okibit Privacy Policy

1 Who We Are

This Privacy Policy is issued by okibit ("okibit," "we," "us," or "our"), the operator of the online gaming platform accessible at okibit.net and any associated subdomains or digital touchpoints operated under the okibit brand. okibit is the data controller in respect of the personal information that you provide to us or that we collect when you access and use our platform.

This Privacy Policy applies to all current and former registered players, visitors to the okibit website, applicants for employment, and any other individuals whose personal data okibit processes in connection with its business operations. It applies whether you access okibit from a desktop browser, a mobile browser, or any other device.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together form the complete framework governing your relationship with okibit.

2 Personal Data We Collect

okibit collects personal data that is necessary to provide you with a secure, compliant, and personalised gaming experience. The categories of personal data we collect include the following:

okibit does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless directly relevant to a responsible gaming assessment or legally required. Where such data is collected, explicit consent will be sought.

3 How We Collect Your Data

okibit collects your personal data through the following channels and mechanisms:

• Direct submission: Data you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically as you interact with the okibit platform, including via cookies, web beacons, server logs, and session tracking tools.
• Third-party sources: Identity verification data obtained from licensed KYC service providers; fraud and sanctions screening data from compliance data providers; payment confirmation data from your payment processor (e.g., GCash, Maya, BPI, BDO).
• Publicly available sources: In certain circumstances, okibit may supplement your profile with information from publicly available databases for the purpose of fraud prevention or regulatory compliance.

4 How We Use Your Personal Data

okibit uses your personal data only for legitimate purposes directly connected to the operation of the platform and our obligations to you as a player and to regulators. Specifically, we use your data for the following purposes:

• To create, manage, and maintain your okibit player account, including authentication, session management, and account preferences.
• To process deposits, withdrawals, and any other financial transactions associated with your account, and to maintain accurate financial records as required by law.
• To verify your identity and age in compliance with Know Your Customer (KYC) requirements and anti-money laundering (AML) regulations applicable to online gaming operators in the Philippines.
• To monitor your gaming activity for the purpose of responsible gaming, including the detection of patterns that may indicate problem gambling, and to apply protective measures where appropriate.
• To provide customer support, respond to your enquiries, and resolve complaints or disputes in accordance with our internal complaints procedure.
• To send you transactional communications relating to your account, such as deposit confirmations, withdrawal notifications, and security alerts. These communications are non-promotional and cannot be opted out of while your account remains active.
• To send you promotional communications, including bonus offers, new game announcements, and special events, where you have consented to receive such communications. You may withdraw this consent at any time.
• To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other illegal or prohibited conduct on the platform.
• To comply with applicable legal and regulatory obligations, including the reporting of suspicious transactions to relevant Philippine authorities.
• To analyse aggregate and anonymised usage data for the purpose of improving the okibit platform, optimising the player experience, and conducting internal business analytics.

5 Legal Basis for Processing

In accordance with the Philippine Data Privacy Act of 2012 and its implementing rules, okibit processes your personal data on the following legal bases:

• Performance of a contract: Processing is necessary to fulfil our obligations to you under the okibit Terms & Conditions — for example, to operate your account, process transactions, and deliver gaming services.
• Compliance with a legal obligation: Processing is required by applicable law — for example, KYC and AML obligations imposed on online gaming operators, tax reporting requirements, and the retention of financial records.
• Legitimate interests: Processing is necessary for the legitimate interests of okibit, such as fraud prevention, platform security, responsible gaming monitoring, and business analytics, provided these interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your consent — for example, the receipt of marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6 Data Sharing and Disclosure

okibit does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below:

• Service providers: We engage carefully selected third-party service providers who process personal data on our behalf, including KYC verification providers, payment processors (GCash, Maya, BPI, BDO, UnionBank, Coins.ph), IT infrastructure providers, fraud detection services, and customer support platform operators. All such providers are contractually bound to process your data only on okibit's instructions and in compliance with applicable data protection law.
• Regulatory and law enforcement authorities: okibit may disclose your personal data to Philippine government agencies, law enforcement bodies, or regulatory authorities where required to do so by law or in response to a valid legal order. This includes disclosures required under anti-money laundering regulations and the reporting of suspicious transactions.
• Professional advisers: okibit may share your data with its legal advisers, auditors, and compliance consultants on a strictly need-to-know basis, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of okibit's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the acquiring entity's privacy practices before the transfer takes effect.

