oknet Privacy Policy

This Privacy Policy applies to all personal data processed by oknet in connection with the operation of the oknet online gaming and sports betting platform accessible at oknet.one and all associated subdomains, mobile interfaces, and application programming interfaces (collectively, the "Platform").

The data controller responsible for your personal data is the entity operating the oknet Platform, registered and licensed to conduct online gaming activities in the Philippines under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR).

This Policy governs the collection, use, storage, sharing, and disposal of personal data in accordance with Republic Act No. 10173 (Data Privacy Act of the Philippines), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC).

oknet collects the following categories of personal data, depending on the nature of your interaction with the Platform:

oknet collects personal data through the following channels and methods:

• Directly from you — when you register an Account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically — through cookies, server logs, and similar tracking technologies when you access and interact with the Platform;
• From payment service providers — GCash, Maya, and banking partners may share transaction confirmation data with oknet when you process deposits or withdrawals;
• From identity verification services — third-party KYC providers engaged by oknet may process your government ID and biometric data to verify your identity in compliance with PAGCOR requirements;
• From regulatory authorities — PAGCOR or law enforcement agencies may share data with oknet in the context of a regulatory investigation or compliance requirement.

oknet processes your personal data for the following purposes:

• Account creation and management — to register, authenticate, and maintain your oknet Account;
• Identity verification and KYC compliance — to verify that you are a real person, are aged 21 or above, and are eligible to use the Platform under PAGCOR licensing requirements;
• Transaction processing — to process deposits, withdrawals, and bonus credits to and from your oknet Wallet;
• Game provision and record-keeping — to provide access to all Platform games and to maintain accurate records of your wagering activity as required by PAGCOR;
• Anti-Money Laundering (AML) and fraud prevention — to detect, investigate, and prevent money laundering, fraud, collusion, and other prohibited activities, in compliance with the Anti-Money Laundering Act of the Philippines (RA 9160, as amended);
• Responsible gaming — to administer and enforce deposit limits, self-exclusion requests, session reminders, and other player protection tools;
• Customer support — to respond to your queries, complaints, and requests via live chat, email, and other support channels;
• Platform security and integrity — to maintain the technical security of the Platform and protect against unauthorised access, data breaches, and system abuse;
• Legal and regulatory compliance — to comply with our obligations under PAGCOR licensing conditions, the Data Privacy Act, and other applicable Philippine laws;
• Marketing communications — to send you promotional offers, bonus notifications, and Platform updates, where you have provided consent to receive such communications.

oknet processes your personal data on the following legal bases under the Data Privacy Act of the Philippines:

• Contractual necessity — processing is necessary to provide the services described in the oknet Terms and Conditions, which constitute the contract between you and oknet upon Account registration;
• Legal obligation — processing is required to comply with PAGCOR licensing requirements, AML obligations, tax reporting requirements, and other applicable Philippine law;
• Legitimate interests — processing is necessary for oknet's legitimate interests in maintaining Platform security, preventing fraud, and improving its services, provided these interests are not overridden by your privacy rights;
• Consent — where processing is based on consent (such as for certain marketing communications), you have the right to withdraw that consent at any time by updating your communication preferences in your Account settings or by contacting oknet's Data Protection Officer.

oknet does not sell personal data to third parties for commercial or marketing purposes. Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, and other payment service providers engaged to process your deposits and withdrawals;
• KYC and identity verification providers — third-party services engaged by oknet to verify player identity in compliance with PAGCOR KYC requirements;
• Game content providers — game studios and live dealer operators whose content is licensed to oknet may receive anonymised or pseudonymised session data as required for game integrity purposes;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities where disclosure is required by law or regulatory direction;
• Technology service providers — cloud hosting, platform infrastructure, and security service providers engaged by oknet to operate the Platform, subject to strict data processing agreements;
• Professional advisers — lawyers, accountants, and auditors engaged by oknet where necessary for the exercise of legal rights or the preparation of regulatory filings.

Where personal data is transferred to service providers located outside the Philippines, oknet will ensure that appropriate safeguards are in place in accordance with NPC requirements for cross-border data transfers.

oknet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data — retained for the duration of your Account and for a minimum of five (5) years following Account closure, as required by PAGCOR licensing conditions and AML obligations;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction, in compliance with the AMLA and BIR record-keeping requirements;
• Gaming activity logs — retained for a minimum of three (3) years in accordance with PAGCOR requirements;
• Communications data — live chat transcripts and support correspondence retained for two (2) years from the date of the interaction;
• Technical and log data — server and access logs retained for twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the data subject's identity.

Technical and organisational security measures implemented by oknet include:

• 256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and the oknet Platform;
• Encryption at rest for sensitive data fields including government ID numbers and financial account references;
• Multi-factor authentication requirements for access to oknet's internal administrative systems;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular vulnerability assessments, penetration testing, and security audits conducted by independent third-party specialists;
• Intrusion detection and prevention systems monitoring the Platform infrastructure in real time;
• Formal data breach response procedures including NPC notification within 72 hours of discovering a qualifying breach.

Under the Data Privacy Act of the Philippines (RA 10173), you have the following rights with respect to your personal data held by oknet:

To exercise any of the above rights, contact oknet's Data Protection Officer using the details in Section 13. oknet will respond to all data subject requests within thirty (30) days of receipt, or within the timeframe prescribed by the NPC where a longer period applies.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe oknet has not handled your personal data in accordance with RA 10173.

The oknet Platform uses cookies and similar tracking technologies to deliver, secure, and improve the Platform experience. The following categories of cookies are used:

• Strictly necessary cookies — essential for the Platform to function, including session authentication tokens and security cookies. These cannot be disabled without impairing Platform functionality;
• Functional cookies — remember your preferences such as language settings, last-played games, and responsible gaming configurations;
• Analytics cookies — collect anonymised data about how you navigate the Platform to help oknet identify usability issues and improve the player experience. No personally identifiable information is contained in analytics reports;
• Security and fraud-prevention cookies — assist oknet in detecting bots, unusual login patterns, and other security threats.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of some Platform features. oknet does not use third-party advertising cookies or cross-site tracking technologies for external advertising purposes.

oknet's KYC process is specifically designed to verify the age of all registered players. Identity documents submitted during registration are checked for date of birth, and Accounts are suspended pending verification where age cannot be immediately confirmed.

If you believe that a minor has created an oknet Account, please contact the Data Protection Officer immediately using the details in Section 13.

oknet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or oknet's data processing practices. Material amendments will be communicated to registered Players via in-platform notification and/or email to the address registered to their Account, no less than fourteen (14) days before the amended Policy takes effect, except where immediate amendment is required by law or regulatory direction.

The version of this Privacy Policy bearing the most recent "Last Updated" date at the top of this page constitutes the current and applicable version. Your continued use of the Platform following the effective date of any amendment constitutes acknowledgment of the revised Policy.

For all privacy-related inquiries, data subject rights requests, complaints, or questions about this Privacy Policy, please contact oknet's designated Data Protection Officer:

All privacy complaints will receive an acknowledgment within two (2) business days and a substantive response within thirty (30) days, in accordance with NPC timeframe requirements. Where a complaint cannot be resolved to your satisfaction, you have the right to escalate the matter to the National Privacy Commission of the Philippines.