth processes personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its implementing rules:

• Consent: Where you have provided express consent, such as opting in to receive promotional SMS communications or agreeing to this Policy at registration;
• Performance of a contract: Processing necessary to create and manage your okbeth account, process deposits and withdrawals, record game activity, and deliver the Services you have requested;
• Compliance with a legal obligation: Processing required to fulfill okbeth's obligations under Philippine anti-money laundering legislation, PAGCOR reporting requirements, and other applicable regulatory mandates — including KYC and transaction monitoring;
• Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and improvement of the Services, where such interests are not overridden by your fundamental rights and freedoms.

okbeth uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your okbeth account, including authentication and session management;
• Service delivery: Providing access to the game lobby, processing bets and payouts, delivering sports betting markets, and operating live casino services;
• Identity verification: Conducting KYC checks in compliance with applicable anti-money laundering obligations and age verification requirements under PAGCOR regulations;
• Payment processing: Initiating, recording, and reconciling deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, USDT, and Coins.ph;
• Fraud and risk management: Detecting and preventing fraudulent activity, unauthorized account access, multi-accounting, and money laundering;
• Regulatory compliance: Meeting transaction reporting, record-keeping, and information disclosure obligations imposed by applicable Philippine law and regulatory bodies;
• Customer support: Responding to queries, resolving disputes, and managing complaints submitted by Players;
• Responsible gaming: Monitoring account activity for indicators of problem gambling behavior and administering self-exclusion, deposit limit, and session control requests;
• Communications: Sending transactional SMS notifications (e.g., OTP codes, deposit confirmations, withdrawal status updates) and, where consent has been given, promotional communications;
• Platform improvement: Analyzing aggregated usage data to identify technical issues, improve the user experience, and inform product development decisions.

7.1 okbeth does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes under any circumstances.

7.2 okbeth may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: GCash (GXI), Maya (Voyager Innovations), BPI, BDO Unibank, UnionBank, and other payment channels integrated into the Platform, to the extent necessary to process financial transactions you initiate;
• KYC and identity verification providers: Third-party verification services engaged by okbeth to authenticate identity documents submitted by Users during the KYC process;
• Game providers: JILI, Pragmatic Play, PG Soft, Evolution Gaming, and other content providers whose games are hosted on the okbeth Platform — limited to the session and game data necessary to deliver and record gameplay;
• Cloud and infrastructure providers: Data hosting and server infrastructure providers engaged by okbeth to operate the Platform, bound by contractual data processing obligations;
• Fraud prevention and security services: Third-party risk management and cybersecurity services used to protect the Platform and User accounts;
• Regulatory and law enforcement authorities: Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement bodies where disclosure is required by law, court order, or legitimate regulatory demand;
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by okbeth under strict confidentiality obligations.

7.3 okbeth requires all third-party processors with access to personal data to adhere to data handling standards consistent with this Policy and applicable Philippine data protection law.

8.1 Certain third-party service providers engaged by okbeth — including cloud infrastructure operators and game platform providers — may process or store data in jurisdictions outside the Republic of the Philippines.

8.2 Where personal data is transferred outside the Philippines, okbeth implements appropriate safeguards to ensure that the receiving party provides an adequate level of protection for the personal data, consistent with the requirements of the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements with standard data protection clauses or assessments of the recipient jurisdiction's data protection framework.

8.3 By using the okbeth Platform, you acknowledge and consent to the transfer of your personal data to third-party processors in other jurisdictions where necessary for the delivery of the Services, subject to the safeguards described in this section.

9.1 okbeth retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of the account's active status, plus a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements;
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or for the duration required by PAGCOR's record retention regulations, whichever is longer;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction in compliance with Philippine AML legislation;
• Game activity logs: Retained for a minimum of three (3) years from the date of the session for dispute resolution and audit purposes;
• Support communications: Retained for a minimum of two (2) years from the date of the last interaction;
• Marketing data: Retained until consent is withdrawn, after which marketing identifiers are deleted within 30 days.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or irreversibly anonymized in accordance with okbeth's data lifecycle procedures.

