okbey Privacy Policy

1.1 This Privacy Policy ("Policy") sets out the manner in which okbey ("we," "us," or "our") collects, processes, stores, uses, shares, and protects the personal data of individuals ("you," "your," or "data subject") who register for or use the okbey platform accessible at okbey.co ("Platform").

1.2 This Policy applies to all personal data processing activities carried out by okbey in connection with the Platform, including account registration, identity verification, financial transactions, customer support interactions, marketing communications, and all other Platform-related services.

1.3 This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations, as enforced by the National Privacy Commission ("NPC"). Where applicable, this Policy also reflects the requirements of PAGCOR's regulatory framework governing data handling by licensed online gaming operators in the Philippines.

1.4 By creating an okbey account, using the Platform, or otherwise providing your personal data to okbey, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein, to the extent that such consent constitutes the applicable legal basis for any specific processing activity.

2.1 The data controller responsible for the personal data collected through the okbey Platform is okbey, the operator of the platform at okbey.co, registered and operating within the Republic of the Philippines under PAGCOR authorization.

2.2 okbey has appointed a Data Protection Officer ("DPO") as required under the Data Privacy Act of 2012. Contact details for the DPO are provided in Section 15 of this Policy.

2.3 As the data controller, okbey determines the purposes and means of processing personal data collected through the Platform and is responsible for ensuring that all such processing is lawful, fair, transparent, and consistent with the rights of data subjects under Philippine law.

3.1 okbey collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:

3.2 Sensitive Personal Information. okbey may process certain categories of sensitive personal information as defined under the Data Privacy Act of 2012, including government-issued identification numbers. Such data is collected solely where required for KYC compliance under PAGCOR regulations and is handled with enhanced security measures appropriate to its sensitivity.

4.1 Data You Provide Directly. okbey collects personal data that you voluntarily provide when you register for an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or update your account profile. This includes all form submissions and document uploads made through the Platform.

4.2 Data Generated Through Platform Use. When you use the okbey Platform, we automatically collect certain technical and behavioral data — including your IP address, device identifiers, browser characteristics, session activity, and game interaction data — through server logs, cookies, and similar tracking technologies. This data is generated as a natural result of how internet-based services function and is used for security monitoring, fraud detection, and service improvement.

4.3 Data from Payment Service Providers. When you make a deposit or withdrawal through GCash, PayMaya, BPI, BDO, or Metrobank, okbey receives confirmation data from the relevant payment processor, including transaction identifiers and, where applicable, masked account references. okbey does not receive or store full card numbers or banking passwords.

4.4 Data from Third-Party Game Providers. The game studios whose content is hosted on the okbey Platform may provide okbey with game outcome data, bet records, and technical session data necessary for transaction settlement and dispute resolution. Such data sharing is governed by data processing agreements consistent with this Policy.

5.1 okbey processes personal data only where a lawful basis exists for doing so under the Data Privacy Act of 2012. The following table identifies the primary purposes of our processing activities and the corresponding legal basis under RA 10173:

6.1 okbey uses the personal data we collect for the following specific operational purposes:

• To create, verify, and maintain your okbey account and associated wallet;
• To perform identity verification (KYC) as required by PAGCOR before processing withdrawal requests;
• To process deposit and withdrawal transactions through your nominated GCash, PayMaya, or bank account;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform;
• To comply with PAGCOR regulatory reporting requirements, including periodic player activity disclosures;
• To deliver customer support services and resolve account or transaction disputes;
• To enforce the okbey Terms and Conditions and other applicable Platform rules;
• To send transactional notifications — including deposit confirmations, withdrawal approvals, and security alerts — to your registered contact details;
• To send marketing communications about promotions, new games, and Platform updates, where you have consented or where legitimate interests apply;
• To operate responsible gaming features, including monitoring for indicators of problem gambling behavior and facilitating the exercise of responsible gaming tools;
• To analyze Platform usage patterns for the purpose of improving game offerings, user experience, and technical performance.

6.2 okbey will not use your personal data for purposes that are incompatible with those listed above without providing you with prior notice and, where required, obtaining your additional consent.

7.1 Service Providers. okbey shares personal data with trusted third-party service providers who process data on our behalf under written data processing agreements that require them to handle data in accordance with this Policy and applicable Philippine law. These service providers include payment processing partners (GCash, PayMaya, and banking partners), game studio providers, KYC verification services, fraud detection platforms, and IT infrastructure and hosting services.

7.2 PAGCOR and Regulatory Authorities. okbey is required under its PAGCOR authorization to provide player data and activity records to PAGCOR upon request and as part of regular compliance reporting. We are also obligated to disclose data to the Anti-Money Laundering Council (AMLC) and other Philippine government agencies where required by law. Such disclosures are mandatory and do not constitute a breach of this Policy.

7.3 Law Enforcement. okbey will disclose personal data to law enforcement agencies, courts, or other public authorities where we are required to do so by a valid legal order, court process, or applicable Philippine law. We will, where legally permissible, notify you of such a disclosure.

7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of substantially all of okbey's assets, personal data may be transferred to the acquiring entity as part of the transaction, subject to the acquirer's commitment to maintain standards of data protection no less protective than those described in this Policy.

8.1 okbey retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and PAGCOR regulations. The following retention periods apply as a general guide:

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification, unless a legal obligation requires continued retention.

