OkeBet 2 Privacy Policy — Your Data, Your Rights, Our Obligations

OkeBet 2 is the data controller for all personal information collected through the okebet2.click platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable PAGCOR regulations.

Our designated Data Protection Officer (DPO) can be reached at the contact details listed in the Contact section of this Policy. The DPO oversees all data privacy matters at OkeBet 2 and is the point of contact for data subject rights requests and regulatory inquiries from the National Privacy Commission (NPC).

OkeBet 2 collects the following categories of personal information from Philippine players. We collect only what is necessary for the purposes described in this Policy.

• Identity information: Full legal name, date of birth, nationality, and a copy of a valid Philippine government-issued ID (e.g., PhilSys National ID, driver's licence, passport, UMID, or voter's ID). Required for PAGCOR KYC compliance.
• Contact information: Registered mobile number, email address, and home address. Used for account management, transaction notifications, and regulatory correspondence.
• Financial information: The name and account number associated with your GCash, Maya, or bank account registered for deposits and withdrawals. OkeBet 2 does not store full card numbers — card payments are processed by a PCI-DSS compliant third-party processor, and only a masked reference is retained.
• Transaction records: Full deposit and withdrawal history, bet placement records, game results, and bonus transaction logs. Required for PAGCOR reporting and anti-money-laundering compliance under the Anti-Money Laundering Act (AMLA) of the Philippines.
• Device and technical data: IP address, device identifier, operating system, browser type, and connection type. Collected automatically to protect account security and detect suspicious access.
• Usage data: Pages visited, games played, session start and end times, and feature interactions. Used to improve platform performance and identify responsible gaming concerns.
• Communications data: Records of your support chat conversations, emails, and any other correspondence with OkeBet 2. Retained for quality assurance and dispute resolution purposes.

OkeBet 2 collects personal information through the following means:

• Direct submission: Information you enter during account registration, identity verification, payment setup, or when contacting support.
• Automated collection: Technical and usage data collected automatically when you browse or use the OkeBet 2 platform, via cookies, session logs, and device fingerprinting tools.
• Payment partners: Transaction confirmation data from GCash, Maya, InstaPay, PESONet, and card payment processors. These partners share only the data necessary to confirm and reconcile your transaction.
• Identity verification providers: OkeBet 2 uses a PAGCOR-approved identity verification service to validate government ID documents submitted during KYC. The verification result (pass/fail) and a reference identifier are stored by OkeBet 2; the full ID image is stored by the verification provider subject to their own data retention policies.
• Publicly available sources: In compliance with AMLA obligations, OkeBet 2 may cross-check player identity against publicly available sanctions lists, PEP (Politically Exposed Persons) databases, and adverse media sources as required for AML risk assessments.

OkeBet 2 uses your personal data for the following specific purposes, each grounded in a valid legal basis under RA 10173:

• Account creation and management — to register your account, verify your identity, maintain your profile, and provide you with access to all OkeBet 2 features. Legal basis: contract performance.
• Payment processing — to process deposits and withdrawals to your registered GCash, Maya, or bank account, and to reconcile transaction records. Legal basis: contract performance.
• Regulatory and AML compliance — to comply with PAGCOR license requirements, AMLA transaction monitoring obligations, and NPC data privacy requirements. Legal basis: legal obligation.
• Responsible gaming — to monitor play patterns that may indicate problem gambling behaviours and to enforce the deposit, loss, and session limits you set. Legal basis: legal obligation and legitimate interest.
• Fraud prevention and platform security — to detect and prevent unauthorised account access, collusion, bonus abuse, and other prohibited activities. Legal basis: legitimate interest.
• Customer support — to respond to your inquiries, resolve disputes, and improve our support quality through interaction reviews. Legal basis: contract performance and legitimate interest.
• Platform improvement — to analyse aggregated usage data to improve game performance, interface design, and payment flows. Individual data is anonymised before being used for product analytics. Legal basis: legitimate interest.
• Marketing communications — to send promotional emails and SMS about OkeBet 2 bonuses, tournaments, and new games, but only to players who have explicitly opted in. You can withdraw consent at any time via your account notification settings or by emailing support@okebet2.click. Legal basis: consent.

OkeBet 2 does not sell your personal information. We share data only with parties that are directly necessary for operating the platform and meeting our legal obligations. All third-party data processors engaged by OkeBet 2 are bound by data processing agreements that require them to protect your data in accordance with RA 10173 and comparable international standards.

• Payment processors and e-wallet providers — GCash, Maya, InstaPay-member banks, PESONet, and card payment processors. Data shared: name, account reference, transaction amount, transaction reference.
• Identity verification providers — PAGCOR-approved KYC services for government ID validation. Data shared: uploaded ID image and personal details for verification matching.
• PAGCOR — as required under our license. OkeBet 2 reports transaction data and player information to PAGCOR as mandated by regulation.
• AMLC (Anti-Money Laundering Council) — suspicious transaction reports and covered transaction reports as required by the Anti-Money Laundering Act of the Philippines.
• Law enforcement and courts — where legally compelled by a valid Philippine court order, warrant, or subpoena.
• Cloud infrastructure providers — OkeBet 2 operates on enterprise cloud infrastructure. Servers hosting player data are located within the Philippines or in jurisdictions with adequate data protection frameworks. Infrastructure providers are engaged under strict data processing agreements.

OkeBet 2 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by Philippine law. The following retention schedules apply:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and product improvement purposes.

OkeBet 2 implements technical and organisational security measures appropriate to the risk level of the data we process. Our core security controls include:

• Encryption: All data transmitted between your device and OkeBet 2 servers is encrypted using TLS 1.2 or higher. Sensitive stored data including identity documents and financial records is encrypted at rest using AES-256.
• Access control: Internal access to player personal data is restricted on a strict need-to-know basis. All internal access events are logged and reviewed. Support staff can access only the account information necessary to resolve your specific inquiry.
• Two-factor authentication: Available for all OkeBet 2 player accounts and mandatory for all internal staff accounts with data access.
• Regular security audits: OkeBet 2 undergoes regular external security assessments including penetration testing and vulnerability scanning.
• Incident response: A documented data breach response procedure is in place. In the event of a confirmed breach affecting your personal data, OkeBet 2 will notify you and the National Privacy Commission within 72 hours.

OkeBet 2 uses cookies and similar technologies to operate the platform, remember your session, and understand how the platform is used. Cookies are small data files stored on your browser or device. Here is a breakdown of the cookie types we use:

You can manage your cookie preferences through your browser settings. Note that disabling essential or security cookies will prevent the OkeBet 2 platform from functioning correctly and may prevent you from logging in.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by OkeBet 2:

To exercise any of these rights, contact our Data Protection Officer at support@okebet2.click, subject line "Data Subject Rights Request." We will respond within 15 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

OkeBet 2 is strictly for players aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that an account has been registered by or on behalf of a person under 21, the account will be immediately closed, any balance forfeited, and personal data deleted in accordance with applicable law.

If you believe a minor has registered an account on OkeBet 2, please contact us immediately at support@okebet2.click. OkeBet 2 takes age compliance seriously as part of both our PAGCOR obligations and our commitment to responsible gaming.

OkeBet 2 primarily processes and stores data within the Philippines. In limited circumstances — for example, where a third-party technology provider (such as a cloud platform or identity verification service) operates infrastructure outside the Philippines — your data may be transferred to another jurisdiction.

When cross-border transfers occur, OkeBet 2 ensures that the receiving country provides adequate levels of data protection comparable to RA 10173, or that appropriate contractual safeguards are in place. We will not transfer your data to any jurisdiction without ensuring it receives equivalent protection to that which applies under Philippine law.

OkeBet 2 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or PAGCOR regulatory updates. Material changes will be communicated to registered players via email or through a prominent notice on the OkeBet 2 platform at least seven (7) days before the change takes effect.

The effective date at the top of this page always reflects the most recent revision. Continued use of the OkeBet 2 platform after a Policy update takes effect constitutes acceptance of the revised Policy. If you do not agree with a change, you may request account closure before the effective date.

For any questions about this Privacy Policy, to exercise your data subject rights, or to report a privacy concern, contact the OkeBet 2 Data Protection Officer:

• Email: support@okebet2.click (subject line: "ATTN: Data Privacy Officer")
• Live Chat: Available 24/7 via the OkeBet 2 platform — ask to be connected to a privacy-related inquiry
• Postal address: OkeBet 2 Data Protection Officer, Bonifacio Global City, Metro Manila, Philippines

We will acknowledge your request within 2 business days and provide a substantive response within 15 business days. For complex requests, we may require up to 30 business days and will notify you of any extension.

If you are not satisfied with how OkeBet 2 handles your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines.