okbef Privacy Policy
Your Data Privacy and Security Commitment Under Philippine Law
Your Privacy Matters
okbef is committed to protecting your personal data in full compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and all applicable PAGCOR data protection requirements. This Privacy Policy explains how we collect, use, store, share, and safeguard your information when you use okbef services.
1. Introduction and Scope
1.1 Policy Overview
This Privacy Policy ("Policy") governs the processing of personal data by okbef Casino ("okbef," "we," "us," or "our"), a PAGCOR-licensed online gaming operator serving players in the Republic of the Philippines and other authorized jurisdictions. This Policy applies to all personal information collected through our website at https://okbef.cam, mobile applications, customer support channels, and any other touchpoints where okbef interacts with users.
1.2 Data Controller Information
okbef acts as the data controller responsible for determining the purposes and means of processing your personal data. As data controller, okbef ensures compliance with the Philippine Data Privacy Act of 2012, National Privacy Commission (NPC) circulars and advisories, PAGCOR regulatory requirements, and international data protection standards including GDPR principles where applicable to our operations.
1.3 Consent and Agreement
By creating an account with okbef, accessing our platform, or using our services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree with any aspect of this Policy, you must immediately discontinue use of okbef services. For minors under the age of twenty-one (21), access to okbef services is strictly prohibited, and we do not knowingly collect data from individuals below the legal gambling age.
1.4 Policy Updates
okbef reserves the right to update, modify, or replace this Policy at any time to reflect changes in legal requirements, business practices, technology developments, or service offerings. Material changes will be communicated through prominent notice on our website, email notification to registered users, or in-platform announcements. The "Last Updated" date at the top of this document indicates the most recent revision. Continued use of okbef services following policy updates constitutes acceptance of the revised terms.
2. Personal Data We Collect
2.1 Account Registration Information
When you create an okbef account, we collect personal data necessary for identity verification, account management, and regulatory compliance. This includes:
- Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (Philippine passport, driver's license, UMID, SSS, TIN, or other PAGCOR-approved documents)
- Contact Information: Residential address, email address, mobile phone number, and alternative contact details
- Account Credentials: Username, password, security questions and answers, and multi-factor authentication settings
- Demographic Data: Occupation, source of funds, income bracket, and other information required for responsible gaming assessments and anti-money laundering compliance
2.2 Financial Transaction Data
To facilitate deposits, withdrawals, and financial transactions, okbef collects and processes:
- Payment method information including GCash account details, PayMaya accounts, bank account numbers, credit/debit card information (processed through PCI-DSS compliant payment gateways), and e-wallet credentials
- Transaction history including deposit amounts, withdrawal requests, timestamps, payment processor reference numbers, and transaction status
- Financial verification documents such as bank statements, proof of income, and source of wealth documentation when required for enhanced due diligence
- Cryptocurrency wallet addresses and transaction records if applicable to future payment methods
2.3 Gaming and Behavioral Data
During your use of okbef services, we automatically collect data related to gaming activity and platform interaction:
- Game play history including games played, bet amounts, win/loss records, session duration, and responsible gaming limit interactions
- Platform usage data including login times, page views, feature usage, navigation patterns, and interaction with promotional content
- Communication records including customer support chat logs, email correspondence, phone call recordings (where consent is provided), and feedback submissions
- Promotional activity including bonus claims, free spin usage, tournament participation, loyalty program engagement, and referral activities
2.4 Technical and Device Information
okbef automatically collects technical data to ensure platform security, optimize user experience, and detect fraudulent activity:
- Device information including device type, operating system, browser type and version, screen resolution, language settings, and unique device identifiers
- Network data including IP address, internet service provider, geolocation data (country, city, and approximate coordinates), connection type, and network performance metrics
- Cookies and tracking technologies as detailed in Section 9 of this Policy
- Security data including authentication logs, security event records, fraud detection signals, and account security status
2.5 Verification Documents
For Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance, okbef requires submission of verification documents:
- Government-issued photo identification (front and back images of passport, driver's license, or national ID)
- Proof of address documents dated within three (3) months (utility bills, bank statements, government correspondence, or barangay certification)
- Selfie photographs holding identification documents for enhanced verification
- Additional supporting documents as required for high-value transactions or regulatory investigations
Data Minimization Principle
okbef adheres to the data minimization principle under the Data Privacy Act of 2012. We collect only personal data that is adequate, relevant, and necessary for the specific purposes disclosed in this Policy. We do not collect excessive information beyond what is required for account management, regulatory compliance, fraud prevention, and service provision.
