oke1 Casino — Privacy Policy

01 Introduction and Scope

oke1 operates as the data controller for all personal information processed in connection with the oke1.app platform, including the website, gaming services, customer support systems, payment processing interfaces, and marketing communications.

This Policy applies to all personal information collected from:

• Registered oke1 account holders, including players based in the Philippines (including Metro Manila, Cebu, Davao, and other regions);
• Visitors to the oke1.app website who have not yet created an account;
• Individuals who contact oke1 customer support, whether by live chat or email;
• Individuals who participate in promotions, surveys, or other marketing activities run by or on behalf of oke1.

This Policy does not apply to the data practices of third-party payment processors, game software providers, or other partners whose own privacy policies govern their independent data collection activities.

02 Definitions

The following definitions apply throughout this Policy:

• "Personal Information" — Any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.
• "Sensitive Personal Information" — Personal information about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliation; health, education, genetic or sexual life; legal proceedings, offenses, penalties; or government-issued identification numbers.
• "Processing" — Any operation or set of operations performed upon personal information, including collection, recording, organization, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "Data Controller" — oke1, the entity that determines the purposes and means of processing personal information.
• "Data Subject" — You, the individual whose personal information is being processed.
• "KYC" — Know Your Customer verification procedures required for regulatory compliance.
• "NPC" — National Privacy Commission of the Philippines, the regulatory body with authority over data privacy matters in the Philippines.

03 Personal Information We Collect

3.1 Registration and Account Data

When you register an account at oke1, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — 21+ requirement);
• Residential address in the Philippines or elsewhere;
• Email address;
• Philippine mobile number (for SMS OTP, 2FA, and account alerts);
• Username and encrypted account password;
• Preferred currency (Philippine Peso, PHP).

3.2 Identity Verification (KYC) Data

To comply with Philippine anti-money laundering regulations and to verify your identity and age, oke1 collects:

• Copies of government-issued photo identification (Philippine National ID / PhilSys, UMID, Driver's License, Passport);
• Proof of residential address (utility bills, bank statements issued in the Philippines);
• Selfie or facial verification image for liveness detection where applicable;
• Proof of payment method ownership where required (e.g., GCash account name confirmation);
• Source of funds documentation for enhanced due diligence where applicable.

3.3 Financial Transaction Data

oke1 records the following in connection with deposits, withdrawals, and wagering activity:

• Deposit and withdrawal amounts, timestamps, and payment method details (e.g., partial GCash number, bank name);
• Transaction reference numbers and processing statuses;
• Account balance history;
• Wagering activity: games played, bet amounts, game outcomes, session duration.

3.4 Technical and Device Data

When you access oke1.app, we automatically collect:

• IP address and approximate geolocation;
• Browser type and version, operating system, device type;
• Pages visited, time spent on each page, referring URL;
• Session identifiers and cookie data (see Section 6).

3.5 Communications Data

When you contact oke1 support or participate in surveys, we retain:

• The content of your live chat and email communications with the oke1 support team;
• Survey responses and feedback submissions;
• Records of complaints and their resolution.

04 How We Collect Your Information

oke1 collects personal information through the following mechanisms:

• Directly from you: Information you provide during account registration, KYC verification, cashier transactions, support interactions, and promotional participation;
• Automatically: Technical and usage data collected via cookies, web server logs, and analytics tools when you access oke1.app;
• From third parties: Identity verification data from KYC service providers; transaction confirmation data from payment processors; fraud risk signals from anti-fraud service providers; regulatory data from government-mandated sources where applicable.

05 Purpose of Processing and Legal Basis

oke1 processes your personal information only for specified, explicit, and legitimate purposes. The table below sets out the primary processing purposes and the corresponding legal basis under the Data Privacy Act of 2012:

06 Cookies and Tracking Technologies

oke1.app uses cookies and similar tracking technologies to operate the platform, enhance user experience, and gather analytics data. Cookies are small text files placed on your browser or device when you access our website.

Types of Cookies Used by oke1

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your oke1 session. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display settings. Stored for the duration of your session or longer where you have selected "Remember Me."
• Analytics Cookies: Collect aggregated, anonymized data about how visitors use oke1.app — pages viewed, session duration, entry and exit points. Used to improve platform performance.
• Security Cookies: Support fraud detection and session integrity monitoring. These help oke1 identify and prevent unauthorized account access.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the oke1 platform. oke1 does not use cookies to serve third-party advertising on the oke1.app domain.

07 Sharing Your Personal Information

oke1 does not sell, rent, or trade your personal information to any third party for commercial purposes. We share your personal information only in the following circumstances:

7.1 Service Providers and Processors

oke1 engages third-party service providers who process personal data on our behalf under written data processing agreements that require them to apply data protection standards at least equivalent to those in this Policy. Categories include:

• KYC and identity verification providers;
• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, PNB, and others);
• Game software providers and live dealer platform operators;
• Cloud infrastructure and hosting providers;
• Anti-fraud and cybersecurity service providers;
• Customer support platform providers;
• Email and SMS communication service providers.