9.1 okbey implements technical and organizational security measures appropriate to the risks presented by the processing activities described in this Policy. These measures are designed to protect personal data against unauthorized access, loss, destruction, alteration, or unlawful disclosure. Key security controls include:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and okbey's servers;
• Encryption of sensitive personal data at rest, including government-issued ID information and financial account references;
• Role-based access controls ensuring that personal data is accessible only to okbey personnel with a documented operational need;
• Multi-factor authentication requirements for all administrative access to systems storing personal data;
• Intrusion detection and prevention systems monitoring platform infrastructure in real time;
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
• Documented incident response procedures for managing personal data breaches, including NPC notification obligations where applicable.

9.2 Data Breach Notification. In the event of a personal data breach that is likely to give rise to a real risk of serious harm to data subjects, okbey will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with the requirements of the Data Privacy Act of 2012. Affected data subjects will be notified where required by law or NPC guidance.

10.1 okbey uses cookies and similar tracking technologies on the Platform to support essential functionality, improve user experience, and collect analytics data. Cookies are small data files stored on your device when you access the Platform.

10.2 The categories of cookies used by okbey are as follows:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session, preserving security tokens, and enabling game functionality. These cannot be disabled without impairing Platform use.
• Functional Cookies: Remember your preferences and settings — such as language choice, responsible gaming limits you have set, and notification preferences — to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — including pages visited, features used, and session duration — for the purpose of improving Platform design and performance. Individual users are not identified through analytics data.
• Security Cookies: Support fraud detection and session integrity monitoring, including identifying unusual login patterns and flagging potentially unauthorized access attempts.

10.3 You may control cookie settings through your browser preferences. Disabling cookies other than essential cookies may affect your experience on the Platform. Where required by applicable law, okbey seeks consent before placing non-essential cookies on your device.

11.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okbey. These rights may be exercised by contacting our Data Protection Officer using the details in Section 15:

• Right to Be Informed: The right to be informed that your personal data is being collected, the purposes of collection, the identity of the data controller, and your rights as a data subject — all of which this Policy is intended to fulfill.
• Right to Access: The right to request a copy of the personal data okbey holds about you, together with information about how it is processed.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal data held about you. You may update many account details directly through your Account Settings without needing to contact the DPO.
• Right to Object: The right to object to processing of your personal data for marketing purposes. Marketing communications contain opt-out mechanisms, and you may also update your preferences in Account Settings.
• Right to Erasure or Blocking: The right to request that we delete or block your personal data where its collection or processing was unlawful, the data is no longer necessary for the purpose it was collected, or you withdraw consent and no other legal basis applies. This right is subject to our legal and regulatory retention obligations.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Damages: The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, subject to applicable law.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that okbey has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012.

11.2 Response Timelines. okbey will respond to verified data subject requests within fifteen (15) working days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, with written notice to you of the extension and the reason for it.

11.3 Verification. For security purposes, okbey requires that data subject requests be verified before processing. You will be asked to confirm your identity using information consistent with your registered account details before any access, correction, or erasure request is fulfilled.

12.1 The okbey Platform is strictly restricted to individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR's mandatory age restriction for online gambling in the Philippines. okbey does not knowingly collect personal data from individuals under the age of 21.

12.2 If okbey becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question to the extent permitted by our legal obligations, and report the matter to PAGCOR as required under our regulatory authorization.

12.3 If you are a parent or guardian and believe that a minor has registered an account or provided personal data to okbey without authorization, please contact our Data Protection Officer immediately using the details provided in Section 15.

13.1 okbey's primary data processing and storage infrastructure is located within the Philippines. However, certain service providers — including some game studio partners and technical infrastructure vendors — may be located in jurisdictions outside the Philippines.

13.2 Where personal data is transferred to a recipient located outside the Philippines, okbey ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Data Privacy Act of 2012. These safeguards include the use of contractual clauses approved by the NPC, data processing agreements incorporating Philippine data protection requirements, and transfers only to jurisdictions that the NPC has recognized as providing adequate protection.

13.3 okbey will not transfer sensitive personal information outside the Philippines without your explicit consent, except where required by law or regulation.

14.1 okbey reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR regulatory requirements, Platform operations, or data processing practices.

14.2 Material changes to this Policy — meaning changes that significantly affect your rights as a data subject or the manner in which okbey processes your personal data — will be communicated to registered Players via email to their registered address or through a prominent notice displayed on the Platform, with a minimum of fourteen (14) days' advance notice where practicable.

14.3 The "Last Updated" date displayed at the top of this Policy will be revised each time the Policy is amended. Your continued use of the Platform after the effective date of an amended Policy constitutes your acknowledgment of the changes.

14.4 Where an amendment requires your consent as the applicable legal basis for any new processing activity, we will seek that consent through a separate, clear, and unambiguous mechanism before commencing the new processing.

15.1 For all matters relating to this Privacy Policy, the exercise of your data rights, or any concern about how okbey handles your personal data, you may contact our Data Protection Officer through the following channels:

15.2 You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for enforcing the Data Privacy Act of 2012.

15.3 For questions about the okbey Terms & Conditions or Responsible Gaming policies, please visit the relevant pages — Terms & Conditions and Responsible Gaming — or contact our support team through the Platform's live chat service.