3. How We Use Your Personal Data
3.1 Legal Bases for Processing
okbef processes your personal data based on the following legal grounds under Philippine data protection law:
- Consent: You have provided explicit consent for specific data processing activities during account registration or through opt-in mechanisms
- Contract Performance: Processing is necessary to fulfill our contractual obligations under the Terms and Conditions, including account creation, gaming services, payment processing, and customer support
- Legal Obligation: Processing is required to comply with Philippine laws and regulations including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA), Tax Code provisions, and National Privacy Commission directives
- Legitimate Interests: Processing serves okbef's legitimate business interests such as fraud prevention, security monitoring, service improvement, and marketing activities, provided these interests do not override your fundamental rights and freedoms
3.2 Primary Processing Purposes
okbef uses your personal data for the following purposes:
Account Management and Service Delivery
- Creating, maintaining, and authenticating user accounts
- Providing access to gaming products including slots, live dealer games, sports betting, bingo, and other offerings
- Processing deposits, withdrawals, and financial transactions
- Managing bonuses, promotions, loyalty rewards, and VIP programs
- Providing customer support through live chat, email, and phone channels
- Implementing responsible gaming tools including deposit limits, self-exclusion, and reality checks
Regulatory Compliance and Legal Obligations
- Verifying player identity and age to prevent underage gambling
- Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
- Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC)
- Maintaining records as required by PAGCOR regulations and Philippine tax authorities
- Responding to lawful requests from regulators, law enforcement, and courts
- Enforcing Terms and Conditions and investigating Terms violations
Security and Fraud Prevention
- Detecting and preventing fraudulent activities, multiple accounts, bonus abuse, and collusion
- Monitoring for unusual betting patterns, arbitrage, and advantage play
- Protecting against unauthorized account access, hacking attempts, and cyber attacks
- Investigating security incidents and resolving disputes
- Implementing risk-based authentication and transaction screening
Marketing and Communications
- Sending promotional emails, SMS messages, and push notifications about bonuses, new games, and special offers (subject to your consent and opt-out preferences)
- Personalizing marketing content based on gaming preferences and activity history
- Conducting market research, surveys, and player feedback initiatives
- Communicating service updates, policy changes, and important account notifications
Platform Optimization and Analytics
- Analyzing user behavior to improve platform functionality, game selection, and user experience
- Conducting A/B testing and feature experiments to optimize service delivery
- Generating aggregated and anonymized statistics for business intelligence
- Troubleshooting technical issues and monitoring platform performance
4. Data Sharing and Disclosure
4.1 Service Providers and Third-Party Partners
okbef shares your personal data with trusted third-party service providers who assist in delivering our services. These entities process data on our behalf under strict confidentiality and data protection agreements:
- Payment Processors: GCash, PayMaya, Dragonpay, and banking partners process financial transactions and verify payment methods
- Game Providers: Software developers and gaming studios including JILI, Pragmatic Play, Evolution Gaming, and others provide game content and maintain game servers
- Verification Services: KYC and identity verification platforms perform document authentication and fraud screening
- Customer Support Tools: Live chat platforms, email service providers, and CRM systems facilitate customer communication
- Cloud Hosting and IT Infrastructure: Secure data centers and cloud service providers host okbef systems and store data
- Analytics and Marketing Platforms: Tools for tracking user behavior, email marketing, SMS delivery, and advertising attribution (subject to your consent)
4.2 Regulatory and Legal Disclosures
okbef may disclose your personal data when required by law or necessary to protect legal rights:
- Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance and regulatory audits
- Anti-Money Laundering Council (AMLC) for suspicious transaction reporting under AMLA
- Bureau of Internal Revenue (BIR) for tax reporting and compliance with withholding tax obligations
- National Privacy Commission (NPC) in response to investigations or enforcement actions
- Law enforcement agencies pursuant to valid court orders, subpoenas, or lawful requests
- Legal counsel and advisors in connection with disputes, litigation, or regulatory proceedings
4.3 Business Transfers
In the event of a merger, acquisition, asset sale, or corporate restructuring involving okbef, your personal data may be transferred to the acquiring entity. We will provide notice of such transfer and ensure that the receiving party adheres to data protection obligations equivalent to those in this Policy.
