okbdt Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1 Introduction and Scope

okbdt is committed to protecting the privacy and personal data of its registered players. This Privacy Policy has been prepared in accordance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, and sets out how okbdt collects, processes, stores, and protects personal data in connection with the operation of its online casino and sports betting platform.

This Policy applies to all individuals who interact with the okbdt platform, including registered players, individuals who browse the okbdt website without registering, and former players whose account data is retained in accordance with legal obligations. It covers all personal data collected through the okbdt website, customer support channels, and payment processing workflows.

This Privacy Policy should be read in conjunction with the okbdt Terms & Conditions, which govern the overall relationship between okbdt and its players. In the event of any conflict between the Terms & Conditions and this Privacy Policy on matters of data handling, this Privacy Policy prevails.

2 Data Controller Information

For the purposes of the Philippine Data Privacy Act of 2012, okbdt is the personal information controller responsible for the personal data collected through the platform. As the personal information controller, okbdt determines the purposes and means of processing personal data collected from registered players and website visitors in the Philippines.

okbdt has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection regulations. Inquiries relating to data privacy, requests to exercise data rights, and complaints regarding the handling of personal data may be directed to the okbdt support team, which will route privacy-specific matters to the DPO for handling. Contact details are provided in Section 13 of this Policy.

3 Personal Data We Collect

The personal data okbdt collects depends on the nature of your interaction with the platform. The following table summarises the categories of data collected and the context in which they are obtained:

okbdt does not intentionally collect sensitive personal information as defined under the Data Privacy Act — such as health information, political affiliations, or biometric data — except where a player voluntarily provides such information in the context of a responsible gaming support request. Where such data is received, it is handled with heightened protections and is not used for any purpose other than the specific support context in which it was provided.

4 How We Use Your Data

okbdt uses the personal data it collects for the following purposes:

• Account administration: Creating, maintaining, and managing your okbdt player account, including authentication and access control.
• Service delivery: Providing you with access to casino games, sports betting, bingo, and all other features available on the okbdt platform.
• Payment processing: Processing deposits, crediting winnings, and executing withdrawal requests through your nominated payment method, including GCash, Maya, and Philippine bank transfers.
• Identity verification and KYC compliance: Verifying your identity and age in accordance with PAGCOR guidelines and anti-money laundering obligations applicable to Philippine online gaming operators.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct as defined in the okbdt Terms & Conditions.
• Responsible gaming: Monitoring gaming activity patterns to identify indicators of problem gambling behaviour and to administer self-exclusion requests, deposit limits, and other responsible gaming tools.
• Regulatory compliance: Fulfilling record-keeping and reporting obligations required by applicable Philippine law and regulatory authorities, including PAGCOR.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Marketing communications: Sending you promotional offers, bonus announcements, and platform news, where you have consented to receive such communications. You may opt out at any time through your account settings.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to inform product and feature development decisions.

okbdt does not use personal data for automated decision-making processes that produce legal or similarly significant effects without human oversight. Where automated processes are used for fraud detection or responsible gaming monitoring, flagged cases are reviewed by a member of the okbdt compliance or support team before any account action is taken.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, okbdt's processing of your personal data is conducted on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the okbdt Terms & Conditions, including account management, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering requirements, KYC obligations, and reporting requirements imposed by PAGCOR.
• Legitimate interests: Processing conducted to pursue the legitimate interests of okbdt in operating a secure, fraud-free platform — including fraud prevention, platform security monitoring, and responsible gaming activity analysis — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing conducted for marketing communications and non-essential cookies, where you have provided explicit, informed consent. Consent-based processing may be withdrawn by you at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6 Sharing and Disclosure of Personal Data

6.1 Service Providers. okbdt shares personal data with a limited number of third-party service providers that assist in delivering platform services. These include payment processors (including GCash, Maya, and Philippine banking partners), identity verification providers, game content providers, cloud infrastructure and hosting providers, and customer support technology platforms. All service providers engaged by okbdt are required to process personal data solely in accordance with okbdt's instructions and to maintain appropriate security measures.

6.2 Regulatory Authorities. okbdt may be required to disclose personal data to PAGCOR or other relevant Philippine government agencies in the course of regulatory inspections, investigations, or lawful information requests. Such disclosures are made strictly in accordance with applicable legal requirements.

6.3 Law Enforcement. Where required by a valid legal process — including a court order, subpoena, or lawful request from a Philippine law enforcement authority — okbdt will disclose personal data to the extent required by that process.

6.4 No Sale of Data. okbdt does not sell, lease, trade, or otherwise commercially transfer personal data to any third party for that party's independent marketing or commercial purposes. Personal data shared with service providers is used exclusively to support okbdt's operational functions.

6.5 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of okbdt's assets, personal data held by okbdt may form part of the transferred assets. In such circumstances, okbdt will provide affected players with advance notice and ensure that any successor entity is bound by data protection obligations consistent with this Privacy Policy.