7.2 Regulatory and Legal Disclosure

oke1 will disclose personal information to government authorities, law enforcement agencies, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, or any other competent regulatory body where required to do so by applicable Philippine law or pursuant to a valid legal order.

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of oke1's business assets, personal information held by oke1 may be transferred to the acquiring entity, subject to that entity assuming obligations under this Privacy Policy and applicable Philippine data protection law. Affected players will be notified in accordance with the DPA.

08 International Data Transfers

Certain service providers engaged by oke1 — including game platform operators, cloud infrastructure providers, and cybersecurity vendors — may process personal data outside the Philippines. Where such transfers occur, oke1 ensures that:

• The recipient country or organization provides an adequate level of protection for personal data, as assessed by the National Privacy Commission of the Philippines or equivalent international standards;
• Appropriate contractual safeguards are in place, including standard contractual clauses or data processing agreements that impose obligations consistent with the Data Privacy Act of 2012;
• Such transfers are documented and the basis for transfer is recorded in oke1's data processing register.

Players may request information about the specific safeguards applied to their data in cross-border transfers by contacting oke1's Data Protection Officer (see Section 16).

09 Data Retention

oke1 retains personal information only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law. The following retention guidelines apply:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in compliance with Anti-Money Laundering Act (RA 9160) record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity logs: Retained for three (3) years, unless subject to a dispute or regulatory inquiry that requires longer retention;
• Customer support communications: Retained for two (2) years from the date of the interaction;
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years;
• Security and fraud logs: Retained for two (2) years unless required longer for ongoing investigations.

Following the expiry of the applicable retention period, personal information is securely deleted or irreversibly anonymized in accordance with oke1's data disposal procedures.

10 Data Security

oke1 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and oke1 servers;
• AES-256 encryption at rest for sensitive personal information and financial data stored on oke1 systems;
• Role-based access controls that limit access to personal data to authorized personnel with a documented need;
• Multi-factor authentication for all oke1 staff and third-party vendor access to systems containing personal data;
• Regular third-party penetration testing and vulnerability assessments;
• Real-time intrusion detection and DDoS mitigation infrastructure;
• Documented data breach response procedures aligned with NPC notification requirements under the DPA.

While oke1 takes all reasonable measures to protect your data, no internet-based system is entirely immune to security risk. You are responsible for maintaining the security of your own account credentials and for promptly reporting any suspected unauthorized access to oke1 support.

11 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal information held by oke1. These rights may be exercised by contacting oke1's Data Protection Officer using the details in Section 16.

To exercise any of the above rights, please submit a written request to oke1's Data Protection Officer (see Section 16). oke1 will require verification of your identity before processing any data subject rights request.

12 Children's Privacy and the 21+ Requirement

If you are a parent or guardian and believe that a minor has provided personal information to oke1 without your consent, please contact us immediately at the details provided in Section 16. oke1 will investigate and take appropriate action promptly.

13 Direct Marketing and Promotional Communications

oke1 may send you marketing communications about promotions, bonuses, new games, and platform features by email or SMS to the contact details associated with your account. Marketing communications are sent only where you have provided explicit consent during the registration process or at a later stage through your account settings.

You may withdraw consent for marketing communications at any time by:

• Updating your communication preferences in the Notifications section of your oke1 account settings;
• Clicking the unsubscribe link included in any marketing email from oke1;
• Contacting oke1's support team and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect your ability to receive transactional communications related to your account — such as deposit confirmations, withdrawal notifications, security alerts, and KYC requests — which are sent as necessary for the performance of your account agreement with oke1.

14 Third-Party Links and Embedded Content

The oke1 platform may contain references or navigational links to third-party websites or services, including payment processor portals and game provider interfaces. These third-party services operate independently of oke1 and are governed by their own privacy policies. oke1 is not responsible for the privacy practices, data security measures, or content of any third-party service accessed through or in connection with the oke1 platform.

Players are encouraged to review the privacy policies of any third-party payment processors or services they use in connection with their oke1 account — particularly GCash and PayMaya for Filipino players making deposits and withdrawals.

15 Updates to This Privacy Policy

oke1 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or applicable law. When material changes are made to this Policy, oke1 will:

• Update the "Effective Date" at the top of this page;
• Notify registered players via email to the address on file and/or through a notice displayed within the oke1 platform;
• Where the changes require fresh consent (e.g., for new processing purposes not covered by existing consent), request that consent explicitly before the new processing commences.

Continued use of the oke1 platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms, subject to any applicable consent requirements. We recommend reviewing this page periodically to stay informed of how oke1 handles your personal information.

16 Contact and Data Protection Officer

oke1 has designated a Data Protection Officer ("DPO") in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 17-01. The DPO is responsible for ensuring oke1's compliance with data protection obligations and serving as the point of contact for data subject rights requests and regulatory inquiries.

To exercise your data subject rights, report a privacy concern, or ask questions about this Policy, please contact: