okrbet Privacy Policy

For the purposes of this Privacy Policy, the following definitions apply:

• "okrbet," "we," "us," or "our" refers to the okrbet platform, its operating entity licensed by PAGCOR, and accessible at okrbet.net.
• "Personal Data" means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual. This definition follows Section 3(g) of the Philippine Data Privacy Act (RA 10173).
• "Sensitive Personal Information" means personal data about a player's race, ethnicity, marital status, age, color, and religious, philosophical or political affiliations; health, education, genetic or sexual life; court proceedings and associated offenses; and government-issued identifiers such as social security numbers and tax identification numbers.
• "Data Subject" means any registered player or site visitor whose personal data is collected, stored, or processed by okrbet.
• "Processing" means any operation or set of operations performed upon personal data, including but not limited to collection, recording, organization, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "NPC" means the National Privacy Commission of the Philippines, the regulatory body overseeing compliance with RA 10173.
• "PAGCOR" means the Philippine Amusement and Gaming Corporation, the regulatory authority overseeing okrbet's gaming operations.
• "KYC" means Know Your Customer — the identity verification process required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA).
• "DPO" means okrbet's designated Data Protection Officer, responsible for overseeing compliance with RA 10173.

okrbet is the data controller for personal data collected through the okrbet.net platform. As the data controller, okrbet determines the purposes and means by which your personal data is processed, in compliance with the Philippine Data Privacy Act (Republic Act No. 10173) and its Implementing Rules and Regulations.

okrbet operates under a valid PAGCOR license, and our data handling practices are additionally governed by PAGCOR's data management standards and the requirements of the Anti-Money Laundering Council (AMLC) of the Philippines.

okrbet collects personal data only to the extent necessary to provide our gaming services, fulfill our regulatory obligations, and maintain a safe and compliant platform. The categories of personal data we collect are as follows:

okrbet does not intentionally collect sensitive personal information beyond what is required for KYC and age verification. We do not collect data about your religious beliefs, political affiliations, or health status unless you voluntarily provide such information in the context of a responsible gaming assessment.

okrbet collects personal data through the following methods:

• Direct collection: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions, you directly provide us with personal data.
• Automated collection: When you visit or use the okrbet platform, we automatically collect technical data such as your IP address, device identifiers, browser type, and session activity through cookies, log files, and similar tracking technologies. See Section 8 for full details on cookies.
• Payment provider data: When you transact via GCash, Maya, BPI, BDO, or other supported payment channels, okrbet receives transaction confirmation data including your registered mobile number or account reference, the transaction amount, and timestamp. okrbet does not receive or store your full wallet PIN, banking password, or card CVV.
• KYC verification partners: okrbet works with regulated third-party identity verification services to validate government-issued IDs. These partners process your KYC documents on our behalf under strict data processing agreements.
• Public sources: In limited circumstances related to fraud prevention or AML compliance, okrbet may cross-reference publicly available information or data from PAGCOR-maintained exclusion registries.

Under the Philippine Data Privacy Act (RA 10173), okrbet processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary for the performance of the service agreement between you and okrbet — i.e., to provide you with access to our gaming platform, process your deposits and withdrawals, and manage your account.
• Legal obligation: okrbet is required by PAGCOR regulations, the Anti-Money Laundering Act (RA 9160, as amended), and the Data Privacy Act itself to collect and retain certain categories of personal data, including KYC documents and transaction records.
• Legitimate interests: okrbet processes certain technical and gaming data on the basis of our legitimate interests in operating a secure, fraud-free, and compliant gaming platform. These interests do not override your fundamental privacy rights.
• Consent: Where okrbet processes your data for marketing communications or optional profiling, we do so only on the basis of your explicit, informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

okrbet uses your personal data exclusively for the following purposes:

• Account management: Creating and maintaining your okrbet account, verifying your identity, processing your login credentials, and communicating account-related information.
• Payment processing: Facilitating deposits via GCash, Maya, BPI, BDO, and other supported channels; processing withdrawal requests; and maintaining transaction records as required by PAGCOR and AMLC.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Philippine Data Privacy Act, including filing of required reports with regulatory authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify signs of problematic gambling, enforcing self-exclusion requests, and complying with PAGCOR's responsible gaming requirements.
• Customer support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
• Platform improvement: Using aggregated and anonymized data to analyze platform performance, improve game offerings, and optimize the user experience.
• Marketing (consent-based only): Sending you promotional offers, bonus notifications, and platform updates via email or SMS, but only where you have given explicit consent to receive such communications.

