okbeat Privacy Policy

1. Introduction

okbeat ("okbeat," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who use the okbeat online casino platform ("Platform"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of personal information in connection with your use of the Platform available at okbeat.app.

This Policy applies to all users of the Platform, including registered players, visitors, and any other individuals whose personal data we process in connection with our services. It should be read together with our Terms & Conditions, which govern your use of the Platform.

okbeat processes personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). We take our obligations as a personal information controller seriously and are committed to transparency in how we handle your data.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, okbeat acts as the personal information controller in respect of the personal data collected through the Platform. This means okbeat determines the purposes and means of processing your personal information.

Where okbeat engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or analytics platforms), those parties act as personal information processors and are bound by data processing agreements that require them to handle your data in accordance with applicable law and this Policy.

3. Data We Collect

okbeat collects the following categories of personal data from players and platform users:

3.1 Identity and Contact Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Gender
• Nationality and country of residence
• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents
• Selfie or facial image for identity matching purposes
• Proof of payment method ownership

3.3 Financial Data

• GCash or PayMaya/Maya account reference (masked)
• Bank account details (masked) for bank transfer transactions
• Debit card details (masked, last four digits only)
• Transaction history, including deposits, withdrawals, and wager records

3.4 Gaming and Behavioural Data

• Game play history, session duration, and wagering activity
• Bonus and promotion usage
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support interaction records

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Unique device identifiers
• Log data, including access times and pages visited
• Cookie and tracking technology data (see Section 8)

4. How We Collect Your Data

okbeat collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access or use the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from anti-fraud service providers; payment verification data from payment processors.

5. How We Use Your Data

okbeat uses your personal data for the following purposes:

6. Legal Basis for Processing

okbeat processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and PAGCOR regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

okbeat does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements.
• Payment processors: GCash, PayMaya/Maya, and banking partners, to process deposits and withdrawals.
• Anti-fraud and risk management providers: To detect and prevent fraudulent activity on the Platform.
• Game content providers: Game suppliers may receive anonymised session data for technical and audit purposes.
• IT and cloud infrastructure providers: Hosting and data storage providers operating under data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable Philippine law, court order, or regulatory directive, including PAGCOR and the Anti-Money Laundering Council (AMLC).
• Professional advisers: Legal, accounting, and auditing firms, subject to professional confidentiality obligations.

All third-party processors are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with okbeat's instructions and applicable law.

8. Cookies and Tracking Technologies

okbeat uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the Platform.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality, including login sessions and security features.
• Performance and analytics cookies: Help us understand how players interact with the Platform so we can improve it. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
• Marketing cookies: Used only with your consent to deliver relevant promotional content. You may opt out at any time.

8.2 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the Platform. For more information on managing cookies in your specific browser, refer to your browser's help documentation.

9. Data Retention

okbeat retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable Philippine law.
• KYC documents: Retained for the duration of the account relationship and for five (5) years after account closure.
• Gaming and behavioural data: Retained for the duration of the account and for up to two (2) years following account closure for responsible gaming and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.
• Technical and log data: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with okbeat's data disposal procedures.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by okbeat:

• Right to be informed: The right to be notified of how your personal data is collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data okbeat holds about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account details directly through your account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 15. okbeat will respond to verified requests within thirty (30) days, or within such extended period as permitted by applicable law.

11. Data Security

okbeat implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments, vulnerability scanning, and penetration testing
• Multi-factor authentication for administrative access to data systems
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okbeat will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the DPA and NPC regulations.

While okbeat takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying okbeat immediately if you suspect any unauthorised access to your account.

12. Children's Privacy

The okbeat Platform is strictly intended for individuals aged 21 years and above. okbeat does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If okbeat becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, the data will be deleted, and any associated funds will be returned in accordance with our Terms & Conditions. If you believe a minor has registered an account on the Platform, please contact us immediately using the details in Section 15.

13. Third-Party Links

The Platform may contain references to third-party services, such as payment providers. okbeat is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform.

This Policy applies solely to personal data collected and processed by okbeat through the Platform. It does not apply to data collected by third parties operating their own platforms or services.

14. Changes to This Policy

okbeat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this page. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of the revised terms. We encourage you to review this Policy periodically to stay informed about how okbeat protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by okbeat, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing okbeat's compliance with the Philippine Data Privacy Act of 2012 and can assist you in exercising your data rights.

You may reach the okbeat Data Protection Officer at the following email address (plain text — not a clickable link):

DPO Email: [email protected]

General Support: [email protected]

okbeat aims to acknowledge all privacy-related enquiries within 5 business days and to resolve requests within 30 days. For unresolved complaints, you may escalate your concern to the National Privacy Commission of the Philippines.