Your Privacy at okb8

1 About This Privacy Policy

This Privacy Policy ("Policy") describes how okb8 collects, uses, discloses, stores, and protects the personal data of individuals who access or use the okb8 platform, available at okb8.net ("the Platform"). It applies to all okb8 services including casino games, sports betting, account management, customer support interactions, and any promotional communications.

By registering an account or continuing to use the okb8 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the overall agreement between you and okb8, alongside the Terms & Conditions.

This Policy is written in plain English to ensure that every okb8 player — wherever they are in the Philippines, from Manila to Cebu to Davao — can clearly understand their rights and how their data is handled. Where legal terminology is unavoidable, we provide plain-language explanations alongside it.

2 Data Controller

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, okb8 is the personal information controller responsible for the personal data collected through the okb8 platform.

okb8 has appointed a Data Protection Officer (DPO) responsible for overseeing this Policy and ensuring compliance with applicable data protection law. Contact details for the DPO are provided in Section 13 of this Policy.

3 Personal Data We Collect

okb8 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of data collected and the circumstances in which they are gathered:

okb8 does not intentionally collect sensitive personal information — such as racial or ethnic origin, religious beliefs, or health data — unless expressly required for responsible gaming purposes (for example, medical documentation in support of a self-exclusion request).

4 How We Use Your Personal Data

okb8 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, verify, and administer your okb8 player account, including identity verification (KYC) checks required under applicable regulations.
• Service Delivery: To provide access to casino games, sports betting, live dealer tables, and all other features of the okb8 platform.
• Payment Processing: To facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other supported payment methods in Philippine Peso.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations, and reporting requirements under Philippine law.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, and other prohibited conduct described in the okb8 Terms & Conditions.
• Responsible Gaming: To monitor gaming behaviour for signs of problematic gambling and to administer deposit limits, cooling-off periods, and self-exclusion requests where applicable.
• Customer Support: To respond to your enquiries, complaints, and support requests through live chat and email channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given explicit consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, and user experience.

okb8 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except where expressly required for fraud detection or regulatory compliance.

5 Legal Basis for Processing

okb8 processes your personal data on the following legal bases, as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary to fulfil the agreement between you and okb8, including providing the gaming services you have requested and managing your account.
• Legal Obligation: Processing is required for okb8 to comply with PAGCOR licensing conditions, AML regulations, and other legal obligations under Philippine law.
• Legitimate Interests: Processing is necessary for okb8's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: For optional processing activities such as marketing communications and the use of non-essential cookies, okb8 relies on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6 Data Sharing & Disclosure

okb8 does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers require sufficient transaction data to facilitate deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC service providers assist okb8 in verifying the identity and age of registered players as required under PAGCOR regulations.
• Game Software Providers: Licensed game content providers may process limited technical and gameplay data necessary to deliver their games through the okb8 platform.
• Regulatory Authorities: okb8 may be required to disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory or law enforcement bodies where legally compelled to do so.
• Technology Service Providers: Cloud hosting, analytics, and security service providers who process data on okb8's behalf under binding data processing agreements.

All third-party service providers engaged by okb8 are contractually required to process personal data only in accordance with okb8's instructions and to implement appropriate technical and organisational security measures.

7 Cookies & Tracking Technologies

The okb8 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. Cookies are small text files placed on your device when you visit the platform. They allow okb8 to recognise your device, maintain your session, and remember your preferences.

okb8 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limit configurations.
• Analytics Cookies: Collect anonymised data about how players interact with the platform — including pages visited, time spent on each section, and error occurrences — to help okb8 improve platform performance. These are used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are deployed only where you have given explicit consent.

You may manage your cookie preferences at any time via the cookie settings panel accessible from the platform footer. Withdrawing consent for non-essential cookies will not affect your ability to access core okb8 gaming services.

8 Data Security

okb8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• AES-256 encryption for all personal and financial data stored on okb8 servers.
• TLS 1.3 encryption for all data transmitted between your device and the okb8 platform.
• Multi-factor authentication (MFA) options available to all registered account holders.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous monitoring of platform infrastructure for anomalous activity and potential intrusions.
• Documented incident response procedures for managing personal data breaches, including mandatory NPC notification where required by law.

While okb8 takes all reasonable steps to protect your personal data, no internet-based transmission is entirely risk-free. You are also responsible for maintaining the security of your okb8 account credentials and for reporting any suspected unauthorised access to our support team immediately.

9 Data Retention

okb8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal, regulatory, and business requirements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with okb8 and for a period of five years following account closure, in compliance with PAGCOR and AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five years following the date of the transaction, as required under the Anti-Money Laundering Act of 2001 and its amendments.
• KYC Documents: Identity verification documents are retained for five years following account closure or the completion of the last transaction, whichever is later.
• Customer Support Records: Support communications are retained for three years following resolution of the relevant enquiry.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained for three years following the date of the consent or withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for analytical purposes, it is no longer considered personal data under applicable law.

10 Your Data Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to the personal data okb8 holds about you:

• Right to Be Informed: The right to be informed about how your personal data is collected and processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data okb8 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request that inaccurate or incomplete personal data held by okb8 be corrected or updated.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to okb8's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been infringed.

To exercise any of the above rights, please contact the okb8 Data Protection Officer using the contact details in Section 13. okb8 will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior written notice to you.

11 Children & Minors

The okb8 platform is strictly for adults aged 21 years and over, in accordance with PAGCOR regulations governing online gambling in the Philippines. okb8 does not knowingly collect personal data from individuals under the age of 21.

Where okb8 becomes aware that personal data has been collected from an individual under 21 years of age, the relevant account will be suspended immediately, all funds will be dealt with in accordance with the okb8 Terms & Conditions, and the personal data of the minor will be deleted as soon as reasonably practicable, subject to any mandatory legal retention requirements.

If you are a parent or guardian and believe that your child has registered on the okb8 platform, please contact our support team immediately at the email address provided in Section 13 so that we can take prompt action.

12 Updates to This Privacy Policy

okb8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where updates are material — meaning they significantly affect your rights or the way in which your data is processed — okb8 will provide reasonable advance notice via a prominent notice on the platform or by direct communication to your registered contact details.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. The current version of this Policy is always accessible at okb8.net/privacy-policy. Your continued use of the okb8 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We recommend reviewing this Policy periodically to stay informed about how okb8 protects your personal data. If you have any questions about changes to this Policy, please contact our Data Protection Officer using the details below.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way okb8 handles your personal data, please contact our Data Protection Officer through the following channels:

• Data Protection Officer Email: [email protected] (please include "DPO Request" in the subject line)
• Live Chat: Available 24/7 via your okb8 account dashboard after login.
• Response Time: Within 24 hours for email; under 90 seconds average for live chat.
• Support Hours: 24 hours a day, 7 days a week, including Philippine public holidays.

When submitting a data-related request, please include your full name as registered on your okb8 account and your registered mobile number so that our team can verify your identity and process your request efficiently.