okbk8 Privacy Policy

1. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, okbk8 acts as the personal information controller in respect of the personal data it collects from users of its platform. okbk8 is responsible for ensuring that personal data is collected, stored, used, and disposed of in accordance with applicable data privacy laws in the Philippines.

Where okbk8 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or cloud infrastructure providers), such parties act as personal information processors subject to contractual obligations consistent with the Data Privacy Act.

2. Personal Data We Collect

okbk8 collects the following categories of personal data from users of its platform:

okbk8 does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

3. How We Collect Your Data

okbk8 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access or use the okbk8 platform, including through cookies, log files, and similar tracking technologies;
• Third-party sources: Identity and fraud-screening data received from KYC verification providers, payment processors (such as GCash or PayMaya), and fraud prevention services, as permitted by applicable law.

4. How We Use Your Personal Data

okbk8 uses the personal data it collects for the following purposes:

• Creating, maintaining, and managing your okbk8 account;
• Verifying your identity and age in compliance with PAGCOR regulations and Philippine law;
• Processing deposits, withdrawals, and other financial transactions;
• Complying with obligations under the Anti-Money Laundering Act (AMLA) and related regulations, including transaction monitoring and suspicious activity reporting;
• Providing customer support and responding to your enquiries;
• Sending you transactional communications (account notifications, deposit confirmations, OTP messages);
• Sending promotional communications where you have consented or where okbk8 has a legitimate interest in doing so, subject to your right to opt out at any time;
• Monitoring and enforcing responsible gaming tools, including deposit limits and self-exclusion;
• Detecting, investigating, and preventing fraud, cheating, collusion, and other prohibited conduct;
• Improving the okbk8 platform, its games, and its services through analysis of aggregated usage data;
• Complying with applicable legal obligations, court orders, or regulatory requests.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, okbk8 relies on the following legal bases for processing personal data:

• Consent: For marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time;
• Contractual necessity: For processing required to perform the contract between you and okbk8, including account management and transaction processing;
• Legal obligation: For processing required to comply with AMLA, PAGCOR regulatory requirements, tax obligations, and other applicable Philippine law;
• Legitimate interests: For fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your fundamental rights and freedoms.

6. Data Sharing & Disclosure

6.1 okbk8 does not sell, rent, or trade your personal data to third parties for commercial purposes.

6.2 okbk8 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and their respective service providers, for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party services engaged to verify your identity and age as required by PAGCOR and Philippine law;
• Fraud prevention and security services: Third-party providers engaged to detect and prevent fraudulent activity on the platform;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory mandate;
• IT and cloud infrastructure providers: Service providers hosting and maintaining the okbk8 platform infrastructure.

6.3 Where okbk8 engages processors outside the Philippines, it ensures that appropriate safeguards are in place to protect personal data at a standard equivalent to that required under the Data Privacy Act.

7. Data Retention

7.1 okbk8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, regulatory, accounting, or reporting requirements.

7.2 The general retention periods applied by okbk8 are as follows:

• Account data and KYC documents: retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction records: retained for a minimum of five (5) years from the date of the transaction;
• Customer support correspondence: retained for three (3) years from the date of the interaction;
• Marketing consent records: retained until consent is withdrawn and for one (1) year thereafter.

7.3 Where personal data is no longer required, okbk8 will securely destroy or anonymise it in accordance with the Data Privacy Act and its implementing regulations.

8. Security Measures

okbk8 implements organisational and technical security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the okbk8 platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting access to personal data to authorised personnel only;
• Multi-factor authentication for internal administrative access;
• Regular security assessments, penetration testing, and vulnerability management;
• Incident response procedures in compliance with the Data Privacy Act's mandatory breach notification requirements.

In the event of a personal data breach that is likely to prejudice your rights and freedoms, okbk8 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay where required.

9. Cookies & Tracking Technologies

9.1 The okbk8 platform uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and support security functions. The categories of cookies used include:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled without affecting core functionality (e.g., session management, login authentication);
• Functional cookies: Used to remember your preferences and settings, such as language and display options;
• Analytics cookies: Used to collect aggregated information about how the platform is used, helping okbk8 improve performance and user experience. These are only set with your consent;
• Security cookies: Used to detect fraudulent activity, protect against bots, and maintain account security.

9.2 You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the okbk8 platform. For analytics and non-essential cookies, you may withdraw your consent at any time.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by okbk8:

• Right to be informed: You have the right to be informed about how your personal data is collected and used, as set out in this Privacy Policy;
• Right of access: You have the right to request a copy of the personal data okbk8 holds about you;
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations under applicable law;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to our overriding legitimate grounds;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 13. okbk8 will respond to verified requests within thirty (30) calendar days.

11. Minors

11.1 The okbk8 platform is strictly intended for individuals who are twenty-one (21) years of age or older. okbk8 does not knowingly collect personal data from persons under the age of 21.

11.2 If okbk8 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the platform, please contact our support team immediately.

12. Changes to This Privacy Policy

12.1 okbk8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, our data practices, or the features of the platform. The revised Policy will be published on this page with an updated effective date.

12.2 Where changes to this Policy are material, okbk8 will endeavour to notify registered players via their registered mobile number or email address, or through a prominent notice on the platform. Your continued use of okbk8 following the publication of any amended Privacy Policy constitutes your acceptance of those changes.

13. Contact & Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by okbk8, please contact us:

• Live Chat: Available 24/7 within the okbk8 platform — fastest response channel
• Data Privacy Email: [email protected]

Please include "Data Privacy Request" in your message subject so that it can be directed to the appropriate team. okbk8 aims to acknowledge all data privacy requests within five (5) business days and resolve them within thirty (30) calendar days.

If you are not satisfied with how okbk8 handles your request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).