oknet Privacy Policy

1. Data Controller

oknet is the data controller responsible for the personal data of Players collected through the oknet Platform. As data controller, oknet determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as PAGCOR's regulatory requirements for licensed online gaming operators.

For all data protection inquiries, Players may contact oknet's designated Data Protection Officer (DPO) via the support contact details provided in Section 15 of this Policy.

2. Personal Data We Collect

oknet collects the following categories of personal data in connection with the registration, operation, and support of Player Accounts:

3. How We Collect Personal Data

oknet collects personal data through the following means:

• Direct provision by you: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the oknet Platform, including IP addresses, device identifiers, browser data, and session activity logs collected through server logs, cookies, and similar tracking technologies (see Section 7); and
• Third-party sources: Data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard) in connection with transaction processing, and from identity verification service providers used to assist with KYC compliance.

4. How We Use Your Personal Data

oknet uses your personal data for the following purposes:

• To create, maintain, and manage your Account on the oknet Platform;
• To verify your identity and age in compliance with PAGCOR regulations;
• To process deposit and withdrawal transactions and manage your Account wallet;
• To provide customer support and resolve disputes;
• To monitor gaming activity for responsible gaming compliance, including enforcing deposit limits, session timers, and self-exclusion;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• To comply with PAGCOR's reporting requirements and any other applicable regulatory obligations;
• To send transactional communications — including deposit confirmations, withdrawal notifications, and security alerts — that are necessary for the operation of your Account;
• To send promotional communications and bonus offers, where you have not opted out of marketing; and
• To improve the oknet Platform's performance, usability, and game offerings through aggregated, anonymised analytics.

5. Legal Bases for Processing

oknet processes your personal data on the following legal bases under the Data Privacy Act of 2012 (R.A. 10173):

• Consent: Where you have provided explicit consent to the processing of your data, including consent to receive marketing communications at the point of registration;
• Contractual necessity: Where processing is necessary to fulfil oknet's obligations under the Terms & Conditions applicable to your Account, including processing deposits, withdrawals, and game transactions;
• Legal obligation: Where processing is required to comply with PAGCOR's licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine legal requirements; and
• Legitimate interests: Where processing is necessary for oknet's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.

6. Sharing of Personal Data

oknet does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and card scheme operators (Visa/Mastercard) as necessary to process your transactions;
• KYC and identity verification providers: Identity documents and personal details are shared with third-party KYC service providers for the purpose of age and identity verification in compliance with PAGCOR requirements;
• Game content providers: Limited technical data (e.g., session tokens) is shared with licensed game studios — including Pragmatic Play and other certified providers — solely for the purpose of delivering game content;
• Regulatory authorities: Personal data and transaction records may be disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities where required by law or regulatory directive;
• Professional advisers: Data may be disclosed on a confidential basis to legal counsel, auditors, or other professional advisers where necessary; and
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of oknet's assets, Player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom oknet shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only for the purposes for which it was shared.

7. Cookies & Tracking Technologies

The oknet Platform uses cookies and similar tracking technologies to improve your experience and support Platform security. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that support fraud detection. These cookies cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players navigate and interact with the oknet Platform. This data is used solely for the purpose of improving Platform performance and user experience.
• Functional cookies: Store your preferences, such as language settings, responsible gaming configuration, and display preferences, so you do not need to re-enter them on each visit.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your oknet Account.

8. Data Retention

oknet retains personal data for the periods required by applicable law and regulation:

• KYC and identity documents: Retained for a minimum of five (5) years from the date of Account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC record-keeping requirements;
• Account and gaming data: Retained for the duration of Account activity and for three (3) years following Account closure, for dispute resolution and regulatory purposes;
• Support communications: Retained for three (3) years from the date of the communication; and
• Technical and log data: Retained for twelve (12) months, except where retention is required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with oknet's data deletion procedures.

9. Data Security

oknet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and oknet's servers;
• Encryption of sensitive data fields — including KYC documents and financial records — at rest;
• Role-based access controls restricting employee access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for oknet staff accessing systems containing personal data;
• Regular security audits and penetration testing of the oknet Platform and its underlying infrastructure; and
• Incident response procedures for detecting, assessing, and notifying of personal data breaches in accordance with legal requirements.

10. Your Data Rights

Under the Data Privacy Act of 2012 (R.A. 10173), you have the following rights in relation to your personal data held by oknet:

• Right to be informed: The right to be notified of the nature and extent of personal data processing — fulfilled by this Privacy Policy;
• Right of access: The right to request a copy of the personal data oknet holds about you;
• Right to correction: The right to request that inaccurate or incomplete personal data be corrected;
• Right to erasure: The right to request deletion of your personal data, subject to oknet's legal retention obligations under PAGCOR regulations and the AMLA;
• Right to object: The right to object to processing based on legitimate interests, including the use of your personal data for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller, where technically feasible; and
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe oknet has processed your data in violation of your privacy rights.

To exercise any of the above rights, please contact oknet's Data Protection Officer using the contact details in Section 15. oknet will respond to data rights requests within thirty (30) days. Requests may require identity verification before they are processed.

11. Children's Privacy

If you believe that oknet has inadvertently collected personal data from a person below 21 years of age, please contact oknet support immediately.

12. International Data Transfers

oknet is primarily a Philippines-based service and stores the majority of Player data on servers located in the Philippines. Certain third-party service providers used by oknet — including game content providers and KYC verification services — may process data in jurisdictions outside the Philippines. In such cases, oknet ensures that appropriate data transfer safeguards are in place, including contractual data processing agreements that require the third party to maintain a standard of data protection equivalent to that required under Philippine law. oknet does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without appropriate contractual safeguards.

13. Third-Party Links

The oknet Platform may contain links to third-party websites, applications, or services — including game studio demonstration pages. oknet is not responsible for the privacy practices of any third-party websites or services. This Privacy Policy applies only to data processed by oknet in connection with the oknet Platform. We recommend that you review the privacy policy of any third-party service before providing personal data to it.

14. Amendments to This Privacy Policy

oknet reserves the right to update this Privacy Policy at any time. When material changes are made, oknet will notify registered Players by email and/or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the oknet Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

15. Contact — Data Protection Officer

For all privacy-related inquiries, data rights requests, or concerns about oknet's data handling practices, please contact the oknet Data Protection Officer:

• Support Channel: Live chat available 24/7 on the oknet Platform (fastest response)
• Email: [email protected] (plain text — not a clickable link)

oknet will acknowledge all data protection inquiries within 48 hours and aims to resolve all requests within 30 days. For unresolved complaints, you may escalate to the National Privacy Commission of the Philippines through its established channels.