okbef Privacy Policy

okbef is an online casino and sports betting platform operated exclusively for the Philippine market, accessible at okbef.net. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, okbef acts as the Personal Information Controller in respect of all personal data collected through the platform.

As a Personal Information Controller, okbef determines the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf — such as payment processors, identity verification services, or game providers — those third parties act as Personal Information Processors under written data processing agreements that bind them to comply with the same data protection standards we apply internally.

okbef is committed to full compliance with the Data Privacy Act of 2012, the implementing rules and regulations issued by the National Privacy Commission, and all other applicable Philippine laws governing the processing of personal data. We have designated a Data Protection Officer (DPO) to oversee our data protection programme and to serve as the primary point of contact for data privacy matters. Contact details for our DPO are provided in Section 12 of this Policy.

okbef collects personal data in the following categories, depending on how you interact with the platform:

Registration and Identity Data. When you create an okbef account, we collect your full legal name, date of birth, gender, nationality, residential address, email address, and mobile number. We also collect a copy of a valid Philippine government-issued photo ID (such as a PhilSys National ID, passport, driver's licence, SSS ID, or UMID) as part of our Know Your Customer (KYC) identity verification process.

Financial Data. To process deposits and withdrawals, we collect your GCash or PayMaya account number, bank account details (for BPI, BDO, or Metrobank transfers), or cryptocurrency wallet addresses. We do not store full bank account credentials or card numbers on our servers. Payment data is tokenised and handled by our PCI-DSS compliant payment processing partners.

Transactional Data. We maintain records of all financial transactions conducted through your okbef account, including deposits, withdrawals, bonus credits, wagering activity, and game results. These records are retained for compliance and audit purposes.

Device and Technical Data. When you access the okbef platform, we automatically collect technical data including your IP address, device type and model, operating system, browser type and version, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

Behavioural Data. We collect data about how you interact with the okbef platform, including the games you play, the frequency and duration of your gaming sessions, your betting patterns, and which features you use. This data informs our responsible gaming monitoring systems and helps us personalise your platform experience.

Communications Data. If you contact our support team via live chat or email, we retain records of those interactions, including any documents or screenshots you share with us. If we send you promotional communications, we record your communication preferences and consent status.

Source of Funds Data. For members whose account activity triggers enhanced due diligence requirements under our anti-money laundering programme, we may request documentation evidencing the source of funds used to deposit into your okbef account. This may include payslips, business registration certificates, or other financial documents.

okbef uses the personal data we collect for the following purposes:

okbef does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except as required for real-time fraud screening where immediate action is necessary to protect the security of the platform and its members.

Under the Data Privacy Act of 2012, okbef processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you as a member of the okbef platform — including account management, game access, and payment processing — is carried out on the basis of contractual necessity.
• Legal Obligation: Certain processing activities are required by Philippine law, including identity verification under anti-money laundering regulations (Republic Act No. 9160 as amended), responsible gaming obligations, and record-keeping requirements. Processing for these purposes is carried out on the basis of legal obligation.
• Legitimate Interests: Where processing is not strictly required by contract or law but serves a legitimate interest of okbef or its members — such as fraud prevention, platform security, and analytics — we process data on the basis of legitimate interests, provided those interests are not overridden by your data protection rights.
• Consent: Where we send you direct marketing communications or use non-essential cookies, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

okbef does not sell or rent your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: We share financial data with our payment processing partners — including GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency gateway providers — to process your deposit and withdrawal transactions. These processors handle your payment data under their own privacy policies and are bound by contractual data protection obligations to okbef.
• Identity Verification Providers: We use third-party KYC and identity verification services to validate the government-issued ID documents you submit during registration. These providers process identity data solely for the purpose of verification and are prohibited from using your data for any other purpose.
• Game Technology Providers: To provide our gaming catalogue, we share your account identifier and gameplay data with licensed game providers including JILI, Pragmatic Play, PG Soft, and Evolution Gaming. These providers are contractually bound to process this data only for game delivery purposes.
• Fraud and Security Services: We use specialised fraud detection and cybersecurity partners who process device fingerprint, IP address, and behavioural data on our behalf for the purpose of protecting the platform and its members from fraudulent activity.
• Regulatory and Law Enforcement Authorities: okbef will disclose personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission, PAGCOR, or law enforcement agencies where required to do so by applicable Philippine law, court order, or regulatory direction. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of okbef's assets, your personal data may be transferred to the successor entity. We will provide advance notice of any such transfer and of any material changes to this Privacy Policy that result from it.

All third-party processors engaged by okbef are required to maintain appropriate technical and organisational security measures and to process personal data only on documented instructions from okbef.

okbef uses cookies and similar tracking technologies on the platform to support the delivery of our services, maintain session security, and analyse platform usage. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They are used to maintain your login session, remember your security preferences, and prevent cross-site request forgery. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting and last-visited game category — to provide a more personalised experience. They can be disabled, but doing so may affect platform functionality.
• Analytics Cookies: We use analytics cookies to understand how members navigate the platform, which games and features are most popular, and where users encounter difficulties. This data is processed in aggregated, anonymised form where possible. Analytics cookies require your consent.
• Security Cookies: These cookies support our fraud detection systems by storing a device fingerprint that helps identify and block suspicious access attempts. They are treated as strictly necessary for platform security purposes.

You can manage your cookie preferences at any time through the cookie settings panel accessible from the platform footer. Please note that disabling certain categories of cookies may affect your ability to use specific features of the okbef platform.

okbef does not use third-party advertising cookies or permit external advertising networks to place tracking cookies on the platform.

okbef implements a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Security: All data in transit between your device and okbef servers is encrypted using TLS 1.3. We enforce HTTPS across all platform endpoints and implement HTTP Strict Transport Security (HSTS).
• Data Encryption at Rest: Sensitive personal data stored on okbef servers — including identity documents, financial data, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. okbef employees and contractors are granted access only to the data necessary to perform their specific job function. All access is logged and subject to regular audit.
• Two-Factor Authentication: Member accounts support two-factor authentication (2FA) to provide an additional layer of protection against unauthorised access. We strongly encourage all members to enable 2FA on their okbef account.
• Penetration Testing and Vulnerability Management: The okbef platform undergoes regular penetration testing by independent security firms. Identified vulnerabilities are triaged and remediated in accordance with a risk-based patching programme.
• Incident Response: okbef maintains a documented incident response plan. In the event of a personal data breach, our security team is trained to contain, assess, and report the incident in accordance with the National Privacy Commission's mandatory breach notification requirements.

okbef retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where deletion is not immediately possible due to backup schedules, the data will be isolated and protected from further processing until deletion can be completed.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by okbef:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected, processed, and used. This Privacy Policy constitutes our primary disclosure in satisfaction of this right.
• Right to Access: You have the right to request a copy of the personal data okbef holds about you, together with information about the purposes for which it is processed and the third parties to whom it has been disclosed.
• Right to Rectification: If any personal data okbef holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly in your account settings; for corrections to KYC documents or other sensitive records, please contact our support team.
• Right to Erasure: Subject to applicable legal and regulatory retention obligations, you have the right to request deletion of your personal data. Where okbef is required to retain certain data by law (for example, transaction records under AMLA), we will inform you of this constraint when responding to an erasure request.
• Right to Object: You have the right to object to the processing of your personal data where such processing is based on legitimate interests. You also have the right to withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings or clicking the unsubscribe link in any marketing email.
• Right to Data Portability: Where technically feasible, you have the right to receive a copy of the personal data you have provided to okbef in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: If you believe that okbef has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 12. We will respond to all verified data subject requests within thirty (30) calendar days of receipt. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further thirty days with prior notice to you.

The okbef platform is strictly intended for adults aged 21 years and above in accordance with Philippine law governing participation in online casino gaming and sports betting. okbef does not knowingly collect, process, or retain personal data from any individual under the age of 21.

All registration attempts are subject to date-of-birth verification. Where an account is identified as having been registered by or on behalf of a person under 21, okbef will immediately terminate the account, delete associated personal data to the extent permitted by law, return any deposited funds to the payment source, and forfeit all gameplay activity associated with that account.

If you are a parent or guardian and believe that a person under 21 in your care has registered an okbef account without authorisation, please contact our Data Protection Officer immediately using the contact details in Section 12. We will investigate the matter and take appropriate action without undue delay.

okbef strongly supports responsible parental oversight of online activities. We recommend the use of parental control software to prevent minors from accessing gambling platforms. If you need guidance on available parental control tools, our support team is available 24/7 to assist.

okbef reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance issued by the National Privacy Commission.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way we process your personal data — okbef will notify you by email to your registered address and by a prominent notice on the platform at least fourteen (14) days before the changes take effect. Non-material updates, such as corrections of typographical errors or clarifications that do not alter the substance of the Policy, may be made without advance notice.

The current version of this Privacy Policy, including the effective date, is always accessible at okbef.net/privacy-policy. Your continued use of the okbef platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not agree to the revised Policy, you may request closure of your account in accordance with the Terms and Conditions.

This Privacy Policy was last updated in January 2026.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a data privacy concern, please contact the okbef Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "DATA PRIVACY REQUEST" or "DPO INQUIRY" in the subject line of your email to ensure prompt routing to our Data Protection Officer.
• Live Chat: Available 24/7 via the live chat feature on the okbef platform, staffed by Filipino-speaking support agents who can escalate data privacy matters to the DPO team.
• Response Time: We acknowledge all privacy-related inquiries within two (2) business days and provide a substantive response within thirty (30) calendar days.

If you are not satisfied with okbef's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for overseeing compliance with the Data Privacy Act of 2012 and can be contacted through the official NPC website. okbef fully cooperates with all NPC inquiries and investigations.

Our support team is based in the Philippines and is available around the clock, every day of the year including Philippine public holidays. All data privacy communications are logged, tracked, and handled with strict confidentiality.