Privacy Policy – oktt ph Casino Data Protection

1. Introduction

1.1 oktt ph ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users of the oktt ph online casino platform, accessible at https://oktt-ph.app. This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with your use of our services.

1.2 This Privacy Policy is governed by and complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

1.3 By registering for an account, accessing the platform, or otherwise using any oktt ph service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

1.4 This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

2.1 oktt ph collects personal data that is necessary to provide our services, verify your identity, process transactions, and comply with our legal obligations. The categories of personal data we collect include:

2.2 Registration & Identity Data

Full legal name as it appears on your government-issued ID
Date of birth (to verify the 21+ age requirement)
Email address and mobile number
Username and encrypted password
Residential address (city, province, postal code)

2.3 Identity Verification (KYC) Data

Copies of government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, voter's ID)
Proof of address documents (e.g., utility bill, bank statement)
Selfie or live photo for identity matching purposes

2.4 Financial & Transaction Data

Deposit and withdrawal history
Payment method details (e.g., GCash account number, PayMaya account, BPI/BDO/Metrobank account details — stored in tokenized form only)
Transaction amounts in Philippine Peso (₱)
Bonus and promotional activity records

2.5 Gaming Activity Data

Game history, bet amounts, and outcomes
Session duration and frequency of play
Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.6 Technical & Device Data

IP address and approximate geolocation
Device type, operating system, and browser type
Cookie identifiers and session tokens
Platform access logs and timestamps

2.7 Communications Data

Records of your communications with our customer support team (live chat transcripts, email correspondence)
Survey responses and feedback submissions

3. How We Use Your Personal Data

3.1 oktt ph uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Registration & identity data
Age and identity verification (KYC)	KYC documents, date of birth
Processing deposits and withdrawals	Financial & transaction data
Providing and improving gaming services	Gaming activity, technical data
Fraud prevention and security monitoring	All categories as necessary
Anti-money laundering (AML) compliance	Identity, financial, transaction data
Responsible gaming monitoring	Gaming activity, session data
Customer support	Communications data, account data
Sending service-related notifications	Email address, mobile number
Legal and regulatory compliance	All categories as required by law

3.2 oktt ph does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

4. Legal Basis for Processing

4.1 oktt ph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

Consent: Where you have given explicit consent to the processing of your personal data for a specific purpose (e.g., receiving promotional communications).
Contractual Necessity: Where processing is necessary to perform our contract with you — i.e., to provide the oktt ph gaming services you have registered for.
Legal Obligation: Where processing is required to comply with applicable laws and regulations, including KYC/AML requirements and gaming regulations.
Legitimate Interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.

5. Data Sharing & Disclosure

5.1 oktt ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary:

Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
Identity Verification Providers: Third-party KYC service providers who assist us in verifying your identity and age.
Game Software Providers: Licensed game developers and providers whose games are available on the oktt ph platform, to the extent necessary to deliver gaming services.
IT & Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
Regulatory Authorities: Government agencies and regulators, including the National Privacy Commission (NPC) and other relevant Philippine authorities, where required by law.
Law Enforcement: Where we are legally required to disclose information in response to a valid court order, subpoena, or other legal process.

5.2 All third-party service providers who process personal data on behalf of oktt ph are required to do so under written data processing agreements that impose obligations consistent with this Privacy Policy and applicable law.

6. Cookies & Tracking Technologies

6.1 oktt ph uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The types of cookies we use include:

Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
Analytics Cookies: Help us understand how players use the platform so we can improve our services. Data collected is aggregated and anonymized.
Preference Cookies: Remember your settings and preferences (e.g., language, display settings) to personalize your experience.

6.2 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the oktt ph platform.

6.3 oktt ph does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

7. Data Retention

7.1 oktt ph retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our legitimate business interests.

7.2 Specifically:

Account and identity data is retained for a minimum of five (5) years after account closure, in accordance with AML and gaming regulatory requirements.
Transaction records are retained for a minimum of five (5) years from the date of each transaction.
KYC documents are retained for the period required by applicable Philippine law, typically five (5) years after the end of the business relationship.
Customer support communications are retained for two (2) years from the date of the interaction.

7.3 When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, oktt ph will securely delete or anonymize it.

8. Data Security

8.1 oktt ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

256-bit SSL/TLS encryption for all data transmitted between your device and the oktt ph platform.
Encryption of sensitive data at rest, including payment method details and identity documents.
Two-factor authentication (2FA) available for all player accounts.
Regular security audits and penetration testing by independent third-party security firms.
Strict access controls ensuring that only authorized personnel can access personal data, on a need-to-know basis.
Real-time fraud detection and account monitoring systems.

8.2 While oktt ph takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you use the platform at your own risk in this regard.

8.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, oktt ph will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

9. Your Data Rights

9.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oktt ph:

Right to be Informed: You have the right to be informed about how your personal data is collected and processed, as described in this Privacy Policy.
Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, or where processing is for direct marketing purposes.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

9.2 To exercise any of the above rights, please contact our Data Protection Officer via live chat or by email at [email protected]. We will respond to all verified requests within thirty (30) days.

9.3 We may need to verify your identity before processing a data rights request to ensure we do not disclose personal data to unauthorized parties.

10. Children's Privacy

10.1 The oktt ph platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.

10.2 If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

10.3 If you are a parent or guardian and believe that a minor has registered on the oktt ph platform, please contact our support team immediately via live chat so we can investigate and take appropriate action.

11. Third-Party Links

11.1 The oktt ph platform may contain links to third-party websites or services. This Privacy Policy applies solely to the oktt ph platform and does not cover the privacy practices of any third-party sites.

11.2 We encourage you to review the privacy policies of any third-party sites you visit. oktt ph is not responsible for the privacy practices or content of third-party websites.

12. Updates to This Privacy Policy

12.1 oktt ph reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

12.2 The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the oktt ph platform after any changes are posted constitutes your acceptance of the revised Privacy Policy.

12.3 We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

13. Contact Us & Data Protection Officer

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer (DPO) through the following channels:

Live Chat: Available 24/7 directly on the oktt ph platform — the fastest way to reach us.
Privacy Email: [email protected] (plain text — not a clickable link)
General Support: [email protected] (plain text — not a clickable link)

13.2 Our Data Protection Officer is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. All data rights requests and privacy complaints will be handled by the DPO.

            Your Privacy Matters: oktt ph is committed to handling your personal data with the highest standards of care and transparency. If you ever feel your privacy rights have not been respected, you also have the right to file a complaint directly with the National Privacy Commission of the Philippines (NPC).
          