oke1 Privacy Policy

1 Introduction

oke1 Group operates the online casino platform accessible at oke1.cam ("Platform", "Site", "oke1"). We are committed to protecting the privacy and personal data of all users ("you", "player", "user") in strict accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and all implementing rules and regulations issued by the National Privacy Commission of the Philippines.

This Privacy Policy describes the categories of personal data we collect, how we process that data, the legal grounds for processing, the parties with whom we share data, the security measures we employ to protect it, and the rights you have with respect to your personal information. By using the oke1 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

2 Data We Collect

oke1 collects several categories of personal data to operate the Platform, verify your identity, process transactions, comply with legal obligations, and improve the user experience. The types of data we collect include:

A. Registration & Account Data

• Full legal name (as it appears on your Philippine government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Philippine mobile phone number
• Residential address (city, province)
• Username and password (password is stored in hashed, non-reversible form)

B. Know Your Customer (KYC) Verification Data

• Government-issued identification documents (PhilSys National ID, passport, UMID, driver's license, SSS ID)
• Selfie or photograph for identity comparison
• Proof of address (utility bills, bank statements)
• Additional documentation requested for enhanced due diligence on high-value accounts or unusual transaction patterns

C. Financial & Transaction Data

• Payment method details (GCash mobile number, PayMaya account reference, bank account name for BPI/BDO/Metrobank transfers)
• Deposit and withdrawal transaction history, including amounts, dates, and payment channel used
• Bonus claims, wagering activity, and withdrawals tied to promotional offers

D. Usage & Activity Data

• Game play history (games played, bet amounts, wins, losses, session duration)
• Login timestamps, session duration, and device used (desktop, mobile, tablet)
• IP address and approximate geolocation (city/region level, not precise GPS coordinates)
• Browser type, operating system, screen resolution, and referring URL
• Live chat transcripts with oke1 support agents

E. Marketing & Communication Preferences

• Opt-in status for promotional emails, SMS notifications, and push notifications
• Interaction with marketing emails (opens, clicks) for campaign performance analysis

3 How We Use Your Data

oke1 processes your personal data for the following purposes, all of which are essential to the operation of the Platform and our contractual and legal obligations:

• Account Management: Creating, maintaining, and securing your oke1 account; authenticating your identity when you log in; managing your account settings and preferences.
• Age & Identity Verification: Confirming you are at least 21 years of age in accordance with PAGCOR's minimum age requirement for online casino gaming in the Philippines; verifying your identity through KYC procedures before processing withdrawals.
• Transaction Processing: Processing deposits, withdrawals, and internal account transfers; reconciling payments with GCash, PayMaya, and banking partners; issuing bonuses and promotional credits.
• Regulatory Compliance: Meeting obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine gaming and financial laws; responding to lawful requests from regulatory authorities and law enforcement.
• Fraud Detection & Platform Security: Monitoring for duplicate accounts, collusion, use of bots or automated play, payment fraud, chargebacks, and other prohibited conduct; investigating security incidents and unauthorized access.
• Customer Support: Responding to your inquiries via live chat, email, or other communication channels; resolving disputes and account issues; maintaining records of support interactions for quality assurance.
• Service Improvement & Analytics: Analyzing usage patterns to improve game selection, platform performance, and user experience; conducting A/B testing on new features; optimizing loading times and mobile responsiveness.
• Marketing & Personalization: Sending promotional offers, bonus notifications, and updates about new games or features to players who have opted in; personalizing game recommendations based on your play history; tailoring bonuses to your VIP tier and activity level.
• Responsible Gaming Monitoring: Identifying patterns that may indicate problem gambling behavior; proactively reaching out to players whose activity suggests they may benefit from responsible gaming tools or support resources.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, oke1 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering, including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA reporting obligations, NPC directives, and other applicable Philippine laws and regulatory requirements.
• Consent: Processing for marketing communications, personalization, and analytics where we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time through account settings or by contacting our Data Protection Officer.
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.

5 Data Sharing & Disclosure

oke1 does not sell your personal data to unaffiliated third parties for commercial purposes. We share your data only in the following circumstances and only to the extent necessary for each purpose:

A. Service Providers & Technology Partners

• Payment Processors: GCash (G-Xchange, Inc.), PayMaya Philippines, BPI, BDO Unibank, and Metrobank — to process your deposits and withdrawals.
• Game Providers: Ezugi and other licensed game software providers — to deliver live dealer and RNG game content.
• KYC & Identity Verification Services: Third-party identity verification platforms used to authenticate government-issued ID documents and conduct liveness checks.
• Cloud Infrastructure & Hosting: Data center and cloud service providers hosting oke1's platform infrastructure, bound by data processing agreements.
• Customer Support Technology: Live chat and helpdesk software providers used to manage support interactions.

B. Regulatory & Law Enforcement Authorities

• PAGCOR and other relevant Philippine regulatory bodies where disclosure is required under gaming regulations or a lawful order.
• Anti-Money Laundering Council (AMLC) for mandatory transaction reporting under the Anti-Money Laundering Act.
• National Privacy Commission (NPC) in connection with data breach notifications or regulatory investigations.
• Philippine law enforcement agencies in response to lawful subpoenas, court orders, or legal process.

C. Corporate Transactions

In the event of a merger, acquisition, sale of business assets, or restructuring involving oke1 Group, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer and any material change to data processing practices that results from it.