4.4 Data Not Shared
okbef does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We do not share your data with unauthorized entities or individuals outside the purposes disclosed in this Policy.
Data Processing Summary Table
| Data Category | Primary Purpose | Legal Basis | Retention Period |
|---|---|---|---|
| Identity Information | KYC/AML Compliance | Legal Obligation | 5 years after account closure |
| Financial Data | Transaction Processing | Contract Performance | 7 years (tax compliance) |
| Gaming Activity | Service Provision | Consent & Contract | 3 years after last activity |
| Marketing Data | Promotional Communications | Consent | Until consent withdrawal |
| Technical Logs | Security & Fraud Prevention | Legitimate Interest | 12 months |
5. International Data Transfers
While okbef primarily operates within the Philippines, certain data processing activities may involve transfers to countries outside the Philippines, particularly for cloud hosting services, payment processing, and game content delivery. When international transfers occur, okbef ensures adequate protection through:
- Standard contractual clauses approved by the National Privacy Commission
- Adequacy determinations recognizing equivalent data protection standards in recipient countries
- Binding corporate rules for transfers within multinational service provider groups
- Your explicit consent for specific international transfers where required by law
okbef remains responsible for personal data transferred to third parties and takes reasonable steps to ensure that recipients provide a level of protection comparable to Philippine data protection standards.
6. Data Security Measures
6.1 Technical Security Controls
okbef implements industry-standard security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- Encryption: 256-bit SSL/TLS encryption for data transmission; AES-256 encryption for sensitive data at rest
- Access Controls: Role-based access restrictions, multi-factor authentication for staff accounts, and principle of least privilege
- Network Security: Firewalls, intrusion detection systems, DDoS protection, and regular vulnerability scanning
- Secure Payment Processing: PCI-DSS compliant payment gateways; tokenization of card data; no storage of full card numbers on okbef servers
- Data Segregation: Logical separation of production and development environments; database segmentation to limit breach impact
6.2 Organizational Security Measures
- Mandatory security awareness training for all employees with access to personal data
- Confidentiality agreements and data protection clauses in employment contracts
- Regular security audits, penetration testing, and third-party security assessments
- Incident response procedures and data breach notification protocols compliant with NPC requirements
- Secure disposal of physical and electronic records containing personal data
6.3 Limitations of Security
While okbef employs robust security measures, no system is entirely immune to security breaches. You share responsibility for protecting your account by maintaining password confidentiality, using secure networks, keeping devices updated with security patches, and promptly reporting suspicious activity. okbef is not liable for security breaches resulting from your failure to follow security best practices or from acts beyond our reasonable control.
7. Your Privacy Rights Under Philippine Law
7.1 Right to Information
You have the right to be informed about the collection and processing of your personal data, including the purposes, legal bases, retention periods, and recipients of your data. This Privacy Policy serves as our primary mechanism for fulfilling this obligation.
7.2 Right to Access
You may request access to your personal data held by okbef, including the right to obtain copies of data undergoing processing. Access requests will be processed within fifteen (15) business days. You can view much of your account data directly through your okbef account dashboard.
7.3 Right to Rectification
If you believe that personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction or update of such data. You can update certain information directly in your account settings, or contact customer support for assistance with data corrections.
7.4 Right to Erasure or Blocking
Under certain circumstances, you may request deletion or blocking of your personal data. However, this right is subject to limitations where okbef has legal obligations to retain data for regulatory compliance (typically 5-7 years for financial and KYC records under PAGCOR and BIR requirements). After applicable retention periods expire, data will be securely deleted or anonymized.
7.5 Right to Object
You have the right to object to processing of your personal data for direct marketing purposes at any time. Marketing opt-out mechanisms are provided in all promotional communications, and you can manage marketing preferences in your account settings. You may also object to other processing activities based on legitimate interests, subject to okbef's ability to demonstrate compelling legitimate grounds.
7.6 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible. Data portability requests can be submitted to our Data Protection Officer.
7.7 Right to Lodge a Complaint
If you believe okbef has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission of the Philippines. Contact details: National Privacy Commission, 5th Floor, Philippine International Convention Center, Vicente Sotto Street, Pasay City, Metro Manila, Philippines; Email: [email protected]; Complaint Hotline: (+632) 8234-2228.