10.1 The okbeth Platform uses cookies and similar technologies — including session tokens, local storage, and device fingerprinting — to enable core Platform functionality, maintain your login session, detect fraud, and analyze usage patterns. The following cookie categories are used on the Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without rendering the Platform inoperable;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations;
• Analytical cookies: Used to collect aggregated data on how Users interact with the Platform, enabling okbeth to identify technical issues and improve the user experience. This data is processed in aggregate and is not used to identify individual Users;
• Security and fraud prevention cookies: Used to detect anomalous or suspicious activity, including unauthorized login attempts and multi-accounting behavior.

10.2 okbeth does not use third-party advertising or cross-site tracking cookies. No User browsing data is shared with advertising networks through the Platform's cookie infrastructure.

10.3 You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will impair core Platform functionality, including the ability to log in and maintain a session.

11.1 okbeth implements technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Users and the Platform;
• At-rest encryption for stored personal and financial data;
• One-way cryptographic hashing of User passwords — passwords are never stored in readable form;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for administrative Platform access;
• Intrusion detection systems and continuous server monitoring;
• Regular security vulnerability assessments and penetration testing;
• Physical security controls for data center infrastructure.

11.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected Users, okbeth will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected Users without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

11.3 While okbeth employs robust security measures, no data transmission over the internet or data storage system is absolutely secure. Users are advised to maintain the security of their account credentials and to report any suspected unauthorized access to okbeth support immediately.

12.1 The okbeth Platform is strictly for adults aged 21 years and above, in compliance with PAGCOR's age requirements for online gambling in the Republic of the Philippines. okbeth does not knowingly collect personal data from individuals under the age of 21.

12.2 If okbeth identifies that personal data has been submitted by an individual under the age of 21, the associated account will be immediately suspended and the personal data will be deleted in accordance with our data lifecycle procedures. Any balance associated with a confirmed underage account will be treated in accordance with the okbeth Terms and Conditions.

12.3 Parents and guardians who believe that a minor may have registered an okbeth account are encouraged to contact okbeth support immediately to report the matter.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by okbeth:

13.1 Exercising Your Rights. To exercise any of the rights described above, please submit a written request to okbeth via email at [email protected] or via the live chat support function on the Platform. okbeth will acknowledge receipt of your request within five (5) business days and will endeavor to respond substantively within fifteen (15) business days. Where a request requires additional time to fulfill, okbeth will notify you of the extended timeline and the reason for the delay.

13.2 okbeth may require you to verify your identity before processing a data subject rights request, to ensure that data is not disclosed to or modified at the instruction of unauthorized parties.

14.1 If you have a concern about how okbeth handles your personal data and are not satisfied with okbeth's response to your complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines — the independent regulatory authority responsible for overseeing compliance with the Data Privacy Act of 2012.

14.2 Before escalating to the NPC, okbeth encourages you to first attempt to resolve the matter directly with the okbeth support team. The majority of data-related concerns can be resolved promptly through direct engagement with our team.

14.3 Information on how to file a complaint with the NPC, including contact details and submission procedures, is available through the official NPC channels. okbeth does not control or operate NPC complaint channels and cannot provide direct links to external government websites on this page.

15.1 okbeth reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be notified to registered Users via SMS or in-platform notification prior to the effective date of the change. Minor amendments — such as clarifications that do not change the substance of the Policy — may be made without prior notice.

15.2 The current version of this Policy will always be accessible on this page, together with its effective date. Your continued use of the okbeth Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

15.3 We recommend reviewing this Policy periodically to stay informed about how okbeth manages your personal data. Significant changes will be clearly communicated and easy to identify through the "Last Updated" date displayed at the top of this document.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by okbeth, please contact us through the following channels:

okbeth aims to acknowledge all privacy-related inquiries within five (5) business days and to provide a substantive response within fifteen (15) business days. Complex requests involving historical data retrieval or multi-system audit may take longer, in which case okbeth will communicate the expected timeline to you directly.