6 Data Security

oke1 implements comprehensive technical, organizational, and administrative security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser or app and the oke1 platform is protected with 256-bit TLS/SSL encryption. This applies to login sessions, payment flows, and all API communications.
• Encryption at Rest: Sensitive stored data, including KYC documents and payment method references, is encrypted using AES-256 encryption at the database level.
• Password Security: Passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm with unique salting per account.
• Access Controls: Access to personal data within oke1's internal systems is restricted on a strict need-to-know basis. Role-based access controls and multi-factor authentication are applied to all staff system access.
• 24/7 Security Monitoring: Our infrastructure is monitored around the clock for anomalous activity, intrusion attempts, and unauthorized access patterns.
• Regular Security Assessments: oke1 conducts periodic penetration testing, vulnerability assessments, and security audits of its platform and data handling processes.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, oke1 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where the breach is likely to result in a high risk to those individuals.

7 Data Retention

oke1 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with oke1, plus a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and Philippine commercial law.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by AMLA regulations applicable to high-value or flagged accounts.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Support Interaction Logs: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which your data is removed from active marketing lists within 30 days. Suppression records (confirming opt-out) are maintained indefinitely to prevent re-contact.
• Usage & Analytics Data: Aggregated, anonymized usage data may be retained indefinitely for statistical and product development purposes. Identifiable usage logs are retained for twelve (12) months.

At the end of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of identifying information.

8 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oke1:

• Right to be Informed: The right to know whether oke1 holds personal data about you and to receive clear information about how it is being processed — which this Privacy Policy provides.
• Right of Access: The right to request a copy of the personal data we hold about you and information about how it is processed. We will respond to access requests within 15 business days.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings, or contact us for changes to KYC data.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purposes collected, where you withdraw consent, or where processing is unlawful. Note that deletion requests may be limited where oke1 has legal obligations to retain data (see Section 7).
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though oke1 may demonstrate compelling legitimate grounds to continue processing.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. Contact details for the NPC are publicly available on the NPC's official website.

To exercise any of your privacy rights, please contact our Data Protection Officer at the contact details provided in Section 13. We may require verification of your identity before processing your request to prevent unauthorized disclosures.

9 Cookies & Tracking Technologies

oke1 uses cookies and similar tracking technologies on the Platform to ensure functionality, maintain security, analyze usage, and personalize your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential to the Platform's core functions — including login session management, security token validation, and load balancing. They cannot be disabled without significantly affecting Platform functionality.
• Analytics Cookies: We use analytics tools to collect aggregated information about how users interact with the Platform — such as pages visited, time on site, and game categories accessed. This data is used to improve Platform performance and user experience.
• Preference Cookies: These cookies remember your settings and preferences, such as your preferred language, display settings, and responsible gaming alert thresholds.
• Marketing & Personalization Cookies: Used to deliver more relevant promotional content and game recommendations based on your play history and preferences. These cookies are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the availability of some Platform features. Most modern browsers allow you to refuse all cookies or be notified when a cookie is being sent.

10 International Data Transfers

oke1 is operated with the Philippine market as its primary focus, and the majority of data processing activities are carried out within the Philippines or by service providers with Philippine data center presence. However, certain Platform functions — including game delivery and KYC verification — involve technology partners whose processing infrastructure may be located outside the Philippines.

Where personal data is transferred outside the Philippines, oke1 takes steps to ensure that an adequate level of protection is applied, including:

• Executing appropriate data processing agreements with recipient parties that incorporate standard data protection clauses consistent with the requirements of the Philippine Data Privacy Act and NPC guidelines.
• Transferring data only to jurisdictions or organizations that have been assessed to provide adequate data protection standards.
• Limiting the categories of data transferred to the minimum necessary for the specific processing purpose.

By using the oke1 Platform, you acknowledge and consent to the international transfer of your personal data under the protections described in this section.

11 Children's Privacy

The oke1 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR's minimum age requirement for online casino gaming in the Philippines. oke1 does not knowingly collect, process, or store personal data from individuals under the age of 21.

If oke1 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and report the incident in accordance with applicable regulatory requirements. Any funds deposited by an underage user will be handled in accordance with PAGCOR's applicable guidelines on underage gaming incidents.

Parents and guardians who have reason to believe that a minor in their care has registered on the oke1 Platform should contact our support team immediately via live chat or email so that the matter can be addressed without delay.

12 Changes to This Privacy Policy

oke1 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine laws, regulatory guidance from the National Privacy Commission, or the introduction of new Platform features.

When material changes are made — particularly changes that affect how we use your personal data or your rights with respect to that data — oke1 will notify registered players at least 14 days in advance via the email address associated with their account. Minor clarifications or updates that do not materially affect your rights may be published without prior notice and will take effect upon posting.

The "Last Updated" date displayed at the top of this page reflects when the current version of the Privacy Policy came into effect. Your continued use of the oke1 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to remain informed of how oke1 protects your personal data.

13 Contact Our Data Protection Officer

oke1 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

• Email: [email protected] — please include "Data Privacy Request" in the subject line and provide your registered username and account email address to facilitate prompt handling.
• Live Chat: Available 24/7 on the oke1 Platform. Average first response time is under 2 minutes.

We will acknowledge receipt of your data privacy request within 3 business days and aim to resolve all requests within 15 business days. Complex requests involving large volumes of data or requiring third-party coordination may take up to 30 days, in which case we will notify you of the extended timeline.

If you are not satisfied with our response or believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official government website.

oke1 is operated by oke1 Group. This Privacy Policy was last reviewed and approved by our Data Protection Officer on 1 January 2026.