oakbet Privacy Policy

Who We Are

oakbet ("we," "us," or "our") operates the online gaming platform accessible at oakbet.org, providing casino games, slots, bingo, and related entertainment services to players in the Philippines. For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, oakbet acts as the Personal Information Controller in respect of the personal data of its registered players and website visitors.

This Privacy Policy applies to all personal data collected through the oakbet website, mobile-optimized platform, customer support channels, and any other touchpoints through which you interact with oakbet. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

Personal Data We Collect

oakbet collects only the personal data that is necessary to provide our services, comply with our legal and regulatory obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify you are 21 years of age or older)
• Residential address in the Philippines (including barangay, city/municipality, and province)
• Email address and mobile phone number
• Government-issued identification number (e.g., Philippine passport, SSS, UMID, or driver's license number)

2.2 Financial Data

• GCash or Maya account number (for deposit and withdrawal processing)
• Philippine bank account details (for bank transfer transactions)
• Transaction history, including deposit amounts, withdrawal amounts, and dates
• Debit card details where applicable (card number is tokenized and never stored in full)

2.3 Gaming & Account Data

• Username and encrypted password
• Gaming history, including games played, bets placed, wins, and losses
• Bonus and promotion usage history
• Responsible gaming settings and self-exclusion status
• Customer support interaction records

2.4 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Pages visited, time spent on the platform, and click-stream data
• Login timestamps and session duration
• Cookies and similar tracking technologies (see Section 7)

How We Collect Your Data

oakbet collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the oakbet platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from payment processors; and publicly available information used to verify your identity or detect fraudulent activity.

Why We Use Your Personal Data

oakbet uses your personal data for the following purposes:

Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, oakbet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and provide gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and regulatory reporting to PAGCOR and other authorities.
• Legitimate interests: Processing necessary for oakbet's legitimate business interests, including fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

oakbet does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

6.1 Service Providers

We share data with carefully selected third-party service providers who assist us in operating the oakbet platform, including payment processors (GCash, Maya, Philippine banks), KYC and identity verification providers, fraud detection and cybersecurity services, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory and Law Enforcement Authorities

oakbet may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government authorities where required by law, court order, or regulatory directive, or where necessary to prevent or detect fraud, money laundering, or other criminal activity.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of oakbet's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

6.4 With Your Consent

We may share your data with third parties in other circumstances where you have given your explicit prior consent to such sharing.

Cookies & Tracking Technologies

oakbet uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and detect fraudulent activity. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function. These cannot be disabled as they are required for login sessions, security, and core functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits.
• Analytics cookies: Collect anonymized data about how players use the platform to help us improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the oakbet platform. oakbet does not use third-party advertising or behavioral tracking cookies.

Data Retention

oakbet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure, in accordance with AML and regulatory requirements.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the transaction, as required by Philippine AML regulations.
• Gaming history: Retained for 3 years from the date of each gaming session, or longer where required by law or ongoing dispute resolution.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter for compliance purposes.
• Technical and usage data: Retained for up to 13 months in identifiable form, after which it is anonymized or deleted.

When personal data is no longer required, oakbet securely deletes or anonymizes it in accordance with industry best practices.

Data Security

oakbet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the oakbet platform
• AES-256 encryption for sensitive data stored in our databases
• Multi-factor authentication (MFA) for all administrative access to systems holding personal data
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Role-based access controls ensuring staff can only access data necessary for their specific job function
• 24/7 automated monitoring for suspicious access patterns and potential data breaches
• Secure, geographically redundant data storage with regular encrypted backups
• Annual data protection training for all staff who handle personal data

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, oakbet will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by oakbet:

• Right to be informed: The right to be told what personal data we hold about you and how we use it — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data we hold about you, free of charge, within 30 days of your request.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You can update most of your account information directly through your oakbet account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to oakbet's overriding legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to all verified requests within 30 days. We may need to verify your identity before processing your request.

Children's Privacy

The oakbet platform is strictly intended for adults aged 21 years and older. oakbet does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately suspend the associated account, delete the personal data, and report the matter to the relevant authorities where required by law.

If you are a parent or guardian and believe that a minor has registered on the oakbet platform, please contact us immediately at the details provided in Section 14 so that we can take prompt action.

Third-Party Links

The oakbet platform may contain links to third-party websites or services for informational purposes. oakbet is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to data collected by oakbet through the oakbet platform and associated channels.

Changes to This Privacy Policy

oakbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. The most current version of this Privacy Policy will always be available on the oakbet platform, with the effective date clearly indicated at the top of the document.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide at least 14 days' advance notice via the email address registered to your account or through a prominent notice on the platform before the changes take effect.

Your continued use of the oakbet platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any changes, you may close your account and request deletion of your personal data in accordance with Section 10.

Contact Us & Data Protection Officer

oakbet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through the following channels:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available within the oakbet platform after logging in to your account

We aim to acknowledge all privacy-related inquiries within 2 business days and to provide a substantive response within 30 days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about how to contact the NPC is available on the NPC's official website.