7 Cookies and Tracking Technologies

The okibit platform uses cookies and similar tracking technologies to ensure the platform operates correctly, to maintain session security, and to gather aggregate information about how players use the site. The following categories of cookies are used:

okibit does not use advertising cookies, social media tracking pixels, or cross-site tracking technologies. You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain features of the okibit platform from functioning correctly.

8 Data Retention

okibit retains your personal data for as long as your account remains active and for such additional period as is required by applicable law or justified by legitimate business necessity. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements applicable to online gaming operators in the Philippines.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, or longer where required by applicable tax or regulatory law.
• KYC documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, in accordance with applicable AML regulations.
• Customer support communications: Retained for a period of three (3) years from the date of the last communication, for the purpose of dispute resolution and quality assurance.
• Marketing consent records: Retained for the duration of the consent and for three (3) years following withdrawal of consent, to demonstrate compliance.
• Analytical and usage data: Anonymised aggregate data may be retained indefinitely for business intelligence purposes. No personally identifiable information is retained in anonymised datasets.

When personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, okibit will securely delete or irreversibly anonymise it.

9 Data Security

okibit implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and okibit servers.
• Encryption of sensitive data fields (including payment details and identity document content) at rest using industry-standard encryption algorithms.
• Role-based access controls ensuring that personal data is accessible only to okibit personnel who have a legitimate need to process it in the course of their duties.
• Multi-factor authentication for all internal systems that process personal data.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.
• Continuous monitoring of platform activity for anomalous patterns indicative of a security incident.
• A formal data breach response plan, including a notification procedure for affected players and the National Privacy Commission in the event of a qualifying personal data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okibit will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC guidelines.

10 Your Data Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okibit. To exercise any of these rights, contact our Data Protection Officer at [email protected]. Requests will be acknowledged within 5 business days and resolved within 30 days.

11 Children's Privacy

The okibit platform is strictly intended for individuals who are 21 years of age or older. okibit does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification checks are conducted as part of the account registration and KYC process specifically to prevent underage access.

If okibit becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the okibit platform, please contact us immediately at [email protected].

12 International Data Transfers

In the course of providing our services, some of your personal data may be transferred to, processed in, or stored in countries outside of the Philippines. This may occur, for example, when we use cloud infrastructure providers or KYC verification services with data centres located in other jurisdictions.

Where such transfers occur, okibit ensures that appropriate safeguards are in place to protect your personal data to a standard that is at least equivalent to that required under the Philippine Data Privacy Act. These safeguards may include contractual data processing agreements incorporating standard data protection clauses approved by the National Privacy Commission, or transfers to countries that the NPC has recognised as providing an adequate level of data protection.

By using the okibit platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Privacy Policy, subject to the safeguards described above.

13 Third-Party Links and Services

The okibit platform may contain references to third-party services such as payment processors (GCash, Maya, BPI Online, BDO Online, UnionBank, Coins.ph) and game content providers. When you interact with these third-party services, you will be subject to their own privacy policies and data practices, which are separate from and independent of this Privacy Policy.

okibit is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the okibit platform. The inclusion of a reference to a third-party service on the okibit platform does not constitute an endorsement of that service's data practices.

14 Amendments to This Privacy Policy

okibit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. Where material changes are made to this Policy, okibit will notify registered players by email and by displaying a prominent notice on the platform prior to the changes taking effect.

The date of the most recent update is displayed at the top of this page. Your continued use of the okibit platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the amended Policy, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how okibit is protecting your personal information.

15 Contact and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or okibit's processing of your personal data, please contact our Data Protection Officer using the details below. We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 days.

If you are not satisfied with okibit's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which may be contacted through its official channels.