okrbet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited circumstances:

• PAGCOR and regulatory authorities: okrbet is required to submit player data, transaction records, and gaming activity reports to PAGCOR and, where applicable, the AMLC, as conditions of our operating license and under Philippine law.
• Payment processors: To facilitate deposits and withdrawals, okrbet shares necessary transaction data with GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment providers. These entities are bound by their own data protection obligations under Philippine financial regulations.
• KYC verification providers: okrbet engages regulated identity verification partners to process and validate your KYC documents. These partners act as data processors under written agreements that bind them to okrbet's privacy standards and RA 10173 requirements.
• Game software providers: Third-party game studios that supply games to the okrbet platform may receive anonymized session data for game performance and RTP validation purposes. They do not receive your personal identity or financial data.
• Law enforcement: okrbet may disclose personal data to Philippine law enforcement agencies, courts, or other government bodies if required to do so by valid legal process, court order, or applicable law.
• Professional advisors: okrbet's legal counsel, auditors, and compliance advisors may access personal data on a strictly need-to-know basis, under professional confidentiality obligations.

All third parties with whom okrbet shares personal data are required to process that data in accordance with RA 10173 and, where applicable, equivalent data protection standards. okrbet remains accountable for the data practices of its processors.

okrbet uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may impair your ability to log in or use core platform features. okrbet does not use third-party advertising network cookies or cross-site tracking technologies.

okrbet retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law and PAGCOR regulations. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC requirements.
• Gaming history: Retained for three (3) years from the date of each gaming session, or longer where required for dispute resolution or regulatory reporting purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to an ongoing dispute or investigation.
• Marketing consent records: Retained for three (3) years from the date of consent withdrawal, to demonstrate compliance in the event of an NPC audit.
• Technical and security logs: Retained for twelve (12) months, after which they are securely deleted or anonymized.

Upon expiry of the applicable retention period, okrbet will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification. Where anonymization is used, the resulting data may be retained indefinitely for statistical purposes without further obligation under RA 10173.

okrbet implements a multi-layered security framework to protect your personal data from unauthorized access, accidental loss, alteration, or disclosure. Our technical and organizational security measures include:

• Encryption in transit: All data transmitted between your device and okrbet servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at rest: Stored personal data, including KYC documents and financial records, is encrypted using AES-256 encryption on secure, access-controlled servers.
• Access controls: Personal data is accessible only to okrbet staff and authorized processors who require it to fulfill their specific job responsibilities. All access is logged and subject to regular audit.
• Two-factor authentication: okrbet's internal systems require multi-factor authentication for staff accessing personal data. We also offer 2FA to players for account security.
• Penetration testing: okrbet engages independent security firms to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Secure payment handling: okrbet does not store complete payment credential sets. GCash and Maya transactions are processed through the respective provider's secure APIs, and okrbet retains only transaction reference numbers and confirmation data.
• Employee training: All okrbet staff with access to personal data undergo mandatory data privacy training in compliance with NPC requirements.

Under the Philippine Data Privacy Act (RA 10173), you have the following rights regarding your personal data held by okrbet:

• Right to be informed: You have the right to be notified of the manner in which your personal data is being or will be processed, including the purpose and legal basis for processing — which this Privacy Policy fulfills.
• Right of access: You may request a copy of the personal data okrbet holds about you, including information on how it is being used. We will respond to access requests within fifteen (15) business days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details, you can update most information directly through your account settings.
• Right to erasure: In certain circumstances — particularly where data is no longer necessary for the purpose it was collected, or where you withdraw consent — you may request deletion of your personal data. This right is subject to our legal retention obligations under PAGCOR and AMLC regulations, which may require us to retain certain data regardless of your request.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data on the basis of legitimate interests or for direct marketing purposes. Objections to marketing communications will be honored immediately.
• Right to file a complaint: If you believe okrbet has violated your data privacy rights, you may file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

To exercise any of the above rights, please submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Rights Request — [Your Account ID]." We may require you to verify your identity before processing your request.