7.8 Exercising Your Rights
To exercise any of these rights, please contact okbef's Data Protection Officer at [email protected] with your full name, registered email address, and detailed description of your request. We will verify your identity before processing requests and respond within the timeframes required by the Data Privacy Act of 2012.
8. Data Retention and Deletion
okbef retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:
- Active Account Data: Retained throughout the duration of your account relationship with okbef
- KYC/AML Records: Retained for five (5) years after account closure as required by AMLA and PAGCOR regulations
- Financial Transaction Records: Retained for seven (7) years to comply with BIR tax record retention requirements
- Communication Logs: Retained for three (3) years for dispute resolution and quality assurance purposes
- Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first
- Technical Logs and Security Data: Retained for twelve (12) months unless required for ongoing investigations
- Anonymized Data: May be retained indefinitely for statistical and analytical purposes once all personally identifiable elements are removed
Upon expiration of applicable retention periods, personal data will be securely deleted through data wiping protocols, physical destruction of storage media, or irreversible anonymization techniques that prevent re-identification.
9. Cookies and Tracking Technologies
9.1 Types of Cookies Used
okbef uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. Categories of cookies include:
- Essential Cookies: Required for basic platform functionality including session management, authentication, and security features. These cannot be disabled without affecting service availability.
- Performance Cookies: Collect anonymous data about platform usage, page load times, error rates, and navigation patterns to optimize performance.
- Functional Cookies: Remember your preferences such as language selection, display settings, and customization options.
- Analytics Cookies: Track user behavior across sessions to generate statistical reports and improve service offerings. We use Google Analytics and similar tools for this purpose.
- Marketing Cookies: Enable personalized advertising, measure campaign effectiveness, and limit ad frequency. These cookies are set only with your consent.
9.2 Managing Cookie Preferences
You can manage cookie preferences through your browser settings or our cookie consent management tool available on the okbef website. Note that disabling certain cookies may limit platform functionality and user experience. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for specific websites.
9.3 Third-Party Cookies
okbef partners with third-party analytics and advertising platforms that may set their own cookies on your device. These third parties have their own privacy policies governing data collection and use. We encourage you to review the privacy policies of: Google (Analytics, Ads), Facebook (Pixel tracking), and other advertising networks as disclosed in our cookie consent tool.
10. Children's Privacy
okbef services are intended exclusively for individuals aged twenty-one (21) years or older, in compliance with Philippine gambling laws and responsible gaming standards. We do not knowingly collect, process, or solicit personal data from minors. If we discover that personal data has been collected from an individual below the legal gambling age, we will immediately delete such data, terminate the associated account, and take appropriate measures to prevent future underage access. Parents, guardians, and educators who believe that a minor has provided personal data to okbef should contact our Data Protection Officer immediately at [email protected].
11. Contact Information and Data Protection Officer
For questions, concerns, or requests regarding this Privacy Policy or okbef's data processing practices, please contact:
okbef Data Protection Officer
Email: [email protected]
Customer Support: Available 24/7 via live chat at https://okbef.cam
Mailing Address: okbef Data Protection Department, Manila, Philippines
We aim to respond to all privacy-related inquiries within fifteen (15) business days. For urgent security matters or suspected data breaches, please contact us immediately through our 24/7 customer support channels.
Acknowledgment of Understanding
By using okbef services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, disclosure, and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue use of okbef services and close your account.
Your Privacy Protection
How okbef safeguards your personal information
256-bit Encryption
All data transmitted between your device and okbef servers is protected with bank-level SSL/TLS encryption technology.
DPA Compliance
Full compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and National Privacy Commission regulations.
KYC Verification
Secure identity verification processes protect against fraud while ensuring only verified players access gaming services.
PCI-DSS Compliant
Payment processing meets Payment Card Industry Data Security Standard requirements for financial data protection.
Data Minimization
We collect only the personal data necessary for service provision, regulatory compliance, and account security.
Your Privacy Rights
Exercise your rights to access, rectify, delete, or port your data at any time through our Data Protection Officer.
Questions About Your Privacy?
Our Data Protection Officer and customer support team are available 24/7 to address privacy concerns, process data subject requests, and provide transparency about our data practices.