7 Data Retention

okbdt retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your registered account relationship with okbdt.
• Closed account data: Identity, financial, and gaming activity records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations applicable to Philippine gaming operations.
• KYC documentation: Retained for a minimum of five (5) years from the date of collection or from the date of account closure, whichever is later.
• Transaction records: Individual deposit, withdrawal, and wagering records are retained for a minimum of five (5) years for regulatory and audit purposes.
• Customer support records: Support interaction logs are retained for up to three (3) years from the date of the interaction, to enable follow-up and dispute resolution.
• Marketing consent records: Records of your marketing communication preferences and consent history are retained for the duration of your account and for one (1) year following account closure.
• Technical and session data: IP address logs and session data are retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

8 Cookies and Tracking Technologies

The okbdt platform uses cookies and similar browser-based storage technologies to support platform functionality, maintain your authenticated session, and gather anonymised usage analytics. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. Essential cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Remember your preferences — such as language settings, display options, and last-visited game categories — to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the okbdt platform, which game categories are most used, and where technical errors occur. This data is used in aggregate form only and does not identify individual players.
• Marketing cookies: Where you have consented to receive personalised promotional communications, marketing cookies may be used to tailor the offers and promotions displayed to you. These cookies are not activated without your explicit consent.

You may manage non-essential cookie preferences through your browser settings. Note that disabling functional or analytics cookies may limit certain non-essential platform features but will not prevent you from accessing your account or placing bets.

9 Security Measures

9.1 Technical Safeguards. okbdt implements a range of technical security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal and financial data, access controls limiting data access to authorised personnel with a legitimate operational need, and network security measures including firewalls and intrusion detection systems.

9.2 Organisational Safeguards. Access to personal data within okbdt is granted on a role-based, need-to-know basis. Staff with access to player data receive training on data protection obligations. Data processing agreements are in place with all third-party service providers handling personal data on okbdt's behalf.

9.3 Two-Factor Authentication. okbdt supports two-factor authentication (2FA) as a standard account security feature. Players are strongly encouraged to enable 2FA from within their account settings to add an additional layer of protection to their login credentials.

9.4 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, okbdt will notify the National Privacy Commission of the Philippines and, where required, affected players within the timeframes prescribed by the Data Privacy Act and its Implementing Rules.

9.5 Limitation. While okbdt takes all reasonable and proportionate steps to protect personal data, no internet transmission or electronic storage system is entirely secure. okbdt cannot guarantee absolute security against all possible threats. Players are advised to maintain the security of their own login credentials and to notify okbdt immediately if they suspect unauthorised account access.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), registered players have the following rights with respect to their personal data held by okbdt:

• Right to be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfils.
• Right to Access: The right to request a copy of the personal data okbdt holds about you, including a description of the processing purposes and the categories of data held.
• Right to Correction: The right to request correction of any inaccurate, incomplete, or outdated personal data held in your okbdt account.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to okbdt's legal retention obligations. Note that data subject to mandatory retention periods under Philippine law cannot be deleted until those periods expire.
• Right to Object: The right to object to the processing of your personal data where that processing is based on legitimate interests, including the use of your data for marketing communications.
• Right to Data Portability: The right to receive a structured, machine-readable copy of the personal data you have provided to okbdt for portability to another service provider where technically feasible.
• Right to File a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe okbdt has processed your personal data in a manner that violates the Data Privacy Act.

To exercise any of these rights, contact the okbdt support team via live chat or the email address displayed in the footer of this page. Requests will be acknowledged within five (5) business days and resolved within thirty (30) calendar days, subject to identity verification requirements and the complexity of the request.

11 Children and Minors

The okbdt platform is strictly for individuals who are twenty-one (21) years of age or older. okbdt does not knowingly collect personal data from individuals under the age of 21. If okbdt becomes aware that a registered account belongs to an individual who is under the minimum age, the account will be immediately suspended, all activity on the account will be reviewed, and all funds will be handled in accordance with okbdt's underage gambling policy.

If you are a parent or guardian and believe that a minor under your care has registered an account on the okbdt platform, please contact the okbdt support team immediately using the contact details in Section 13. We will take prompt action to close the account and handle any associated data in accordance with applicable law.

12 Changes to This Privacy Policy

okbdt reserves the right to update and amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or okbdt's data processing practices. Where changes are material — meaning they significantly affect how your personal data is used or your rights as a data subject — okbdt will provide advance notice via the email address registered to your account or through a prominent notification on the platform prior to the changes taking effect.

The effective date at the top of this Privacy Policy indicates when the current version was last updated. Players are encouraged to review this Policy periodically to stay informed of how okbdt handles their personal data. Continued use of the okbdt platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

Prior versions of this Privacy Policy may be requested from the okbdt support team for reference purposes.

13 Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data okbdt holds about you, please contact the okbdt Data Protection Officer through the support team. Live chat support is available on the platform around the clock. The okbdt contact email address is displayed in the footer of every page on this website — you will find it there as plain text for your reference.

When submitting a privacy-related request or complaint, please include your full registered name, your okbdt account details, and a clear description of your request or concern. This will help us route your enquiry to the appropriate team and resolve it as efficiently as possible.

If you are not satisfied with okbdt's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines, the independent regulatory authority responsible for overseeing compliance with the Data Privacy Act of 2012 in the Philippines.