The okrbet platform is strictly intended for individuals who are 21 years of age or older, as required by PAGCOR regulations and applicable Philippine gambling laws. okrbet does not knowingly collect personal data from individuals under the age of 21.

Our registration process includes date-of-birth verification, and all accounts are subject to KYC verification that confirms the account holder meets the minimum age requirement. Any account found to belong to a person under 21 will be immediately suspended, all associated balances will be frozen, and the matter will be referred to PAGCOR as required by our licensing obligations.

If you are a parent or guardian and have reason to believe that a minor has registered on the okrbet platform, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

okrbet primarily processes and stores personal data within the Philippines. However, certain service providers and game software partners may process data in other jurisdictions as part of delivering their services to okrbet.

Where personal data is transferred outside the Philippines, okrbet ensures that such transfers comply with the cross-border data flow provisions of RA 10173 and NPC regulations, specifically by:

• Confirming that the receiving country provides an adequate level of data protection, as determined by the NPC; or
• Entering into binding data transfer agreements with the receiving party that incorporate data protection standards equivalent to RA 10173; or
• Obtaining your explicit consent to the transfer, where required under applicable law.

okrbet does not transfer your KYC documents, financial data, or sensitive personal information to jurisdictions that do not provide adequate data protection safeguards. If you have questions about specific cross-border transfers affecting your data, please contact our DPO.

okrbet may send you promotional communications — including bonus offers, new game announcements, and platform updates — via email or SMS. We will only send marketing communications where you have given explicit consent during account registration or at a later date through your account communication preferences.

You may withdraw your consent to receive marketing communications at any time through any of the following methods:

• Updating your communication preferences in your okrbet account settings.
• Clicking the "Unsubscribe" link included in any marketing email from okrbet.
• Replying "STOP" to any promotional SMS from okrbet.
• Contacting our support team at [email protected] with the subject line "Unsubscribe — [Your Account ID]."

Withdrawal of marketing consent will be processed within forty-eight (48) hours. Please note that transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and cannot be disabled while your account remains active, as they are essential to the safe operation of your account.

In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, okrbet will take the following actions in accordance with NPC Circular 16-03 and RA 10173:

• Immediate containment: Upon discovery of a breach, okrbet's security team will immediately act to contain the incident, prevent further unauthorized access, and preserve evidence for investigation.
• NPC notification: okrbet will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, providing details of the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to address the breach.
• Player notification: Where a breach is likely to result in a high risk to your rights and freedoms, okrbet will notify affected players directly — via your registered email address or mobile number — without undue delay, describing what happened, what data was affected, and what steps you should take to protect yourself.
• Post-incident review: Following containment and notification, okrbet will conduct a thorough root-cause analysis and implement remedial measures to prevent recurrence, the results of which will be documented and made available to the NPC upon request.

okrbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine laws and regulations, PAGCOR requirements, or NPC guidance.

When material changes are made to this Privacy Policy, okrbet will:

• Post the updated Privacy Policy on this page with a revised "Effective Date" at the top.
• Send a notification to your registered email address at least seven (7) days before the changes take effect, where the changes materially affect your rights or our data processing practices.
• Where required by RA 10173 or NPC regulations, obtain your renewed consent before processing your data under the new terms.

Your continued use of the okrbet platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any changes, you may close your account by contacting our support team, subject to the data retention obligations described in Section 9.

We encourage you to review this Privacy Policy periodically to stay informed about how okrbet protects your personal data. The version history and effective dates of previous policies are available upon request from our DPO.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way okrbet handles your personal data, please do not hesitate to reach out to us. We are committed to resolving all data privacy inquiries promptly and transparently.

• General support and data rights requests: [email protected]
• Responsible gaming and self-exclusion concerns: [email protected]
• Live chat support: Available on the okrbet platform, 8 AM – 12 MN PHT, daily
• Response time target: We aim to respond to all data privacy inquiries within five (5) business days and will acknowledge receipt of formal rights requests within two (2) business days.

If you are not satisfied with okrbet's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which can be reached through the official NPC website and channels.